-
Notifications
You must be signed in to change notification settings - Fork 25.2k
[DOCS] Release highlights for 7.16.0 #81370
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from 2 commits
6f2cf52
2a5a88d
ef09354
77a7280
1a6d4cf
6aadfb9
2b1a2a7
3b12865
b7faf52
cfa1169
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -30,6 +30,39 @@ Other versions: | |
|
||
// tag::notable-highlights[] | ||
[discrete] | ||
|
||
=== SQL: Support for cross-cluster search | ||
|
||
Cross-cluster search (CCS) is now supported in SQL using the CCS-specific | ||
`cluster:index` notation where `cluster` maps to a SQL catalog and | ||
`index` to a table. | ||
|
||
=== Search: Can-match action performed per-node rather than per-shard | ||
|
||
Previously, the can-match phase issued individual requests for each shard | ||
in a search request resulting in high overhead when many shards were | ||
targeted. Now these requests are grouped by node so that no more | ||
than one request per node is sent. | ||
danhermann marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
=== Frozen tier: Cached requests and queries | ||
|
||
Requests and queries against indices in the frozen tier are now cached | ||
which improves performance for subsequent queries. | ||
danhermann marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
=== Enrich processor: Allow range types for enrich matching | ||
|
||
The enrich processor has supported only the keyword data type for the match | ||
field on the enrich index. The enrich processor will now use a range type in | ||
the enrich index if the data type in all the source indices is a range type. | ||
This enables enrichment on range types such as `ip_range`. | ||
danhermann marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
=== Data streams: Segment sorter | ||
|
||
Sorts segments in data stream backing indices by descending order of their max | ||
timestamp field so that the most recent segments will be first. This | ||
speeds up queries sorted on the @timestamp field which are the most common | ||
type of queries for data streams. | ||
danhermann marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
=== EQL: `with runs` statements for repeated events | ||
|
||
In 7.16, we added the `with runs` statement syntax to EQL sequence queries. | ||
|
@@ -38,4 +71,13 @@ succession. Rather than type the same event criteria multiple times, you can use | |
a `with runs` statement to declare the criteria once and run it successively. | ||
For more details, check out the | ||
{ref}/eql-syntax.html#eql-with-runs-statement[EQL syntax documentation]. | ||
|
||
|
||
=== Field capabilities: Results gathered by node rather than index | ||
|
||
Previously, field caps were gathered by sending a request per index to the | ||
appropriate nodes in the cluster resulting in high overhead when many indices | ||
were targeted. Now requests that target indices on a single node are grouped | ||
together resulting in no more than a single request per node. | ||
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. I'd consider combining this with the "can-match" section or moving it side-by-side. The benefits and takeaways are largely the same. There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Thanks, @jrodewig. I've made those changes. |
||
|
||
// end::notable-highlights[] |
Uh oh!
There was an error while loading. Please reload this page.