OpenSearch/x-pack
Costin Leau 9cc80621c3 EQL: Fix matching of tail/desc queries (#59827)
When dealing with tail queries, data is returned descending for the base
criterion yet the rest of the queries are ascending. This caused a
problem during insertion since while in a page, the data is ASC, between
pages the blocks of data is DESC.
This caused incorrectly sorting inside a SequenceGroup which led to
incorrect results.

Further more in case of limit, since the data in a page is ASC, early
return is not possible neither is desc matching. Thus the page needs to
be consumed first before finding the final results.
A future improvement could be to keep only the top N results dropping
the rest during insertion time.

(cherry picked from commit 77c88da054a1ce662a264f72cde5986d4ce37e3a)
2020-07-19 00:49:16 +03:00
..
dev-tools
docs [DOCS] Simplify index template snippets for data streams (#59533) (#59553) 2020-07-14 17:28:43 -04:00
license-tools Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00
plugin EQL: Fix matching of tail/desc queries (#59827) 2020-07-19 00:49:16 +03:00
qa Re-enable data stream bwc tests (#59734) 2020-07-16 23:59:52 +02:00
snapshot-tool Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00
test Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00
transport-client Replace compile configuration usage with api (7.x backport) (#58721) 2020-06-30 15:57:41 +02:00
NOTICE.txt
README.md
build.gradle Include vendored code notices in distribution notice files (#57017) (#57569) 2020-06-04 10:34:24 -07:00

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.