# Are the MySQL responses captured by Packetbeat?

**URL:** <https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [April 14, 2016, 3:18pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408 "2016-04-14T15:18:55Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![srpatatas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/srpatatas/32/9113_2.png) [@srpatatas](https://discuss.elastic.co/u/srpatatas)\
**Post date:** [April 14, 2016, 3:18pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408/1 "2016-04-14T15:18:56Z")

</div>

Hi, I didn't find any mentions on the documentation or forum, is packetbeat able to capture the response values from the mysql queries? For example if I have a "SELECT x from table\_y where id='123'" I know packetbeat will parse and save that query, but can it store also the x value (SELECT response)? If not, is this feature planned?

Thanks!

Federico

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [April 15, 2016, 1:28pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408/2 "2016-04-15T13:28:12Z")

</div>

you have to enable `send_response: true` in mysql protocol section to store query results. Never tried myself, though.

---

<div class="post-metadata">

**Author:** ![srpatatas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/srpatatas/32/9113_2.png) [@srpatatas](https://discuss.elastic.co/u/srpatatas)\
**Post date:** [April 15, 2016, 3:25pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408/3 "2016-04-15T15:25:43Z")

</div>

Thank you Steffen! That did the trick! Perhaps it could be added to the packetbeat.yml default configuration (commented out) so that you can know it's possible to add this option. I can see that option is present on the DNS protocol now that you mentioned it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:53pm UTC](https://discuss.elastic.co/t/are-the-mysql-responses-captured-by-packetbeat/47408/4 "2017-07-05T21:53:11Z")

</div>


