-
Notifications
You must be signed in to change notification settings - Fork 25.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[DOCS] EQL: Clarify until keyword docs #61794
Conversation
Matching sequences must end before this event, which is not included the | ||
results. If this event occurs within a sequence, the sequence is not considered | ||
a match. | ||
You can use the `until` keyword to specify an expiration event for a sequence. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is great, thank you @jrodewig!
Pinging @elastic/es-ql (:Query Languages/EQL) |
Pinging @elastic/es-docs (>docs) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks! Super helpful changes.
Thanks @rw-access @dgieselaar! |
Changes:
until
keyword content for clarityuntil
examplePreview
https://elasticsearch_61794.docs-preview.app.elstc.co/guide/en/elasticsearch/reference/master/eql-syntax.html#eql-until-keyword