James Rodewig
f56a0f4b66
[DOCS] Remove testenv annotations from doc snippet tests ( #80023 )
...
Removes `testenv` annotations and related code. These annotations originally let you skip x-pack snippet tests in the docs. However, that's no longer possible.
Relates to #79309 , #31619
2021-11-05 18:38:50 -04:00
James Rodewig
975ae227fc
[DOCS] Fix typo in modulo example
2021-06-03 08:21:29 -04:00
James Rodewig
f8d2578ede
[DOCS] EQL: Remove wildcard function ( #72121 )
2021-04-22 15:49:07 -04:00
James Rodewig
693807a6d3
[DOCS] Fix double spaces ( #71082 )
2021-03-31 09:57:47 -04:00
James Rodewig
ab3f8f5067
[DOCS] EQL: Add case-insensitive ~ operator ( #68217 )
...
Documents the case-insensitive `~` operator for `in` and string functions.
Relates to #67869 and #68176
2021-01-29 13:50:57 -05:00
James Rodewig
9b3bb56179
[DOCS] EQL: Move to GA ( #65955 )
2020-12-09 08:48:23 -05:00
James Rodewig
2044caa667
[DOCS] EQL: Document ? wildcard ( #65698 )
2020-12-03 12:14:38 -05:00
James Rodewig
ac1dbb7ffd
[DOCS] EQL: Remove outdated wildcard ref ( #65684 )
2020-12-01 11:30:17 -05:00
James Rodewig
1ea83359bb
[DOCS] Fix case for 'Boolean' ( #64299 )
2020-10-29 09:04:43 -04:00
James Rodewig
c6a13d1cee
[DOCS] EQL: Remove match fn ( #63271 )
2020-10-14 09:57:29 -04:00
James Rodewig
8527183f91
[DOCS] EQL: Remove Endgame EQL refs ( #63636 )
2020-10-14 08:34:11 -04:00
James Rodewig
04c8ad3ced
[DOCS] EQL: Move to beta ( #63284 )
2020-10-12 08:55:16 -04:00
James Rodewig
0aa0811aba
[DOCS] Make EQL case-sensitive by default ( #63270 )
2020-10-05 15:29:48 -04:00
James Rodewig
09547886b0
[DOCS] EQL: Update keyword family field types ( #62254 )
...
Updates several keyword/constant keyword references to use any field type in the
keyword family.
2020-09-14 09:35:23 -04:00
James Rodewig
f881a695e1
[DOCS] Add redirects for wildcard and constant keyword ( #61815 )
2020-09-01 15:32:35 -04:00
James Rodewig
f79d70225b
[DOCS] Remove dupe EQl fn/pipe TOC
2020-08-26 12:44:51 -04:00
James Rodewig
a7d4e8b148
[DOCS] Remove collapsible sections in EQL fn docs ( #61498 )
2020-08-24 14:19:29 -04:00
James Rodewig
a94e5cb7c4
[DOCS] Replace Wikipedia links with attribute ( #61171 )
2020-08-17 09:44:24 -04:00
James Rodewig
747e61508a
[DOCS] EQL: Prepare docs for release ( #59259 )
...
Changes:
* Swaps the `dev` admonitions for `experimental` admonitions
* Removes `ifdef` statements preventing the docs from appearing in
released branches
2020-07-13 08:40:38 -04:00
James Rodewig
2be9db01c8
[DOCS] Replace datatype with data type ( #58972 )
2020-07-07 13:52:10 -04:00
James Rodewig
cc3bd3974f
[DOCS] EQL: Document head and tail pipes ( #58673 )
2020-06-30 08:35:37 -04:00
James Rodewig
982f168fd8
[DOCS] EQL: Add dev admonition to EQL pages ( #57531 )
...
Adds the `dev` admonition to EQL features, which are in development
under a feature flag.
2020-06-02 10:47:53 -04:00
James Rodewig
7c679614cd
[DOCS] EQL: Align comments in between fn examples
2020-05-15 09:20:27 -04:00
James Rodewig
aa6c4928e8
[DOCS] EQL: Remove references to arrays/multi-value fields ( #56772 )
2020-05-15 09:08:02 -04:00
James Rodewig
949a2927ed
[DOCS] EQL: Document number function ( #56770 )
...
Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2020-05-14 15:22:04 -04:00
James Rodewig
883bb29152
[DOCS] EQL: Document math functions ( #55810 )
...
Documents the following EQL functions:
* `add`
* `divide`
* `module`
* `multiply`
* `subtract`
2020-05-07 08:53:08 -04:00
James Rodewig
c7ac7e005c
[DOCS] EQL: Document concat function ( #56239 )
...
Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2020-05-05 16:41:59 -04:00
James Rodewig
7156f40d46
[DOCS] EQL: Document match function ( #56134 )
2020-05-05 11:48:40 -04:00
James Rodewig
a7729c8e31
[DOCS] EQL: Remove case sensitivity from function docs ( #55063 )
...
Per #54411 , we plan to handle case sensitivity via a parameter for the
EQL search API (with the possible exception of the `between` function).
This removes references and examples related to case sensitivity from
the EQL functions docs.
2020-05-05 09:25:55 -04:00
James Rodewig
6c26c4b768
[DOCS] EQL: Correct cidrMatch function heading ( #55935 )
2020-04-29 10:01:20 -04:00
James Rodewig
8918eefa9e
[DOCS] Update attribute for multi arg footnotes ( #55860 )
2020-04-29 08:57:21 -04:00
James Rodewig
c69eda2d6a
[DOCS] EQL: Fix whitespace in stringContains docs
2020-04-27 15:52:16 -04:00
James Rodewig
cde5fc1ac5
[DOCS] EQL: Document stringContains function ( #54968 )
2020-04-24 14:53:29 -04:00
James Rodewig
d22240443c
[DOCS] EQL: Document cidrMatch function ( #54216 )
2020-04-24 13:34:14 -04:00
James Rodewig
881b214619
[DOCS] EQL: Document indexOf function ( #55071 )
2020-04-15 11:28:33 -04:00
James Rodewig
9bb621be9d
[DOCS] Use consistent line breaks in EQL function docs
2020-04-14 10:15:49 -04:00
James Rodewig
28ff719787
[DOCS] EQL: Document string function ( #55086 )
2020-04-13 11:23:01 -04:00
James Rodewig
fa138ed1e5
[DOCS] EQL: Reword field support for EQL functions ( #55074 )
...
Changes boilerplate sentence of "If using a field as the argument, this
parameter only supports..." to "...this parameter supports only...".
The latter is a bit more clear and readable.
2020-04-10 15:31:20 -04:00
James Rodewig
33dc417bd0
[DOCS] EQL: Document wildcard function ( #54086 )
2020-04-10 09:17:41 -04:00
James Rodewig
7aef7b3ebc
[DOCS] EQL: Document between function ( #54950 )
2020-04-08 13:30:50 -04:00
James Rodewig
7738ed40ff
[DOCS] EQL: Document length function ( #54225 )
2020-04-01 11:17:14 -04:00
James Rodewig
e86e148ee4
[DOCS] EQL: Document endsWith function ( #54521 )
2020-04-01 10:13:47 -04:00
James Rodewig
d614b7f358
[DOCS] EQL: Document startsWith function ( #54518 )
2020-04-01 09:15:53 -04:00
James Rodewig
f91d8ee3e7
[DOCS] EQL: Document substring function ( #53867 )
...
Adds documentation for the EQL `substring` function.
Supporting changes:
* Creates a new "EQL function reference" page
* Updates the title of the "EQL syntax reference" page for consistency
* Adds a brief "Functions" section to the EQL syntax docs
* Updates EQL limitations docs to state that only array functions are
unsupported
2020-03-25 12:07:20 -04:00
