Are the MySQL responses captured by Packetbeat?

Elastic Stack Beats
1

Hi, I didn't find any mentions on the documentation or forum, is packetbeat able to capture the response values from the mysql queries? For example if I have a "SELECT x from table_y where id='123'" I know packetbeat will parse and save that query, but can it store also the x value (SELECT response)? If not, is this feature planned?

Thanks!

Federico

2

you have to enable send_response: true in mysql protocol section to store query results. Never tried myself, though.

3

Thank you Steffen! That did the trick! Perhaps it could be added to the packetbeat.yml default configuration (commented out) so that you can know it's possible to add this option. I can see that option is present on the DNS protocol now that you mentioned it.