Briefly, this error occurs when you’re trying to establish process relationships in Elasticsearch, which it doesn’t support. Elasticsearch is a search engine based on the Lucene library, and it doesn’t have built-in support for process relationships. To resolve this issue, you can either use a different tool that supports process relationships, or you can create a custom solution within Elasticsearch. This might involve creating a new index to store the relationships, or using a plugin that adds this functionality.
This guide will help you check for common problems that cause the log ” Process relationships are not supported ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: parser, plugin.
Log Context
Log “Process relationships are not supported” class name is EqlParser.java. We extracted the following from Elasticsearch source code for those seeking an in-depth context :
} @Override
public void exitProcessCheck(EqlBaseParser.ProcessCheckContext context) {
Token token = context.relationship;
throw new ParsingException("Process relationships are not supported"; null; token.getLine(); token.getCharPositionInLine());
} @Override
public void exitQualifiedName(EqlBaseParser.QualifiedNameContext context) {
if (context.INTEGER_VALUE().size() > 0) {
