Fang Xing
SubscribeOne query, three data sources: ES|QL subqueries get FROM, TS and ROW
Elasticsearch Labs

One query, three data sources: ES|QL subqueries get FROM, TS and ROW
Filter application logs by live metric behavior and combine indexed data with inline test values. Your filter lists pull from time-series data on the fly, so nothing is hard-coded.
One ES|QL query instead of two: WHERE IN subquery replaces the copy-paste loop in Elasticsearch
Elasticsearch Labs

One ES|QL query instead of two: WHERE IN subquery replaces the copy-paste loop in Elasticsearch
ES|QL's WHERE clause can filter by another Elasticsearch subquery's results instead of a static ID list you copied by hand, with nested subqueries, NOT IN and compound conditions built in.