[DOCS] EQL: Remove outdated wildcard ref (#65684) (#65691)

This commit is contained in:
James Rodewig 2020-12-01 11:56:12 -05:00 committed by GitHub
parent 745f527fea
commit eca0401d56
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 4 deletions

View File

@ -1015,10 +1015,6 @@ expressions. Matching is case-sensitive.
*Example*
[source,eql]
----
// The two following expressions are equivalent.
process.name == "*regsvr32*" or process.name == "*explorer*"
wildcard(process.name, "*regsvr32*", "*explorer*")
// process.name = "regsvr32.exe"
wildcard(process.name, "*regsvr32*") // returns true
wildcard(process.name, "*regsvr32*", "*explorer*") // returns true