# Querying differences on one field between two indexes

**URL:** <https://discuss.elastic.co/t/querying-differences-on-one-field-between-two-indexes/156826>\
**Category:** Kibana\
**Created:** [November 15, 2018, 9:48am UTC](https://discuss.elastic.co/t/querying-differences-on-one-field-between-two-indexes/156826 "2018-11-15T09:48:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JimboJones](https://avatars.discourse-cdn.com/v4/letter/j/e5b9ba/32.png) [@JimboJones](https://discuss.elastic.co/u/JimboJones)\
**Post date:** [November 15, 2018, 9:48am UTC](https://discuss.elastic.co/t/querying-differences-on-one-field-between-two-indexes/156826/1 "2018-11-15T09:48:08Z")

</div>

Is it possible to query two indexes (which both contain the same fields) and report the differences in index2 compared with index1

Indexes contain a file\_location field and I would like to be able to know which records are additions (present in index2 but not index1) and which are deletions (present in index1 but not index2).

Can this be achieved within Kibana?

Jimbo

---

<div class="post-metadata">

**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\
**Post date:** [November 16, 2018, 9:24pm UTC](https://discuss.elastic.co/t/querying-differences-on-one-field-between-two-indexes/156826/2 "2018-11-16T21:24:10Z")

</div>

similar discuss post has more details: cross linking : [Elasticsearch compare two indices](https://discuss.elastic.co/t/elasticsearch-compare-two-indices/126181)

hope it helps

Thanks  
Rashmi

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 14, 2018, 9:24pm UTC](https://discuss.elastic.co/t/querying-differences-on-one-field-between-two-indexes/156826/3 "2018-12-14T21:24:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
