Skip to content

EQL: implement match function #55178

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
rw-access opened this issue Apr 14, 2020 · 1 comment · Fixed by #55182
Closed

EQL: implement match function #55178

rw-access opened this issue Apr 14, 2020 · 1 comment · Fixed by #55182
Assignees
Labels
:Analytics/EQL EQL querying

Comments

@rw-access
Copy link
Contributor

Part of #51556

https://eql.readthedocs.io/en/latest/query-guide/functions.html#match

Requires one field (or other expression), and at least one regular expression, which can't be null. This should be easy with a surrogate function that uses RLike

null behavior
if the first argument is null, this returns null

@rw-access rw-access added the :Analytics/EQL EQL querying label Apr 14, 2020
@rw-access rw-access self-assigned this Apr 14, 2020
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-ql (:Query Languages/EQL)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Analytics/EQL EQL querying
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants