elasticsearch 8.17.1__py3-none-any.whl → 9.0.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- elasticsearch/__init__.py +2 -2
- elasticsearch/_async/client/__init__.py +2125 -1053
- elasticsearch/_async/client/_base.py +1 -2
- elasticsearch/_async/client/async_search.py +46 -35
- elasticsearch/_async/client/autoscaling.py +32 -26
- elasticsearch/_async/client/cat.py +244 -176
- elasticsearch/_async/client/ccr.py +268 -128
- elasticsearch/_async/client/cluster.py +191 -164
- elasticsearch/_async/client/connector.py +226 -116
- elasticsearch/_async/client/dangling_indices.py +22 -16
- elasticsearch/_async/client/enrich.py +51 -11
- elasticsearch/_async/client/eql.py +54 -13
- elasticsearch/_async/client/esql.py +351 -7
- elasticsearch/_async/client/features.py +37 -27
- elasticsearch/_async/client/fleet.py +32 -22
- elasticsearch/_async/client/graph.py +10 -9
- elasticsearch/_async/client/ilm.py +115 -77
- elasticsearch/_async/client/indices.py +1119 -772
- elasticsearch/_async/client/inference.py +1933 -84
- elasticsearch/_async/client/ingest.py +83 -50
- elasticsearch/_async/client/license.py +90 -38
- elasticsearch/_async/client/logstash.py +20 -9
- elasticsearch/_async/client/migration.py +26 -17
- elasticsearch/_async/client/ml.py +646 -374
- elasticsearch/_async/client/monitoring.py +6 -3
- elasticsearch/_async/client/nodes.py +52 -54
- elasticsearch/_async/client/query_rules.py +59 -33
- elasticsearch/_async/client/rollup.py +124 -86
- elasticsearch/_async/client/search_application.py +60 -32
- elasticsearch/_async/client/searchable_snapshots.py +25 -12
- elasticsearch/_async/client/security.py +903 -562
- elasticsearch/_async/client/shutdown.py +34 -36
- elasticsearch/_async/client/simulate.py +22 -28
- elasticsearch/_async/client/slm.py +65 -40
- elasticsearch/_async/client/snapshot.py +454 -327
- elasticsearch/_async/client/sql.py +43 -22
- elasticsearch/_async/client/ssl.py +17 -18
- elasticsearch/_async/client/synonyms.py +58 -37
- elasticsearch/_async/client/tasks.py +77 -48
- elasticsearch/_async/client/text_structure.py +65 -56
- elasticsearch/_async/client/transform.py +124 -93
- elasticsearch/_async/client/watcher.py +117 -73
- elasticsearch/_async/client/xpack.py +18 -9
- elasticsearch/_async/helpers.py +1 -2
- elasticsearch/_sync/client/__init__.py +2125 -1053
- elasticsearch/_sync/client/_base.py +1 -2
- elasticsearch/_sync/client/async_search.py +46 -35
- elasticsearch/_sync/client/autoscaling.py +32 -26
- elasticsearch/_sync/client/cat.py +244 -176
- elasticsearch/_sync/client/ccr.py +268 -128
- elasticsearch/_sync/client/cluster.py +191 -164
- elasticsearch/_sync/client/connector.py +226 -116
- elasticsearch/_sync/client/dangling_indices.py +22 -16
- elasticsearch/_sync/client/enrich.py +51 -11
- elasticsearch/_sync/client/eql.py +54 -13
- elasticsearch/_sync/client/esql.py +351 -7
- elasticsearch/_sync/client/features.py +37 -27
- elasticsearch/_sync/client/fleet.py +32 -22
- elasticsearch/_sync/client/graph.py +10 -9
- elasticsearch/_sync/client/ilm.py +115 -77
- elasticsearch/_sync/client/indices.py +1119 -772
- elasticsearch/_sync/client/inference.py +1933 -84
- elasticsearch/_sync/client/ingest.py +83 -50
- elasticsearch/_sync/client/license.py +90 -38
- elasticsearch/_sync/client/logstash.py +20 -9
- elasticsearch/_sync/client/migration.py +26 -17
- elasticsearch/_sync/client/ml.py +646 -374
- elasticsearch/_sync/client/monitoring.py +6 -3
- elasticsearch/_sync/client/nodes.py +52 -54
- elasticsearch/_sync/client/query_rules.py +59 -33
- elasticsearch/_sync/client/rollup.py +124 -86
- elasticsearch/_sync/client/search_application.py +60 -32
- elasticsearch/_sync/client/searchable_snapshots.py +25 -12
- elasticsearch/_sync/client/security.py +903 -562
- elasticsearch/_sync/client/shutdown.py +34 -36
- elasticsearch/_sync/client/simulate.py +22 -28
- elasticsearch/_sync/client/slm.py +65 -40
- elasticsearch/_sync/client/snapshot.py +454 -327
- elasticsearch/_sync/client/sql.py +43 -22
- elasticsearch/_sync/client/ssl.py +17 -18
- elasticsearch/_sync/client/synonyms.py +58 -37
- elasticsearch/_sync/client/tasks.py +77 -48
- elasticsearch/_sync/client/text_structure.py +65 -56
- elasticsearch/_sync/client/transform.py +124 -93
- elasticsearch/_sync/client/utils.py +1 -41
- elasticsearch/_sync/client/watcher.py +117 -73
- elasticsearch/_sync/client/xpack.py +18 -9
- elasticsearch/_version.py +1 -1
- elasticsearch/client.py +2 -0
- elasticsearch/dsl/__init__.py +203 -0
- elasticsearch/dsl/_async/__init__.py +16 -0
- elasticsearch/dsl/_async/document.py +522 -0
- elasticsearch/dsl/_async/faceted_search.py +50 -0
- elasticsearch/dsl/_async/index.py +639 -0
- elasticsearch/dsl/_async/mapping.py +49 -0
- elasticsearch/dsl/_async/search.py +237 -0
- elasticsearch/dsl/_async/update_by_query.py +47 -0
- elasticsearch/dsl/_sync/__init__.py +16 -0
- elasticsearch/dsl/_sync/document.py +514 -0
- elasticsearch/dsl/_sync/faceted_search.py +50 -0
- elasticsearch/dsl/_sync/index.py +597 -0
- elasticsearch/dsl/_sync/mapping.py +49 -0
- elasticsearch/dsl/_sync/search.py +230 -0
- elasticsearch/dsl/_sync/update_by_query.py +45 -0
- elasticsearch/dsl/aggs.py +3734 -0
- elasticsearch/dsl/analysis.py +341 -0
- elasticsearch/dsl/async_connections.py +37 -0
- elasticsearch/dsl/connections.py +142 -0
- elasticsearch/dsl/document.py +20 -0
- elasticsearch/dsl/document_base.py +444 -0
- elasticsearch/dsl/exceptions.py +32 -0
- elasticsearch/dsl/faceted_search.py +28 -0
- elasticsearch/dsl/faceted_search_base.py +489 -0
- elasticsearch/dsl/field.py +4392 -0
- elasticsearch/dsl/function.py +180 -0
- elasticsearch/dsl/index.py +23 -0
- elasticsearch/dsl/index_base.py +178 -0
- elasticsearch/dsl/mapping.py +19 -0
- elasticsearch/dsl/mapping_base.py +219 -0
- elasticsearch/dsl/query.py +2822 -0
- elasticsearch/dsl/response/__init__.py +388 -0
- elasticsearch/dsl/response/aggs.py +100 -0
- elasticsearch/dsl/response/hit.py +53 -0
- elasticsearch/dsl/search.py +20 -0
- elasticsearch/dsl/search_base.py +1053 -0
- elasticsearch/dsl/serializer.py +34 -0
- elasticsearch/dsl/types.py +6453 -0
- elasticsearch/dsl/update_by_query.py +19 -0
- elasticsearch/dsl/update_by_query_base.py +149 -0
- elasticsearch/dsl/utils.py +687 -0
- elasticsearch/dsl/wrappers.py +144 -0
- elasticsearch/helpers/actions.py +1 -1
- elasticsearch/helpers/vectorstore/_async/strategies.py +12 -12
- elasticsearch/helpers/vectorstore/_sync/strategies.py +12 -12
- elasticsearch/helpers/vectorstore/_sync/vectorstore.py +4 -1
- {elasticsearch-8.17.1.dist-info → elasticsearch-9.0.0.dist-info}/METADATA +12 -15
- elasticsearch-9.0.0.dist-info/RECORD +160 -0
- elasticsearch/transport.py +0 -57
- elasticsearch-8.17.1.dist-info/RECORD +0 -119
- {elasticsearch-8.17.1.dist-info → elasticsearch-9.0.0.dist-info}/WHEEL +0 -0
- {elasticsearch-8.17.1.dist-info → elasticsearch-9.0.0.dist-info}/licenses/LICENSE +0 -0
- {elasticsearch-8.17.1.dist-info → elasticsearch-9.0.0.dist-info}/licenses/NOTICE +0 -0
|
@@ -39,12 +39,14 @@ class DanglingIndicesClient(NamespacedClient):
|
|
|
39
39
|
timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
40
40
|
) -> ObjectApiResponse[t.Any]:
|
|
41
41
|
"""
|
|
42
|
-
|
|
43
|
-
from the current cluster state, those indices are considered to be dangling.
|
|
44
|
-
For example, this can happen if you delete more than `cluster.indices.tombstones.size`
|
|
45
|
-
indices while an Elasticsearch node is offline.
|
|
42
|
+
.. raw:: html
|
|
46
43
|
|
|
47
|
-
|
|
44
|
+
<p>Delete a dangling index.
|
|
45
|
+
If Elasticsearch encounters index data that is absent from the current cluster state, those indices are considered to be dangling.
|
|
46
|
+
For example, this can happen if you delete more than <code>cluster.indices.tombstones.size</code> indices while an Elasticsearch node is offline.</p>
|
|
47
|
+
|
|
48
|
+
|
|
49
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-dangling-indices-delete-dangling-index>`_
|
|
48
50
|
|
|
49
51
|
:param index_uuid: The UUID of the index to delete. Use the get dangling indices
|
|
50
52
|
API to find the UUID.
|
|
@@ -98,12 +100,14 @@ class DanglingIndicesClient(NamespacedClient):
|
|
|
98
100
|
timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
99
101
|
) -> ObjectApiResponse[t.Any]:
|
|
100
102
|
"""
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
103
|
+
.. raw:: html
|
|
104
|
+
|
|
105
|
+
<p>Import a dangling index.</p>
|
|
106
|
+
<p>If Elasticsearch encounters index data that is absent from the current cluster state, those indices are considered to be dangling.
|
|
107
|
+
For example, this can happen if you delete more than <code>cluster.indices.tombstones.size</code> indices while an Elasticsearch node is offline.</p>
|
|
105
108
|
|
|
106
|
-
|
|
109
|
+
|
|
110
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-dangling-indices-import-dangling-index>`_
|
|
107
111
|
|
|
108
112
|
:param index_uuid: The UUID of the index to import. Use the get dangling indices
|
|
109
113
|
API to locate the UUID.
|
|
@@ -156,13 +160,15 @@ class DanglingIndicesClient(NamespacedClient):
|
|
|
156
160
|
pretty: t.Optional[bool] = None,
|
|
157
161
|
) -> ObjectApiResponse[t.Any]:
|
|
158
162
|
"""
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
163
|
+
.. raw:: html
|
|
164
|
+
|
|
165
|
+
<p>Get the dangling indices.</p>
|
|
166
|
+
<p>If Elasticsearch encounters index data that is absent from the current cluster state, those indices are considered to be dangling.
|
|
167
|
+
For example, this can happen if you delete more than <code>cluster.indices.tombstones.size</code> indices while an Elasticsearch node is offline.</p>
|
|
168
|
+
<p>Use this API to list dangling indices, which you can then import or delete.</p>
|
|
169
|
+
|
|
164
170
|
|
|
165
|
-
`<https://www.elastic.co/
|
|
171
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-dangling-indices-list-dangling-indices>`_
|
|
166
172
|
"""
|
|
167
173
|
__path_parts: t.Dict[str, str] = {}
|
|
168
174
|
__path = "/_dangling"
|
|
@@ -33,14 +33,20 @@ class EnrichClient(NamespacedClient):
|
|
|
33
33
|
error_trace: t.Optional[bool] = None,
|
|
34
34
|
filter_path: t.Optional[t.Union[str, t.Sequence[str]]] = None,
|
|
35
35
|
human: t.Optional[bool] = None,
|
|
36
|
+
master_timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
36
37
|
pretty: t.Optional[bool] = None,
|
|
37
38
|
) -> ObjectApiResponse[t.Any]:
|
|
38
39
|
"""
|
|
39
|
-
|
|
40
|
+
.. raw:: html
|
|
40
41
|
|
|
41
|
-
|
|
42
|
+
<p>Delete an enrich policy.
|
|
43
|
+
Deletes an existing enrich policy and its enrich index.</p>
|
|
44
|
+
|
|
45
|
+
|
|
46
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-enrich-delete-policy>`_
|
|
42
47
|
|
|
43
48
|
:param name: Enrich policy to delete.
|
|
49
|
+
:param master_timeout: Period to wait for a connection to the master node.
|
|
44
50
|
"""
|
|
45
51
|
if name in SKIP_IN_PATH:
|
|
46
52
|
raise ValueError("Empty value passed for parameter 'name'")
|
|
@@ -53,6 +59,8 @@ class EnrichClient(NamespacedClient):
|
|
|
53
59
|
__query["filter_path"] = filter_path
|
|
54
60
|
if human is not None:
|
|
55
61
|
__query["human"] = human
|
|
62
|
+
if master_timeout is not None:
|
|
63
|
+
__query["master_timeout"] = master_timeout
|
|
56
64
|
if pretty is not None:
|
|
57
65
|
__query["pretty"] = pretty
|
|
58
66
|
__headers = {"accept": "application/json"}
|
|
@@ -73,15 +81,21 @@ class EnrichClient(NamespacedClient):
|
|
|
73
81
|
error_trace: t.Optional[bool] = None,
|
|
74
82
|
filter_path: t.Optional[t.Union[str, t.Sequence[str]]] = None,
|
|
75
83
|
human: t.Optional[bool] = None,
|
|
84
|
+
master_timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
76
85
|
pretty: t.Optional[bool] = None,
|
|
77
86
|
wait_for_completion: t.Optional[bool] = None,
|
|
78
87
|
) -> ObjectApiResponse[t.Any]:
|
|
79
88
|
"""
|
|
80
|
-
|
|
89
|
+
.. raw:: html
|
|
90
|
+
|
|
91
|
+
<p>Run an enrich policy.
|
|
92
|
+
Create the enrich index for an existing enrich policy.</p>
|
|
81
93
|
|
|
82
|
-
|
|
94
|
+
|
|
95
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-enrich-execute-policy>`_
|
|
83
96
|
|
|
84
97
|
:param name: Enrich policy to execute.
|
|
98
|
+
:param master_timeout: Period to wait for a connection to the master node.
|
|
85
99
|
:param wait_for_completion: If `true`, the request blocks other enrich policy
|
|
86
100
|
execution requests until complete.
|
|
87
101
|
"""
|
|
@@ -96,6 +110,8 @@ class EnrichClient(NamespacedClient):
|
|
|
96
110
|
__query["filter_path"] = filter_path
|
|
97
111
|
if human is not None:
|
|
98
112
|
__query["human"] = human
|
|
113
|
+
if master_timeout is not None:
|
|
114
|
+
__query["master_timeout"] = master_timeout
|
|
99
115
|
if pretty is not None:
|
|
100
116
|
__query["pretty"] = pretty
|
|
101
117
|
if wait_for_completion is not None:
|
|
@@ -118,15 +134,21 @@ class EnrichClient(NamespacedClient):
|
|
|
118
134
|
error_trace: t.Optional[bool] = None,
|
|
119
135
|
filter_path: t.Optional[t.Union[str, t.Sequence[str]]] = None,
|
|
120
136
|
human: t.Optional[bool] = None,
|
|
137
|
+
master_timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
121
138
|
pretty: t.Optional[bool] = None,
|
|
122
139
|
) -> ObjectApiResponse[t.Any]:
|
|
123
140
|
"""
|
|
124
|
-
|
|
141
|
+
.. raw:: html
|
|
142
|
+
|
|
143
|
+
<p>Get an enrich policy.
|
|
144
|
+
Returns information about an enrich policy.</p>
|
|
145
|
+
|
|
125
146
|
|
|
126
|
-
`<https://www.elastic.co/
|
|
147
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-enrich-get-policy>`_
|
|
127
148
|
|
|
128
149
|
:param name: Comma-separated list of enrich policy names used to limit the request.
|
|
129
150
|
To return information for all enrich policies, omit this parameter.
|
|
151
|
+
:param master_timeout: Period to wait for a connection to the master node.
|
|
130
152
|
"""
|
|
131
153
|
__path_parts: t.Dict[str, str]
|
|
132
154
|
if name not in SKIP_IN_PATH:
|
|
@@ -142,6 +164,8 @@ class EnrichClient(NamespacedClient):
|
|
|
142
164
|
__query["filter_path"] = filter_path
|
|
143
165
|
if human is not None:
|
|
144
166
|
__query["human"] = human
|
|
167
|
+
if master_timeout is not None:
|
|
168
|
+
__query["master_timeout"] = master_timeout
|
|
145
169
|
if pretty is not None:
|
|
146
170
|
__query["pretty"] = pretty
|
|
147
171
|
__headers = {"accept": "application/json"}
|
|
@@ -165,19 +189,25 @@ class EnrichClient(NamespacedClient):
|
|
|
165
189
|
filter_path: t.Optional[t.Union[str, t.Sequence[str]]] = None,
|
|
166
190
|
geo_match: t.Optional[t.Mapping[str, t.Any]] = None,
|
|
167
191
|
human: t.Optional[bool] = None,
|
|
192
|
+
master_timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
168
193
|
match: t.Optional[t.Mapping[str, t.Any]] = None,
|
|
169
194
|
pretty: t.Optional[bool] = None,
|
|
170
195
|
range: t.Optional[t.Mapping[str, t.Any]] = None,
|
|
171
196
|
body: t.Optional[t.Dict[str, t.Any]] = None,
|
|
172
197
|
) -> ObjectApiResponse[t.Any]:
|
|
173
198
|
"""
|
|
174
|
-
|
|
199
|
+
.. raw:: html
|
|
175
200
|
|
|
176
|
-
|
|
201
|
+
<p>Create an enrich policy.
|
|
202
|
+
Creates an enrich policy.</p>
|
|
203
|
+
|
|
204
|
+
|
|
205
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-enrich-put-policy>`_
|
|
177
206
|
|
|
178
207
|
:param name: Name of the enrich policy to create or update.
|
|
179
208
|
:param geo_match: Matches enrich data to incoming documents based on a `geo_shape`
|
|
180
209
|
query.
|
|
210
|
+
:param master_timeout: Period to wait for a connection to the master node.
|
|
181
211
|
:param match: Matches enrich data to incoming documents based on a `term` query.
|
|
182
212
|
:param range: Matches a number, date, or IP address in incoming documents to
|
|
183
213
|
a range in the enrich index based on a `term` query.
|
|
@@ -194,6 +224,8 @@ class EnrichClient(NamespacedClient):
|
|
|
194
224
|
__query["filter_path"] = filter_path
|
|
195
225
|
if human is not None:
|
|
196
226
|
__query["human"] = human
|
|
227
|
+
if master_timeout is not None:
|
|
228
|
+
__query["master_timeout"] = master_timeout
|
|
197
229
|
if pretty is not None:
|
|
198
230
|
__query["pretty"] = pretty
|
|
199
231
|
if not __body:
|
|
@@ -221,13 +253,19 @@ class EnrichClient(NamespacedClient):
|
|
|
221
253
|
error_trace: t.Optional[bool] = None,
|
|
222
254
|
filter_path: t.Optional[t.Union[str, t.Sequence[str]]] = None,
|
|
223
255
|
human: t.Optional[bool] = None,
|
|
256
|
+
master_timeout: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
224
257
|
pretty: t.Optional[bool] = None,
|
|
225
258
|
) -> ObjectApiResponse[t.Any]:
|
|
226
259
|
"""
|
|
227
|
-
|
|
228
|
-
|
|
260
|
+
.. raw:: html
|
|
261
|
+
|
|
262
|
+
<p>Get enrich stats.
|
|
263
|
+
Returns enrich coordinator statistics and information about enrich policies that are currently executing.</p>
|
|
264
|
+
|
|
265
|
+
|
|
266
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-enrich-stats>`_
|
|
229
267
|
|
|
230
|
-
|
|
268
|
+
:param master_timeout: Period to wait for a connection to the master node.
|
|
231
269
|
"""
|
|
232
270
|
__path_parts: t.Dict[str, str] = {}
|
|
233
271
|
__path = "/_enrich/_stats"
|
|
@@ -238,6 +276,8 @@ class EnrichClient(NamespacedClient):
|
|
|
238
276
|
__query["filter_path"] = filter_path
|
|
239
277
|
if human is not None:
|
|
240
278
|
__query["human"] = human
|
|
279
|
+
if master_timeout is not None:
|
|
280
|
+
__query["master_timeout"] = master_timeout
|
|
241
281
|
if pretty is not None:
|
|
242
282
|
__query["pretty"] = pretty
|
|
243
283
|
__headers = {"accept": "application/json"}
|
|
@@ -36,10 +36,14 @@ class EqlClient(NamespacedClient):
|
|
|
36
36
|
pretty: t.Optional[bool] = None,
|
|
37
37
|
) -> ObjectApiResponse[t.Any]:
|
|
38
38
|
"""
|
|
39
|
-
|
|
40
|
-
EQL search. The API also deletes results for the search.
|
|
39
|
+
.. raw:: html
|
|
41
40
|
|
|
42
|
-
|
|
41
|
+
<p>Delete an async EQL search.
|
|
42
|
+
Delete an async EQL search or a stored synchronous EQL search.
|
|
43
|
+
The API also deletes results for the search.</p>
|
|
44
|
+
|
|
45
|
+
|
|
46
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-eql-delete>`_
|
|
43
47
|
|
|
44
48
|
:param id: Identifier for the search to delete. A search ID is provided in the
|
|
45
49
|
EQL search API's response for an async search. A search ID is also provided
|
|
@@ -83,10 +87,13 @@ class EqlClient(NamespacedClient):
|
|
|
83
87
|
] = None,
|
|
84
88
|
) -> ObjectApiResponse[t.Any]:
|
|
85
89
|
"""
|
|
86
|
-
|
|
87
|
-
|
|
90
|
+
.. raw:: html
|
|
91
|
+
|
|
92
|
+
<p>Get async EQL search results.
|
|
93
|
+
Get the current status and available results for an async EQL search or a stored synchronous EQL search.</p>
|
|
94
|
+
|
|
88
95
|
|
|
89
|
-
`<https://www.elastic.co/
|
|
96
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-eql-get>`_
|
|
90
97
|
|
|
91
98
|
:param id: Identifier for the search.
|
|
92
99
|
:param keep_alive: Period for which the search and its results are stored on
|
|
@@ -134,10 +141,13 @@ class EqlClient(NamespacedClient):
|
|
|
134
141
|
pretty: t.Optional[bool] = None,
|
|
135
142
|
) -> ObjectApiResponse[t.Any]:
|
|
136
143
|
"""
|
|
137
|
-
|
|
138
|
-
stored synchronous EQL search without returning results.
|
|
144
|
+
.. raw:: html
|
|
139
145
|
|
|
140
|
-
|
|
146
|
+
<p>Get the async EQL status.
|
|
147
|
+
Get the current status for an async EQL search or a stored synchronous EQL search without returning results.</p>
|
|
148
|
+
|
|
149
|
+
|
|
150
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-eql-get-status>`_
|
|
141
151
|
|
|
142
152
|
:param id: Identifier for the search.
|
|
143
153
|
"""
|
|
@@ -167,6 +177,8 @@ class EqlClient(NamespacedClient):
|
|
|
167
177
|
@_rewrite_parameters(
|
|
168
178
|
body_fields=(
|
|
169
179
|
"query",
|
|
180
|
+
"allow_partial_search_results",
|
|
181
|
+
"allow_partial_sequence_results",
|
|
170
182
|
"case_sensitive",
|
|
171
183
|
"event_category_field",
|
|
172
184
|
"fetch_size",
|
|
@@ -174,6 +186,7 @@ class EqlClient(NamespacedClient):
|
|
|
174
186
|
"filter",
|
|
175
187
|
"keep_alive",
|
|
176
188
|
"keep_on_completion",
|
|
189
|
+
"max_samples_per_key",
|
|
177
190
|
"result_position",
|
|
178
191
|
"runtime_mappings",
|
|
179
192
|
"size",
|
|
@@ -188,6 +201,8 @@ class EqlClient(NamespacedClient):
|
|
|
188
201
|
index: t.Union[str, t.Sequence[str]],
|
|
189
202
|
query: t.Optional[str] = None,
|
|
190
203
|
allow_no_indices: t.Optional[bool] = None,
|
|
204
|
+
allow_partial_search_results: t.Optional[bool] = None,
|
|
205
|
+
allow_partial_sequence_results: t.Optional[bool] = None,
|
|
191
206
|
case_sensitive: t.Optional[bool] = None,
|
|
192
207
|
error_trace: t.Optional[bool] = None,
|
|
193
208
|
event_category_field: t.Optional[str] = None,
|
|
@@ -211,6 +226,7 @@ class EqlClient(NamespacedClient):
|
|
|
211
226
|
ignore_unavailable: t.Optional[bool] = None,
|
|
212
227
|
keep_alive: t.Optional[t.Union[str, t.Literal[-1], t.Literal[0]]] = None,
|
|
213
228
|
keep_on_completion: t.Optional[bool] = None,
|
|
229
|
+
max_samples_per_key: t.Optional[int] = None,
|
|
214
230
|
pretty: t.Optional[bool] = None,
|
|
215
231
|
result_position: t.Optional[t.Union[str, t.Literal["head", "tail"]]] = None,
|
|
216
232
|
runtime_mappings: t.Optional[t.Mapping[str, t.Mapping[str, t.Any]]] = None,
|
|
@@ -223,15 +239,27 @@ class EqlClient(NamespacedClient):
|
|
|
223
239
|
body: t.Optional[t.Dict[str, t.Any]] = None,
|
|
224
240
|
) -> ObjectApiResponse[t.Any]:
|
|
225
241
|
"""
|
|
226
|
-
|
|
227
|
-
|
|
228
|
-
|
|
242
|
+
.. raw:: html
|
|
243
|
+
|
|
244
|
+
<p>Get EQL search results.
|
|
245
|
+
Returns search results for an Event Query Language (EQL) query.
|
|
246
|
+
EQL assumes each document in a data stream or index corresponds to an event.</p>
|
|
247
|
+
|
|
229
248
|
|
|
230
|
-
`<https://www.elastic.co/
|
|
249
|
+
`<https://www.elastic.co/docs/api/doc/elasticsearch/v9/operation/operation-eql-search>`_
|
|
231
250
|
|
|
232
251
|
:param index: The name of the index to scope the operation
|
|
233
252
|
:param query: EQL query you wish to run.
|
|
234
253
|
:param allow_no_indices:
|
|
254
|
+
:param allow_partial_search_results: Allow query execution also in case of shard
|
|
255
|
+
failures. If true, the query will keep running and will return results based
|
|
256
|
+
on the available shards. For sequences, the behavior can be further refined
|
|
257
|
+
using allow_partial_sequence_results
|
|
258
|
+
:param allow_partial_sequence_results: This flag applies only to sequences and
|
|
259
|
+
has effect only if allow_partial_search_results=true. If true, the sequence
|
|
260
|
+
query will return results based on the available shards, ignoring the others.
|
|
261
|
+
If false, the sequence query will return successfully, but will always have
|
|
262
|
+
empty results.
|
|
235
263
|
:param case_sensitive:
|
|
236
264
|
:param event_category_field: Field containing the event classification, such
|
|
237
265
|
as process, file, or network.
|
|
@@ -246,6 +274,11 @@ class EqlClient(NamespacedClient):
|
|
|
246
274
|
in the response.
|
|
247
275
|
:param keep_alive:
|
|
248
276
|
:param keep_on_completion:
|
|
277
|
+
:param max_samples_per_key: By default, the response of a sample query contains
|
|
278
|
+
up to `10` samples, with one sample per unique set of join keys. Use the
|
|
279
|
+
`size` parameter to get a smaller or larger set of samples. To retrieve more
|
|
280
|
+
than one sample per set of join keys, use the `max_samples_per_key` parameter.
|
|
281
|
+
Pipes are not supported for sample queries.
|
|
249
282
|
:param result_position:
|
|
250
283
|
:param runtime_mappings:
|
|
251
284
|
:param size: For basic queries, the maximum number of matching events to return.
|
|
@@ -280,6 +313,12 @@ class EqlClient(NamespacedClient):
|
|
|
280
313
|
if not __body:
|
|
281
314
|
if query is not None:
|
|
282
315
|
__body["query"] = query
|
|
316
|
+
if allow_partial_search_results is not None:
|
|
317
|
+
__body["allow_partial_search_results"] = allow_partial_search_results
|
|
318
|
+
if allow_partial_sequence_results is not None:
|
|
319
|
+
__body["allow_partial_sequence_results"] = (
|
|
320
|
+
allow_partial_sequence_results
|
|
321
|
+
)
|
|
283
322
|
if case_sensitive is not None:
|
|
284
323
|
__body["case_sensitive"] = case_sensitive
|
|
285
324
|
if event_category_field is not None:
|
|
@@ -294,6 +333,8 @@ class EqlClient(NamespacedClient):
|
|
|
294
333
|
__body["keep_alive"] = keep_alive
|
|
295
334
|
if keep_on_completion is not None:
|
|
296
335
|
__body["keep_on_completion"] = keep_on_completion
|
|
336
|
+
if max_samples_per_key is not None:
|
|
337
|
+
__body["max_samples_per_key"] = max_samples_per_key
|
|
297
338
|
if result_position is not None:
|
|
298
339
|
__body["result_position"] = result_position
|
|
299
340
|
if runtime_mappings is not None:
|