Skip to content

Commit c7d59f0

Browse files
authored
[DOCS] EQL: Note EQL uses fields parameter (elastic#74194)
1 parent 74ea216 commit c7d59f0

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

docs/reference/eql/syntax.asciidoc

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -794,6 +794,15 @@ For a list of supported pipes, see <<eql-pipe-ref>>.
794794

795795
EQL does not support the following features and syntax.
796796

797+
[discrete]
798+
[[eql-uses-fields-parameter]]
799+
==== EQL uses the `fields` parameter
800+
801+
EQL retrieves field values using the search API's <<search-fields-param,`fields`
802+
parameter>>. Any limitations on the `fields` parameter also apply to EQL
803+
queries. For example, if `_source` is disabled for any returned fields or at
804+
index level, the values cannot be retrieved.
805+
797806
[discrete]
798807
[[eql-compare-fields]]
799808
==== Comparing fields

0 commit comments

Comments
 (0)