Skip to content

ESQL: match full-text search function silently returning wrong results (empty) past LOOKUP JOIN #130561

@bpintea

Description

@bpintea

Description

The following query returns successfully, but wrongly, with no results:

FROM employees
| EVAL language_code = languages
| LOOKUP JOIN languages_lookup ON language_code
| WHERE language_name : "French"
| KEEP emp_no, language_code, language_name, first_name

For reference, the exact match (| WHERE language_name == "French") returns:

    emp_no     | language_code | language_name |  first_name   
---------------+---------------+---------------+---------------
10001          |2              |French         |Georgi         
10008          |2              |French         |Saniya         
10016          |2              |French         |Kazuhito       
10017          |2              |French         |Cristinel      
10018          |2              |French         |Kazuhide       
10037          |2              |French         |null           
10039          |2              |French         |null           
10050          |2              |French         |Yinghua        
10056          |2              |French         |Brendon        
10059          |2              |French         |Alejandro      
10060          |2              |French         |Breannda       
10065          |2              |French         |Satosi         
10067          |2              |French         |Claudi         
10071          |2              |French         |Hisao          
10078          |2              |French         |Danel          
10079          |2              |French         |Kshitij        
10081          |2              |French         |Zhongwei       
10090          |2              |French         |Kendra         
10099          |2              |French         |Valter         

Related: #129778, we'll likely want to prevent : operator, and MATCH* functions be placed away from the FROM.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions