Three Elasticsearch security lists that are not the whole list
Use “Three Elasticsearch security lists that are not the whole list” in Recued. Each of these reads omits A population, and elastic says so.
How it works
Inspect the data fetches, transforms, gates, and output this recipe runs.
Process (34 steps)
now_iso
date_add
Add 0 days to
now_ms
date_parse
Parse now iso as a date
users_raw
?
users
to_list
Apply to_list
user_count
count
Count items in users
builtin_users
filter
Filter by condition
builtin_count
count
Count items in builtin users
native_count
math
Calculate user count minus builtin count
keys_raw
?
api_keys
default
Apply default
key_count
count
Count items in api keys
invalidated_keys
filter
Filter by condition
invalidated_count
count
Count items in invalidated keys
live_keys
filter
Filter by condition
live_count
count
Count items in live keys
never_expires
filter
Filter by condition
never_expires_count
count
Count items in never expires
already_expired
filter
Filter by condition
already_expired_count
count
Count items in already expired
mappings_raw
?
mappings
to_list
Apply to_list
mapping_count
count
Count items in mappings
disabled_mappings
filter
Filter by condition
disabled_mapping_count
count
Count items in disabled mappings
certs_raw
?
certs
default
Apply default
cert_count
count
Count items in certs
certs_without_key
filter
Filter by condition
certs_without_key_count
count
Count items in certs without key
any_signal
any
Check if any of the conditions are true
have_signal
template
Generate text from a template
fail: step.any_signal equal false
card
to_summary
Format results as a summary card
key_table
to_table
Format results as a data table
cert_table
to_table
Format results as a data table
Settings
Configurable at install. Defaults shown — change them anytime in Recued.
elasticsearch
setting
=
Trust & control
What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.