search

gchq / stroom

Stroom is a highly scalable data storage, processing and analysis platform.
https://gchq.github.io/stroom-docs/
Apache License 2.0
431 stars 55 forks source link

StroomQL field name/use consistent behaviour? #4261

Open stroomdev10 opened 4 months ago

stroomdev10 commented 4 months ago

Consider this StroomQL

from "Meta Store"

filter Fd = 'S*'

sort by Fd

select Feed as Fd

Why does this not sort on Fd/Feed, but the following does

from "Meta Store"

filter Fd = 'S*'

sort by Feed

select Feed as Fd

I'm guessing you'll say that sort is a Query based action and filter is a Table based action but it feels inconsistent.

to make it consistent I need to do the following

from "Meta Store"

eval Fd=Feed

filter Fd = 'S*'

sort by Fd

select Fd