James Rodewig f02b10d68a [DOCS] EQL: Remove multi-value field limitation (#76663) ... Changes: * Removes the limitation for multi-value fields. * Adds a recommendation to avoid complex expressions for Boolean comparisons to the `string` fn. Relates to #76610.		2021-08-19 09:20:48 -04:00
..
delete-async-eql-search-api.asciidoc	[DOCS] Update security prereqs for delete async EQL API (#75091)	2021-07-12 08:49:55 -04:00
detect-threats-with-eql.asciidoc	[DOCS] EQL: Shorten response snippets (#72330)	2021-04-27 16:02:45 -04:00
eql-apis.asciidoc	[DOCS] Move EQL APIs to separate page (#74846)	2021-07-01 13:59:35 -04:00
eql-search-api.asciidoc	EQL: Minimise CCS roundtrips (#76076)	2021-08-18 14:01:43 +02:00
eql.asciidoc	[DOCS] EQL: Fix delete async EQL search snippet (#75093)	2021-07-07 16:49:22 -04:00
functions.asciidoc	[DOCS] Fix typo in modulo example	2021-06-03 08:21:29 -04:00
get-async-eql-search-api.asciidoc	[DOCS] EQL: Add security privileges to EQL search docs (#68017)	2021-01-27 16:25:05 -05:00
get-async-eql-status-api.asciidoc	Introduce eql search status API (#68065)	2021-02-11 09:30:13 -05:00
pipes.asciidoc	[DOCS] EQL: Move to GA (#65955)	2020-12-09 08:48:23 -05:00
syntax.asciidoc	[DOCS] EQL: Remove multi-value field limitation (#76663)	2021-08-19 09:20:48 -04:00