James Rodewig
|
5eb0a9528a
[DOCS] EQL: Document `like` and `regex` keywords (#68932) (#69052)
|
4 years ago |
James Rodewig
|
293fcd4c41
[DOCS] EQL: Minor doc fixes (#68927)
|
4 years ago |
James Rodewig
|
babf3eb081
[DOCS] EQL: Remove duplicate case-sensitivity info (#68860)
|
4 years ago |
James Rodewig
|
ab3f8f5067
[DOCS] EQL: Add case-insensitive `~` operator (#68217)
|
4 years ago |
James Rodewig
|
9b3bb56179
[DOCS] EQL: Move to GA (#65955)
|
4 years ago |
James Rodewig
|
6a09df8520
[DOCS] EQL: Add diagrams for sequence matching (#65898)
|
4 years ago |
James Rodewig
|
ef6fb59ec3
[DOCS] EQL: Document how sequence queries handle matches (#65794)
|
4 years ago |
James Rodewig
|
2044caa667
[DOCS] EQL: Document ? wildcard (#65698)
|
4 years ago |
Howard
|
bcea87f3a3
[DOCS] Fix EQL syntax formatting (#65711)
|
4 years ago |
James Rodewig
|
1c3ddf8ff1
[DOCS] EQL: Flatten EQL syntax headings (#65693)
|
4 years ago |
James Rodewig
|
a18b87ddc1
[DOCS] Flatten EQL syntax headings (#65497)
|
4 years ago |
James Rodewig
|
b9ee0b3b48
[DOCS] EQL: Add lookup support to `:` operator (#65262)
|
4 years ago |
James Rodewig
|
ce644909dc
[DOCS] EQL: Add wildcard support to `:` operator (#65237)
|
4 years ago |
James Rodewig
|
b2b676d7d6
[DOCS] Remove italics formatting
|
5 years ago |
James Rodewig
|
1c0380dc21
[DOCS] EQL: Fix operator docs (#64286)
|
5 years ago |
James Rodewig
|
c6a13d1cee
[DOCS] EQL: Remove `match` fn (#63271)
|
5 years ago |
James Rodewig
|
f41de1bdce
[DOCS] EQL: Add `:` operator, remove wildcard operator (#63195)
|
5 years ago |
James Rodewig
|
8527183f91
[DOCS] EQL: Remove Endgame EQL refs (#63636)
|
5 years ago |
James Rodewig
|
e0cc841a60
[DOCS] EQL: Document multi-value field support (#63622)
|
5 years ago |
James Rodewig
|
04c8ad3ced
[DOCS] EQL: Move to beta (#63284)
|
5 years ago |
James Rodewig
|
0aa0811aba
[DOCS] Make EQL case-sensitive by default (#63270)
|
5 years ago |
James Rodewig
|
cb9e61fae5
[DOCS] EQL: Update grammary for escaped event categories (#63202)
|
5 years ago |
James Rodewig
|
daef606de7
[DOCS] EQL: Replace ?"..." with """...""" for raw strings (#63191)
|
5 years ago |
James Rodewig
|
1b878c8775
[DOCS] EQL: Reorganize EQL syntax sections (#63179)
|
5 years ago |
James Rodewig
|
d8cfd569e6
[DOCS] Document escaped backticks for identifiers (#63079)
|
5 years ago |
James Rodewig
|
844558069b
[DOCS] EQL: Clarify EQL docs (#62961)
|
5 years ago |
James Rodewig
|
acac14a35f
[DOCS] EQL: Note = is not an equality operator
|
5 years ago |
James Rodewig
|
6b36be281a
[DOCS] EQL: Disallow chained comparisons (#62570)
|
5 years ago |
James Rodewig
|
0e1aa14bc8
[DOCS] EQL: Remove support for single quote strings (#62479)
|
5 years ago |
James Rodewig
|
db52f8485b
[DOCS] EQL: Clarify wildcard operator
|
5 years ago |