Skip to content

ESQL: match full-text search function silently returning wrong results (empty) past LOOKUP JOIN #130561

@bpintea

Description

@bpintea

Description

The following query returns successfully, but wrongly, with no results:

FROM employees | EVAL language_code = languages | LOOKUP JOIN languages_lookup ON language_code | WHERE language_name : "French" | KEEP emp_no, language_code, language_name, first_name 

For reference, the exact match (| WHERE language_name == "French") returns:

 emp_no | language_code | language_name | first_name ---------------+---------------+---------------+--------------- 10001 |2 |French |Georgi 10008 |2 |French |Saniya 10016 |2 |French |Kazuhito 10017 |2 |French |Cristinel 10018 |2 |French |Kazuhide 10037 |2 |French |null 10039 |2 |French |null 10050 |2 |French |Yinghua 10056 |2 |French |Brendon 10059 |2 |French |Alejandro 10060 |2 |French |Breannda 10065 |2 |French |Satosi 10067 |2 |French |Claudi 10071 |2 |French |Hisao 10078 |2 |French |Danel 10079 |2 |French |Kshitij 10081 |2 |French |Zhongwei 10090 |2 |French |Kendra 10099 |2 |French |Valter 

Related: #129778, we'll likely want to prevent : operator, and MATCH* functions be placed away from the FROM.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions