Skip to content

[Request] Update ES|QL rule type metadata operator syntax #5150

@vitaliidm

Description

@vitaliidm

Description

ES|QL metadata operator has changed its syntax: https://www.elastic.co/guide/en/elasticsearch/reference/current/esql-metadata-fields.html

from

FROM index [METADATA _index, _id]

to

FROM index METADATA _index, _id

All metadata operator mentions with square brackets need to be updated

Background & resources

Which documentation set does this change impact?

ESS only

ESS release

8.14

Serverless release

n/a

Feature differences

ES|QL not yet available on Serverless

API docs impact

All ES|QL metadata operator mentions with square brackets need to be updated

Prerequisites, privileges, feature flags

No response

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions