Get a template ID based on ES|QL "where statement" search

Get a template ID based on ES|QL "where statement" search

Usage

getIdsByEsql(rfIndex, where)

Arguments

rfIndex

index name for rawfiles index

esqlWhere

ES|QL WHERE fragment as text

Value

ES-ID of template record in msrawfiles index, empty string for no hits