Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

EQL: Add wildcard pattern to : operator #65154

Closed
costin opened this issue Nov 17, 2020 · 1 comment · Fixed by #65188
Closed

EQL: Add wildcard pattern to : operator #65154

costin opened this issue Nov 17, 2020 · 1 comment · Fixed by #65188
Labels
:Analytics/EQL EQL querying Team:QL (Deprecated) Meta label for query languages team

Comments

@costin
Copy link
Member

costin commented Nov 17, 2020

: operator is used for case-insensitive comparisons. This ticket is about extending it to support wildcard pattern for doing partial string comparisons, a common operation:

fieldA : "some*" and fieldB: "*value"
@costin costin added the :Analytics/EQL EQL querying label Nov 17, 2020
@elasticmachine elasticmachine added the Team:QL (Deprecated) Meta label for query languages team label Nov 17, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-ql (Team:QL)

@costin costin mentioned this issue Nov 17, 2020
Closed
5 tasks
costin added a commit to costin/elasticsearch that referenced this issue Nov 18, 2020
@costin
EQL: Add wildcard functionality to : operator
9d1e94d 
Fix elastic#65154
@costin costin mentioned this issue Nov 18, 2020
Merged
costin added a commit that referenced this issue Nov 18, 2020
@costin
EQL: Add wildcard functionality to : operator (#65188)
db43a1c 
Additionally, restrict the grammar to allow only a constant on the right hand side of :.

Fix #65154
costin added a commit that referenced this issue Nov 18, 2020
@costin
EQL: Add wildcard functionality to : operator (#65188)
7838d6b 
Additionally, restrict the grammar to allow only a constant on the right hand side of :.

Fix #65154

(cherry picked from commit db43a1c)
@brokensound77 brokensound77 mentioned this issue Nov 23, 2020
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
:Analytics/EQL EQL querying Team:QL (Deprecated) Meta label for query languages team
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

EQL: Add wildcard functionality to : operator costin/elasticsearch
2 participants
@costin @elasticmachine