diff --git a/docs/reference/eql/syntax.asciidoc b/docs/reference/eql/syntax.asciidoc index d9f72302063eb..828461cba3a0e 100644 --- a/docs/reference/eql/syntax.asciidoc +++ b/docs/reference/eql/syntax.asciidoc @@ -794,6 +794,15 @@ For a list of supported pipes, see <>. EQL does not support the following features and syntax. +[discrete] +[[eql-uses-fields-parameter]] +==== EQL uses the `fields` parameter + +EQL retrieves field values using the search API's <>. Any limitations on the `fields` parameter also apply to EQL +queries. For example, if `_source` is disabled for any returned fields or at +index level, the values cannot be retrieved. + [discrete] [[eql-compare-fields]] ==== Comparing fields