Replying to @elastic
When you want one language across logs, metrics, and traces, ES|QL's TS command is the direct equivalent.
TS metrics-*
| STATS SUM(RATE(http_requests_total, 5m)) BY job, TBUCKET(5m)
RATE(metric, 5m) maps to PromQL's rate(metric[5m]).
TS groups by time series first and handles






