# Find and show values of a field, which is also in another field

**URL:** https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077
**Category:** Kibana
**Created:** [September 25, 2019, 3:34pm UTC](https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077 "2019-09-25T15:34:20Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [September 27, 2019, 3:03pm UTC](https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077/6 "2019-09-27T15:03:31Z")

</div>

Hi @MarcusCaepio,

I'm sorry, I misread your original post - this will indeed only work if the fields are in the same document.

This kind of querying is very hard to do with Elasticsearch in general. A way that often works is to basically do the join at ingest time, meaning when ingesting the data you look up the values you are going to filter by and ingest them together with the rest of the document. Unfortunately that requires a bit more setup than just running filebeat, most likely you need a custom shipper that handles this. See also these resources: [https://www.elastic.co/blog/managing-relations-inside-elasticsearch](https://www.elastic.co/blog/managing-relations-inside-elasticsearch) [Does document database means denormalize](https://discuss.elastic.co/t/does-document-database-means-denormalize/18075)

I'm sorry I don't have a better answer for you here.

---

_[View the full topic](https://discuss.elastic.co/t/find-and-show-values-of-a-field-which-is-also-in-another-field/201077)._