Run an ES|QL query
esqlRun ES|QL queries on Elasticsearch to filter, aggregate, and sort data. Returns results with column metadata and row objects.
Instructions
Run an ES|QL (Elasticsearch Query Language) query and return the result as column metadata plus row objects. Good for filtering, STATS aggregations, and sorting expressed as a piped query string, e.g. FROM idx | WHERE status == "open" | STATS count = COUNT(*) BY host | SORT count DESC. Requires Elasticsearch 8.11+.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | The complete ES|QL query string, e.g. `FROM my-index | LIMIT 10` |