elasticsearch-api/lib/elasticsearch/api/actions/eql/search.rb
# Returns results matching a query expressed in Event Query Language (EQL)
#
# @option arguments [String] :index The name of the index to scope the operation
# @option arguments [Time] :wait_for_completion_timeout Specify the time that the request should block waiting for the final response
# @option arguments [Boolean] :keep_on_completion Control whether the response should be stored in the cluster if it completed within the provided [wait_for_completion] time (default: false)
# @option arguments [Time] :keep_alive Update the time interval in which the results (partial or final) for this search will be available
# @option arguments [Hash] :headers Custom HTTP headers
# @option arguments [Hash] :body Eql request body. Use the `query` to limit the query scope. (*Required*)
#
# @see https://www.elastic.co/guide/en/elasticsearch/reference/current/eql-search-api.html
#
Returns results matching a query expressed in Event Query Language (EQL)
Returns results matching a query expressed in Event Query Language ( EQL )
def search(arguments = {})
          raise ArgumentError, "Required argument 'body' missing" unless arguments[:body]
          raise ArgumentError, "Required argument 'index' missing" unless arguments[:index]
          headers = arguments.delete(:headers) || {}
          body = arguments.delete(:body)
          arguments = arguments.clone
          arguments[:index] = UNDERSCORE_ALL if !arguments[:index] && arguments[:type]
          _index = arguments.delete(:index)
          method = Elasticsearch::API::HTTP_POST
          path   = "#{Utils.__listify(_index)}/_eql/search"
          params = Utils.process_params(arguments)
          perform_request(method, path, params, body, headers).body
        end
def search ( arguments = { } ) raise ArgumentError , "Required argument 'body' missing" unless arguments [ :body ] raise ArgumentError , "Required argument 'index' missing" unless arguments [ :index ] headers = arguments . delete ( :headers ) || { } body = arguments . delete ( :body ) arguments = arguments . clone arguments [ :index ] = UNDERSCORE_ALL if ! arguments [ :index ] && arguments [ :type ] _index = arguments . delete ( :index ) method = Elasticsearch :: API :: HTTP_POST path = "#{Utils.__listify(_index)}/_eql/search" params = Utils . process_params ( arguments ) perform_request ( method , path , params , body , headers ) . body end
Returns results matching a query expressed in Event Query Language (EQL)
Returns results matching a query expressed in Event Query Language ( EQL )
arguments
:body Eql request body. Use the `query` to limit the query scope. (*Required*)
: body Eql request body . Use the ` query ` to limit the query scope . ( * Required * )
see
None