用工具使用sql控制es

 Kibana：

POST _sql
{
    "query":
    """

    select * from
    apm_mi_data_stutter_202007
    where appPlatformName = ''
    
    """
}

Cerebro：

_plugins/_sql
{
  "query": 
  "select * from logfmt_019_20230208 where org_timestamp = 1675789200000 and id = 'd367f3e2461d428a9e31fd81ce914ce1' and container.name = 'saleapp' limit 0, 100"
}