# How to print matches in Elasticsearch and Kibana or Elasticsearch-py?

**URL:** <https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329>\
**Category:** Kibana\
**Created:** [February 4, 2022, 4:39pm UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329 "2022-02-04T16:39:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Travel\_Time](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travel_time/32/78389_2.png) [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\
**Post date:** [February 4, 2022, 4:39pm UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329/1 "2022-02-04T16:39:32Z")

</div>

I have 2 example patterns, with the same column names.

pattern1\* (index-1,index-2,index-3) col1 col2 col3 col4

pattern2\* (index-5, index-6, index-7, index-8) col1 col2 col5

I want to automatically compare pattern1\* and pattern2\*, with col1 and col2 and find full matches and save it somewhere. Is it even possible with ES and Kibana or with Elasticsearch-py? I am new to ES.

---

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 5, 2022, 1:26am UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329/2 "2022-02-05T01:26:26Z")

</div>

Basically join function is not supported in Elasticsearch. But there could be some work around. What do you mean exactly by "full match" and "save it"?  
The combination of the two fields(columns you said) is unique on both index groups? If not how to save the data of them? Cross join? Or do you need just those two fields?

What is the approximate size of the index and the size of matches?

And what do you mean by "automatically"?

---

<div class="post-metadata">

**Author:** ![Travel\_Time](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/travel_time/32/78389_2.png) [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\
**Post date:** [February 9, 2022, 5:43am UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329/3 "2022-02-09T05:43:54Z")

</div>

Hello. ''Full match'' like { value and value } in Kibana search. ''Save it'' and ''automatically'' while using Elasticsearch-py (just to save output as csv, but that won't be problem if I compare those patterns I will export it as csv), in these two patterns most of the columns are the same, and hits in each patterns are about millions.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2022, 5:44am UTC](https://discuss.elastic.co/t/how-to-print-matches-in-elasticsearch-and-kibana-or-elasticsearch-py/296329/4 "2022-03-09T05:44:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.