浏览代码

[DOCS] EQL: Remove multi-value field limitation (#76663)

Changes:
* Removes the limitation for multi-value fields.
* Adds a recommendation to avoid complex expressions for Boolean comparisons to the `string` fn.

Relates to #76610.
James Rodewig 4 年之前
父节点
当前提交
f02b10d68a
共有 1 个文件被更改,包括 0 次插入8 次删除
  1. 0 8
      docs/reference/eql/syntax.asciidoc

+ 0 - 8
docs/reference/eql/syntax.asciidoc

@@ -819,14 +819,6 @@ EQL searches do not support <<text,`text`>> fields. To a search a `text` field,
 use the EQL search API's <<eql-search-filter-query-dsl,Query DSL `filter`>>
 parameter.
 
-[discrete]
-[[eql-array-fields]]
-==== Array field values are not supported
-
-EQL does not support <<array,array>> field values, also known as
-multi-value fields. EQL searches on array field values may return inconsistent
-results.
-
 [discrete]
 [[eql-nested-fields]]
 ==== EQL search on nested fields