James Rodewig 20453d3ac8 [DOCS] Add basic EQL search tutorial docs (#51574) ... I plan to add additional sections to this page with future PRs: * Specify timestamp and event type fields * Specify a join key field * Filter using query DSL * Paginate a large response See #51057.		2020-02-12 08:42:09 -05:00
..
index.asciidoc	[DOCS] Add basic EQL search tutorial docs (#51574)	2020-02-12 08:42:09 -05:00
requirements.asciidoc	[DOCS] Add basic EQL search tutorial docs (#51574)	2020-02-12 08:42:09 -05:00
search.asciidoc	[DOCS] Add basic EQL search tutorial docs (#51574)	2020-02-12 08:42:09 -05:00
syntax.asciidoc	[DOCS] Add EQL syntax page (#51821)	2020-02-05 08:14:07 -05:00