SoftClient4ES runs a large, practical subset of ANSI SQL on Elasticsearch — including cross-index JOINs that Elasticsearch itself cannot do. A few advanced constructs (subqueries, CTEs, set operators beyond UNION ALL) are not in the current release yet. This page tells you exactly what works as of this release, what's coming, and how to get unblocked today.
Great for explicit JOIN SQL — full BI-tool subquery / CTE support is coming in the next release.
Two different things can stop a BI tool here, and it is worth separating them.
- Power BI — Power Query's generic connectors are ODBC and OData, never JDBC. The one candidate path is a generic Arrow Flight SQL ODBC driver pointed at the sidecar. It is unproven: nobody has connected it, so treat it as a lead to follow rather than a supported route. See Power BI.
- Metabase — no generic JDBC database type exists; anything not on Metabase's own driver list needs a community driver plugin, which is code nobody has written for SoftClient4ES. See Metabase.
- Looker — Looker connects only through drivers it maintains itself, and it allowlists JDBC parameters per dialect, so a customer-supplied driver cannot be introduced. This gap is structural, not commercial — a licence would not close it.
Neither is a gap we can close from our side: each needs either a change by the vendor or a driver plugin that nobody has written.
(Each blocker checked against the vendor's own connection documentation — Metabase, Microsoft Power Query and Looker — on 2026-08-31 and 2026-09-01.)
Some BI tools auto-generate nested SQL (subqueries / derived tables) even when your logical query has none. Until the next release lands full subquery support, send explicit JOIN SQL instead of letting the tool compose nested queries — where the tool lets you:
- Apache Superset / DBeaver / Grafana — you control the SQL. Write explicit JOINs for anything that would otherwise nest, and everything in Works in this release below is available to you.
- Tableau — connecting and browsing work; queries are the constrained part. Drag-and-drop worksheets quote and fully qualify every identifier, a form we do not accept yet, and Custom SQL is not a way around it: Tableau documents that it "must wrap the custom SQL statement within a select statement" (Tableau's Custom SQL documentation, checked 2026-09-01), which turns your query into a derived table. Extract mode narrows the exposure but does not remove it — the extract is still built by querying the source. See Tableau.
General rule: prefer explicit JOIN SQL over tool-generated nested SQL. If you control the query, a cross-index JOIN is fully supported in the current release.
Apache Superset (dedicated dialect), DBeaver, and Grafana (via Arrow Flight SQL) are Tested. Tableau is Compatible — the connection path works, but it is not yet in our formal regression suite.
- Cross-index JOINs:
INNER/LEFT/RIGHT/FULL/CROSS, plusJOIN UNNESTon nested arrays — something Elasticsearch cannot do natively. (See the JOIN matrix walkthrough for the per-tier rows and worked examples.) - Aggregations +
GROUP BY/HAVING. - Analytical SQL:
ROW_NUMBER/RANK/DENSE_RANK; theSTDDEV/VARIANCEfamily (STDDEV_POP,STDDEV_SAMP,VAR_POP,VAR_SAMP);PERCENTILE_CONT/PERCENTILE_DISC; window aggregates andFIRST_VALUE/LAST_VALUE/ARRAY_AGGoverOVER (PARTITION BY …). - Conditionals & null handling:
CASE/COALESCE/NULLIF/GREATEST/LEAST/ISNULL/ISNOTNULL. ORDER BY … NULLS FIRST | NULLS LAST.UNION ALL(concatenate result sets — no de-duplication).SELECT * EXCEPT(col, …)— drop named columns fromSELECT *. This is the BigQuery-style column-exclusion clause. It is not theEXCEPTset operator (see below).
- Subqueries: scalar,
IN (SELECT …),EXISTS (SELECT …), derived tablesFROM (SELECT …). - CTEs:
WITH name AS (SELECT …)— recursive and non-recursive. - Set operators:
UNION(with row de-duplication),INTERSECT, and theEXCEPTset operator. TheEXCEPTset operator is distinct from theSELECT * EXCEPT(cols)column-exclusion clause above — that one works; the set operator does not. - Positional / tiling window functions:
NTILE,LAG,LEAD— not yet implemented; coming with the next release's analytical-SQL work. (Note:PERCENTILE_CONT/PERCENTILE_DISC— percentile aggregates — already work in the current release; the positional/tiling window functions are a different family.)
These arrive in the next release as a driver-side enhancement — single-cluster customers get them by upgrading the driver (JDBC / ADBC / sidecar), with no infrastructure change and no federation server required.
A subquery in a WHERE clause is rejected by the parser today:
-- Not supported in the current release: subqueries are not yet implemented.
SELECT name
FROM employees
WHERE department_id IN (SELECT id FROM departments WHERE region = 'EU');The parser rejects this — IN accepts only literal value lists today, not a nested SELECT. Rewrite it as an explicit JOIN (fully supported), or wait for the next release where the subquery form lands as-is.
Quoted column names, aliases and table names work in both spellings — see Quoted identifiers and Qualified and quoted table names. Five things they do not cover yet:
-
INSERT,UPDATE,CREATE,DROPandALTERnames are not quotable.INSERT INTO `prod_eu`.dest,INSERT INTO "prod_eu".dest,UPDATE `orders` SET …andCREATE TABLE "dest" ("c" INTEGER)are all rejected — and so are quoted column names in those statements (UPDATE tbl SET "a" = 1).SELECTandDELETEare unaffected, because both route through theFROMtable surface. This is the next piece of quoting work; until it lands, send DML/DDL names bare. TheINSERT INTO `prod_eu`.dest/CREATE TABLE `prod_eu`.destexamples in joins.md belong to that gap; theFROM `prod_us`.ordersones do not — they work. -
Quoting each part of a dotted index name splits it.
FROM `logs-2025`.`03`reads index03under the qualifierlogs-2025, because a quoted part followed by a dot is a qualifier by definition. Write the whole name as one lexeme instead —FROM `logs-2025.03`orFROM "logs-2025.03"— or leave it bare (FROM logs-2025.03). All three read the indexlogs-2025.03. -
A qualifier must be quoted from the FIRST part.
FROM elastic."bi_events"mixes the spellings, so the leading run of quoted parts is empty and the whole operand is read as ONE index name,elastic.bi_events. Quote the first part too (FROM "elastic"."bi_events") if you meantelasticas a qualifier, or leave both bare if you meant the dotted index name. -
A dot inside a quoted COLUMN name is still a qualifier.
SELECT `a.b` FROM tis read as the columnbqualified bya, exactly asSELECT a.bis — there is no way to address an Elasticsearch field whose own name contains a dot. (A quoted table name is the opposite: its dots are literal.) Quoting makes it look as though there should be; there is not. -
A dot and the name part after it must be adjacent — in a column name.
SELECT a.bis a qualified name;SELECT a . bis rejected, and so is a name left with a trailing dot (ORDER BY b. DESC). This is deliberate: when the dot was allowed to float,ORDER BY b. DESCsilently parsed as a column namedb.DESCsorted ascending. A table-name qualifier is deliberately more tolerant (FROM "elastic" . bi_eventsis accepted), because that spelling has always been accepted there and tightening it would have moved which index the statement reads. -
A qualifier shares a namespace with a real dotted index name. When one
FROMnames the same index under two different qualifiers, the engine tells the two apart by their qualified reference — soSELECT a FROM a.orders q, "a".orders o, "b".orders pusesa.ordersboth as a real index (whatqreads) and as the qualified reference of"a".orders. Both readings of that statement are wrong, it was already wrong before, and it is not worth machinery: do not qualify two same-named indices with a name that is itself a real index.
⚠️ Federation reads a qualifier differently from the engine. A cross-cluster statement whose table names are FULLY quoted —FROM `prod_us`.`orders`rather thanFROM `prod_us`.orders— is not recognised by Federation's catalog pre-processor, so it is forwarded to the default cluster instead of the one you named. Before this release such a statement failed loudly in the parser; now it parses, so the mis-routing is silent. On the federation path, leave the table name itself unquoted (`prod_us`.orders) until this is fixed — see joins.md.
CREATE TEMPORARY TABLE and CREATE [LOCAL | GLOBAL] TEMPORARY TABLE, with or without
ON COMMIT { PRESERVE | DELETE } ROWS, are refused by intent, and the error names the
construct. Two reasons, both structural:
- An Elasticsearch index is cluster-global and has no session scope. It is visible to every client that can read the cluster, and there is no session for it to belong to or be cleaned up with — the JDBC and ADBC drivers have no server process at all, so nothing can be told that a connection ended.
ON COMMIT … ROWSis transaction semantics, and Elasticsearch has no transactions. There is nothing to honour, and accepting the clause to ignore it would silently change how long your data lives.
Use CREATE TABLE for a regular index and DROP TABLE it when you are done.
Tableau's connection-capability probe issues a CREATE TABLE / DROP TABLE pair against a
#-prefixed name, and its SQL-92 dialect issues CREATE LOCAL TEMPORARY TABLE. Every one of those
statements is refused, and Tableau then takes its documented fallback. For what that fallback costs —
and why a .tdc customization file cannot skip the probe — see
Tableau: the temp-table probe.
A plain CREATE TABLE against a probe-shaped name is refused too, but on Elasticsearch's index
naming rules rather than on the temporary-table grammar: an index name must be lowercase and cannot
contain \, /, *, ?, ", <, >, |, a space, a comma or #. The error names every rule
the name breaks.
Note on what "not session-scoped" does and does not imply. It is not that Tableau requires session scope — Tableau's own capability
CAP_TEMP_TABLES_NOT_SESSION_SCOPEDexists precisely for sources that "use regular tables to simulate temp tables". So a future release could choose to serve temporary tables with something other than a session. The reason we do not is a cost and a safety argument, not an impossibility: every temporary table would be a cluster-state update serialised through the elected master, and anything that failed to clean them up would accumulate indices in your production cluster until the per-node shard limit refused all index creation, yours included.
STDDEV(YEAR(hire_date)), VARIANCE(ABS(salary)) and the rest of the extended_stats family over
a transformed operand (plain or OVER (PARTITION BY …)) compute correctly on Elasticsearch 7, 8
and 9. On Elasticsearch 6 the query is refused with a 400 — "STDDEV/VARIANCE over a
transformed expression is not supported on Elasticsearch 6 …" — because the client library the
driver builds on drops the aggregation script on that line (elastic4s#4100) and the 6.x line is
unmaintained, so the fix cannot reach it; until this rule, the query silently returned the statistic
of the raw field. Aggregate over a raw field there, or use Elasticsearch 7+. That refusal is
permanent. See STDDEV / VARIANCE family.
- Heterogeneous federation: JOIN or correlate Elasticsearch with PostgreSQL, MySQL, ClickHouse, Snowflake, and more — plus cross-cluster subqueries (e.g. correlate one cluster's data against another's).
Not this: correlating one Elasticsearch index against another Elasticsearch index —
EXISTS/NOT EXISTS/IN/NOT IN/ a scalar comparison against a subquery that reads the outer row — is single-cluster and runs through the relational engine shipped insoftclient4es-arrow-extensions. Its one rule: the outer reference must be qualified with the outer table's alias (… WHERE EXISTS (SELECT 1 FROM orders o WHERE o.customer_id = c.id)), because a bare column name inside a subquery is read as the subquery's own column. A venue without that jar refuses the statement with HTTP 400 rather than executing it as if it were self-contained.
MERGE,RETURNING,INFORMATION_SCHEMA, non-materializedCREATE VIEW,TIMESTAMP WITH TIME ZONE,INTERVALas a type, andUUID. (DECIMAL/NUMERICare now accepted as cast targets and column types, but approximately — they map toDOUBLE, and a precision or scale is accepted and ignored. Elasticsearch has no exact decimal type.) No committed date — these are prioritised by customer demand. (Current-release DML already supportsINSERT … ON CONFLICTupsert — a different feature fromMERGE.)
We do not commit firm external dates. The next release is targeted for Quarter 4 2026; the upcoming release (heterogeneous federation) for Quarter 1 2027; the deferred items are demand-driven with no committed date. Treat the next release's feature list as planned, not guaranteed — its scope is gated on a function-library audit.
- The JOIN matrix walkthrough — how the three JOIN tiers work, with worked examples.
- The federation operator guide — multi-cluster federation deployment.
This page describes SoftClient4ES as of the current release. Once the next release ships, the "Not in this release" list above shrinks — verify against your installed release.