From bb732e8c074c220b57c9cd4c1a739df8e9e4f189 Mon Sep 17 00:00:00 2001 From: Chen Dai Date: Tue, 4 Feb 2025 11:22:18 -0800 Subject: [PATCH] Update PPL parse command doc with limitation (#3274) * Update PPL parse command doc with limitation Signed-off-by: Chen Dai * Address comments Signed-off-by: Chen Dai * Fixed example Signed-off-by: Chen Dai --------- Signed-off-by: Chen Dai --- docs/user/ppl/cmd/parse.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/user/ppl/cmd/parse.rst b/docs/user/ppl/cmd/parse.rst index d1015cccb9..369fb2d3ec 100644 --- a/docs/user/ppl/cmd/parse.rst +++ b/docs/user/ppl/cmd/parse.rst @@ -108,3 +108,9 @@ There are a few limitations with parse command: ``where`` in the following command will not work:: source=accounts | parse email '.+@(?.+)' | stats avg(age) by host | where host=pyrami.com ; + +- Fields defined by parse will not appear in the final result unless the original source field is included in the ``fields`` command. + + For example, the following query will not display the parsed fields ``host`` unless the source field ``email`` is also explicitly included:: + + source=accounts | parse email '.+@(?.+)' | fields email, host ;