That is excellent Otto, thank you very much for suggestion, it worked.

I have these errors in elasticsearch error_index: error_1.txt and error_2.txt
Maybe this is something you can crack also?
Appreciate your help!

- Dima


On 08/03/2017 04:17 AM, Otto Fowler wrote:

[Stellar]>>> in:= 'foo'
[Stellar]>>> TO_UPPER(in)
[!] Unable to parse: TO_UPPER(in) due to: org.apache.metron.stellar.dsl.ParseException: Syntax error @ 1:9 no viable alternative at input 'TO_UPPER(in'
org.apache.metron.stellar.dsl.ParseException: Unable to parse: TO_UPPER(in) due to: org.apache.metron.stellar.dsl.ParseException: Syntax error @ 1:9 no viable alternative at input 'TO_UPPER(in'





On August 2, 2017 at 17:12:27, Otto Fowler (ottobackwards@gmail.com) wrote:

Can you try the rule without ‘in’ as a key?
“in” is a reserved word in Stellar.

What that error means is that the ANTLR lexer and parser cannot figure out what the statement means because of ambiguity, most likely introduced by the use of a keyword. (in is not a valid statement.




On August 2, 2017 at 16:49:49, Matt Foley (mfoley@hortonworks.com) wrote:

Unable to pars