MySQL fields
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless
Generally available
Stack
Generally available
Module for parsing the MySQL log files.
Fields from the MySQL log files.
mysql.thread_id-
The connection or thread ID for the query.
type: long
Contains fields from the MySQL error logs.
mysql.error.thread_id-
type: alias
alias to: mysql.thread_id
mysql.error.level-
type: alias
alias to: log.level
mysql.error.message-
type: alias
alias to: message
Contains fields from the MySQL slow logs.
mysql.slowlog.lock_time.sec-
The amount of time the query waited for the lock to be available. The value is in seconds, as a floating point number.
type: float
mysql.slowlog.rows_sent-
The number of rows returned by the query.
type: long
mysql.slowlog.rows_examined-
The number of rows scanned by the query.
type: long
mysql.slowlog.rows_affected-
The number of rows modified by the query.
type: long
mysql.slowlog.bytes_sent-
The number of bytes sent to client.
type: long
format: bytes
mysql.slowlog.bytes_received-
The number of bytes received from client.
type: long
format: bytes
mysql.slowlog.query- The slow query.
mysql.slowlog.id-
type: alias
alias to: mysql.thread_id
mysql.slowlog.schema-
The schema where the slow query was executed.
type: keyword
mysql.slowlog.current_user-
Current authenticated user, used to determine access privileges. Can differ from the value for user.
type: keyword
mysql.slowlog.last_errno-
Last SQL error seen.
type: keyword
mysql.slowlog.killed-
Code of the reason if the query was killed.
type: keyword
mysql.slowlog.query_cache_hit-
Whether the query cache was hit.
type: boolean
mysql.slowlog.tmp_table-
Whether a temporary table was used to resolve the query.
type: boolean
mysql.slowlog.tmp_table_on_disk-
Whether the query needed temporary tables on disk.
type: boolean
mysql.slowlog.tmp_tables-
Number of temporary tables created for this query
type: long
mysql.slowlog.tmp_disk_tables-
Number of temporary tables created on disk for this query.
type: long
mysql.slowlog.tmp_table_sizes-
Size of temporary tables created for this query.
type: long
format: bytes
mysql.slowlog.filesort-
Whether filesort optimization was used.
type: boolean
mysql.slowlog.filesort_on_disk-
Whether filesort optimization was used and it needed temporary tables on disk.
type: boolean
mysql.slowlog.priority_queue-
Whether a priority queue was used for filesort.
type: boolean
mysql.slowlog.full_scan-
Whether a full table scan was needed for the slow query.
type: boolean
mysql.slowlog.full_join-
Whether a full join was needed for the slow query (no indexes were used for joins).
type: boolean
mysql.slowlog.merge_passes-
Number of merge passes executed for the query.
type: long
mysql.slowlog.sort_merge_passes-
Number of merge passes that the sort algorithm has had to do.
type: long
mysql.slowlog.sort_range_count-
Number of sorts that were done using ranges.
type: long
mysql.slowlog.sort_rows-
Number of sorted rows.
type: long
mysql.slowlog.sort_scan_count-
Number of sorts that were done by scanning the table.
type: long
mysql.slowlog.log_slow_rate_type-
Type of slow log rate limit, it can be
sessionif the rate limit is applied per session, orqueryif it applies per query.type: keyword
mysql.slowlog.log_slow_rate_limit-
Slow log rate limit, a value of 100 means that one in a hundred queries or sessions are being logged.
type: keyword
mysql.slowlog.read_first-
The number of times the first entry in an index was read.
type: long
mysql.slowlog.read_last-
The number of times the last key in an index was read.
type: long
mysql.slowlog.read_key-
The number of requests to read a row based on a key.
type: long
mysql.slowlog.read_next-
The number of requests to read the next row in key order.
type: long
mysql.slowlog.read_prev-
The number of requests to read the previous row in key order.
type: long
mysql.slowlog.read_rnd-
The number of requests to read a row based on a fixed position.
type: long
mysql.slowlog.read_rnd_next-
The number of requests to read the next row in the data file.
type: long
Contains fields relative to InnoDB engine
mysql.slowlog.innodb.trx_id-
Transaction ID
type: keyword
mysql.slowlog.innodb.io_r_ops-
Number of page read operations.
type: long
mysql.slowlog.innodb.io_r_bytes-
Bytes read during page read operations.
type: long
format: bytes
mysql.slowlog.innodb.io_r_wait.sec-
How long it took to read all needed data from storage.
type: long
mysql.slowlog.innodb.rec_lock_wait.sec-
How long the query waited for locks.
type: long
mysql.slowlog.innodb.queue_wait.sec-
How long the query waited to enter the InnoDB queue and to be executed once in the queue.
type: long
mysql.slowlog.innodb.pages_distinct-
Approximated count of pages accessed to execute the query.
type: long
mysql.slowlog.user-
type: alias
alias to: user.name
mysql.slowlog.host-
type: alias
alias to: source.domain
mysql.slowlog.ip-
type: alias
alias to: source.ip