Devin Gibson

# Description This PR makes several changes in sql_adapter.py and search_scheduler.py to improve resilience with database connection issues. In SQL_Adapter we introduce an option to create a connection pool using...

### Bug On a log file consisting of the following example data `{"a": [{"b": "c"}]}` Search will work correctly for queries like `a.b: c` and `a.b: *`, but will fail...

# Description This PR implements table-packing; we combine small tables together into one compression stream until they reach a certain size threshold in order to avoid having many tiny compression...

# Description This PR modifies clp-s and clo to pass most search arguments via a msgpack object written to stdin instead of via command line arguments. This allows the `fs_search_task`...

### Request We currently support a non-standard syntax for combining filters on many values for the same column. A query like `key: (value1 or value2)` in KQL can be written...

clp-s: Add boilerplate for new sql parser

2

# Description This PR adds boilerplate for the new sql parser. This includes a stubbed out g4 grammar and visitor, as well as a basic unit test that tells us...

clp-s: Add support for escaping characters in KQL key names

1

# Description This PR adds support for using backslash to escape characters in KQL key names. The change is mostly contained in the `StringUtiles::tokenize_column_descriptor` function, but does involve a small...

[WIP] Add support for ingesting logs from Kafka

1

# Description This PR adds support for ingesting log data from Kafka by integrating with the `librdkafka` C library. A user specifies the Kafka topic they want to consume from,...