MySQL Slow Query LOG GROK pattern for Graylog
Other Solutions
MySQL Slow Query LOG GROK pattern for Graylog
Published
06 Nov 17:52
Last Push
06 Nov 17:52
Marketplace Rating
Discussion
7 Comments
Your Rating
Please sign in to rate this add-on.
Comments
@dipinsugathan sorry for delay
Not yet tested on GL3, but you can easily extract pattern from content_pack.json and create your GROK pattern to apply to your pipeline/extractor.
Don't forget to create the right input (i'm using Filebeat as shipper) for the multiline message ingest.
We are getting the following error on version above 3.0. Any workaround ??
Unhandled exception in REST resource
java.lang.IllegalArgumentException: Unsupported content pack version: 0
Is this pack support version above Graylog 3.0 ?
Hi,
I'm trying this pattern with below message. But it's not working. Can you please help me out.
# User@Host: test[test] @ [1.2.3.4]
# Thread_id: 175092484 Schema: testdb QC_hit: No
# Query_time: 1.596409 Lock_time: 0.000142 Rows_sent: 37208 Rows_examined: 460730
SET timestamp=1520476663;
SELECT
created_on,
tenant_id,
count(DISTINCT pricing_id) as total_book_click
FROM testdb.pr_xml
where created_on >= '2018-02-15 00:00:00' and xml_type='REQUEST' and tenant_id in(32,34,80,81,82,83)
group by created_on,tenant_id;
# Time: 180308 8:07:48
Download content_pack.json here: https://github.com/zionio/graylog_grok_mysqlslowquery
Then install it using Graylog Web Interface -> System -> Content Packs
How to use?
Please sign in to comment.
Updated version for Graylog 3 pushed on GitHub