Query Elasticsearch log data with familiar SQL statements instead of writing deeply nested JSON query objects.
Run GROUP BY aggregations and ORDER BY sorting on Elasticsearch indices using SQL syntax you already know.
Use the built-in browser interface to explore Elasticsearch data interactively without writing any code.
Project is deprecated, use the official Elasticsearch x-pack SQL or AWS OpenDistro SQL for new projects.
Elasticsearch is a system for storing and searching large amounts of data very quickly. It is popular for log analysis, product search, and similar tasks. However, its native query language is expressed as deeply nested JSON documents, which can be cumbersome to write. This project is an Elasticsearch plugin that lets you query it using SQL instead, the same kind of query language that spreadsheet users and database administrators already know. Once installed as a plugin, the server accepts SQL statements sent as HTTP requests and translates them into Elasticsearch's native query format internally. You can write queries with WHERE conditions, GROUP BY aggregations, ORDER BY sorting, and JOIN operations across indices. The plugin also includes a simple web frontend that lets you type SQL queries in a browser and see results without writing any code. It is important to know upfront that this project is deprecated. The README states clearly that active development has stopped and recommends switching to the official SQL feature built into Elasticsearch (called x-pack SQL, included in modern Elasticsearch versions) or the OpenDistro for Elasticsearch SQL plugin maintained by AWS. Both of those replacements are actively maintained and cover the same functionality. The repository has maintained compatibility branches for a very long range of Elasticsearch versions, from version 1.x through version 9.x, which explains the long version table in the README. Each Elasticsearch major or minor version requires a matching plugin version, so you choose the branch that corresponds to your Elasticsearch installation. For anyone already using this plugin in a legacy system, the code remains available and the build still passes for recent Elasticsearch versions, but for new projects the official alternatives are the better choice. The full README is longer than what was shown.
← nlpchina on gitmyhub — every repo by this author, as a profile.
Verify against the repo before relying on details.