Commit History

Author SHA1 Message Date
  James Rodewig 1c3ddf8ff1 [DOCS] EQL: Flatten EQL syntax headings (#65693) 4 years ago
  James Rodewig a18b87ddc1 [DOCS] Flatten EQL syntax headings (#65497) 4 years ago
  James Rodewig b9ee0b3b48 [DOCS] EQL: Add lookup support to `:` operator (#65262) 4 years ago
  James Rodewig ce644909dc [DOCS] EQL: Add wildcard support to `:` operator (#65237) 4 years ago
  James Rodewig b2b676d7d6 [DOCS] Remove italics formatting 5 years ago
  James Rodewig 1c0380dc21 [DOCS] EQL: Fix operator docs (#64286) 5 years ago
  James Rodewig c6a13d1cee [DOCS] EQL: Remove `match` fn (#63271) 5 years ago
  James Rodewig f41de1bdce [DOCS] EQL: Add `:` operator, remove wildcard operator (#63195) 5 years ago
  James Rodewig 8527183f91 [DOCS] EQL: Remove Endgame EQL refs (#63636) 5 years ago
  James Rodewig e0cc841a60 [DOCS] EQL: Document multi-value field support (#63622) 5 years ago
  James Rodewig 04c8ad3ced [DOCS] EQL: Move to beta (#63284) 5 years ago
  James Rodewig 0aa0811aba [DOCS] Make EQL case-sensitive by default (#63270) 5 years ago
  James Rodewig cb9e61fae5 [DOCS] EQL: Update grammary for escaped event categories (#63202) 5 years ago
  James Rodewig daef606de7 [DOCS] EQL: Replace ?"..." with """...""" for raw strings (#63191) 5 years ago
  James Rodewig 1b878c8775 [DOCS] EQL: Reorganize EQL syntax sections (#63179) 5 years ago
  James Rodewig d8cfd569e6 [DOCS] Document escaped backticks for identifiers (#63079) 5 years ago
  James Rodewig 844558069b [DOCS] EQL: Clarify EQL docs (#62961) 5 years ago
  James Rodewig acac14a35f [DOCS] EQL: Note = is not an equality operator 5 years ago
  James Rodewig 6b36be281a [DOCS] EQL: Disallow chained comparisons (#62570) 5 years ago
  James Rodewig 0e1aa14bc8 [DOCS] EQL: Remove support for single quote strings (#62479) 5 years ago
  James Rodewig db52f8485b [DOCS] EQL: Clarify wildcard operator 5 years ago
  James Rodewig 9e325bb810 [DOCS] EQL: Make operator refs consistent 5 years ago
  James Rodewig 7274b42a14 [DOCS] EQL: Move comparison operator defs 5 years ago
  James Rodewig b5fc25cf1f [DOCS] Remove collapsible examples in EQL syntax docs (#62220) 5 years ago
  James Rodewig 21deb3b7ea [DOCS] EQL: Clarify until keyword docs (#61794) 5 years ago
  James Rodewig 904c866060 [DOCS] Fix EQL syntax admon 5 years ago
  James Rodewig dca46c29ff [DOCS] Refactor EQL docs (#60700) 5 years ago
  James Rodewig d250f94374 [DOCS] Fix syntax and wording in EQL docs (#59623) 5 years ago
  James Rodewig 25c6a125c5 [DOCS] EQL: Document `until` keyword support (#59320) 5 years ago
  James Rodewig 747e61508a [DOCS] EQL: Prepare docs for release (#59259) 5 years ago