OpenSearch/docs/reference/eql
Costin Leau 679619c798 EQL: Improve retrieval of results (#59552)
Instead of retrieving an entire SearchHit, get just a reference and
postpone the document retrieval when assembling the final results.
Remove sort information from results to make them consistent.
Move TumblingWindow under the sequence package.

Co-authored-by: James Rodewig <james.rodewig@elastic.co>
(cherry picked from commit bccfbcd81f2f1d3552e95e4a9ee2618fb3059bd9)
2020-07-14 23:53:57 +03:00
..
delete-async-eql-search-api.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
eql-search-api.asciidoc EQL: Improve retrieval of results (#59552) 2020-07-14 23:53:57 +03:00
functions.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
get-async-eql-search-api.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
index.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
limitations.asciidoc [DOCS] EQL: Document `until` keyword support (#59320) (#59408) 2020-07-13 09:05:47 -04:00
pipes.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
requirements.asciidoc [DOCS] EQL: Prepare docs for release (#59259) (#59407) 2020-07-13 09:04:15 -04:00
search.asciidoc EQL: Improve retrieval of results (#59552) 2020-07-14 23:53:57 +03:00
syntax.asciidoc [DOCS] EQL: Document `until` keyword support (#59320) (#59408) 2020-07-13 09:05:47 -04:00