elasticsearch/docs/reference/eql
James Rodewig c6334ee4b7
[DOCS] Document `any` keyword in EQL syntax (#52821)
* [DOCS] Document `any` keyword in EQL syntax

Adds documentation for the `any` keyword to the EQL syntax docs.

Includes:

* Definition of an event type and its relationship to the event type
  field.
* Example matching all event types using `any` keyword
* Example matching event types beginning with a digit
* Example using `any` with `where true`

* Remove references to `event_type_field` default

* Reuse "Events starting with digits" section

* Updates for #53073
2020-03-05 04:44:35 -05:00
..
index.asciidoc [DOCS] Add EQL limitations page (#52001) 2020-02-12 08:45:15 -05:00
limitations.asciidoc [DOCS] Add EQL limitations page (#52001) 2020-02-12 08:45:15 -05:00
requirements.asciidoc [DOCS] Update EQL default event category and timestamp values (#53102) 2020-03-04 09:16:27 -05:00
search.asciidoc [DOCS] Update EQL default event category and timestamp values (#53102) 2020-03-04 09:16:27 -05:00
syntax.asciidoc [DOCS] Document `any` keyword in EQL syntax (#52821) 2020-03-05 04:44:35 -05:00