From 268e390c4dcf869aac4c9f45031ac3c637629890 Mon Sep 17 00:00:00 2001 From: Heather Halter Date: Fri, 5 Jul 2024 15:37:10 -0700 Subject: [PATCH 1/4] Update index.md Updated description of PPL. Signed-off-by: Heather Halter --- _search-plugins/sql/ppl/index.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/_search-plugins/sql/ppl/index.md b/_search-plugins/sql/ppl/index.md index 850a540bc4..9b115698b2 100644 --- a/_search-plugins/sql/ppl/index.md +++ b/_search-plugins/sql/ppl/index.md @@ -18,7 +18,9 @@ redirect_from: # PPL -Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is the primary language used with observability in OpenSearch and supports multi-data queries. +Piped Processing Language (PPL) is a query language that is available in OpenSearch, and is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its Unix-like syntax and ability to handle semi-structured data efficiently. PPL provides an alternative to query DSL, which is powerful, yet has a steep learning curve, and SQL, which is best suited for more complex analytical queries. + +With PPL, you can extract insights from OpenSearch with a sequence of commands delimited by pipes (|). PPL supports a comprehensive set of commands including `search`, `where`, `fields`, `rename`, `dedup`, `sort`, `eval`, `head`, `top` and `rare`, as well as functions, operators and expressions. ## PPL syntax From 73a4c47b059627e9e87c9994b380ca1722dbfd82 Mon Sep 17 00:00:00 2001 From: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> Date: Mon, 8 Jul 2024 13:29:14 -0500 Subject: [PATCH 2/4] Update index.md Signed-off-by: Naarcha-AWS <97990722+Naarcha-AWS@users.noreply.github.com> --- _search-plugins/sql/ppl/index.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/_search-plugins/sql/ppl/index.md b/_search-plugins/sql/ppl/index.md index 9b115698b2..58f9f833ad 100644 --- a/_search-plugins/sql/ppl/index.md +++ b/_search-plugins/sql/ppl/index.md @@ -18,9 +18,7 @@ redirect_from: # PPL -Piped Processing Language (PPL) is a query language that is available in OpenSearch, and is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its Unix-like syntax and ability to handle semi-structured data efficiently. PPL provides an alternative to query DSL, which is powerful, yet has a steep learning curve, and SQL, which is best suited for more complex analytical queries. - -With PPL, you can extract insights from OpenSearch with a sequence of commands delimited by pipes (|). PPL supports a comprehensive set of commands including `search`, `where`, `fields`, `rename`, `dedup`, `sort`, `eval`, `head`, `top` and `rare`, as well as functions, operators and expressions. +Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its Unix-like syntax and ability to handle semi-structured data efficiently. ## PPL syntax From 05932d8770112667c7c2861850d5a63a5edba809 Mon Sep 17 00:00:00 2001 From: Heather Halter Date: Wed, 17 Jul 2024 11:07:53 -0700 Subject: [PATCH 3/4] Update search-plugins/sql/ppl/index/ Signed-off-by: Heather Halter --- _search-plugins/sql/ppl/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_search-plugins/sql/ppl/index.md b/_search-plugins/sql/ppl/index.md index 58f9f833ad..7b93ace8df 100644 --- a/_search-plugins/sql/ppl/index.md +++ b/_search-plugins/sql/ppl/index.md @@ -18,7 +18,7 @@ redirect_from: # PPL -Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its Unix-like syntax and ability to handle semi-structured data efficiently. +Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its ability to handle semi-structured data efficiently. ## PPL syntax From 422fb72a4c84f3a526b43e6836bcc53a4c91beef Mon Sep 17 00:00:00 2001 From: Heather Halter Date: Wed, 17 Jul 2024 11:37:05 -0700 Subject: [PATCH 4/4] Update _search-plugins/sql/ppl/index.md Co-authored-by: Nathan Bower Signed-off-by: Heather Halter --- _search-plugins/sql/ppl/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_search-plugins/sql/ppl/index.md b/_search-plugins/sql/ppl/index.md index 7b93ace8df..cf0204b020 100644 --- a/_search-plugins/sql/ppl/index.md +++ b/_search-plugins/sql/ppl/index.md @@ -18,7 +18,7 @@ redirect_from: # PPL -Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is particularly well-suited for analyzing observability data, such as logs, metrics, and traces, due to its ability to handle semi-structured data efficiently. +Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (`|`) operator to combine commands to find and retrieve data. It is particularly well suited for analyzing observability data, such as logs, metrics, and traces, due to its ability to handle semi-structured data efficiently. ## PPL syntax