# Kibana Join two dasets into one visualization

**URL:** <https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124>\
**Category:** Kibana\
**Created:** [October 31, 2023, 11:15am UTC](https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124 "2023-10-31T11:15:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mhag](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhag/32/118090_2.png) [@Mhag](https://discuss.elastic.co/u/Mhag)\
**Post date:** [October 31, 2023, 11:15am UTC](https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124/1 "2023-10-31T11:15:43Z")

</div>

Hi all,

I have an index wit fields like this :

```auto
Myindex:
   url: "/some/url1", service: "someservice1", uuid: "ccc-xxx-yyy-zzz1"
   url: "/some/url2", service: "someservice1", uuid: "ccc-xxx-yyy-zzz2"
   url: "/some/url3", service: "someservice2", uuid: "ccc-xxx-yyy-zzz3"
   url: "/some/url4", service: "someservice2", uuid: "ccc-xxx-yyy-zzz1"

```

And I need to get in the same visualization all url that match a specific uuid that is linked to a specific url.  
so in the example above, for example I would get an intermediate result that match url: "/some/url1" :

`url: "/some/url1", service: "someservice1", uuid: "ccc-xxx-yyy-zzz1"`

and based on this result I need to get all urls that match this specific uuid: "ccc-xxx-yyy-zzz1", so the final result that a visualization can use is like this :

```auto
   url: "/some/url1", service: "someservice1", uuid: "ccc-xxx-yyy-zzz1"
   url: "/some/url4", service: "someservice2", uuid: "ccc-xxx-yyy-zzz1"

```

I tried to do this by using sql in Elasticsearch but it doesn't support subqueries yet` (select url from index where uuid in (select uuid from index where url="value"))` and answers in the forum suggest to do the join manually in two steps.

So i wonder if this is possible to do it in Kibana by get the same result in one visualisation but using two depndent queries (query2 depends on result ffrom query1)

Thanks in advance.

Regards.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 28, 2023, 11:15am UTC](https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124/2 "2023-11-28T11:15:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.