ESQL: Subqueries should use query parameters
Author: ncordonCreated Sep 15, 2026Updated Sep 17, 2026
Labels>bugTeam:Analytics:Analytics/ES|QL
Maybe I'm wrong and these parameters are already being passed, that's not the impression I got from a few tests in Kibana. It's worth the check.
I think subqueries are not being propagated the time range parameters that can be passed on the _query api endpoint.
In other words, if we have this query:
FROM index
| WHERE id IN (subquery)
| STATS agg
Then the subquery is not being passed the time range that the _query api receives.
It could be similar for FROM subqueries:
FROM (subquery), (subquery2)
Source: elastic/elasticsearch