diff --git a/docs/detections/rules-ui-create.asciidoc b/docs/detections/rules-ui-create.asciidoc index 680b8221c2..3e85e24dd6 100644 --- a/docs/detections/rules-ui-create.asciidoc +++ b/docs/detections/rules-ui-create.asciidoc @@ -271,6 +271,7 @@ then write a query. There are two types of ES|QL queries: .. **Aggregating query**: This is a query that uses the `STATS...BY` grouping commands. Query results cannot be matched with a particular document in Elasticsearch. For example: + +<<<<<<< HEAD [esql] ----- FROM logs* @@ -291,6 +292,10 @@ FROM logs* [metadata _id, _index, _version] + Ensure, metadata properties `id`, `_index`, `_version` are carried over through pipe operators. +======= +TIP: Click the help icon (image:images/esql-ref-button.png[Click the ES|QL help icon,20,20]) to open the in-product reference documentation for all {esql} commands and functions. ++ +>>>>>>> ea67a3cf (Remove note that's in progress (#4197)) . Click *Continue* to <>. [float]