Skip to content

ES|QL: leaking all-fields-projected attribute #121741

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
luigidellaquila opened this issue Feb 5, 2025 · 3 comments
Open

ES|QL: leaking all-fields-projected attribute #121741

luigidellaquila opened this issue Feb 5, 2025 · 3 comments
Assignees
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)

Comments

@luigidellaquila
Copy link
Contributor

On the sample dataset

from alerts
   host.name   |kibana.alert.risk_score
---------------+-----------------------
test-host-1    |21.0                   
test-host-2    |17.0                   

but if we override all the attributes

from alerts | eval  host.name = 1, kibana.alert.risk_score = 2
<all-fields-projected>|   host.name   |kibana.alert.risk_score
----------------------+---------------+-----------------------
null                  |1              |2                      
null                  |1              |2            
...         
@elasticsearchmachine elasticsearchmachine added the Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo) label Feb 5, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-analytical-engine (Team:Analytics)

@astefan astefan self-assigned this Feb 5, 2025
@astefan
Copy link
Contributor

astefan commented Feb 6, 2025

Relates #120272

@astefan
Copy link
Contributor

astefan commented Apr 24, 2025

FROM languages | EVAL language_code = 3 | LOOKUP JOIN languages_lookup ON language_code

results in

<all-fields-projected>| language_code | language_name 
----------------------+---------------+---------------
null                  |3              |Spanish        
null                  |3              |Spanish        
null                  |3              |Spanish        
null                  |3              |Spanish

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)
Projects
None yet
Development

No branches or pull requests

3 participants