44//
55
66//TODO: this sometimes returns null instead of the looked up value (likely related to the execution order)
7- basicOnTheDataNode-Ignore
8- required_capability: join_lookup_v3
7+ basicOnTheDataNode
8+ required_capability: join_lookup_v4
99
1010FROM employees
1111| EVAL language_code = languages
@@ -21,19 +21,19 @@ emp_no:integer | language_code:integer | language_name:keyword
212110093 | 3 | Spanish
2222;
2323
24- basicRow-Ignore
25- required_capability: join_lookup_v3
24+ basicRow
25+ required_capability: join_lookup_v4
2626
2727ROW language_code = 1
2828| LOOKUP JOIN languages_lookup ON language_code
2929;
3030
31- language_code:keyword | language_name:keyword
31+ language_code:integer | language_name:keyword
32321 | English
3333;
3434
3535basicOnTheCoordinator
36- required_capability: join_lookup_v3
36+ required_capability: join_lookup_v4
3737
3838FROM employees
3939| SORT emp_no
@@ -49,9 +49,8 @@ emp_no:integer | language_code:integer | language_name:keyword
494910003 | 4 | German
5050;
5151
52- //TODO: this sometimes returns null instead of the looked up value (likely related to the execution order)
53- subsequentEvalOnTheDataNode-Ignore
54- required_capability: join_lookup_v3
52+ subsequentEvalOnTheDataNode
53+ required_capability: join_lookup_v4
5554
5655FROM employees
5756| EVAL language_code = languages
@@ -69,7 +68,7 @@ emp_no:integer | language_code:integer | language_name:keyword | language_code_x
6968;
7069
7170subsequentEvalOnTheCoordinator
72- required_capability: join_lookup_v3
71+ required_capability: join_lookup_v4
7372
7473FROM employees
7574| SORT emp_no
@@ -85,3 +84,208 @@ emp_no:integer | language_code:integer | language_name:keyword | language_code_x
858410002 | 5 | null | 10
868510003 | 4 | german | 8
8786;
87+
88+ lookupIPFromRow
89+ required_capability: join_lookup_v4
90+
91+ ROW left = "left", client_ip = "172.21.0.5", right = "right"
92+ | LOOKUP JOIN clientips_lookup ON client_ip
93+ ;
94+
95+ left:keyword | client_ip:keyword | right:keyword | env:keyword
96+ left | 172.21.0.5 | right | Development
97+ ;
98+
99+ lookupIPFromRowWithShadowing
100+ required_capability: join_lookup_v4
101+
102+ ROW left = "left", client_ip = "172.21.0.5", env = "env", right = "right"
103+ | LOOKUP JOIN clientips_lookup ON client_ip
104+ ;
105+
106+ left:keyword | client_ip:keyword | right:keyword | env:keyword
107+ left | 172.21.0.5 | right | Development
108+ ;
109+
110+ lookupIPFromRowWithShadowingKeep
111+ required_capability: join_lookup_v4
112+
113+ ROW left = "left", client_ip = "172.21.0.5", env = "env", right = "right"
114+ | EVAL client_ip = client_ip::keyword
115+ | LOOKUP JOIN clientips_lookup ON client_ip
116+ | KEEP left, client_ip, right, env
117+ ;
118+
119+ left:keyword | client_ip:keyword | right:keyword | env:keyword
120+ left | 172.21.0.5 | right | Development
121+ ;
122+
123+ lookupIPFromIndex
124+ required_capability: join_lookup_v4
125+
126+ FROM sample_data
127+ | EVAL client_ip = client_ip::keyword
128+ | LOOKUP JOIN clientips_lookup ON client_ip
129+ ;
130+
131+ @timestamp:date | event_duration:long | message:keyword | client_ip:keyword | env:keyword
132+ 2023-10-23T13:55:01.543Z | 1756467 | Connected to 10.1.0.1 | 172.21.3.15 | Production
133+ 2023-10-23T13:53:55.832Z | 5033755 | Connection error | 172.21.3.15 | Production
134+ 2023-10-23T13:52:55.015Z | 8268153 | Connection error | 172.21.3.15 | Production
135+ 2023-10-23T13:51:54.732Z | 725448 | Connection error | 172.21.3.15 | Production
136+ 2023-10-23T13:33:34.937Z | 1232382 | Disconnected | 172.21.0.5 | Development
137+ 2023-10-23T12:27:28.948Z | 2764889 | Connected to 10.1.0.2 | 172.21.2.113 | QA
138+ 2023-10-23T12:15:03.360Z | 3450233 | Connected to 10.1.0.3 | 172.21.2.162 | QA
139+ ;
140+
141+ lookupIPFromIndexKeep
142+ required_capability: join_lookup_v4
143+
144+ FROM sample_data
145+ | EVAL client_ip = client_ip::keyword
146+ | LOOKUP JOIN clientips_lookup ON client_ip
147+ | KEEP @timestamp, client_ip, event_duration, message, env
148+ ;
149+
150+ @timestamp:date | client_ip:keyword | event_duration:long | message:keyword | env:keyword
151+ 2023-10-23T13:55:01.543Z | 172.21.3.15 | 1756467 | Connected to 10.1.0.1 | Production
152+ 2023-10-23T13:53:55.832Z | 172.21.3.15 | 5033755 | Connection error | Production
153+ 2023-10-23T13:52:55.015Z | 172.21.3.15 | 8268153 | Connection error | Production
154+ 2023-10-23T13:51:54.732Z | 172.21.3.15 | 725448 | Connection error | Production
155+ 2023-10-23T13:33:34.937Z | 172.21.0.5 | 1232382 | Disconnected | Development
156+ 2023-10-23T12:27:28.948Z | 172.21.2.113 | 2764889 | Connected to 10.1.0.2 | QA
157+ 2023-10-23T12:15:03.360Z | 172.21.2.162 | 3450233 | Connected to 10.1.0.3 | QA
158+ ;
159+
160+ lookupIPFromIndexStats
161+ required_capability: join_lookup_v4
162+
163+ FROM sample_data
164+ | EVAL client_ip = client_ip::keyword
165+ | LOOKUP JOIN clientips_lookup ON client_ip
166+ | STATS count = count(client_ip) BY env
167+ | SORT count DESC, env ASC
168+ ;
169+
170+ count:long | env:keyword
171+ 4 | Production
172+ 2 | QA
173+ 1 | Development
174+ ;
175+
176+ lookupIPFromIndexStatsKeep
177+ required_capability: join_lookup_v4
178+
179+ FROM sample_data
180+ | EVAL client_ip = client_ip::keyword
181+ | LOOKUP JOIN clientips_lookup ON client_ip
182+ | KEEP client_ip, env
183+ | STATS count = count(client_ip) BY env
184+ | SORT count DESC, env ASC
185+ ;
186+
187+ count:long | env:keyword
188+ 4 | Production
189+ 2 | QA
190+ 1 | Development
191+ ;
192+
193+ lookupMessageFromRow
194+ required_capability: join_lookup_v4
195+
196+ ROW left = "left", message = "Connected to 10.1.0.1", right = "right"
197+ | LOOKUP JOIN message_types_lookup ON message
198+ ;
199+
200+ left:keyword | message:keyword | right:keyword | type:keyword
201+ left | Connected to 10.1.0.1 | right | Success
202+ ;
203+
204+ lookupMessageFromRowWithShadowing
205+ required_capability: join_lookup_v4
206+
207+ ROW left = "left", message = "Connected to 10.1.0.1", type = "unknown", right = "right"
208+ | LOOKUP JOIN message_types_lookup ON message
209+ ;
210+
211+ left:keyword | message:keyword | right:keyword | type:keyword
212+ left | Connected to 10.1.0.1 | right | Success
213+ ;
214+
215+ lookupMessageFromRowWithShadowingKeep
216+ required_capability: join_lookup_v4
217+
218+ ROW left = "left", message = "Connected to 10.1.0.1", type = "unknown", right = "right"
219+ | LOOKUP JOIN message_types_lookup ON message
220+ | KEEP left, message, right, type
221+ ;
222+
223+ left:keyword | message:keyword | right:keyword | type:keyword
224+ left | Connected to 10.1.0.1 | right | Success
225+ ;
226+
227+ lookupMessageFromIndex
228+ required_capability: join_lookup_v4
229+
230+ FROM sample_data
231+ | LOOKUP JOIN message_types_lookup ON message
232+ ;
233+
234+ @timestamp:date | client_ip:ip | event_duration:long | message:keyword | type:keyword
235+ 2023-10-23T13:55:01.543Z | 172.21.3.15 | 1756467 | Connected to 10.1.0.1 | Success
236+ 2023-10-23T13:53:55.832Z | 172.21.3.15 | 5033755 | Connection error | Error
237+ 2023-10-23T13:52:55.015Z | 172.21.3.15 | 8268153 | Connection error | Error
238+ 2023-10-23T13:51:54.732Z | 172.21.3.15 | 725448 | Connection error | Error
239+ 2023-10-23T13:33:34.937Z | 172.21.0.5 | 1232382 | Disconnected | Disconnected
240+ 2023-10-23T12:27:28.948Z | 172.21.2.113 | 2764889 | Connected to 10.1.0.2 | Success
241+ 2023-10-23T12:15:03.360Z | 172.21.2.162 | 3450233 | Connected to 10.1.0.3 | Success
242+ ;
243+
244+ lookupMessageFromIndexKeep
245+ required_capability: join_lookup_v4
246+
247+ FROM sample_data
248+ | LOOKUP JOIN message_types_lookup ON message
249+ | KEEP @timestamp, client_ip, event_duration, message, type
250+ ;
251+
252+ @timestamp:date | client_ip:ip | event_duration:long | message:keyword | type:keyword
253+ 2023-10-23T13:55:01.543Z | 172.21.3.15 | 1756467 | Connected to 10.1.0.1 | Success
254+ 2023-10-23T13:53:55.832Z | 172.21.3.15 | 5033755 | Connection error | Error
255+ 2023-10-23T13:52:55.015Z | 172.21.3.15 | 8268153 | Connection error | Error
256+ 2023-10-23T13:51:54.732Z | 172.21.3.15 | 725448 | Connection error | Error
257+ 2023-10-23T13:33:34.937Z | 172.21.0.5 | 1232382 | Disconnected | Disconnected
258+ 2023-10-23T12:27:28.948Z | 172.21.2.113 | 2764889 | Connected to 10.1.0.2 | Success
259+ 2023-10-23T12:15:03.360Z | 172.21.2.162 | 3450233 | Connected to 10.1.0.3 | Success
260+ ;
261+
262+ lookupMessageFromIndexStats
263+ required_capability: join_lookup_v4
264+
265+ FROM sample_data
266+ | LOOKUP JOIN message_types_lookup ON message
267+ | STATS count = count(message) BY type
268+ | SORT count DESC, type ASC
269+ ;
270+
271+ count:long | type:keyword
272+ 3 | Error
273+ 3 | Success
274+ 1 | Disconnected
275+ ;
276+
277+ lookupMessageFromIndexStatsKeep
278+ required_capability: join_lookup_v4
279+
280+ FROM sample_data
281+ | LOOKUP JOIN message_types_lookup ON message
282+ | KEEP message, type
283+ | STATS count = count(message) BY type
284+ | SORT count DESC, type ASC
285+ ;
286+
287+ count:long | type:keyword
288+ 3 | Error
289+ 3 | Success
290+ 1 | Disconnected
291+ ;
0 commit comments