Skip to content

Commit 61182c6

Browse files
authored
[DOCS] Adds Beats tip to EQL search docs (#53292)
Adds a tip admonition to the basic example in the EQL search docs. This tip lets users know they can set up a Beat to automatically index data in ES, rather than manually indexing using the bulk or index APIs.
1 parent 33d537f commit 61182c6

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

docs/reference/eql/search.asciidoc

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,15 @@ PUT sec_logs/_bulk?refresh
2929
----
3030
// TESTSETUP
3131

32+
[TIP]
33+
====
34+
You also can set up {beats-ref}/getting-started.html[{beats}], such as
35+
{auditbeat-ref}/auditbeat-getting-started.html[{auditbeat}] or
36+
{winlogbeat-ref}/winlogbeat-getting-started.html[{winlogbeat}], to automatically
37+
send and index your event data in {es}. See
38+
{beats-ref}/getting-started.html[Getting started with {beats}].
39+
====
40+
3241
You can now use the EQL search API to search this index using an EQL query.
3342

3443
The following request searches the `sec_logs` index using the EQL query

0 commit comments

Comments
 (0)