Costin Leau 439205d1ea EQL: Introduce tie breaker support (#57787) ...

Allow a field inside the data to be used as a tie breaker for events
that have the same timestamp.
The field is optional by default.
If used, the tie-breaker always requires a non-null value since it is
used inside `search_after` which requires a non-null value.

Fix #56824

(cherry picked from commit e5719ecb474b32730d93afdbb6834a32b0b2df8b)

2020-06-09 22:50:19 +03:00

..

src

EQL: Introduce tie breaker support (#57787)

2020-06-09 22:50:19 +03:00

build.gradle

QL: Backport project to 7.x (#51497)

2020-01-27 22:03:58 +02:00