@@ -127,6 +127,7 @@ FROM sample_data
127127| EVAL client_ip = client_ip::keyword
128128| LOOKUP JOIN clientips_lookup ON client_ip
129129;
130+ ignoreOrder:true;
130131
131132@timestamp:date          | event_duration:long | message:keyword       | client_ip:keyword | env:keyword
1321332023-10-23T13:55:01.543Z | 1756467             | Connected to 10.1.0.1 | 172.21.3.15       | Production
@@ -146,6 +147,7 @@ FROM sample_data
146147| LOOKUP JOIN clientips_lookup ON client_ip
147148| KEEP @timestamp, client_ip, event_duration, message, env
148149;
150+ ignoreOrder:true;
149151
150152@timestamp:date          | client_ip:keyword | event_duration:long | message:keyword       | env:keyword
1511532023-10-23T13:55:01.543Z | 172.21.3.15       | 1756467             | Connected to 10.1.0.1 | Production
@@ -230,6 +232,7 @@ required_capability: join_lookup_v4
230232FROM sample_data
231233| LOOKUP JOIN message_types_lookup ON message
232234;
235+ ignoreOrder:true;
233236
234237@timestamp:date          | client_ip:ip | event_duration:long | message:keyword       | type:keyword
2352382023-10-23T13:55:01.543Z | 172.21.3.15  | 1756467             | Connected to 10.1.0.1 | Success
@@ -248,6 +251,7 @@ FROM sample_data
248251| LOOKUP JOIN message_types_lookup ON message
249252| KEEP @timestamp, client_ip, event_duration, message, type
250253;
254+ ignoreOrder:true;
251255
252256@timestamp:date          | client_ip:ip | event_duration:long | message:keyword       | type:keyword
2532572023-10-23T13:55:01.543Z | 172.21.3.15  | 1756467             | Connected to 10.1.0.1 | Success
0 commit comments