# Index / reference search: Howto?

**URL:** <https://discuss.elastic.co/t/index-reference-search-howto/22551>\
**Category:** Elasticsearch\
**Created:** [March 6, 2015, 1:25pm UTC](https://discuss.elastic.co/t/index-reference-search-howto/22551 "2015-03-06T13:25:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![heinz6\_meier7](https://avatars.discourse-cdn.com/v4/letter/h/ec9cab/32.png) [@heinz6\_meier7](https://discuss.elastic.co/u/heinz6_meier7)\
**Post date:** [March 6, 2015, 1:25pm UTC](https://discuss.elastic.co/t/index-reference-search-howto/22551/1 "2015-03-06T13:25:06Z")

</div>

Hi,

Is a "indexed or refenrced" search possible in Kibana? I'd like to enter a  
search for a term and use the contents of another field of the result as  
the search term for the search that is displayed to the user.

Example: I'd like to search for the mail address in postfix logs, get  
contents of the postfix queue ID field and display all documents that  
include that ID.

Thanks for any hints.

Michael Schwartzkopff.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 6, 2015, 9:04pm UTC](https://discuss.elastic.co/t/index-reference-search-howto/22551/2 "2015-03-06T21:04:26Z")

</div>

You'd have to use a script for this, there isn't this sort of functionality  
native to ES at this stage.

On 7 March 2015 at 00:25, [heinz6.meier7@gmail.com](mailto:heinz6.meier7@gmail.com) wrote:

> Hi,
> 
> Is a "indexed or refenrced" search possible in Kibana? I'd like to enter a  
> search for a term and use the contents of another field of the result as  
> the search term for the search that is displayed to the user.
> 
> Example: I'd like to search for the mail address in postfix logs, get  
> contents of the postfix queue ID field and display all documents that  
> include that ID.
> 
> Thanks for any hints.
> 
> Michael Schwartzkopff.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/a2372cc3-1de4-48f1-bb2a-e7bc8ea2a4ae%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X8uCGviTt%3DPnXPBCUV%2BSYsxhPH3frbZn5ToutES0W2Nwg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X8uCGviTt%3DPnXPBCUV%2BSYsxhPH3frbZn5ToutES0W2Nwg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:27am UTC](https://discuss.elastic.co/t/index-reference-search-howto/22551/3 "2017-07-06T00:27:57Z")

</div>


