Commit History

Author SHA1 Message Date
  James Rodewig b5fc25cf1f [DOCS] Remove collapsible examples in EQL syntax docs (#62220) 5 years ago
  James Rodewig 21deb3b7ea [DOCS] EQL: Clarify until keyword docs (#61794) 5 years ago
  James Rodewig 904c866060 [DOCS] Fix EQL syntax admon 5 years ago
  James Rodewig dca46c29ff [DOCS] Refactor EQL docs (#60700) 5 years ago
  James Rodewig d250f94374 [DOCS] Fix syntax and wording in EQL docs (#59623) 5 years ago
  James Rodewig 25c6a125c5 [DOCS] EQL: Document `until` keyword support (#59320) 5 years ago
  James Rodewig 747e61508a [DOCS] EQL: Prepare docs for release (#59259) 5 years ago
  James Rodewig c5df35eba1 [DOCS] EQL: Document unsupported var comparison (#58941) 5 years ago
  James Rodewig 7c23933ec7 [DOCS] EQL: Document `maxspan` keyword (#58931) 5 years ago
  James Rodewig cc3bd3974f [DOCS] EQL: Document `head` and `tail` pipes (#58673) 5 years ago
  James Rodewig 982f168fd8 [DOCS] EQL: Add `dev` admonition to EQL pages (#57531) 5 years ago
  James Rodewig 15431f2447 [DOCS] EQL: Document sequences (#56721) 5 years ago
  James Rodewig 883bb29152 [DOCS] EQL: Document math functions (#55810) 5 years ago
  James Rodewig b58e95d25c [DOCS] Add admonition for EQL exact matches on text fields (#53402) 5 years ago
  James Rodewig 658a331245 [DOCS] EQL: Add search/index speed tip for functions (#54346) 5 years ago
  James Rodewig f91d8ee3e7 [DOCS] EQL: Document `substring` function (#53867) 5 years ago
  James Rodewig c6334ee4b7 [DOCS] Document `any` keyword in EQL syntax (#52821) 5 years ago
  Aleksandr Maus 82c645e3ef EQL: consistent naming for event type vs event category (#53073) 5 years ago
  James Rodewig 99c1ee88e8 [DOCS] Add EQL syntax page (#51821) 5 years ago