OpenSearch/x-pack/plugin
Costin Leau bff3c7470e
EQL: Replace SearchHit in response with Event (#61428) (#61522)
The building block of the eql response is currently the SearchHit. This
is a problem since it is tied to an actual search, and thus has scoring,
highlighting, shard information and a lot of other things that are not
relevant for EQL.
This becomes a problem when doing sequence queries since the response is
not generated from one search query and thus there are no SearchHits to
speak of.
Emulating one is not just conceptually incorrect but also problematic
since most of the data is missed or made-up.

As such this PR introduces a simple class, Event, that maps nicely to
the terminology while hiding the ES internals (the use of SearchHit or
GetResult/GetResponse depending on the API used).

Fix #59764
Fix #59779

Co-authored-by: Igor Motov <igor@motovs.org>
(cherry picked from commit 997376fbe6ef2894038968842f5e0635731ede65)
2020-08-25 17:32:42 +03:00
..
analytics Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
async [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
async-search [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
autoscaling Autoscaling decider and decision service (#59005) (#60884) 2020-08-10 15:28:52 +02:00
ccr Some Optimizations around BytesArray (#61183) (#61511) 2020-08-25 07:13:39 +02:00
core [ML] handle new model metadata stream from native process (#59725) (#61251) 2020-08-24 15:52:13 -04:00
data-streams Disable ilm history in data streams rest qa module. (#61312) 2020-08-19 10:34:26 +02:00
deprecation Move deprecation HTTP tests to deprecation plugin (#60523) 2020-08-05 09:54:34 +01:00
enrich [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
eql EQL: Replace SearchHit in response with Event (#61428) (#61522) 2020-08-25 17:32:42 +03:00
frozen-indices [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
graph [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
identity-provider [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
ilm ILM: add frozen phase (#60983) (#61035) 2020-08-12 16:36:27 +01:00
logstash [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
mapper-constant-keyword Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
mapper-flattened Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
ml [ML] handle new model metadata stream from native process (#59725) (#61251) 2020-08-24 15:52:13 -04:00
monitoring Speed up Compression Logic by Pooling Resources (#61358) (#61495) 2020-08-25 04:01:55 +02:00
ql QL: wildcard field type support (#58062) (#61205) 2020-08-17 18:24:32 +03:00
rollup Convert NumberFieldMapper to parametrized form (#61092) (#61376) 2020-08-20 16:43:26 +01:00
search-business-rules [7.x] Cleanup xpack build.gradle (#60554) (#60603) 2020-08-03 13:11:43 -05:00
searchable-snapshots Fix SearchableSnapshotDirectoryTests#testRecoveryStateIsKeptOpenAfterPreWarmFailure (#61343) 2020-08-19 19:28:47 +02:00
security Report anonymous roles in authenticate response (#61355) (#61454) 2020-08-24 14:51:44 +10:00
spatial Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
sql Introduce ordering in the constant_keyword test for better predictibility. (#61248) (#61252) 2020-08-18 12:17:15 +03:00
src/test [ML] handle new model metadata stream from native process (#59725) (#61251) 2020-08-24 15:52:13 -04:00
stack Merge test runner task into RestIntegTest (7.x backport) (#60600) 2020-08-04 14:46:32 +02:00
transform [7.x] Add data tiers (hot, warm, cold, frozen) as custom node roles (#60994) (#61045) 2020-08-12 11:06:23 -06:00
vectors Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
voting-only-node Do not access snapshot repo on dedicated voting-only master node (#61016) 2020-08-12 16:56:45 +02:00
watcher Simplify and Speed up some Compression Usage (#60953) (#61008) 2020-08-12 11:06:23 +02:00
wildcard Correct how field retrieval handles multifields and copy_to. (#61391) 2020-08-20 15:53:35 -07:00
build.gradle Merge test runner task into RestIntegTest (7.x backport) (#60600) 2020-08-04 14:46:32 +02:00