The '<replication_slave>' user is assigned to the slave replication thread so this name appears in the auditing logs.
Alexey Botchkov