EQL: set allow_partial_search_results=true by default#120267
EQL: set allow_partial_search_results=true by default#120267luigidellaquila merged 12 commits intoelastic:mainfrom
Conversation
|
Documentation preview: |
luigidellaquila
added
>enhancement
>breaking
:Analytics/EQL
elasticsearchmachine
added
the
Team:Analytics
|
Pinging @elastic/es-analytical-engine (Team:Analytics) |
|
Hi @luigidellaquila, I've created a changelog YAML for you. Note that since this PR is labelled |
|
Hi @luigidellaquila, I've updated the changelog YAML for you. Note that since this PR is labelled |
astefan
left a comment
astefan
left a comment
There was a problem hiding this comment.
One nit mentioned. Can be merged without any further updates 👍
docs/changelog/120267.yaml
Outdated
| area: REST API | ||
| details: | ||
| Before this change, in case of shard failures, EQL queries always returned an error. | ||
| With this change,they will keep running and will return partial results. |
There was a problem hiding this comment.
| With this change,they will keep running and will return partial results. | |
| With this change, they will keep running and will return partial results. |
💚 Backport successful
|
|
@luigidellaquila is this PR relevant to the serverless changelog? [FYI this question is based on 9.0 breaking changes] |
|
@leemthompo it is a breaking change and it also applies to Serverless, so I guess it's relevant |
4 participants
Change EQL behavior to allow partial search results by default, in case of shard failures.
The old defaults (ie. let the query fail in case of shard failures) can be restored by setting Cluster Setting
xpack.eql.default_allow_partial_results=falseFixes: #120188