When #46523 is merged we will want to modify the EQL execution logic to create a point in time reader at the start of execution and use that same point in time view of the index throughout the execution of the query. This will ensure that the results ae gathered from a consistent view of the index