Skip to content

ES|QL: no matches for pattern #126418

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
luigidellaquila opened this issue Apr 7, 2025 · 2 comments · May be fixed by #127009
Open

ES|QL: no matches for pattern #126418

luigidellaquila opened this issue Apr 7, 2025 · 2 comments · May be fixed by #127009
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)

Comments

@luigidellaquila
Copy link
Contributor

luigidellaquila commented Apr 7, 2025

With CSV dataset

from addresses,cartesian_multipolygons,hosts| rename city.name as message 
| lookup join message_types_lookup on message 
| eval  card = -6013949614291505456, hOntTwnVC = null, PQAF = null, DXkxCFXyw = null, number = -7336429038807752405 
| eval  dewAwHC = -1186293612, message = null 
| sort number ASC, street ASC, ip0 DESC, name ASC NULLS FIRST, host ASC 
| drop number, host_group, *umber, `city.country.continent.name`, dewAwHC, `zip_code`, `message`, city.country.continent.planet.name, `name`, `ip1`, message, zip_code 
| drop description, *e, id 
| keep `hOntTwnVC`, city.country.continent.planet.galaxy

DROP *e seems to work fine by itself, but as soon as we add another KEEP after that, the query starts failing

{
    "error": {
        "root_cause": [
            {
                "type": "verification_exception",
                "reason": "Found 1 problem\nline 1:542: No matches found for pattern [*e]"
            }
        ],
        "type": "verification_exception",
        "reason": "Found 1 problem\nline 1:542: No matches found for pattern [*e]"
    },
    "status": 400
}
@elasticsearchmachine elasticsearchmachine added the Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo) label Apr 7, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-analytical-engine (Team:Analytics)

@kanoshiou
Copy link
Contributor

This issue can be reproduced using the simplified query below.

from test 
| eval first_name = 1 
| drop first_name 
| drop *name 
| keep emp_no

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants