ES|QL functions and operators
Serverless Stack
ES|QL provides a comprehensive set of functions and operators for working with data. The reference documentation is divided into the following categories:
Aggregate functions
ABSENTStackAVGCOUNTCOUNT_DISTINCTFIRSTStackLASTStackMAXMEDIANMEDIAN_ABSOLUTE_DEVIATIONMINPERCENTILEPRESENTStackSAMPLEST_CENTROID_AGGStack ServerlessST_EXTENT_AGGStack ServerlessSTD_DEVSUMTOPVALUESStack ServerlessWEIGHTED_AVG
Time-series aggregate functions
ABSENT_OVER_TIMEStack ServerlessAVG_OVER_TIMEStack ServerlessCOUNT_OVER_TIMEStack ServerlessCOUNT_DISTINCT_OVER_TIMEStack ServerlessDELTAStack ServerlessFIRST_OVER_TIMEStack ServerlessIDELTAStack ServerlessINCREASEStack ServerlessIRATEStack ServerlessLAST_OVER_TIMEStack ServerlessMAX_OVER_TIMEStack ServerlessMIN_OVER_TIMEStack ServerlessPRESENT_OVER_TIMEStack ServerlessRATEStack ServerlessSUM_OVER_TIMEStack Serverless
Grouping functions
Date and time functions
IP functions
Math functions
Search functions
Spatial functions
ST_DISTANCEST_INTERSECTSST_DISJOINTST_CONTAINSST_WITHINST_XST_YST_ENVELOPEStack ServerlessST_GEOTILEStack ServerlessST_GEOHEXStack ServerlessST_GEOHASHStack Serverless
String functions
Type conversion functions
TO_BOOLEANTO_CARTESIANPOINTTO_CARTESIANSHAPETO_DATEPERIODTO_DATETIMETO_DATE_NANOSTO_DEGREESTO_DOUBLETO_GEOHASHStack ServerlessTO_GEOHEXStack ServerlessTO_GEOPOINTTO_GEOSHAPETO_GEOTILEStack ServerlessTO_INTEGERTO_IPTO_LONGTO_RADIANSTO_STRINGTO_TIMEDURATIONTO_UNSIGNED_LONGStack ServerlessTO_VERSION
Dense vector functions
KNNStack ServerlessTEXT_EMBEDDINGStack Serverless