OpenSearch/x-pack/plugin
Costin Leau 9f1ecd52eb EQL: Introduce support for sequences (#56300)
Initial support for EQL sequences
The current algorithm is focused on correctness and does not contain
any optimization which is left for the future.

The current implementation uses a state machine approach which moves
ascending and runs each query one after the other working on computing
sequences as the data comes in.
For each result, the key and its timestamp are being extracted which are
then used for matching/building a sequence.

(cherry picked from commit 4f3e18c894a1841d333022361ad9d1fdf1477dc3)
2020-05-13 15:42:31 +03:00
..
analytics Add moving percentiles pipeline aggregation (#55441) (#56575) 2020-05-12 11:35:23 +02:00
async-search Migrate remaining ESIntegTestCases to internalClusterTest (#56479) (#56563) 2020-05-11 21:06:04 -07:00
autoscaling Migrate remaining ESIntegTestCases to internalClusterTest (#56479) (#56563) 2020-05-11 21:06:04 -07:00
ccr upgrade to Lucene 8.6.0 snapshot (#56661) 2020-05-13 14:25:16 +02:00
core upgrade to Lucene 8.6.0 snapshot (#56661) 2020-05-13 14:25:16 +02:00
deprecation Add xpack setting deprecations to deprecation API (#56290) 2020-05-07 10:28:17 -04:00
enrich Migrate remaining ESIntegTestCases to internalClusterTest (#56479) (#56563) 2020-05-11 21:06:04 -07:00
eql EQL: Introduce support for sequences (#56300) 2020-05-13 15:42:31 +03:00
frozen-indices Allow searching of snapshot taken while indexing (#55511) 2020-04-21 13:21:38 +01:00
graph Convert remaining license methods to isAllowed (#55908) (#55991) 2020-04-30 15:52:22 -07:00
identity-provider Backport: Deprecate the kibana reserved user (#54967) (#55822) 2020-04-28 10:30:25 -04:00
ilm Fix Missing IgnoredUnavailable Flag in 7.x SLM Retention Task (#56616) 2020-05-12 18:07:58 +02:00
logstash Deprecated xpack "enable" settings should be no-ops (#55416) (#56167) 2020-05-05 10:40:49 -04:00
mapper-constant-keyword Simplify signature of FieldMapper#parseCreateField. (#56144) 2020-05-06 11:12:09 -07:00
mapper-flattened Simplify signature of FieldMapper#parseCreateField. (#56144) 2020-05-06 11:12:09 -07:00
ml Save Bounds Checks in BytesReference (#56577) (#56621) 2020-05-12 20:33:45 +02:00
monitoring Migrate remaining ESIntegTestCases to internalClusterTest (#56479) (#56563) 2020-05-11 21:06:04 -07:00
ql EQL: Introduce support for sequences (#56300) 2020-05-13 15:42:31 +03:00
rollup Fix RollupJobTaskTests Leaking Threads on Slowness (#56438) (#56518) 2020-05-11 17:24:10 +02:00
search-business-rules Migrate remaining ESIntegTestCases to internalClusterTest (#56479) (#56563) 2020-05-11 21:06:04 -07:00
searchable-snapshots upgrade to Lucene 8.6.0 snapshot (#56661) 2020-05-13 14:25:16 +02:00
security Share netty event loops between transports (#56553) 2020-05-11 15:43:43 -06:00
spatial [Geo] Refactor Point Field Mappers (#56060) (#56540) 2020-05-11 17:11:36 -05:00
sql EQL: Introduce support for sequences (#56300) 2020-05-13 15:42:31 +03:00
src/test [7.x] json spec: allow null for documentation url (#55749) (#56625) 2020-05-12 14:49:02 -05:00
transform [7.x][Transform] fix count when matching exact ids(#56544) (#56582) 2020-05-12 14:23:13 +02:00
vectors Simplify signature of FieldMapper#parseCreateField. (#56144) 2020-05-06 11:12:09 -07:00
voting-only-node Convert remaining license methods to isAllowed (#55908) (#55991) 2020-04-30 15:52:22 -07:00
watcher [7.x] Watcher dont add watches post index if stopped (#56556) (#56629) 2020-05-12 16:30:27 -05:00
wildcard Simplify signature of FieldMapper#parseCreateField. (#56144) 2020-05-06 11:12:09 -07:00
build.gradle [7.x] json spec: allow null for documentation url (#55749) (#56625) 2020-05-12 14:49:02 -05:00