-
Notifications
You must be signed in to change notification settings - Fork 206
Closed
Labels
Effort: SmallIssues that can be resolved quicklyIssues that can be resolved quicklyFeature: ES|QLFeature: RulesPriority: HighIssues that are time-sensitive and/or are of high customer importanceIssues that are time-sensitive and/or are of high customer importanceTeam: Detection Enginev8.14.0
Description
Description
ES|QL metadata operator has changed its syntax: https://www.elastic.co/guide/en/elasticsearch/reference/current/esql-metadata-fields.html
from
FROM index [METADATA _index, _id]
to
FROM index METADATA _index, _id
All metadata operator mentions with square brackets need to be updated
Background & resources
-
Issues/metas:
-
Point of contact:
@vitaliidm -
Test environments:
Which documentation set does this change impact?
ESS only
ESS release
8.14
Serverless release
n/a
Feature differences
ES|QL not yet available on Serverless
API docs impact
All ES|QL metadata operator mentions with square brackets need to be updated
Prerequisites, privileges, feature flags
No response
Metadata
Metadata
Assignees
Labels
Effort: SmallIssues that can be resolved quicklyIssues that can be resolved quicklyFeature: ES|QLFeature: RulesPriority: HighIssues that are time-sensitive and/or are of high customer importanceIssues that are time-sensitive and/or are of high customer importanceTeam: Detection Enginev8.14.0