Costin Leau
6ff0e411a8
EQL: backport updates to 7.x ( #51940 )
2020-02-05 16:45:58 +02:00
Ryan Ernst
21224caeaf
Remove comparison to true for booleans ( #51723 )
...
While we use `== false` as a more visible form of boolean negation
(instead of `!`), the true case is implied and the true value does not
need to explicitly checked. This commit converts cases that have slipped
into the code checking for `== true`.
2020-01-31 16:35:43 -08:00
Aleksandr Maus
d4f6f38150
EQL: Fix #51541 : [CI] unknown setting [xpack.eql.enabled] in release-tests ( #51699 ) ( #51770 )
...
Fixes #51541
Co-authored-by: Igor Motov <igor@motovs.org>
2020-01-31 15:14:27 -05:00
Aleksandr Maus
0d21d9e2c5
EQL: Enable QA/rest integration tests for snapshot builds only ( #51624 ) ( #51645 )
...
* Related to #51541 : [CI] unknown setting [xpack.eql.enabled] in release-tests
2020-01-29 16:38:52 -05:00
Aleksandr Maus
eb1ed2a35f
Compilation fixes for 7.x
2020-01-27 16:23:36 -05:00
Aleksandr Maus
d8f1735e39
Add xpack.eql.enabled feature flag, disabled by default. Enabled only for integration tests. ( #51370 )
...
Related to https://github.com/elastic/elasticsearch/issues/49581
2020-01-27 15:15:22 -05:00
Costin Leau
d049de5b72
EQL: import QL into EQL ( #50904 )
...
Link QL into the new build file
Remove duplicate classes and use the new ql package
Update Exception hierarchy on top of QlException
2020-01-27 15:13:22 -05:00
Igor Motov
c184411456
EQL: Replace EqlSearchResponse.Hits parser with ObjectParser ( #50925 )
...
Replaces the existing hand-build Hits parser with a
ConstructingObjectParser version.
Relates to #49581
2020-01-27 15:13:09 -05:00
Igor Motov
88cc30c0d8
EQL: Remove list classes from EqlSearchResponse ( #50870 )
...
Removes unnecessary classes from EqlSearchResponse that just represent
lists of other elements.
Relates to #49581
2020-01-27 15:13:00 -05:00
Aleksandr Maus
d715176c00
Add more Eql REST API validation integration tests, clean up request implementation ( #50822 )
2020-01-27 15:12:48 -05:00
Igor Motov
628083183f
EQL: Make EqlSearchResponse immutable ( #50810 )
...
Refactors EqlSearchResponse to make it immutable
Relates to #49581
2020-01-27 15:12:07 -05:00
Aleksandr Maus
31d2d01e25
Correct search_after handling ( #50629 )
2020-01-27 15:11:51 -05:00
Aleksandr Maus
79875ce4d9
Initial EQL rest API implementation ( #49768 )
2020-01-27 15:11:41 -05:00
Costin Leau
10a16d15d1
Add draft EQL grammar and expression tree
2020-01-27 15:11:18 -05:00