Combine two fields of two different log lines in same index pattern

I'm new to Kibana, i have two log patterns in same index pattern

log line 1 : rejected with ID 123456
log line 2 : rebooking is successful for ID 123456 for US country

I need to create bar chart for country base on the matched ID , something like this "select country from log where message contains "rebooking" AND ID is in (select ID from log where message contains "rejected") "

Please help !

Hi @Hemalalli_Dharanidha and welcome to the discuss forum!

A bar chart consists of bars that show the some metric count of documents that match the query used to create the chart.

Can you provide an example document for us to work with?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.