From 49e1eb011ed5e605de83ccbd21ff8f34d0a529bb Mon Sep 17 00:00:00 2001 From: YANGDB Date: Thu, 29 Aug 2024 10:00:34 -0700 Subject: [PATCH] update README.md Signed-off-by: YANGDB Signed-off-by: YANGDB --- ppl-spark-integration/README.md | 17 +++++++++++------ 1 file changed, 11 insertions(+), 6 deletions(-) diff --git a/ppl-spark-integration/README.md b/ppl-spark-integration/README.md index 67cbbb035..523a3cd79 100644 --- a/ppl-spark-integration/README.md +++ b/ppl-spark-integration/README.md @@ -321,19 +321,24 @@ Limitation: Overriding existing field is unsupported, following queries throw ex - `source=accounts | grok email '.+@%{HOSTNAME:host}' | eval eval_result=1 | fields host, eval_result` - `source=accounts | grok street_address '%{NUMBER} %{GREEDYDATA:address}' | fields address ` - `source=logs | grok message '%{COMMONAPACHELOG}' | fields COMMONAPACHELOG, timestamp, response, bytes` -- + +_- **Limitation: Overriding existing field is unsupported:**_ + - `source=accounts | grok address '%{NUMBER} %{GREEDYDATA:address}' | fields address` + > For additional details on PPL commands - view [PPL Commands Docs](https://github.com/opensearch-project/sql/blob/main/docs/user/ppl/index.rst) --- +#### Experimental Commands: +- `correlation` - [See details](../docs/PPL-Correlation-command.md) +> This is an experimental command - it may be removed in future versions -For additional details on Spark PPL commands project, see [PPL Project](https://github.com/orgs/opensearch-project/projects/214/views/2) -For additional details on Spark PPL commands support campaign, see [PPL Commands Campaign](https://github.com/opensearch-project/opensearch-spark/issues/408) +--- +### Documentations -#### Experimental Commands: - - `correlation` - [See details](../docs/PPL-Correlation-command.md) +For additional details on Spark PPL commands project, see [PPL Project](https://github.com/orgs/opensearch-project/projects/214/views/2) -> This is an experimental command - it may be removed in future versions +For additional details on Spark PPL commands support campaign, see [PPL Commands Campaign](https://github.com/opensearch-project/opensearch-spark/issues/408) \ No newline at end of file