diff --git a/docs/reference/eql/syntax.asciidoc b/docs/reference/eql/syntax.asciidoc index 66d6e48a5f673..d74ee13d81b5d 100644 --- a/docs/reference/eql/syntax.asciidoc +++ b/docs/reference/eql/syntax.asciidoc @@ -826,6 +826,13 @@ You cannot use EQL to search the values of a <> field or the sub-fields of a `nested` field. However, data streams and indices containing `nested` field mappings are otherwise supported. +[discrete] +[[eql-ccs-support]] +==== {ccs-cap} is not supported + +EQL search APIs do not support <>. + [discrete] [[eql-unsupported-syntax]] ==== Differences from Endgame EQL syntax