add support for EQL queries - Githubissues

jertel / elastalert2

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

https://elastalert2.readthedocs.org

Apache License 2.0

931 stars 287 forks source link

add support for EQL queries #1189

Closed jertel closed 1 year ago

jertel commented 1 year ago

Description

Provides initial support for filters with Event Query Language (EQL) syntax.

Checklist

[x] I have reviewed the contributing guidelines.
[x] I have included unit tests for my changes or additions.
[x] I have successfully run make test-docker with my changes.
[x] I have manually tested all relevant modes of the change in this PR.
[x] I have updated the documentation.
[x] I have updated the changelog.

Questions or Comments

None