Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Modify EQL execution to use point in time reader #49628

Closed
colings86 opened this issue Nov 27, 2019 · 2 comments
Closed

Modify EQL execution to use point in time reader #49628

colings86 opened this issue Nov 27, 2019 · 2 comments
Labels
:Analytics/EQL EQL querying Team:QL (Deprecated) Meta label for query languages team

Comments

@colings86
Copy link
Contributor

When #46523 is merged we will want to modify the EQL execution logic to create a point in time reader at the start of execution and use that same point in time view of the index throughout the execution of the query. This will ensure that the results ae gathered from a consistent view of the index
@colings86 colings86 added the :Analytics/EQL EQL querying label Nov 27, 2019
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-search (:Search/EQL)

@colings86 colings86 mentioned this issue Nov 27, 2019
Closed
26 tasks
@rjernst rjernst added the Team:QL (Deprecated) Meta label for query languages team label May 4, 2020
@costin
Copy link
Member

costin commented Sep 17, 2020

Solved by #62276 and #62469

@costin costin closed this as completed Sep 17, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
:Analytics/EQL EQL querying Team:QL (Deprecated) Meta label for query languages team
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@costin @colings86 @rjernst @elasticmachine