Piped Processing Language (PPL) is a query language that focuses on processing data in a sequential, step-by-step manner. PPL uses the pipe (
|) operator to combine commands to find and retrieve data. It is the primary language used with observability in OpenSearch and supports multi-data queries.
The following example shows the basic PPL syntax:
search source=<index-name> | <command_1> | <command_2> | ... | <command_n>
See Syntax for specific PPL syntax examples.
PPL filters, transforms, and aggregates data using a series of commands. See Commands for a description and an example of each command.
Using PPL within OpenSearch
Developers can find information in the following resources:
- Piped Processing Language specification
- OpenSearch PPL Reference Manual
- Observability using PPL-based visualizations
- PPL Data Types