* [DOCS] Document `any` keyword in EQL syntax Adds documentation for the `any` keyword to the EQL syntax docs. Includes: * Definition of an event type and its relationship to the event type field. * Example matching all event types using `any` keyword * Example matching event types beginning with a digit * Example using `any` with `where true` * Remove references to `event_type_field` default * Reuse "Events starting with digits" section * Updates for #53073 |
||
---|---|---|
.. | ||
index.asciidoc | ||
limitations.asciidoc | ||
requirements.asciidoc | ||
search.asciidoc | ||
syntax.asciidoc |