James Rodewig
|
b5fc25cf1f
[DOCS] Remove collapsible examples in EQL syntax docs (#62220)
|
5 years ago |
James Rodewig
|
21deb3b7ea
[DOCS] EQL: Clarify until keyword docs (#61794)
|
5 years ago |
James Rodewig
|
904c866060
[DOCS] Fix EQL syntax admon
|
5 years ago |
James Rodewig
|
dca46c29ff
[DOCS] Refactor EQL docs (#60700)
|
5 years ago |
James Rodewig
|
d250f94374
[DOCS] Fix syntax and wording in EQL docs (#59623)
|
5 years ago |
James Rodewig
|
25c6a125c5
[DOCS] EQL: Document `until` keyword support (#59320)
|
5 years ago |
James Rodewig
|
747e61508a
[DOCS] EQL: Prepare docs for release (#59259)
|
5 years ago |
James Rodewig
|
c5df35eba1
[DOCS] EQL: Document unsupported var comparison (#58941)
|
5 years ago |
James Rodewig
|
7c23933ec7
[DOCS] EQL: Document `maxspan` keyword (#58931)
|
5 years ago |
James Rodewig
|
cc3bd3974f
[DOCS] EQL: Document `head` and `tail` pipes (#58673)
|
5 years ago |
James Rodewig
|
982f168fd8
[DOCS] EQL: Add `dev` admonition to EQL pages (#57531)
|
5 years ago |
James Rodewig
|
15431f2447
[DOCS] EQL: Document sequences (#56721)
|
5 years ago |
James Rodewig
|
883bb29152
[DOCS] EQL: Document math functions (#55810)
|
5 years ago |
James Rodewig
|
b58e95d25c
[DOCS] Add admonition for EQL exact matches on text fields (#53402)
|
5 years ago |
James Rodewig
|
658a331245
[DOCS] EQL: Add search/index speed tip for functions (#54346)
|
5 years ago |
James Rodewig
|
f91d8ee3e7
[DOCS] EQL: Document `substring` function (#53867)
|
5 years ago |
James Rodewig
|
c6334ee4b7
[DOCS] Document `any` keyword in EQL syntax (#52821)
|
5 years ago |
Aleksandr Maus
|
82c645e3ef
EQL: consistent naming for event type vs event category (#53073)
|
5 years ago |
James Rodewig
|
99c1ee88e8
[DOCS] Add EQL syntax page (#51821)
|
5 years ago |