747e61508a
[DOCS] EQL: Prepare docs for release ( #59259 )
...
Changes:
* Swaps the `dev` admonitions for `experimental` admonitions
* Removes `ifdef` statements preventing the docs from appearing in
released branches
2020-07-13 08:40:38 -04:00
2be9db01c8
[DOCS] Replace `datatype` with `data type` ( #58972 )
2020-07-07 13:52:10 -04:00
cc3bd3974f
[DOCS] EQL: Document `head` and `tail` pipes ( #58673 )
2020-06-30 08:35:37 -04:00
982f168fd8
[DOCS] EQL: Add `dev` admonition to EQL pages ( #57531 )
...
Adds the `dev` admonition to EQL features, which are in development
under a feature flag.
2020-06-02 10:47:53 -04:00
7c679614cd
[DOCS] EQL: Align comments in `between` fn examples
2020-05-15 09:20:27 -04:00
aa6c4928e8
[DOCS] EQL: Remove references to arrays/multi-value fields ( #56772 )
2020-05-15 09:08:02 -04:00
949a2927ed
[DOCS] EQL: Document `number` function ( #56770 )
...
Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2020-05-14 15:22:04 -04:00
883bb29152
[DOCS] EQL: Document math functions ( #55810 )
...
Documents the following EQL functions:
* `add`
* `divide`
* `module`
* `multiply`
* `subtract`
2020-05-07 08:53:08 -04:00
c7ac7e005c
[DOCS] EQL: Document `concat` function ( #56239 )
...
Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2020-05-05 16:41:59 -04:00
7156f40d46
[DOCS] EQL: Document `match` function ( #56134 )
2020-05-05 11:48:40 -04:00
a7729c8e31
[DOCS] EQL: Remove case sensitivity from function docs ( #55063 )
...
Per #54411 , we plan to handle case sensitivity via a parameter for the
EQL search API (with the possible exception of the `between` function).
This removes references and examples related to case sensitivity from
the EQL functions docs.
2020-05-05 09:25:55 -04:00
6c26c4b768
[DOCS] EQL: Correct `cidrMatch` function heading ( #55935 )
2020-04-29 10:01:20 -04:00
8918eefa9e
[DOCS] Update attribute for multi arg footnotes ( #55860 )
2020-04-29 08:57:21 -04:00
c69eda2d6a
[DOCS] EQL: Fix whitespace in `stringContains` docs
2020-04-27 15:52:16 -04:00
cde5fc1ac5
[DOCS] EQL: Document `stringContains` function ( #54968 )
2020-04-24 14:53:29 -04:00
d22240443c
[DOCS] EQL: Document `cidrMatch` function ( #54216 )
2020-04-24 13:34:14 -04:00
881b214619
[DOCS] EQL: Document `indexOf` function ( #55071 )
2020-04-15 11:28:33 -04:00
9bb621be9d
[DOCS] Use consistent line breaks in EQL function docs
2020-04-14 10:15:49 -04:00
28ff719787
[DOCS] EQL: Document `string` function ( #55086 )
2020-04-13 11:23:01 -04:00
fa138ed1e5
[DOCS] EQL: Reword field support for EQL functions ( #55074 )
...
Changes boilerplate sentence of "If using a field as the argument, this
parameter only supports..." to "...this parameter supports only...".
The latter is a bit more clear and readable.
2020-04-10 15:31:20 -04:00
33dc417bd0
[DOCS] EQL: Document `wildcard` function ( #54086 )
2020-04-10 09:17:41 -04:00
7aef7b3ebc
[DOCS] EQL: Document `between` function ( #54950 )
2020-04-08 13:30:50 -04:00
7738ed40ff
[DOCS] EQL: Document `length` function ( #54225 )
2020-04-01 11:17:14 -04:00
e86e148ee4
[DOCS] EQL: Document `endsWith` function ( #54521 )
2020-04-01 10:13:47 -04:00
d614b7f358
[DOCS] EQL: Document `startsWith` function ( #54518 )
2020-04-01 09:15:53 -04:00
f91d8ee3e7
[DOCS] EQL: Document `substring` function ( #53867 )
...
Adds documentation for the EQL `substring` function.
Supporting changes:
* Creates a new "EQL function reference" page
* Updates the title of the "EQL syntax reference" page for consistency
* Adds a brief "Functions" section to the EQL syntax docs
* Updates EQL limitations docs to state that only array functions are
unsupported
2020-03-25 12:07:20 -04:00
James Rodewig