elasticsearch-esql

Execute ES|QL queries against Elasticsearch. ES|QL (Elasticsearch Query Language) is a piped query language for Elasticsearch. It is NOT the same as: ES|QL uses pipes ( | ) to chain commands: FROM index | WHERE condition | STATS aggregation BY field | SORT field | LIMIT n Prerequisite: ES|QL requires _source to be enabled on queried indices. Indices with _source disabled (e.g., "_source": { "enabled": false } ) will cause ES|QL queries to fail. Version Compatibility: ES|QL was introduced in 8.11 (tech preview) and became GA in 8.14. Features like LOOKUP JOIN (8.18+), MATCH (8.17+), and INLINE STATS (9.2+) were added in later versions. On pre-8.18 clusters, use ENRICH as a fallback for LOOKUP JOIN (see generation tips). INLINE STATS and counter-field RATE() have no fallback before 9.2.