EQL search api query hits.relation value receiving mismatching values compared to search lucene query #103668
Description
Elasticsearch Version
8.9.1
Installed Plugins
No response
Java Version
bundled
OS Version
Docker
Problem Description
EQL search api hits.relation value stays at eq value even if there are more values to be searched. This differs from a search api query formated in lucene which if there are more values it recieves a GTE value. Attached are some tests of the EQL API & SEARCH API queries to show the differing results.
Steps to Reproduce
Eql API Query with no size specified:
Response:
Eql API Query with size specified:
Response:
Search API Query with no parameters:
Response:
Search API with total hits with track total hits setting turned on:
Response:
Logs (if relevant)
No response