-
Notifications
You must be signed in to change notification settings - Fork 25.6k
Closed
Labels
:Analytics/EQLEQL queryingEQL queryingTeam:QL (Deprecated)Meta label for query languages teamMeta label for query languages team
Description
EQL has the concept of pipes which run logic on the results of an eql query and can be combined. Regardless of the fact that in some cases the execution of these pipes can be pushed down to the Search API and run as aggregations (this will be addressed in a later issue) we need to implement the logic in the EQL plugin since there are many cases, including any EQL queries using sequence or join where we will not be able to push the evaluation down to the search API.
The pipe operations that need to be implemented are:
- count
- unique
- unique_count
- filter
- sort
- head
- tail
andrewkroh
Metadata
Metadata
Assignees
Labels
:Analytics/EQLEQL queryingEQL queryingTeam:QL (Deprecated)Meta label for query languages teamMeta label for query languages team