# Kibana 4.4 how to "combine/join" queries?

**URL:** <https://discuss.elastic.co/t/kibana-4-4-how-to-combine-join-queries/67761>\
**Category:** Kibana\
**Created:** [December 1, 2016, 1:02pm UTC](https://discuss.elastic.co/t/kibana-4-4-how-to-combine-join-queries/67761 "2016-12-01T13:02:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![teubreu](https://avatars.discourse-cdn.com/v4/letter/t/f05b48/32.png) [@teubreu](https://discuss.elastic.co/u/teubreu)\
**Post date:** [December 1, 2016, 1:02pm UTC](https://discuss.elastic.co/t/kibana-4-4-how-to-combine-join-queries/67761/1 "2016-12-01T13:02:15Z")

</div>

Hello,

I would like to know how to make a query and reused an already "saved search(es)".

As an example, i had already defined 2 queries:

- query1: "known events"
- query2: "already\_resolved\_events"

I wish to identify any "new events" so to make a new like query3 = events not in (query1, query2)  
and also another one like query4 = events in (query1, query 2).

How to make such queries?

PS: the idea here is NOT to duplicate events in all filter but to keep update only 1 list of event (either known or already\_resolved)...

Thanks in advance for your help

---

<div class="post-metadata">

**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\
**Post date:** [December 3, 2016, 1:56am UTC](https://discuss.elastic.co/t/kibana-4-4-how-to-combine-join-queries/67761/2 "2016-12-03T01:56:37Z")

</div>

Sorry @teubreu but that isn't possible in Kibana right now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 31, 2016, 1:56am UTC](https://discuss.elastic.co/t/kibana-4-4-how-to-combine-join-queries/67761/3 "2016-12-31T01:56:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
