ES|QL functions and operators
Serverless Stack
ES|QL provides a comprehensive set of functions and operators for working with data. The reference documentation is divided into the following categories:
Aggregate functions
-
Stack
Serverless
ABSENT AVGCOUNTCOUNT_DISTINCT-
Stack
Serverless
FIRST -
Stack
Serverless
LAST MAXMEDIANMEDIAN_ABSOLUTE_DEVIATIONMINPERCENTILE-
Stack
Serverless
PRESENT SAMPLE-
Stack
Serverless
ST_CENTROID_AGG -
Stack
Serverless
ST_EXTENT_AGG STD_DEVSUMTOP-
Stack
Serverless
VALUES WEIGHTED_AVG
Time-series aggregate functions
-
Stack
Serverless
ABSENT_OVER_TIME -
Stack
Serverless
AVG_OVER_TIME -
Stack
Serverless
COUNT_OVER_TIME -
Stack
Serverless
COUNT_DISTINCT_OVER_TIME -
Stack
Serverless
FIRST_OVER_TIME -
Stack
Serverless
LAST_OVER_TIME -
Stack
Serverless
MAX_OVER_TIME -
Stack
Serverless
MIN_OVER_TIME -
Stack
Serverless
PRESENT_OVER_TIME -
Stack
Serverless
RATE -
Stack
Serverless
SUM_OVER_TIME
Grouping functions
Date and time functions
IP functions
Math functions
Search functions
Spatial functions
ST_DISTANCEST_INTERSECTSST_DISJOINTST_CONTAINSST_WITHINST_XST_Y-
Stack
Serverless
ST_ENVELOPE -
Stack
Serverless
ST_GEOTILE -
Stack
Serverless
ST_GEOHEX -
Stack
Serverless
ST_GEOHASH
String functions
Type conversion functions
TO_BOOLEANTO_CARTESIANPOINTTO_CARTESIANSHAPETO_DATEPERIODTO_DATETIMETO_DATE_NANOSTO_DEGREESTO_DOUBLE-
Stack
Serverless
TO_GEOHASH -
Stack
Serverless
TO_GEOHEX TO_GEOPOINTTO_GEOSHAPE-
Stack
Serverless
TO_GEOTILE TO_INTEGERTO_IPTO_LONGTO_RADIANSTO_STRINGTO_TIMEDURATION-
Stack
Serverless
TO_UNSIGNED_LONG TO_VERSION
Dense vector functions
-
Stack
Serverless
KNN -
Stack
Serverless
TEXT_EMBEDDING