[[esql-commands]]
=== {esql} commands

++++
<titleabbrev>Commands</titleabbrev>
++++

[[esql-source-commands]]
// tag::source_commands[]
==== Source commands

An {esql} source command produces a table, typically with data from {es}. An {esql} query must start with a source command.

image::images/esql/source-command.svg[A source command producing a table from {es},align="center"]

{esql} supports these source commands:

* <<esql-from>>
* <<esql-row>>
* <<esql-show>>

// end::source_command[]

[[esql-processing-commands]]
// tag::proc_commands[]
==== Processing commands

{esql} processing commands change an input table by adding, removing, or changing
rows and columns.

image::images/esql/processing-command.svg[A processing command changing an input table,align="center"]

{esql} supports these processing commands:

* <<esql-dissect>>
* <<esql-drop>>
* <<esql-enrich>>
* <<esql-eval>>
* <<esql-grok>>
* <<esql-keep>>
* <<esql-limit>>
* <<esql-mv_expand>>
* <<esql-rename>>
* <<esql-sort>>
* <<esql-stats-by>>
* <<esql-where>>

// end::proc_command[]

include::source-commands/from.asciidoc[]
include::source-commands/row.asciidoc[]
include::source-commands/show.asciidoc[]

include::processing-commands/dissect.asciidoc[]
include::processing-commands/drop.asciidoc[]
include::processing-commands/enrich.asciidoc[]
include::processing-commands/eval.asciidoc[]
include::processing-commands/grok.asciidoc[]
include::processing-commands/keep.asciidoc[]
include::processing-commands/limit.asciidoc[]
include::processing-commands/mv_expand.asciidoc[]
include::processing-commands/rename.asciidoc[]
include::processing-commands/sort.asciidoc[]
include::processing-commands/stats.asciidoc[]
include::processing-commands/where.asciidoc[]