James Rodewig 20453d3ac8 [DOCS] Add basic EQL search tutorial docs (#51574) ...

I plan to add additional sections to this page with future PRs:

* Specify timestamp and event type fields
* Specify a join key field
* Filter using query DSL
* Paginate a large response

See #51057.

2020-02-12 08:42:09 -05:00

..

index.asciidoc

[DOCS] Add basic EQL search tutorial docs (#51574)

2020-02-12 08:42:09 -05:00

requirements.asciidoc

[DOCS] Add basic EQL search tutorial docs (#51574)

2020-02-12 08:42:09 -05:00

search.asciidoc

[DOCS] Add basic EQL search tutorial docs (#51574)

2020-02-12 08:42:09 -05:00

syntax.asciidoc

[DOCS] Add EQL syntax page (#51821)

2020-02-05 08:14:07 -05:00