SQL query to ElasticSearch regex is not pushed down :
SELECT A, B, C
FROM traffic
where regexp_like(C, ‘%AAA%’)
–> generates a match_all query like this :
{
“from” : 0,
“size” : 4000,
“query” : {
“match_all” : {
“boost” : 1.0
}
}
}
while SQL with Like clause gets pushdown and converted to use regExp syntax
SELECT C, H
FROM traffic
where H like ‘%cnn%’
gets converted to
{
“from” : 0,
“size” : 4000,
“query” : {
“regexp” : {
“host” : {
“value” : “.ynet.”,
“flags_value” : 65535,
“max_determinized_states” : 10000,
“boost” : 1.0
}
}
}
}