Topics tagged eql-elastic-query-language

Topic	Replies	Views	Activity
Correct way to get Not Exists or Exists and empty fields Query for multiple level of nested properties Elasticsearch eql-elastic-query-language	1	535	February 22, 2023
How to sum fieds of collapsed results? Elasticsearch eql-elastic-query-language	1	393	February 17, 2023
Calculations inside ES Query Elasticsearch kql-kibana-query-language , eql-elastic-query-language	2	386	February 17, 2023
Could or Should? Kibana kql-kibana-query-language , eql-elastic-query-language	4	430	February 17, 2023
Sequence Independent Correlation with EQL Elasticsearch eql-elastic-query-language	1	335	January 20, 2023
Why do I get empty buckets when I aggregate on nested field? Elasticsearch eql-elastic-query-language	1	310	January 14, 2023
Different Query format for wildcard query and term query Elasticsearch eql-elastic-query-language	3	1125	January 12, 2023
How query_string work underlying Elasticsearch eql-elastic-query-language	2	255	January 5, 2023
Best way to analyze Event Correlation Sequence detections SIEM elastic-stack-alerting , eql-elastic-query-language	6	2300	January 4, 2023
Is Kibana EQL Rule Using Async Search? Elastic Security eql-elastic-query-language	5	652	January 4, 2023
Elasticsearch Elasticsearch eql-elastic-query-language	2	332	January 4, 2023
EQL without pre defined field values SIEM eql-elastic-query-language	2	375	December 26, 2022
EQL match event A only if event B does not occur within maxspan Elasticsearch eql-elastic-query-language	1	329	December 21, 2022
What is the approach for edge_ngram search query to have a correct word slop count? Elasticsearch eql-elastic-query-language	1	369	December 16, 2022
Simple_query_string with first term having a + or - operator Elasticsearch eql-elastic-query-language	1	327	December 13, 2022
Analyze Event Tool - Subgraph Extraction? Elastic Security eql-elastic-query-language	2	459	November 30, 2022
Query nested array for empty and specific value Elasticsearch eql-elastic-query-language	2	2046	November 22, 2022
How to Correlate three events in EQL based on process and parent-process id? Elastic Security eql-elastic-query-language	3	591	November 17, 2022
Is there a way to return true/false if documents exists for the given query? Elasticsearch eql-elastic-query-language	6	833	November 16, 2022
Count in Event Correlation Elastic Security eql-elastic-query-language	2	602	November 15, 2022
EQL with time filter Elasticsearch eql-elastic-query-language	1	263	November 14, 2022
How can match exact string first and then spilt matches ElasticSearch (7.16.2) and Nest (7.16.2) Elasticsearch language-clients , eql-elastic-query-language	1	267	November 12, 2022
Best structure for easy/efficient searching of complex data Elasticsearch kql-kibana-query-language , eql-elastic-query-language	1	362	November 3, 2022
How to get a single count only per document when using nested term aggregation? Elasticsearch eql-elastic-query-language	1	275	November 1, 2022
Combine normal and nested fields with query_string Elasticsearch eql-elastic-query-language	1	594	October 27, 2022
Retrieve documents matching criteria along with missing documentIds Elasticsearch kql-kibana-query-language , eql-elastic-query-language	11	1021	October 23, 2022
Query_string OR condition score explanation Elasticsearch eql-elastic-query-language	1	319	October 21, 2022
EQL: Get only one match (no overlap) Elastic Security eql-elastic-query-language	1	295	October 21, 2022
Deep Hierarchy with Count Elasticsearch eql-elastic-query-language	1	250	October 20, 2022
How to create sla query Elasticsearch eql-elastic-query-language	1	309	October 10, 2022