Name: Three Elasticsearch security lists that are not the whole list
Author: recued-core

Three Elasticsearch security lists that are not the whole list

by recued-core v2 30 views

Use “Three Elasticsearch security lists that are not the whole list” in Recued. Each of these reads omits A population, and elastic says so.

How it works 34 steps

Inspect the data fetches, transforms, gates, and output this recipe runs.

Process (34 steps)

■ now_iso date_add

Add 0 days to

■ now_ms date_parse

Parse now iso as a date

◆ users_raw recued-core.elasticsearch-security.security.security_get_user_1

Security get user 1 security on elasticsearch security

■ users to_list

Apply to_list

■ user_count count

Count items in users

■ builtin_users filter

Filter by condition

■ builtin_count count

Count items in builtin users

■ native_count math

Calculate user count minus builtin count

◆ keys_raw recued-core.elasticsearch-security.security.security_get_api_key

Security get api key security on elasticsearch security

■ api_keys default

Apply default

■ key_count count

Count items in api keys

■ invalidated_keys filter

Filter by condition

■ invalidated_count count

Count items in invalidated keys

■ live_keys filter

Filter by condition

■ live_count count

Count items in live keys

■ never_expires filter

Filter by condition

■ never_expires_count count

Count items in never expires

■ already_expired filter

Filter by condition

■ already_expired_count count

Count items in already expired

◆ mappings_raw recued-core.elasticsearch-security.security.security_get_role_mapping_1

Security get role mapping 1 security on elasticsearch security

■ mappings to_list

Apply to_list

■ mapping_count count

Count items in mappings

■ disabled_mappings filter

Filter by condition

■ disabled_mapping_count count

Count items in disabled mappings

◆ certs_raw recued-core.elasticsearch-security.security.ssl_certificates

Ssl certificates security on elasticsearch security

■ certs default

Apply default

■ cert_count count

Count items in certs

■ certs_without_key filter

Filter by condition

■ certs_without_key_count count

Count items in certs without key

■ any_signal any

Check if any of the conditions are true

■ have_signal template

Generate text from a template

fail: step.any_signal equal false

■ card to_summary

Format results as a summary card

■ key_table to_table

Format results as a data table

■ cert_table to_table

Format results as a data table

▼

Output

summary card

table key_table

table cert_table

Uses (4 operations)

Pack operation Security get user 1 security on elasticsearch security recued-core.elasticsearch-security.security.security_get_user_1

Pack operation Security get api key security on elasticsearch security recued-core.elasticsearch-security.security.security_get_api_key

Pack operation Security get role mapping 1 security on elasticsearch security recued-core.elasticsearch-security.security.security_get_role_mapping_1

Pack operation Ssl certificates security on elasticsearch security recued-core.elasticsearch-security.security.ssl_certificates

Trust & control

What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.

Permissions it requires

Read your Elasticsearch connection

Declared by the recipe — Recued grants these at install, where you review them before approving.

About

recued-core

Details

34 steps recipe_id: review-access-blind-spots-elasticsearch

Three Elasticsearch security lists that are not the whole list

Uses (4 operations)

Trust & control

Permissions it requires

About

Tags

Details