From f347f0207f116b9d71c4f802cfca3776dbfdf83b Mon Sep 17 00:00:00 2001
From: James Rodewig <40268737+jrodewig@users.noreply.github.com>
Date: Wed, 16 Sep 2020 11:43:37 -0400
Subject: [PATCH] [DOCS] EQL: Use consistent string notation (#62472) (#62477)

---
 docs/reference/eql/detect-threats-with-eql.asciidoc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/reference/eql/detect-threats-with-eql.asciidoc b/docs/reference/eql/detect-threats-with-eql.asciidoc
index 86d68774321..ffbbc75fe3f 100644
--- a/docs/reference/eql/detect-threats-with-eql.asciidoc
+++ b/docs/reference/eql/detect-threats-with-eql.asciidoc
@@ -299,8 +299,8 @@ GET /my-index-000001/_eql/search
 {
   "query": """
     sequence by process.pid
-      [process where process.name == 'regsvr32.exe']
-      [library where dll.name == 'scrobj.dll']
+      [process where process.name == "regsvr32.exe"]
+      [library where dll.name == "scrobj.dll"]
       [network where true]
   """
 }