Commit History

Author SHA1 Message Date
  James Rodewig 36d308bc23 [DOCS] EQL: Update docs for null tiebreakers (#65078) 4 years ago
  James Rodewig 254807956f [DOCS] EQL: Document result_position param (#65075) 4 years ago
  James Rodewig fb1936bed1 [DOCS] EQL: Fix tiebreaker field docs (#64671) 5 years ago
  James Rodewig 1ea83359bb [DOCS] Fix case for 'Boolean' (#64299) 5 years ago
  James Rodewig 71aaa4ae0a [DOCS] EQL: Update `allow_no_indices` default (#63748) 5 years ago
  James Rodewig 857c2d1cd4 [DOCS] Update `ignore_unavailable` default for EQL search API (#63210) 5 years ago
  James Rodewig 8527183f91 [DOCS] EQL: Remove Endgame EQL refs (#63636) 5 years ago
  James Rodewig 04c8ad3ced [DOCS] EQL: Move to beta (#63284) 5 years ago
  James Rodewig 0aa0811aba [DOCS] Make EQL case-sensitive by default (#63270) 5 years ago
  James Rodewig cb9e61fae5 [DOCS] EQL: Update grammary for escaped event categories (#63202) 5 years ago
  James Rodewig 15d4d9597c [DOCS] EQL: date_nanos timestamp is not supported (#63101) 5 years ago
  Marios Trivyzas ad5ae4d887 EQL: Remove support for `=` for comparisons (#62756) 5 years ago
  James Rodewig 09547886b0 [DOCS] EQL: Update keyword family field types (#62254) 5 years ago
  James Rodewig f881a695e1 [DOCS] Add redirects for wildcard and constant keyword (#61815) 5 years ago
  James Rodewig 35b35148b9 [DOCS] Remove response params for #61428 (#61524) 5 years ago
  Costin Leau 997376fbe6 EQL: Replace SearchHit in response with Event (#61428) 5 years ago
  Andrei Stefan d54957d61f EQL: Return sequence join keys in the original type (#61268) 5 years ago
  James Rodewig a94e5cb7c4 [DOCS] Replace Wikipedia links with attribute (#61171) 5 years ago
  James Rodewig d09a6cfc7c [DOCS] Make EQL example snippets more realistic (#60971) 5 years ago
  James Rodewig dca46c29ff [DOCS] Refactor EQL docs (#60700) 5 years ago
  James Rodewig ae01606785 [DOCS] Replace `twitter` dataset in docs (#60604) 5 years ago
  James Rodewig 441c3a21b1 [DOCS] Update my-index examples (#60132) 5 years ago
  James Rodewig 5be36b41d4 [DOCS] EQL: Update EQL search response format (#59554) 5 years ago
  Costin Leau bccfbcd81f EQL: Improve retrieval of results (#59552) 5 years ago
  James Rodewig 747e61508a [DOCS] EQL: Prepare docs for release (#59259) 5 years ago
  James Rodewig 284ee85efd [DOCS] Add data streams to EQL search docs (#58611) 5 years ago
  Andrei Stefan 6ede6c59ef Remove search_after and implicit_join_key_field (#59232) 5 years ago
  James Rodewig 52bfe9eb9a [DOCS] EQL: Document `size` limit for pipes (#59085) 5 years ago
  James Rodewig f18e136400 [DOCS] Fix xref format in async EQL search docs 5 years ago
  James Rodewig 29da275b0a [DOCS] EQL: Remove fields from EQL search response (#58667) 5 years ago