Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Request] [8.11.4 & 8.12][ESS] Document feature flag for the ES|QL Timeline tab #4552

Merged
merged 11 commits into from
Jan 10, 2024
Merged

[Request] [8.11.4 & 8.12][ESS] Document feature flag for the ES|QL Timeline tab #4552

Changes from 9 commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
6e27ab4
First draft
nastasha-solomon Jan 3, 2024
0e36119
Merge branch 'main' into issue-4539-esql-ff
nastasha-solomon Jan 3, 2024
d8bee02
Merge branch 'main' into issue-4539-esql-ff
nastasha-solomon Jan 4, 2024
eb1c33a
Merge branch 'main' into issue-4539-esql-ff
nastasha-solomon Jan 4, 2024
df00610
Small edit
nastasha-solomon Jan 4, 2024
131a7ec
Merge branch 'issue-4539-esql-ff' of github.com:elastic/security-docs…
nastasha-solomon Jan 4, 2024
f539f28
Small edits
nastasha-solomon Jan 4, 2024
09e9037
Update docs/events/timeline-ui-overview.asciidoc
nastasha-solomon Jan 9, 2024
5ffb34c
Merge branch 'main' into issue-4539-esql-ff
nastasha-solomon Jan 9, 2024
c12bbff
Update docs/events/timeline-ui-overview.asciidoc
nastasha-solomon Jan 9, 2024
12c6f55
Update docs/events/timeline-ui-overview.asciidoc
nastasha-solomon Jan 9, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/events/timeline-ui-overview.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -198,6 +198,8 @@ From the *Correlation* tab, you can also do the following:

preview::["Do not use {esql} on production environments. This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features."]

NOTE: The **{esql}** tab is available by default. To hide it, you must edit your {cloud}/ec-manage-kibana-settings.html#ec-manage-kibana-settings[{kib} user settings] and set the `timelineEsqlTabDisabled` feature flag to `true`.
nastasha-solomon marked this conversation as resolved.
Show resolved Hide resolved

The {ref}/esql.html[Elasticsearch Query Language ({esql})] provides a powerful way to filter, transform, and analyze event data stored in {es}. {esql} queries use "pipes" to manipulate and transform data in a step-by-step fashion. This approach allows you to compose a series of operations, where the output of one operation becomes the input for the next, enabling complex data transformations and analysis.

You can use {esql} in Timeline by opening the **{esql}** tab. From there, you can:
Expand Down