Commit History

Author SHA1 Message Date
  James Rodewig 44f3551786 [DOCS] EQL: Use ECS example in EQL syntax docs (#72414) 4 years ago
  James Rodewig fdbea16e15 [DOCS] Move EQL event category section (#70955) 4 years ago
  James Rodewig 321f46e187 [DOCS] EQL: Document Unicode escape sequences (#70694) 4 years ago
  James Rodewig cbfe969634 [DOCS] EQL: Remove unneded words in escape sequence table 4 years ago
  James Rodewig 3ff1a17a79 [DOCS] EQL: Document field existence checks (#69614) 4 years ago
  James Rodewig 8e09c3d7bd [DOCS] EQL: Clarify support for text fields (#69229) 4 years ago
  James Rodewig 13a077bd59 [DOCS] EQL: Update differences from Endgame EQL syntax (#69124) 4 years ago
  James Rodewig 5eb0a9528a [DOCS] EQL: Document `like` and `regex` keywords (#68932) (#69052) 4 years ago
  James Rodewig 293fcd4c41 [DOCS] EQL: Minor doc fixes (#68927) 4 years ago
  James Rodewig babf3eb081 [DOCS] EQL: Remove duplicate case-sensitivity info (#68860) 4 years ago
  James Rodewig ab3f8f5067 [DOCS] EQL: Add case-insensitive `~` operator (#68217) 4 years ago
  James Rodewig 9b3bb56179 [DOCS] EQL: Move to GA (#65955) 4 years ago
  James Rodewig 6a09df8520 [DOCS] EQL: Add diagrams for sequence matching (#65898) 4 years ago
  James Rodewig ef6fb59ec3 [DOCS] EQL: Document how sequence queries handle matches (#65794) 4 years ago
  James Rodewig 2044caa667 [DOCS] EQL: Document ? wildcard (#65698) 4 years ago
  Howard bcea87f3a3 [DOCS] Fix EQL syntax formatting (#65711) 4 years ago
  James Rodewig 1c3ddf8ff1 [DOCS] EQL: Flatten EQL syntax headings (#65693) 4 years ago
  James Rodewig a18b87ddc1 [DOCS] Flatten EQL syntax headings (#65497) 4 years ago
  James Rodewig b9ee0b3b48 [DOCS] EQL: Add lookup support to `:` operator (#65262) 4 years ago
  James Rodewig ce644909dc [DOCS] EQL: Add wildcard support to `:` operator (#65237) 4 years ago
  James Rodewig b2b676d7d6 [DOCS] Remove italics formatting 5 years ago
  James Rodewig 1c0380dc21 [DOCS] EQL: Fix operator docs (#64286) 5 years ago
  James Rodewig c6a13d1cee [DOCS] EQL: Remove `match` fn (#63271) 5 years ago
  James Rodewig f41de1bdce [DOCS] EQL: Add `:` operator, remove wildcard operator (#63195) 5 years ago
  James Rodewig 8527183f91 [DOCS] EQL: Remove Endgame EQL refs (#63636) 5 years ago
  James Rodewig e0cc841a60 [DOCS] EQL: Document multi-value field support (#63622) 5 years ago
  James Rodewig 04c8ad3ced [DOCS] EQL: Move to beta (#63284) 5 years ago
  James Rodewig 0aa0811aba [DOCS] Make EQL case-sensitive by default (#63270) 5 years ago
  James Rodewig cb9e61fae5 [DOCS] EQL: Update grammary for escaped event categories (#63202) 5 years ago
  James Rodewig daef606de7 [DOCS] EQL: Replace ?"..." with """...""" for raw strings (#63191) 5 years ago