Explorar o código

[DOCS] EQL: Remove case sensitivity from function docs (#55063)

Per #54411, we plan to handle case sensitivity via a parameter for the
EQL search API (with the possible exception of the `between` function).

This removes references and examples related to case sensitivity from
the EQL functions docs.
James Rodewig %!s(int64=5) %!d(string=hai) anos
pai
achega
a7729c8e31
Modificáronse 1 ficheiros con 2 adicións e 6 borrados
  1. 2 6
      docs/reference/eql/functions.asciidoc

+ 2 - 6
docs/reference/eql/functions.asciidoc

@@ -183,8 +183,7 @@ CIDR block you wish to search. If `null`, the function returns `null`.
 [[eql-fn-endswith]]
 === `endsWith`
 
-Returns `true` if a source string ends with a provided substring. Matching is
-case insensitive.
+Returns `true` if a source string ends with a provided substring.
 
 [%collapsible]
 ====
@@ -192,7 +191,6 @@ case insensitive.
 [source,eql]
 ----
 endsWith("regsvr32.exe", ".exe")          // returns true
-endsWith("regsvr32.exe", ".EXE")          // returns true
 endsWith("regsvr32.exe", ".dll")          // returns false
 endsWith("", "")                          // returns true
 
@@ -420,8 +418,7 @@ field datatypes:
 [[eql-fn-startswith]]
 === `startsWith`
 
-Returns `true` if a source string begins with a provided substring. Matching is
-case insensitive.
+Returns `true` if a source string begins with a provided substring.
 
 [%collapsible]
 ====
@@ -429,7 +426,6 @@ case insensitive.
 [source,eql]
 ----
 startsWith("regsvr32.exe", "regsvr32")  // returns true
-startsWith("regsvr32.exe", "RegSvr32")  // returns true
 startsWith("regsvr32.exe", "explorer")  // returns false
 startsWith("", "")                      // returns true