OpenSearch/x-pack
Costin Leau 9f1ecd52eb EQL: Introduce support for sequences (#56300)
Initial support for EQL sequences
The current algorithm is focused on correctness and does not contain
any optimization which is left for the future.

The current implementation uses a state machine approach which moves
ascending and runs each query one after the other working on computing
sequences as the data comes in.
For each result, the key and its timestamp are being extracted which are
then used for matching/building a sequence.

(cherry picked from commit 4f3e18c894a1841d333022361ad9d1fdf1477dc3)
2020-05-13 15:42:31 +03:00
..
dev-tools
docs [DOCS] Extract the cron docs from Watcher docs and add to the API conventions. (#56313) (#56651) 2020-05-12 16:36:18 -07:00
license-tools
plugin EQL: Introduce support for sequences (#56300) 2020-05-13 15:42:31 +03:00
qa Move bwcVersions extension property to BuildParams (back port) (#56381) 2020-05-11 09:39:13 +02:00
snapshot-tool Fix missing SHAs for Jackson 2.10.4 2020-05-06 17:28:24 -04:00
test Upgrade feature aware check usage of ASM to 7.3.1 (#54577) 2020-04-18 10:49:57 -04:00
transport-client Always use archive base name as the pom artifact id (#56447) (#56467) 2020-05-08 16:11:19 -07:00
NOTICE.txt
README.md
build.gradle

README.md

Elastic License Functionality

This directory tree contains files subject to the Elastic License. The files subject to the Elastic License are grouped in this directory to clearly separate them from files licensed under the Apache License 2.0.