# Search related documents in kibana in single query

**URL:** https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115
**Category:** Kibana
**Created:** [August 18, 2023, 5:04pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115 "2023-08-18T17:04:27Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![vignesh\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vignesh_nayak/32/124740_2.png) [@vignesh\_nayak](https://discuss.elastic.co/u/vignesh_nayak)
#### Post date: [August 18, 2023, 5:04pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/1 "2023-08-18T17:04:27Z")

</div>

Hi, I have one scenario. I am pushing certain ID in thread context from application for each transaction along with individual log messages, which means all docs in kibana for that transaction will have same ID, Ex:  
Transaction 1  
message: abc, reqId: 123  
message: def, reqId: 123  
...  
Transaction 2  
message: xyz , reqId: 456  
message: mno, reqId: 456  
Is there a way to fetch all messages belonging to a certain reqId, if I am searching based on message, in a single query in kibana.  
Like if I search "abc" I need to get all the messages which has requestId 123. that is abc and def.  
It can be done by first searching message and getting Id and then again searching based on ID, but I wanted to know if it's possible using single query in kibana

---

<div class="post-metadata">

### Author: ![PodarcisMuralis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/podarcismuralis/32/122606_2.png) [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)
#### Post date: [August 18, 2023, 5:59pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/2 "2023-08-18T17:59:53Z")

</div>

If we are talking about Discover part of Kibana, you can click on "Add a filter" (usually + sign) and add filter reqid equals 123. It filters everything with 123. Then you can search for your value "abc" on the search bar.

---

<div class="post-metadata">

### Author: ![vignesh\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vignesh_nayak/32/124740_2.png) [@vignesh\_nayak](https://discuss.elastic.co/u/vignesh_nayak)
#### Post date: [August 18, 2023, 6:22pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/3 "2023-08-18T18:22:53Z")

</div>

No, I wont be knowing reqId beforehand. I will just have message "abc", when I search this, it should dynamically get reqId assoicated with this message, and get all messages related to that reqId

---

<div class="post-metadata">

### Author: ![PodarcisMuralis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/podarcismuralis/32/122606_2.png) [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)
#### Post date: [August 18, 2023, 6:40pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/4 "2023-08-18T18:40:25Z")

</div>

Oh i see. Maybe something like this works for you?

```auto
message: "abc" OR reqId: (message: "abc")

```

I did not test it but give it a try please.

---

<div class="post-metadata">

### Author: ![vignesh\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vignesh_nayak/32/124740_2.png) [@vignesh\_nayak](https://discuss.elastic.co/u/vignesh_nayak)
#### Post date: [August 20, 2023, 4:32pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/5 "2023-08-20T16:32:38Z")

</div>

No, this is giving syntax error. And how does reqId get populated dynamically based on the message in this query?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 17, 2023, 4:33pm UTC](https://discuss.elastic.co/t/search-related-documents-in-kibana-in-single-query/341115/6 "2023-09-17T16:33:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
