Open
Description
Is your feature request related to a problem?
A SQL like join criteria ( on [alias.]field=[alias.]field [(and|or) [alias.]field=[alias.]field ...]
) is required in current PPL join syntax. The default join outputs also contain all fields of two tables. Users have to specify alias.field
in the following piped commands.
In most user case of ppl, we found user only concern the non-duplicated fields, if some fields have same name in two indexes(tables), only one field (without duplicated name) is required in output.
What solution would you like?
A new PPL join syntax:
main-search | join [options] <join-field-list> <sub-search>
Metadata
Metadata
Assignees
Type
Projects
Status
In review