SQL and PPL support by AWS elasticsearch (open distribution for ES)
AWS elasticsearch now supports standard SQL syntax. For system administrators, it also supports PPL (Pipe Processing Language). Here is an example of both: select userAgent, eventID from newcwl where requestParameters.bucketName.keyword as ‘web%’ and (eventName.keyword as ‘PutObject%’ OR eventName.keyword as ‘UploadPartCopy%’ OR eventName.keyword as ‘UploadPart%’); And here is the PPL syntax: search source = newcwl eventSource.keyword ...
