Recued
Menu
← Back to recipes

Three Elasticsearch security lists that are not the whole list

by recued-core v1 6 views

Use “Three Elasticsearch security lists that are not the whole list” in Recued. Each of these reads omits A population, and elastic says so.

How it works 34 steps

Inspect the data fetches, transforms, gates, and output this recipe runs.

Process (34 steps)
now_iso date_add
Add 0 days to
now_ms date_parse
Parse now iso as a date
users_raw ?
users to_list
Apply to_list
user_count count
Count items in users
builtin_users filter
Filter by condition
builtin_count count
Count items in builtin users
native_count math
Calculate user count minus builtin count
keys_raw ?
api_keys default
Apply default
key_count count
Count items in api keys
invalidated_keys filter
Filter by condition
invalidated_count count
Count items in invalidated keys
live_keys filter
Filter by condition
live_count count
Count items in live keys
never_expires filter
Filter by condition
never_expires_count count
Count items in never expires
already_expired filter
Filter by condition
already_expired_count count
Count items in already expired
mappings_raw ?
mappings to_list
Apply to_list
mapping_count count
Count items in mappings
disabled_mappings filter
Filter by condition
disabled_mapping_count count
Count items in disabled mappings
certs_raw ?
certs default
Apply default
cert_count count
Count items in certs
certs_without_key filter
Filter by condition
certs_without_key_count count
Count items in certs without key
any_signal any
Check if any of the conditions are true
have_signal template
Generate text from a template
fail: step.any_signal equal false
card to_summary
Format results as a summary card
key_table to_table
Format results as a data table
cert_table to_table
Format results as a data table
Settings 1 configurable

Configurable at install. Defaults shown — change them anytime in Recued.

elasticsearch setting =

Trust & control

What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.

Permissions it requires

Read your Elasticsearch connection
Declared by the recipe — Recued grants these at install, where you review them before approving.

About

Tags

elasticsearch elasticsearchsecurityaccess-reviewcredentialsread-only

Details

34 steps 1 configurable settings recipe_id: review-access-blind-spots-elasticsearch