Topics tagged eql-elastic-query-language

Topic	Replies	Views	Activity
Improve elasticsearch aggreation performance Elasticsearch eql-elastic-query-language	0	43	March 24, 2023
Filtering two different nested fields in the same agg Elasticsearch eql-elastic-query-language	0	44	March 21, 2023
Is there a way to get less used/searched logs in Elasticsearch Elasticsearch eql-elastic-query-language	5	77	March 21, 2023
While searching how do I exclude only one object and include other object inside a nested object Elasticsearch eql-elastic-query-language	1	61	March 19, 2023
Get top 10 data for each group Elasticsearch kql-kibana-query-language , eql-elastic-query-language	0	61	March 9, 2023
Simple Query to search within log text (not keyword) Elasticsearch eql-elastic-query-language	3	74	March 6, 2023
Query get documents by giving an array of document ids same order of array Kibana eql-elastic-query-language	1	45	March 9, 2023
Is there document count limitation for aggregations? Elasticsearch eql-elastic-query-language	3	57	March 9, 2023
Query multiple conditions of an array property Elasticsearch eql-elastic-query-language	1	87	March 8, 2023
Access global document count from inside bucket script Elasticsearch kql-kibana-query-language , eql-elastic-query-language	1	70	February 23, 2023
Correct way to get Not Exists or Exists and empty fields Query for multiple level of nested properties Elasticsearch eql-elastic-query-language	1	74	February 22, 2023
How to sum fieds of collapsed results? Elasticsearch eql-elastic-query-language	1	67	February 17, 2023
Calculations inside ES Query Elasticsearch kql-kibana-query-language , eql-elastic-query-language	2	86	February 17, 2023
Could or Should? Kibana kql-kibana-query-language , eql-elastic-query-language	4	145	February 17, 2023
Sequence Independent Correlation with EQL Elasticsearch eql-elastic-query-language	1	77	January 20, 2023
Why do I get empty buckets when I aggregate on nested field? Elasticsearch eql-elastic-query-language	1	67	January 14, 2023
Different Query format for wildcard query and term query Elasticsearch eql-elastic-query-language	3	84	January 12, 2023
How query_string work underlying Elasticsearch eql-elastic-query-language	2	90	January 5, 2023
Best way to analyze Event Correlation Sequence detections SIEM elastic-stack-alerting , eql-elastic-query-language	6	279	January 4, 2023
Is Kibana EQL Rule Using Async Search? Elastic Security eql-elastic-query-language	5	113	January 4, 2023
Elasticsearch Elasticsearch eql-elastic-query-language	2	85	January 4, 2023
EQL without pre defined field values SIEM eql-elastic-query-language	2	159	December 26, 2022
EQL match event A only if event B does not occur within maxspan Elasticsearch eql-elastic-query-language	1	78	December 21, 2022
What is the approach for edge_ngram search query to have a correct word slop count? Elasticsearch eql-elastic-query-language	1	104	December 16, 2022
Simple_query_string with first term having a + or - operator Elasticsearch eql-elastic-query-language	1	82	December 13, 2022
Analyze Event Tool - Subgraph Extraction? Elastic Security eql-elastic-query-language	2	150	November 30, 2022
Query nested array for empty and specific value Elasticsearch eql-elastic-query-language	2	341	November 22, 2022
How to Correlate three events in EQL based on process and parent-process id? Elastic Security eql-elastic-query-language	3	184	November 17, 2022
Is there a way to return true/false if documents exists for the given query? Elasticsearch eql-elastic-query-language	6	103	November 16, 2022
Count in Event Correlation Elastic Security eql-elastic-query-language	2	169	November 15, 2022