OpenSearch

Commit Graph

Author	SHA1	Message	Date
James Rodewig	e46bb54c7b	[DOCS] Document `any` keyword in EQL syntax (#52821 ) (#53157 ) Adds documentation for the `any` keyword to the EQL syntax docs. Includes: * Definition of an event category and its relationship to the event category field. * Example matching all event categories using `any` keyword * Example using `any` with `where true`	2020-03-05 05:02:47 -05:00
Aleksandr Maus	b47bffba24	EQL: consistent naming for event type vs event category (#53073 ) (#53090 ) Related to https://github.com/elastic/elasticsearch/issues/52941	2020-03-04 08:02:38 -05:00
James Rodewig	b70cbc97aa	[DOCS] Add EQL syntax page (#51821 ) Adds documentation for basic EQL syntax. Joins, sequences, and other syntax to be added as its supported in future development. Co-Authored-By: Ross Wolf <31489089+rw-access@users.noreply.github.com>	2020-02-05 08:14:07 -05:00

Author

SHA1

Message

Date

James Rodewig

e46bb54c7b

[DOCS] Document `any` keyword in EQL syntax (#52821 ) (#53157 )

Adds documentation for the `any` keyword to the EQL syntax docs.

Includes:

* Definition of an event category and its relationship to the event
   category field.
* Example matching all event categories using `any` keyword
* Example using `any` with `where true`

2020-03-05 05:02:47 -05:00

Aleksandr Maus

b47bffba24

EQL: consistent naming for event type vs event category (#53073 ) (#53090 )

Related to https://github.com/elastic/elasticsearch/issues/52941

2020-03-04 08:02:38 -05:00

James Rodewig

b70cbc97aa

[DOCS] Add EQL syntax page (#51821 )

Adds documentation for basic EQL syntax.

Joins, sequences, and other syntax to be added as its supported
in future development.

Co-Authored-By: Ross Wolf <31489089+rw-access@users.noreply.github.com>

2020-02-05 08:14:07 -05:00

3 Commits