OpenSearch/docs/reference/eql
James Rodewig e46bb54c7b
[DOCS] Document `any` keyword in EQL syntax (#52821) (#53157)
Adds documentation for the `any` keyword to the EQL syntax docs.

Includes:

* Definition of an event category and its relationship to the event
   category field.
* Example matching all event categories using `any` keyword
* Example using `any` with `where true`
2020-03-05 05:02:47 -05:00
..
index.asciidoc [DOCS] Add EQL limitations page (#52001) 2020-02-12 08:45:43 -05:00
limitations.asciidoc [DOCS] Add EQL limitations page (#52001) 2020-02-12 08:45:43 -05:00
requirements.asciidoc [DOCS] Update EQL default event category and timestamp values (#53102) 2020-03-04 09:17:37 -05:00
search.asciidoc [DOCS] Add missing doc type to EQL search results 2020-03-04 10:26:11 -05:00
syntax.asciidoc [DOCS] Document `any` keyword in EQL syntax (#52821) (#53157) 2020-03-05 05:02:47 -05:00