What's Changed
- Fix EQL connect test fixture for Elasticsearch 9 in
test (ubuntu-latest, 3.13)by @thomaspatzke with @Copilot in #208 - Use caseless multi-fields for process executable and name fields in ECS pipelines by @thomaspatzke with @Copilot in #204
- Build(deps): Bump pysigma from 1.3.3 to 1.4.0 by @dependabot[bot] in #210
- Implement EQL Correlations by @Mat0vu in #121
- Enable backslash escaping in EQL regex patterns for JSON compatibility by @thomaspatzke with @Copilot in #214
- chore: version bump by @andurin in #215
- fix(lucene): phrase-quote multi-word plain values in query_string by @Romil2112 in #213
New Contributors
- @Romil2112 made their first contribution in #213
Full Changelog: v2.1.0...v2.1.1