Skip to content

Commit 965baad

Browse files
authored
[DOCS] EQL: Update tiebreaker docs for implicit tiebreaker (#72808)
1 parent 1d85cb6 commit 965baad

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

docs/reference/eql/eql.asciidoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -550,8 +550,8 @@ the events in ascending order. {es} orders events with no
550550
tiebreaker value after events with a value.
551551

552552
If you don't specify a tiebreaker field or the events also share the same
553-
tiebreaker value, {es} considers the events concurrent. Concurrent events cannot
554-
be part of the same sequence and may not be returned in a consistent sort order.
553+
tiebreaker value, {es} considers the events concurrent and may
554+
not return them in a consistent sort order.
555555

556556
To specify a tiebreaker field, use the `tiebreaker_field` parameter. If you use
557557
the {ecs-ref}[ECS], we recommend using `event.sequence` as the tiebreaker field.

0 commit comments

Comments
 (0)