in geneve/events_emitter.py [0:0]
def guess_from_query(query):
exceptions = []
try:
return QueryGuess(query, "eql", "eql", ast_from_eql_query(query))
except Exception as e:
exceptions.append(("EQL", e))
try:
return QueryGuess(query, "query", "kuery", ast_from_kql_query(query))
except Exception as e:
exceptions.append(("Kuery", e))
def rank(e):
line = getattr(e[1], "line", -1)
column = getattr(e[1], "column", -1)
return (line, column)
lang, error = sorted(exceptions, key=rank)[-1]
raise ValueError(f"{lang} query error: {error}") from error