Describe the bug
EQL already supports multiple EQL expressions. However, when you have errors in an expression that is not the first, the parse will handle the first expression and not alert for errors in the new ones.
To Reproduce
Steps to reproduce the behavior:
Paste 2 EQL expressions, in the REPL or in an eql file, where the second expression has an invalid field.
Expected behavior
Either the whole EQL request code fails or the correct expressions run with a warning for expressions with bugs.
Describe the bug EQL already supports multiple EQL expressions. However, when you have errors in an expression that is not the first, the parse will handle the first expression and not alert for errors in the new ones.
To Reproduce Steps to reproduce the behavior:
eqlfile, where the second expression has an invalid field.Expected behavior Either the whole EQL request code fails or the correct expressions run with a warning for expressions with bugs.
Screenshots