# Join query in Elasticsearch

**URL:** <https://discuss.elastic.co/t/join-query-in-elasticsearch/358542>\
**Category:** Kibana\
**Created:** [May 1, 2024, 8:00am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/358542 "2024-05-01T08:00:49Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cinu](https://avatars.discourse-cdn.com/v4/letter/c/a88e4f/32.png) [@Cinu](https://discuss.elastic.co/u/Cinu)\
**Post date:** [May 1, 2024, 8:00am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/358542/1 "2024-05-01T08:00:49Z")

</div>

I have an index and a report with numerous documents created from discover using that index. But the data from one field is coming as a seperate document whereas all others are in a single row. Its because there is no association between this field in the index and other fields in the same index. Is it possible to join this field with any other in the index so that the data comes in a single document and row when these fields are used together.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 1, 2024, 8:22am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/358542/2 "2024-05-01T08:22:18Z")

</div>

Yeah. That's called lookups.  
See [Retrieve a runtime field | Elasticsearch Guide [8.13] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/runtime-retrieving-fields.html#lookup-runtime-fields)

---

<div class="post-metadata">

**Author:** ![Cinu](https://avatars.discourse-cdn.com/v4/letter/c/a88e4f/32.png) [@Cinu](https://discuss.elastic.co/u/Cinu)\
**Post date:** [May 3, 2024, 8:15am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/358542/3 "2024-05-03T08:15:17Z")

</div>

Hi,  
Thanks for your reply.  
The version used is 7.17. Does it support this version? Is it possible to provide details of this.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 3, 2024, 8:47am UTC](https://discuss.elastic.co/t/join-query-in-elasticsearch/358542/4 "2024-05-03T08:47:38Z")

</div>

Easy to know... From the documentation I linked, just choose the 7.17 version:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/3/b346b7dd07534a7cc834ef0f31abda132a17a470.png)

This basically opens [Retrieve a runtime field | Elasticsearch Guide [7.17] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.17/runtime-retrieving-fields.html#lookup-runtime-fields)