diff --git a/docs/runbook-vm304.md b/docs/runbook-vm304.md
index 1820282..6756b8b 100644
--- a/docs/runbook-vm304.md
+++ b/docs/runbook-vm304.md
@@ -54,3 +54,13 @@ Port **9200** opened via firewalld rich rules for lab subnets:
 Kibana **5601** was already public on elastic01.
 
 `elastic` password: set in `/opt/atc-agents/.env` as `ELASTIC_PASSWORD` (not in git).
+
+## Elasticsearch / Kibana login
+
+| System | Username | Password |
+|--------|----------|----------|
+| Elasticsearch API | `admin` or `elastic` | Lab password (see `.env` `ELASTIC_PASSWORD`) |
+| Kibana UI | `admin` or `elastic` | Same |
+| SSH atc-elastic01 | `root` or `admin` | Lab password |
+
+Command Center uses `ELASTIC_USER=admin` in `/opt/atc-agents/.env`.
diff --git a/ui/src/components/features/SearchView.tsx b/ui/src/components/features/SearchView.tsx
index 8c5dd32..c2ff137 100644
--- a/ui/src/components/features/SearchView.tsx
+++ b/ui/src/components/features/SearchView.tsx
@@ -70,7 +70,7 @@ export function SearchView() {
             <Search className="h-4 w-4 text-docker" />
             Elasticsearch & Kibana
           </h2>
-          <p className="text-[10px] text-foreground-muted">atc-elastic01 · 10.0.21.46 · cluster atc-lakehouse</p>
+          <p className="text-[10px] text-foreground-muted">atc-elastic01 · 10.0.21.46 · login: admin or elastic</p>
         </div>
         <div className="flex gap-2">
           {kb?.ui_url && (
@@ -96,7 +96,7 @@ export function SearchView() {
           value={query}
           onChange={(e) => setQuery(e.target.value)}
           onKeyDown={(e) => e.key === 'Enter' && onSearch()}
-          placeholder="Search indices (requires ELASTIC_PASSWORD)…"
+          placeholder="Search indices…"
           className="min-w-0 flex-1 rounded border border-border bg-surface-overlay px-3 py-2 text-[12px]"
         />
         <button type="button" onClick={onSearch} className={cn('rounded px-3 py-2 text-[11px]', subTabActive)}>Search</button>