Commit Graph

206 Commits

Author SHA1 Message Date
Aleksandr Maus d49a9aac53
EQL: Change request parameter query to filter and rule to query (#52971)
* EQL: Change request parameter query to filter and rule to query

Related to https://github.com/elastic/elasticsearch/issues/52911

* Adjust doc test
2020-03-02 08:03:39 -05:00
Costin Leau 3e039282bf
EQL: Hook engine to Elasticsearch (#52828)
Add query execution and return actual results returned from
Elasticsearch inside the tests
2020-02-27 11:16:26 +02:00
James Rodewig 6b62ec53db
[DOCS] Add EQL limitations page (#52001)
Documents limitations for EQL in Elasticsearch.
2020-02-12 08:45:15 -05:00
James Rodewig be8ae972bc
[DOCS] Add basic EQL search tutorial docs (#51574)
I plan to add additional sections to this page with future PRs:

* Specify timestamp and event type fields
* Specify a join key field
* Filter using query DSL
* Paginate a large response

See #51057.
2020-02-12 08:40:10 -05:00
James Rodewig 99c1ee88e8
[DOCS] Add EQL syntax page (#51821)
Adds documentation for basic EQL syntax.

Joins, sequences, and other syntax to be added as its supported
in future development.

Co-Authored-By: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2020-02-05 08:12:09 -05:00
James Rodewig 0a31b67cc5
[DOCS] Add top-level EQL docs page. Adds EQL requirements page. (#51334)
* Creates a top-level page for EQL in the ES reference.
   This page contains a high-level introduction and will include a nav for other EQL docs pages as they're built.

* Creates a requirements page.
  This page outlines the fields needed to use EQL in ES.
2020-01-27 16:03:23 -05:00