Skip to content

Conversation

@imotov
Copy link
Contributor

@imotov imotov commented May 15, 2020

Adds support for retrieving async EQL search result s to eql search API.

Relates to #49638

Adds support for retrieving async EQL search result s to eql search API.

Relates to elastic#49638
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-ql (:Query Languages/EQL)

@elasticmachine elasticmachine added the Team:QL (Deprecated) Meta label for query languages team label May 15, 2020
@imotov imotov requested review from Tim-Brooks, costin and jimczi May 18, 2020 16:52
@imotov imotov marked this pull request as ready for review May 18, 2020 16:52
@imotov imotov removed the WIP label May 20, 2020
Copy link
Contributor

@jimczi jimczi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. Can you also add a test for security similar to AsyncSearchSecurityIT ?

listener.onResponse(new IndexAuthorizationResult(true, IndicesAccessControl.ALLOW_NO_INDICES));
}
} else if (isAsyncSearchRelatedAction(action)) {
} else if (isAsyncSearchRelatedAction(action) || isAsyncEqlSearchRelatedAction(action)) {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe add a isAsyncAction to encapsulate the condition of both search and eql searches there? Any future updates would not touch authorizeIndexAction.

Copy link
Member

@costin costin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lots of goodies in this PR. I can't comment much on the async bit but otherwise, LGTM.

@imotov imotov merged commit e999819 into elastic:feature/async-eql May 27, 2020
@imotov imotov deleted the eql-get-async-result branch May 27, 2020 14:29
imotov added a commit to imotov/elasticsearch that referenced this pull request May 27, 2020
Adds support for deleting async EQL search results to eql search API.

Relates to elastic#49638
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Analytics/EQL EQL querying >enhancement Team:QL (Deprecated) Meta label for query languages team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants