Skip to content

EQL: Introduce in~ (case-insensitive in) #68172

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
costin opened this issue Jan 28, 2021 · 1 comment · Fixed by #68176
Closed

EQL: Introduce in~ (case-insensitive in) #68172

costin opened this issue Jan 28, 2021 · 1 comment · Fixed by #68176
Labels
:Analytics/EQL EQL querying >enhancement Team:QL (Deprecated) Meta label for query languages team v7.12.0 v8.0.0-alpha1

Comments

@costin
Copy link
Member

costin commented Jan 28, 2021

Introduce in~ to indicate a case insensitive operation.

For example:

process where name in~ ("ExPLorEr.eXe")

will match name against explorer.exe regardless of case.

process where name in~ ("explorer*")

will match name against explorer* verbatim.
@elasticmachine elasticmachine added the Team:QL (Deprecated) Meta label for query languages team label Jan 28, 2021
@elasticmachine
Copy link
Collaborator

Pinging @elastic/es-ql (Team:QL)

costin added a commit to costin/elasticsearch that referenced this issue Jan 28, 2021
@costin
EQL: Introduce case insensitive variant in~
a8bd1e3 
Complement to in, in~ does case-insensitive matching without any
pattern matching - : should be used instead.

process where name in~ ("ExPLorEr.eXe")

will match name against explorer.exe regardless of case.

Fix elastic#68172
@costin costin mentioned this issue Jan 28, 2021
Merged
costin added a commit that referenced this issue Jan 29, 2021
@costin
EQL: Introduce case insensitive variant in~ (#68176)
dad9025 
Complement to in, in~ does case-insensitive matching without any
pattern matching - : should be used instead.

process where name in~ ("ExPLorEr.eXe")

will match name against explorer.exe regardless of case.

Fix #68172
costin added a commit that referenced this issue Jan 29, 2021
@costin
EQL: Introduce case insensitive variant in~ (#68176) (#68204)
db95ca8 
Complement to in, in~ does case-insensitive matching without any
pattern matching - : should be used instead.

process where name in~ ("ExPLorEr.eXe")

will match name against explorer.exe regardless of case.

Fix #68172
@costin costin mentioned this issue Feb 2, 2021
Closed
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
:Analytics/EQL EQL querying >enhancement Team:QL (Deprecated) Meta label for query languages team v7.12.0 v8.0.0-alpha1
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

EQL: Introduce case insensitive variant in~ costin/elasticsearch
3 participants
@costin @jakelandis @elasticmachine