EQL: Misleading verbiage about recognized but unsupported pipe names

[rw-access]

Two pipes are recognized and supported: | head N and | tail N.

There are additional pipes that we recognize in EQL because their names were around for Endgame EQL (docs).

We don't support these pipes. However the message says "yet" and that can be misleading about roadmap. We should update it to either say "unrecognized pipe", "this pipe is not supported" or something similar.

See

elasticsearch/x-pack/plugin/eql/src/main/java/org/elasticsearch/xpack/eql/parser/LogicalPlanBuilder.java

Lines 324 to 353 in a92a647

	private LogicalPlan pipe(PipeContext ctx, LogicalPlan plan) {
	String name = text(ctx.IDENTIFIER());
	if (SUPPORTED_PIPES.contains(name) == false) {
	List<String> potentialMatches = StringUtils.findSimilar(name, SUPPORTED_PIPES);
	String msg = "Unrecognized pipe [{}]";
	if (potentialMatches.isEmpty() == false) {
	String matchString = potentialMatches.toString();
	msg += ", did you mean " + (potentialMatches.size() == 1
	? matchString
	: "any of " + matchString) + "?";
	}
	throw new ParsingException(source(ctx.IDENTIFIER()), msg, name);
	}
	switch (name) {
	case HEAD_PIPE:
	Expression headLimit = pipeIntArgument(source(ctx), name, ctx.booleanExpression());
	return new Head(source(ctx), headLimit, plan);
	case TAIL_PIPE:
	Expression tailLimit = pipeIntArgument(source(ctx), name, ctx.booleanExpression());
	// negate the limit
	return new Tail(source(ctx), tailLimit, plan);
	default:
	throw new ParsingException(source(ctx), "Pipe [{}] is not supported yet", name);
	}
	}

[elasticmachine]

Pinging @elastic/es-ql (Team:QL)

[rw-access]

Bumping this issue.