I have a problem with identifying if a point is within a polygon or not.
For the same latitude and longitude, sometimes I get right results, but sometimes not. I get wrong results if I search for more IDs (so there are more events) or I change the time range (not necessarily bigger).
The line which causes the issue: | lookup some_lookup_name latitude longitude
We have reproduced the issue with sample data and simple geospatial lookup. All events with id=1 are inside the geofence, events with id=2 are outside. We are getting incorrect results (different when sorting according to time). We have two sample data sources (data_sample_2 has changed latitude in one of the events for id=2, from 51.501835 to 51.501836).
When sorting from earliest to latest, all events are inside:
When sorting from latest to earliest, some events for id=1 are outside (which is incorrect):
Removing event with problematic latitude:
| eval time_epoch=_time
| sort 0 _time
| lookup geo_4 latitude longitude
| table id latitude longitude _time time_epoch featureId featureCollection
| noop search_optimization=false