opensearch-project / opensearch-project/sql
[FEATURE] PPL `eventstats` command enhancement
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 176
- Forks
- 229
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 43
Description
Is your feature request related to a problem?
The eventstats command was added in https://github.com/opensearch-project/sql/pull/3585, but there remain important gaps compared with Splunk SPL’s eventstats, affecting feature parity.
What solution would you like?
What alternatives have you considered?
N/A
Do you have any additional context?
Execution plan & priorities summary:
- P0
- Close gaps in common aggregation functions (tracked separately)
- Support aggregation wildcard * (tracked under the stats enhancement issue) [TBD]
- P0.5
- Investigate the possibility of pushdown optimizations for SQL window function
- Add a memory limit guard for large inputs.
- P1:
- Deliver full parity for the
allnumparameter - Add support for more aggregation functions
- Deliver full parity for the
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the original eventstats implementation in PR #3585 and compare the listed P0, P0.5, and P1 gaps with Splunk SPL behavior. Check PRs #4084 and #4100 for related aggregation work. Done means delivering an agreed subset of the wildcard, optimization, memory-limit, allnum, or aggregation-function enhancements with corresponding parity established.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, sql
- Domain
- databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100