elastic / elasticsearch

Free and Open Source, Distributed, RESTful Search Engine
https://www.elastic.co/products/elasticsearch
Other
1.51k stars 24.9k forks source link

ES|QL Expand support for ENRICH to full set supported by ES ingest processors #106162

Closed craigtaverner closed 8 months ago

craigtaverner commented 8 months ago

Description

The ES|QL ENRICH command already supports exact match queries (based on the term query) for keyword field matches, however as described in the documentation on how to "enrich your data", there are three types of ENRICH supported by Elasticsearch ingest processors:

Ideally we would like ES|QL to support all the features supported by Elasticsearch ingest. In particular there have be specific requests to support CIDR_MATCH in ENRICH, which would be supported by the range enrich policy above.

Limitations:

elasticsearchmachine commented 8 months ago

Pinging @elastic/es-analytical-engine (Team:Analytics)