diff --git a/docs/reference/data-streams/lifecycle/index.asciidoc b/docs/reference/data-streams/lifecycle/index.asciidoc index 3effe1fc65dfc..16ccf2ef82391 100644 --- a/docs/reference/data-streams/lifecycle/index.asciidoc +++ b/docs/reference/data-streams/lifecycle/index.asciidoc @@ -2,7 +2,7 @@ [[data-stream-lifecycle]] == Data stream lifecycle -A data stream lifecycle is the built-in mechanism <> use to manage their <>. It enables you to easily +A data stream lifecycle is the built-in mechanism data streams use to manage their lifecycle. It enables you to easily automate the management of your data streams according to your retention requirements. For example, you could configure the lifecycle to: diff --git a/docs/reference/data-streams/lifecycle/tutorial-manage-existing-data-stream.asciidoc b/docs/reference/data-streams/lifecycle/tutorial-manage-existing-data-stream.asciidoc index def3ff1dca3b4..56c26d42d3ffb 100644 --- a/docs/reference/data-streams/lifecycle/tutorial-manage-existing-data-stream.asciidoc +++ b/docs/reference/data-streams/lifecycle/tutorial-manage-existing-data-stream.asciidoc @@ -2,7 +2,7 @@ [[tutorial-manage-existing-data-stream]] === Tutorial: Update existing data stream -To update the <> of an existing <> you do the following actions: +To update the lifecycle of an existing data stream you do the following actions: . <> . <> diff --git a/docs/reference/data-streams/lifecycle/tutorial-manage-new-data-stream.asciidoc b/docs/reference/data-streams/lifecycle/tutorial-manage-new-data-stream.asciidoc index 303df5ab8323b..c34340a096046 100644 --- a/docs/reference/data-streams/lifecycle/tutorial-manage-new-data-stream.asciidoc +++ b/docs/reference/data-streams/lifecycle/tutorial-manage-new-data-stream.asciidoc @@ -2,7 +2,7 @@ [[tutorial-manage-new-data-stream]] === Tutorial: Create a data stream with a lifecycle -To create a <> with a built-in <>, follow these steps: +To create a data stream with a built-in lifecycle, follow these steps: . <> . <> diff --git a/docs/reference/data-streams/lifecycle/tutorial-migrate-data-stream-from-ilm-to-dsl.asciidoc b/docs/reference/data-streams/lifecycle/tutorial-migrate-data-stream-from-ilm-to-dsl.asciidoc index 94bfb0cba9caf..9a657af85497d 100644 --- a/docs/reference/data-streams/lifecycle/tutorial-migrate-data-stream-from-ilm-to-dsl.asciidoc +++ b/docs/reference/data-streams/lifecycle/tutorial-migrate-data-stream-from-ilm-to-dsl.asciidoc @@ -2,8 +2,8 @@ [[tutorial-migrate-data-stream-from-ilm-to-dsl]] === Tutorial: Migrate ILM managed data stream to data stream lifecycle -In this tutorial we'll look at migrating an existing <> from <> to -<>. The existing {ilm-init} managed backing indices will continue +In this tutorial we'll look at migrating an existing data strea from <> to +data stream lifecycle. The existing {ilm-init} managed backing indices will continue to be managed by {ilm-init} until they age out and get deleted by {ilm-init}; however, the new backing indices will be managed by data stream lifecycle. This way, a data stream is gradually migrated away from being managed by {ilm-init} to diff --git a/docs/reference/data-streams/promote-data-stream-api.asciidoc b/docs/reference/data-streams/promote-data-stream-api.asciidoc index 30c348c3fe17e..111c7a2256f8a 100644 --- a/docs/reference/data-streams/promote-data-stream-api.asciidoc +++ b/docs/reference/data-streams/promote-data-stream-api.asciidoc @@ -5,7 +5,7 @@ Promote data stream ++++ -The purpose of the promote <> api is to turn +The purpose of the promote <> API is to turn a data stream that is replicated by CCR into a regular data stream. diff --git a/docs/reference/data-streams/set-up-a-data-stream.asciidoc b/docs/reference/data-streams/set-up-a-data-stream.asciidoc index 5737ba7af4deb..a8cbbeac06077 100644 --- a/docs/reference/data-streams/set-up-a-data-stream.asciidoc +++ b/docs/reference/data-streams/set-up-a-data-stream.asciidoc @@ -2,7 +2,7 @@ [[set-up-a-data-stream]] == Set up a data stream -To set up a <>, follow these steps: +To set up a data stream, follow these steps: . <> . <> diff --git a/docs/reference/data-streams/tsds-reindex.asciidoc b/docs/reference/data-streams/tsds-reindex.asciidoc index 1ad384fb1e763..9d6594db4e779 100644 --- a/docs/reference/data-streams/tsds-reindex.asciidoc +++ b/docs/reference/data-streams/tsds-reindex.asciidoc @@ -9,7 +9,7 @@ [[tsds-reindex-intro]] ==== Introduction -With reindexing, you can copy documents from an old <> to a new one. <> support +With reindexing, you can copy documents from an old <> to a new one. Data streams support reindexing in general, with a few <>. Still, time-series data streams introduce additional challenges due to tight control on the accepted timestamp range for each backing index they contain. Direct use of the reindex API would likely error out due to attempting to insert documents with timestamps that are diff --git a/docs/reference/eql/detect-threats-with-eql.asciidoc b/docs/reference/eql/detect-threats-with-eql.asciidoc index 5f05fc0565a36..c6e129349f9f9 100644 --- a/docs/reference/eql/detect-threats-with-eql.asciidoc +++ b/docs/reference/eql/detect-threats-with-eql.asciidoc @@ -2,7 +2,7 @@ [[eql-ex-threat-detection]] == Example: Detect threats with EQL -This example tutorial shows how you can use <> to detect security threats and +This example tutorial shows how you can use EQL to detect security threats and other suspicious behavior. In the scenario, you're tasked with detecting https://attack.mitre.org/techniques/T1218/010/[regsvr32 misuse] in Windows event logs. diff --git a/docs/reference/esql/esql-across-clusters.asciidoc b/docs/reference/esql/esql-across-clusters.asciidoc index f94b285bd435f..d13b3db1c73ea 100644 --- a/docs/reference/esql/esql-across-clusters.asciidoc +++ b/docs/reference/esql/esql-across-clusters.asciidoc @@ -13,7 +13,7 @@ preview::["{ccs-cap} for {esql} is in technical preview and may be changed or re For {ccs-cap} with {esql} on version 8.16 or later, remote clusters must also be on version 8.16 or later. ==== -With <>, you can execute a single query across multiple clusters. +With {esql}, you can execute a single query across multiple clusters. [discrete] [[esql-ccs-prerequisites]] diff --git a/docs/reference/esql/esql-commands.asciidoc b/docs/reference/esql/esql-commands.asciidoc index 6e7874ef31aba..235113ac1394a 100644 --- a/docs/reference/esql/esql-commands.asciidoc +++ b/docs/reference/esql/esql-commands.asciidoc @@ -9,7 +9,7 @@ // tag::source_commands[] ==== Source commands -An <> source command produces a table, typically with data from {es}. An {esql} query must start with a source command. +An {esql} source command produces a table, typically with data from {es}. An {esql} query must start with a source command. image::images/esql/source-command.svg[A source command producing a table from {es},align="center"] diff --git a/docs/reference/esql/esql-enrich-data.asciidoc b/docs/reference/esql/esql-enrich-data.asciidoc index 78ede690d80dd..c48118d1c367a 100644 --- a/docs/reference/esql/esql-enrich-data.asciidoc +++ b/docs/reference/esql/esql-enrich-data.asciidoc @@ -5,7 +5,7 @@ Data enrichment ++++ -The <> <> processing command combines, at query-time, data from +The {esql} <> processing command combines, at query-time, data from one or more source indexes with field-value combinations found in {es} enrich indexes. diff --git a/docs/reference/esql/esql-functions-operators.asciidoc b/docs/reference/esql/esql-functions-operators.asciidoc index 18c487cc165ca..61f2ac6566d27 100644 --- a/docs/reference/esql/esql-functions-operators.asciidoc +++ b/docs/reference/esql/esql-functions-operators.asciidoc @@ -4,7 +4,7 @@ Functions and operators ++++ -<> provides a comprehensive set of functions and operators for working with data. +{esql} provides a comprehensive set of functions and operators for working with data. The reference documentation is divided into the following categories: [[esql-functions]] diff --git a/docs/reference/esql/esql-get-started.asciidoc b/docs/reference/esql/esql-get-started.asciidoc index 1dbfec4d42f97..b7928898a3bbb 100644 --- a/docs/reference/esql/esql-get-started.asciidoc +++ b/docs/reference/esql/esql-get-started.asciidoc @@ -4,7 +4,7 @@ Getting started ++++ -This guide shows how you can use <> to query and aggregate your data. +This guide shows how you can use {esql} to query and aggregate your data. [TIP] ==== diff --git a/docs/reference/esql/esql-kibana.asciidoc b/docs/reference/esql/esql-kibana.asciidoc index 3e2a656b7d27d..5da8b9323cc20 100644 --- a/docs/reference/esql/esql-kibana.asciidoc +++ b/docs/reference/esql/esql-kibana.asciidoc @@ -5,7 +5,7 @@ Using {esql} in {kib} ++++ -You can use <> in {kib} to query and aggregate your data, create +You can use {esql} in {kib} to query and aggregate your data, create visualizations, and set up alerts. This guide shows you how to use {esql} in Kibana. To follow along with the diff --git a/docs/reference/esql/esql-language.asciidoc b/docs/reference/esql/esql-language.asciidoc index f5cc59f6dec65..a7c0e5e01a867 100644 --- a/docs/reference/esql/esql-language.asciidoc +++ b/docs/reference/esql/esql-language.asciidoc @@ -4,7 +4,7 @@ {esql} reference ++++ -Detailed reference documentation for the <> language: +Detailed reference documentation for the {esql} language: * <> * <> diff --git a/docs/reference/esql/esql-limitations.asciidoc b/docs/reference/esql/esql-limitations.asciidoc index 8b0bd994363ba..8accc7550edbb 100644 --- a/docs/reference/esql/esql-limitations.asciidoc +++ b/docs/reference/esql/esql-limitations.asciidoc @@ -9,7 +9,7 @@ [[esql-max-rows]] === Result set size limit -By default, an <> query returns up to 1000 rows. You can increase the number +By default, an {esql} query returns up to 1000 rows. You can increase the number of rows up to 10,000 using the <> command. include::processing-commands/limit.asciidoc[tag=limitation]