Skip to content

Commit

Permalink
[Security Solution][Detection Engine] fixes ES|QL metadata validation…
Browse files Browse the repository at this point in the history
… error text (#188191)

## Summary

Removes deprecated square brackets from **metadata** operator in
validation error text

WAS

```
For example: FROM logs* [metadata _id, _version, _index]

```

AFTER

```
For example: FROM logs* metadata _id, _version, _index
```

Co-authored-by: Ryland Herrick <[email protected]>
  • Loading branch information
vitaliidm and rylnd authored Jul 17, 2024
1 parent 3ae4111 commit 92634f4
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ export const esqlValidationErrorMessage = (message: string) =>
export const ESQL_VALIDATION_MISSING_METADATA_OPERATOR_IN_QUERY_ERROR = i18n.translate(
'xpack.securitySolution.detectionEngine.esqlValidation.missingMetadataOperatorInQueryError',
{
defaultMessage: `Queries that don’t use the STATS...BY function (non-aggregating queries) must include the "metadata _id, _version, _index" operator after the source command. For example: FROM logs* [metadata _id, _version, _index].`,
defaultMessage: `Queries that don’t use the STATS...BY function (non-aggregating queries) must include the "metadata _id, _version, _index" operator after the source command. For example: FROM logs* metadata _id, _version, _index.`,
}
);

Expand Down

0 comments on commit 92634f4

Please sign in to comment.