---
title: ES|QL reference
description: Elasticsearch Query Language (ES|QL) is a piped query language for filtering, transforming, and analyzing data. You can author ES|QL queries to find specific...
url: https://www.elastic.co/elastic/docs-builder/docs/3016/reference/query-languages/esql
products:
  - Elasticsearch
applies_to:
  - Elastic Cloud Serverless: Generally available
  - Elastic Stack: Generally available
---

# ES|QL reference
**Elasticsearch Query Language (ES|QL)** is a piped query language for filtering, transforming, and analyzing data.

## What's ES|QL?

You can author ES|QL queries to find specific events, perform statistical analysis, and create visualizations. It supports a wide range of commands, functions, and operators to perform various data operations, such as filter, aggregation, time-series analysis, and more. It initially supported a subset of the features available in Query DSL, but it is rapidly evolving with every Elastic Cloud Serverless and Stack release.
ES|QL is designed to be easy to read and write, making it accessible for users with varying levels of technical expertise. It is particularly useful for data analysts, security professionals, and developers who need to work with large datasets in Elasticsearch.

## How does it work?

ES|QL uses pipes (`|`) to manipulate and transform data in a step-by-step fashion. This approach allows you to compose a series of operations, where the output of one operation becomes the input for the next, enabling complex data transformations and analysis.
Here's a simple example of an ES|QL query:
```esql
FROM sample_data
| SORT @timestamp DESC
| LIMIT 3
```

Note that each line in the query represents a step in the data processing pipeline:
- The `FROM` clause specifies the index or data stream to query
- The `SORT` clause sorts the data by the `@timestamp` field in descending order
- The `LIMIT` clause restricts the output to the top 3 results


### User interfaces

You can interact with ES|QL in two ways:
- **Programmatic access**: Use ES|QL syntax with the Elasticsearch `_query` endpoint.
  - Refer to [Use the ES|QL REST API](https://www.elastic.co/elastic/docs-builder/docs/3016/reference/query-languages/esql/esql-rest)
- **Interactive interfaces**: Work with ES|QL through Elastic user interfaces including Kibana Discover, Dashboards, Dev Tools, and analysis tools in Elastic Security and Observability.
  - Refer to [Using ES|QL in Kibana](https://docs-v3-preview.elastic.dev/elastic/docs-builder/docs/3016/explore-analyze/query-filter/languages/esql-kibana).


## ES|QL circuit breaker settings

The relevant circuit breaker settings can be found in the [Circuit Breakers page](/elastic/docs-builder/docs/3016/reference/elasticsearch/configuration-reference/circuit-breaker-settings#circuit-breakers-page-esql).