Commands

PPL supports most common SQL functions, including relevance search, but also introduces several more functions, called commands, which are available in PPL only.

Related documentation

• PPL syntax
• ad
• addcoltotals
• addtotals
• append
• appendcol
• appendpipe
• bin
• chart
• dedup
• describe
• eval
• eventstats
• expand
• explain
• fields
• fillnull
• flatten
• grok
• head
• join
• kmeans
• lookup
• ml
• multisearch
• parse
• patterns
• rare
• regex
• rename
• replace
• reverse
• rex
• search
• show datasources
• sort
• spath
• stats
• streamstats
• subquery
• table
• timechart
• top
• trendline
• where