OpenSearch/docs/reference/eql
James Rodewig 20453d3ac8 [DOCS] Add basic EQL search tutorial docs (#51574)
I plan to add additional sections to this page with future PRs:

* Specify timestamp and event type fields
* Specify a join key field
* Filter using query DSL
* Paginate a large response

See #51057.
2020-02-12 08:42:09 -05:00
..
index.asciidoc [DOCS] Add basic EQL search tutorial docs (#51574) 2020-02-12 08:42:09 -05:00
requirements.asciidoc [DOCS] Add basic EQL search tutorial docs (#51574) 2020-02-12 08:42:09 -05:00
search.asciidoc [DOCS] Add basic EQL search tutorial docs (#51574) 2020-02-12 08:42:09 -05:00
syntax.asciidoc [DOCS] Add EQL syntax page (#51821) 2020-02-05 08:14:07 -05:00