From cc12361a8298b63482bae28063b57ecd89b3ef3d Mon Sep 17 00:00:00 2001
From: James Rodewig <james.rodewig@elastic.co>
Date: Tue, 19 May 2020 17:04:20 -0400
Subject: [PATCH] [DOCS] EQL: Fix whitespace in EQL snippet

---
 docs/reference/eql/search.asciidoc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/reference/eql/search.asciidoc b/docs/reference/eql/search.asciidoc
index b61a2da6359..9a31453ccb2 100644
--- a/docs/reference/eql/search.asciidoc
+++ b/docs/reference/eql/search.asciidoc
@@ -279,7 +279,7 @@ prior one.
 GET /sec_logs/_eql/search
 {
   "query": """
-    sequence  by agent.id
+    sequence by agent.id
       [ file where file.name == "cmd.exe" ]
       [ process where stringContains(process.name, "regsvr32") ]
   """