@@ -125,14 +125,13 @@ the value to the right. Otherwise returns `false`.
125
125
126
126
`==` (equal, case-sensitive)::
127
127
Returns `true` if the values to the left and right of the operator are equal.
128
- Otherwise returns `false`. For strings, matching is case-sensitive. Wildcards
129
- are not supported.
128
+ Otherwise returns `false`. Wildcards are not supported.
130
129
131
130
`:` (equal, case-insensitive)::
132
131
Returns `true` if strings to the left and right of the operator are equal.
133
- Otherwise returns `false`. Matching is case-insensitive and can only be used to
134
- compare strings. Supports <<eql-syntax-wildcards,wildcards>> and
135
- <<eql-syntax-lookup-operators,list lookups>>.
132
+ Otherwise returns `false`. Can only be used to compare strings. Supports
133
+ <<eql-syntax-wildcards,wildcards>> and <<eql-syntax-lookup-operators,list
134
+ lookups>>.
136
135
137
136
[IMPORTANT]
138
137
====
@@ -149,8 +148,7 @@ DSL filter>> that contains a <<query-dsl-match-query,`match`>> query.
149
148
150
149
`!=` (not equal, case-sensitive)::
151
150
Returns `true` if the values to the left and right of the operator are not
152
- equal. Otherwise returns `false`. For strings, matching is case-sensitive.
153
- Wildcards are not supported.
151
+ equal. Otherwise returns `false`. Wildcards are not supported.
154
152
155
153
`>=` (greater than or equal) ::
156
154
Returns `true` if the value to the left of the operator is greater than or equal
@@ -225,15 +223,13 @@ user.name : ("administrator", "system", "network service")
225
223
----
226
224
227
225
`in` (case-sensitive)::
228
- Returns `true` if the value is contained in the provided list. For strings,
229
- matching is case-sensitive.
226
+ Returns `true` if the value is contained in the provided list.
230
227
231
228
`not in` (case-sensitive)::
232
- Returns `true` if the value is not contained in the provided list. For strings,
233
- matching is case-sensitive.
229
+ Returns `true` if the value is not contained in the provided list.
234
230
235
231
`:` (case-insensitive)::
236
- Returns `true` if the value is contained in the provided list. Can only be used
232
+ Returns `true` if the string is contained in the provided list. Can only be used
237
233
to compare strings.
238
234
239
235
[discrete]
0 commit comments