EQL: Regex character classes are not supported #55231
Labels
:Analytics/EQL
EQL querying
:Search/Search
Search-related issues that do not fall into other categories
Team:QL (Deprecated)
Meta label for query languages team
Team:Search
Meta label for search team
Comments
jrodewig
added
>docs
|
Pinging @elastic/es-docs (>docs) |
|
Pinging @elastic/es-search (:Search/Search) |
|
Pinging @elastic/es-ql (:Query Languages/EQL) |
jrodewig
changed the title
|
I opened a Lucene issue to discuss. |
jrodewig
added a commit
that referenced
this issue
Apr 28, 2020
The`RLIKE` function docs points users to [Java’s Pattern class doc][0] for regular expression syntax. However, these docs include shorthand character classes, such as `[\d]`, `[\s]`, and `[\w]`. These character classes are not supported in Elasticsearch, which may confuse users. This updates the SQL `RLIKE` docs to refer to the ES [regular expression syntax docs][1], which only documents supported syntax. [0]: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/regex/Pattern.html [1]: https://www.elastic.co/guide/en/elasticsearch/reference/master/regexp-syntax.html Relates to #55231
jrodewig
added a commit
that referenced
this issue
Apr 28, 2020
The`RLIKE` function docs points users to [Java’s Pattern class doc][0] for regular expression syntax. However, these docs include shorthand character classes, such as `[\d]`, `[\s]`, and `[\w]`. These character classes are not supported in Elasticsearch, which may confuse users. This updates the SQL `RLIKE` docs to refer to the ES [regular expression syntax docs][1], which only documents supported syntax. [0]: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/regex/Pattern.html [1]: https://www.elastic.co/guide/en/elasticsearch/reference/master/regexp-syntax.html Relates to #55231
jrodewig
added a commit
that referenced
this issue
Apr 28, 2020
The`RLIKE` function docs points users to [Java’s Pattern class doc][0] for regular expression syntax. However, these docs include shorthand character classes, such as `[\d]`, `[\s]`, and `[\w]`. These character classes are not supported in Elasticsearch, which may confuse users. This updates the SQL `RLIKE` docs to refer to the ES [regular expression syntax docs][1], which only documents supported syntax. [0]: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/regex/Pattern.html [1]: https://www.elastic.co/guide/en/elasticsearch/reference/master/regexp-syntax.html Relates to #55231
jrodewig
added a commit
that referenced
this issue
Apr 28, 2020
The`RLIKE` function docs points users to [Java’s Pattern class doc][0] for regular expression syntax. However, these docs include shorthand character classes, such as `[\d]`, `[\s]`, and `[\w]`. These character classes are not supported in Elasticsearch, which may confuse users. This updates the SQL `RLIKE` docs to refer to the ES [regular expression syntax docs][1], which only documents supported syntax. [0]: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/regex/Pattern.html [1]: https://www.elastic.co/guide/en/elasticsearch/reference/master/regexp-syntax.html Relates to #55231
jrodewig
added a commit
that referenced
this issue
Apr 28, 2020
The`RLIKE` function docs points users to [Java’s Pattern class doc][0] for regular expression syntax. However, these docs include shorthand character classes, such as `[\d]`, `[\s]`, and `[\w]`. These character classes are not supported in Elasticsearch, which may confuse users. This updates the SQL `RLIKE` docs to refer to the ES [regular expression syntax docs][1], which only documents supported syntax. [0]: https://docs.oracle.com/en/java/javase/11/docs/api/java.base/java/util/regex/Pattern.html [1]: https://www.elastic.co/guide/en/elasticsearch/reference/master/regexp-syntax.html Relates to #55231
rjernst
added
Team:QL (Deprecated)
|
The ES EQL docs for the |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In the Python implementation, the EQL
matchfunction supports shorthand character classes for regular expressions (e.g.,[\s],[\w],[\d]).In the Elasticsearch implementation, the
matchfunction is converted into a SQLRLIKEfunction. TheRLIKEfunction is then converted into aregexpquery that uses Lucene's regular expression engine.However, Lucene's regular expression syntax does not support these character classes.
Next steps
We should discuss whether it is reasonable to add support for shorthand character classes in Elasticsearch.
At the least, we should update the documentation for the EQL
matchfunction and the SQLRLIKEfunction to note that character classes are not supported and point users to our regexp syntax documentation.The text was updated successfully, but these errors were encountered: