https://github.com/elastic/elasticsearch/pull/79677 adds a new optional fields syntax to EQL. It also enforces some restrictions on when you can pass a `null` value as a join key. This issue covers related documentation changes.
#79677 adds a new optional fields syntax to EQL. It also enforces some restrictions on when you can pass a
nullvalue as a join key.This issue covers related documentation changes.