Browse Source

[DOCS] EQL: Remove outdated wildcard ref (#65684)

James Rodewig 4 years ago
parent
commit
ac1dbb7ffd
1 changed files with 0 additions and 4 deletions
  1. 0 4
      docs/reference/eql/functions.asciidoc

+ 0 - 4
docs/reference/eql/functions.asciidoc

@@ -1015,10 +1015,6 @@ expressions. Matching is case-sensitive.
 *Example*
 [source,eql]
 ----
-// The two following expressions are equivalent.
-process.name == "*regsvr32*" or process.name == "*explorer*"
-wildcard(process.name, "*regsvr32*", "*explorer*")
-
 // process.name = "regsvr32.exe"
 wildcard(process.name, "*regsvr32*")                // returns true
 wildcard(process.name, "*regsvr32*", "*explorer*")  // returns true