search

y-scope / clp

Compressed Log Processor (CLP) is a free log management tool capable of compressing logs and searching the compressed logs without decompression.
https://yscope.com
Apache License 2.0
871 stars 70 forks source link

clp-s: Search for empty JSON object and JSON array not working as expected. #588

Open gibber9809 opened 5 days ago

gibber9809 commented 5 days ago

Bug

For objects like {"a":{}, "b":[]} the object should be searchable with queries like a:* or b:*, but the current version of clp-s fails to return the object for such queries (with one exception).

The issue is most likely a problem with schema matching. The only case that works at the moment is that b:* will correctly return the object when array structurization is disabled.

CLP version

0.1.2

Environment

Current version of clp package.

Reproduction steps

Ingest a JSON object containing an empty JSON object field and attempt to retrieve it using search.