How to translate my sql query into es-sql?

Elastic Stack Elasticsearch
1

I want to query the data I need
In SQL Server I can query like this

select UniqueAuditRecord from dbo.kibanaLog
group by UniqueAuditRecord having count(*) =1
and MAX(timestamp) <(select max(timestamp) from dbo.kibanaLog where src = 'RS')

But it doesn't seem to work that way in ES,
I looked up the es documentation ，es don't support complex sub-select
Is there any other way?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.