# Can kibana compare logs from different area and find the missing one?

**URL:** https://discuss.elastic.co/t/can-kibana-compare-logs-from-different-area-and-find-the-missing-one/309509
**Category:** Kibana
**Created:** [July 13, 2022, 8:26am UTC](https://discuss.elastic.co/t/can-kibana-compare-logs-from-different-area-and-find-the-missing-one/309509 "2022-07-13T08:26:04Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)
#### Post date: [July 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/can-kibana-compare-logs-from-different-area-and-find-the-missing-one/309509/2 "2022-07-13T13:18:33Z")

</div>

Hi, this is a duplicated post with [this](https://discuss.elastic.co/t/how-to-compare-data-to-find-missing-one/308924).

As I said, you need to compare each documents with aggregated result by your client side.

As elasticsearch is a distributed system, any supported query or aggregation performed on each shards individualy. The data flows from each data node (containing shards) to the coordinating node one-way. There is no supported query or aggregation which will distribute once aggregated results to each nodes again. This is also the reason why elasticsearch does not support JOIN function of general meaning.

---

_[View the full topic](https://discuss.elastic.co/t/can-kibana-compare-logs-from-different-area-and-find-the-missing-one/309509)._