OpenSearch/docs/reference/eql
James Rodewig 30a32040d3
[DOCS] EQL: Document `substring` function (#53867)
Adds documentation for the EQL `substring` function.

Supporting changes:

* Creates a new "EQL function reference" page
* Updates the title of the "EQL syntax reference" page for consistency
* Adds a brief "Functions" section to the EQL syntax docs
* Updates EQL limitations docs to state that only array functions are
  unsupported
2020-03-25 12:23:59 -04:00
..
functions.asciidoc [DOCS] EQL: Document `substring` function (#53867) 2020-03-25 12:23:59 -04:00
index.asciidoc [DOCS] EQL: Document `substring` function (#53867) 2020-03-25 12:23:59 -04:00
limitations.asciidoc [DOCS] EQL: Document `substring` function (#53867) 2020-03-25 12:23:59 -04:00
requirements.asciidoc [DOCS] Update EQL default event category and timestamp values (#53102) 2020-03-04 09:17:37 -05:00
search.asciidoc [DOCS] Adds Beats tip to EQL search docs (#53292) 2020-03-10 05:16:18 -04:00
syntax.asciidoc [DOCS] EQL: Document `substring` function (#53867) 2020-03-25 12:23:59 -04:00