[DOCS] EQL: Fix whitespace in EQL snippet

2020-05-19 17:04:20 -04:00 · 2020-05-19 17:04:20 -04:00 · cc12361a82
parent f6d2688de2
commit cc12361a82
1 changed files with 1 additions and 1 deletions
--- a/docs/reference/eql/search.asciidoc
+++ b/docs/reference/eql/search.asciidoc
@ -279,7 +279,7 @@ prior one.
 GET /sec_logs/_eql/search
 {
  "query": """
-    sequence  by agent.id
+    sequence by agent.id
      [ file where file.name == "cmd.exe" ]
      [ process where stringContains(process.name, "regsvr32") ]
  """