Match field A in index A against field B in index B

Elastic Stack Elasticsearch
1

Hello,

I have DNS query data from Packetbeat written to one index and will import a list of bad domains to a second index.

How can I perform a search to find where field A from index A matches field B from index B, to see which endpoint is looking up bad domains?

Thank you.

2

That is a join, which you cannot do in ES.

3

Understood, thank you. I'll try this with Siren Join.