Skip to content

ES|QL: execution planner leaking temporary field name #127167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
luigidellaquila opened this issue Apr 22, 2025 · 1 comment · Fixed by #127499
Closed

ES|QL: execution planner leaking temporary field name #127167

luigidellaquila opened this issue Apr 22, 2025 · 1 comment · Fixed by #127499
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)

Comments

@luigidellaquila
Copy link
Contributor

With CSV dataset:

from firewall_logs,threat_list,airports 
| keep `message`, `name`, source.IP, `type`, message 
| enrich languages_policy on message 
| drop type 
| dissect name "%{message}"
| rename language_name as message 
| lookup join message_types_lookup on message 
| rename `source.IP` AS EkooZqOYHpD, `EkooZqOYHpD` AS `XzWnUOjttGQD` 
| drop `XzWnUOjttGQD` | stats  type = count_distinct(name), `name` = count(*), JhbpKFAaRq = count(*) 
| limit 5791 
| keep name 
| eval  `name` = true, nhIWDevxEtU = null, name = true, `name` = 1, sPMxyWXGSHm = "a", TewXimOwcBYr = true 
| stats  `nhIWDevxEtU` = min(name) by name 
| eval  dsjbDWegyVkg = false, name = null, name = 1, nhIWDevxEtU = null, iPIbTFddDK = 1, rUvqtgSl = 1
{
    "took": 22,
    "is_partial": false,
    "documents_found": 0,
    "values_loaded": 0,
    "columns": [
        {
            "name": "$$name$temp_name$1024",
            "type": "integer"
        },
        {
            "name": "dsjbDWegyVkg",
            "type": "boolean"
        },
        {
            "name": "name",
            "type": "integer"
        },
        {
            "name": "nhIWDevxEtU",
            "type": "null"
        },
        {
            "name": "iPIbTFddDK",
            "type": "integer"
        },
        {
            "name": "rUvqtgSl",
            "type": "integer"
        }
    ],
    "values": [
        [
            1,
            false,
            1,
            null,
            1,
            1
        ]
    ]
}

$$name$temp_name$1024 shouldn't be there

@elasticsearchmachine elasticsearchmachine added the Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo) label Apr 22, 2025
@elasticsearchmachine
Copy link
Collaborator

Pinging @elastic/es-analytical-engine (Team:Analytics)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
:Analytics/ES|QL AKA ESQL >bug Team:Analytics Meta label for analytical engine team (ESQL/Aggs/Geo)
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants