Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unexpected results from aggregation earliest() / latest() on _raw field #439

Open
Abigael-JT opened this issue Dec 2, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@Abigael-JT
Copy link
Contributor

Describe the bug

This query fails:
index=crud earliest=-3y

| stats earliest(_raw), latest(_raw)

Expected behavior

Should return the earliest and latest event in _raw field

But Returns:
Job aborted due to stage failure
....

How to reproduce

Run a query similar to the one above

Screenshots

Software version

pth_10 version: 8.2.1
pth_03 version: 9.2.0

Desktop (please complete the following information if relevant):

  • OS:
  • Browser:
  • Version:

Additional context

@Abigael-JT Abigael-JT added the bug Something isn't working label Dec 2, 2024
kortemik pushed a commit that referenced this issue Dec 5, 2024
* agg earliest/latest fix to not have all rows in memory.

* remove unnecessary code from CurrentTimestampImpl

* EarliestLatestBuffer immutable

* spotless applied

* statsTransformationTest: Combined earliest() and latest() test

* add CurrentTimestamp tests with EqualsVerifier.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants