In ES|QL, many functions can take both KEYWORD and TEXT as input parameters, and change their values to strings. This change destroys the meaning of any analyzer associated with the original TEXT, and so the output should always be KEYWORD. But several functions mistakenly return TEXT (ie. return their input data type).
Functions known to have this issue:
- Explicitly returning
field.dataType
- Implicitly as a result of extending
UnaryScalarFunction:
Other functions that take TEXT but already are fixed to only return KEYWORD:
- ToString
- FromBase64
- ToBase64
- Replace
- Right
- Left
In ES|QL, many functions can take both KEYWORD and TEXT as input parameters, and change their values to strings. This change destroys the meaning of any analyzer associated with the original TEXT, and so the output should always be KEYWORD. But several functions mistakenly return TEXT (ie. return their input data type).
Functions known to have this issue:
field.dataTypeUnaryScalarFunction:Other functions that take TEXT but already are fixed to only return KEYWORD: