Commit History

Author SHA1 Message Date
  James Rodewig 5eb0a9528a [DOCS] EQL: Document `like` and `regex` keywords (#68932) (#69052) 4 years ago
  James Rodewig 293fcd4c41 [DOCS] EQL: Minor doc fixes (#68927) 4 years ago
  James Rodewig babf3eb081 [DOCS] EQL: Remove duplicate case-sensitivity info (#68860) 4 years ago
  James Rodewig ab3f8f5067 [DOCS] EQL: Add case-insensitive `~` operator (#68217) 4 years ago
  James Rodewig 9b3bb56179 [DOCS] EQL: Move to GA (#65955) 4 years ago
  James Rodewig 6a09df8520 [DOCS] EQL: Add diagrams for sequence matching (#65898) 4 years ago
  James Rodewig ef6fb59ec3 [DOCS] EQL: Document how sequence queries handle matches (#65794) 4 years ago
  James Rodewig 2044caa667 [DOCS] EQL: Document ? wildcard (#65698) 4 years ago
  Howard bcea87f3a3 [DOCS] Fix EQL syntax formatting (#65711) 4 years ago
  James Rodewig 1c3ddf8ff1 [DOCS] EQL: Flatten EQL syntax headings (#65693) 4 years ago
  James Rodewig a18b87ddc1 [DOCS] Flatten EQL syntax headings (#65497) 4 years ago
  James Rodewig b9ee0b3b48 [DOCS] EQL: Add lookup support to `:` operator (#65262) 4 years ago
  James Rodewig ce644909dc [DOCS] EQL: Add wildcard support to `:` operator (#65237) 4 years ago
  James Rodewig b2b676d7d6 [DOCS] Remove italics formatting 5 years ago
  James Rodewig 1c0380dc21 [DOCS] EQL: Fix operator docs (#64286) 5 years ago
  James Rodewig c6a13d1cee [DOCS] EQL: Remove `match` fn (#63271) 5 years ago
  James Rodewig f41de1bdce [DOCS] EQL: Add `:` operator, remove wildcard operator (#63195) 5 years ago
  James Rodewig 8527183f91 [DOCS] EQL: Remove Endgame EQL refs (#63636) 5 years ago
  James Rodewig e0cc841a60 [DOCS] EQL: Document multi-value field support (#63622) 5 years ago
  James Rodewig 04c8ad3ced [DOCS] EQL: Move to beta (#63284) 5 years ago
  James Rodewig 0aa0811aba [DOCS] Make EQL case-sensitive by default (#63270) 5 years ago
  James Rodewig cb9e61fae5 [DOCS] EQL: Update grammary for escaped event categories (#63202) 5 years ago
  James Rodewig daef606de7 [DOCS] EQL: Replace ?"..." with """...""" for raw strings (#63191) 5 years ago
  James Rodewig 1b878c8775 [DOCS] EQL: Reorganize EQL syntax sections (#63179) 5 years ago
  James Rodewig d8cfd569e6 [DOCS] Document escaped backticks for identifiers (#63079) 5 years ago
  James Rodewig 844558069b [DOCS] EQL: Clarify EQL docs (#62961) 5 years ago
  James Rodewig acac14a35f [DOCS] EQL: Note = is not an equality operator 5 years ago
  James Rodewig 6b36be281a [DOCS] EQL: Disallow chained comparisons (#62570) 5 years ago
  James Rodewig 0e1aa14bc8 [DOCS] EQL: Remove support for single quote strings (#62479) 5 years ago
  James Rodewig db52f8485b [DOCS] EQL: Clarify wildcard operator 5 years ago