honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[DOCS] EQL: Remove case sensitivity from function docs (#55063) 

Per #54411, we plan to handle case sensitivity via a parameter for the
EQL search API (with the possible exception of the `between` function).

This removes references and examples related to case sensitivity from
the EQL functions docs.
This commit is contained in:
James Rodewig 2020-05-05 09:25:55 -04:00
parent d04ac8b496
commit 4dfdd46dc3
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/reference/eql/functions.asciidoc
View File

@ -183,8 +183,7 @@ CIDR block you wish to search. If `null`, the function returns `null`.
[[eql-fn-endswith]]
=== `endsWith`
Returns `true` if a source string ends with a provided substring. Matching is
case insensitive.
Returns `true` if a source string ends with a provided substring.
[%collapsible]
====
@ -192,7 +191,6 @@ case insensitive.
[source,eql]
----
endsWith("regsvr32.exe", ".exe") // returns true
endsWith("regsvr32.exe", ".EXE") // returns true
endsWith("regsvr32.exe", ".dll") // returns false
endsWith("", "") // returns true
@ -420,8 +418,7 @@ field datatypes:
[[eql-fn-startswith]]
=== `startsWith`
Returns `true` if a source string begins with a provided substring. Matching is
case insensitive.
Returns `true` if a source string begins with a provided substring.
[%collapsible]
====
@ -429,7 +426,6 @@ case insensitive.
[source,eql]
----
startsWith("regsvr32.exe", "regsvr32") // returns true
startsWith("regsvr32.exe", "RegSvr32") // returns true
startsWith("regsvr32.exe", "explorer") // returns false
startsWith("", "") // returns true