PPL – Piped Processing Language

    To quickly get up and running with PPL, use Query Workbench in OpenSearch Dashboards. To learn more, see Workbench.

    You can only use read-only commands like search, where, fields, rename, , stats, sort, eval, head, top, and .

    Go to Query Workbench and select PPL.

    Sample Response