From 46d812190a5ca470a74fb9b9868c020b45a27918 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 31 Jan 2025 11:26:12 +0100 Subject: [PATCH] Add default values for EQL allow_partial_search_results and allow_partial_sequence_results (#3637) (#3652) (cherry picked from commit d74eccacfd5b2f11e9bc4a60cf6ffdf609f1ff41) Co-authored-by: Luigi Dell'Aquila Co-authored-by: Laura Trotta <153528055+l-trotta@users.noreply.github.com> (cherry picked from commit a38549bf704d5420936b32bd268a49d768c7a8ab) --- specification/eql/search/EqlSearchRequest.ts | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/specification/eql/search/EqlSearchRequest.ts b/specification/eql/search/EqlSearchRequest.ts index e35f51418b..3240d27584 100644 --- a/specification/eql/search/EqlSearchRequest.ts +++ b/specification/eql/search/EqlSearchRequest.ts @@ -118,7 +118,19 @@ export interface Request extends RequestBase { keep_alive?: Duration keep_on_completion?: boolean wait_for_completion_timeout?: Duration + /** + * Allow query execution also in case of shard failures. + * If true, the query will keep running and will return results based on the available shards. + * For sequences, the behavior can be further refined using allow_partial_sequence_results + * @server_default true + */ allow_partial_search_results?: boolean + /** + * This flag applies only to sequences and has effect only if allow_partial_search_results=true. + * If true, the sequence query will return results based on the available shards, ignoring the others. + * If false, the sequence query will return successfully, but will always have empty results. + * @server_default false + */ allow_partial_sequence_results?: boolean /** * For basic queries, the maximum number of matching events to return. Defaults to 10