root
/
elasticsearch
mirror of https://github.com/elastic/elasticsearch.git
1
0
Fork 0
Code Issues Actions 1 Packages Projects Releases Wiki Activity
51,196 Commits 501 Branches 435 Tags 2.6 GiB
Commit Graph

3 Commits

Author SHA1 Message Date
James Rodewig c6334ee4b7
[DOCS] Document `any` keyword in EQL syntax (#52821) 
* [DOCS] Document `any` keyword in EQL syntax

Adds documentation for the `any` keyword to the EQL syntax docs.

Includes:

* Definition of an event type and its relationship to the event type
  field.
* Example matching all event types using `any` keyword
* Example matching event types beginning with a digit
* Example using `any` with `where true`

* Remove references to `event_type_field` default

* Reuse "Events starting with digits" section

* Updates for #53073
 2020-03-05 04:44:35 -05:00
Aleksandr Maus 82c645e3ef
EQL: consistent naming for event type vs event category (#53073) 
Related to https://github.com/elastic/elasticsearch/issues/52941
 2020-03-03 19:44:12 -05:00
James Rodewig 99c1ee88e8
[DOCS] Add EQL syntax page (#51821) 
Adds documentation for basic EQL syntax.

Joins, sequences, and other syntax to be added as its supported
in future development.

Co-Authored-By: Ross Wolf <31489089+rw-access@users.noreply.github.com>
 2020-02-05 08:12:09 -05:00