Skip to content

Commit 67591e6

Browse files
authored
Add max_sample_per_keys to EqlSearchRequest (#3041)
1 parent a8d0688 commit 67591e6

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

specification/eql/search/EqlSearchRequest.ts

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
import { RequestBase } from '@_types/Base'
2121
import { ExpandWildcards, Field, Indices } from '@_types/common'
2222
import { RuntimeFields } from '@_types/mapping/RuntimeFields'
23-
import { uint } from '@_types/Numeric'
23+
import { integer, uint } from '@_types/Numeric'
2424
import { FieldAndFormat, QueryContainer } from '@_types/query_dsl/abstractions'
2525
import { Duration } from '@_types/Time'
2626
import { ResultPosition } from './types'
@@ -114,5 +114,12 @@ export interface Request extends RequestBase {
114114
* @availability serverless
115115
*/
116116
runtime_mappings?: RuntimeFields
117+
/**
118+
* By default, the response of a sample query contains up to `10` samples, with one sample per unique set of join keys. Use the `size`
119+
* parameter to get a smaller or larger set of samples. To retrieve more than one sample per set of join keys, use the
120+
* `max_samples_per_key` parameter. Pipes are not supported for sample queries.
121+
* @server_default 1
122+
*/
123+
max_samples_per_key?: integer
117124
}
118125
}

0 commit comments

Comments
 (0)