# Filebeat mysql module does not work for mariadb logs?

**URL:** <https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 4, 2022, 10:49am UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398 "2022-08-04T10:49:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kosodrom](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kosodrom/32/99278_2.png) [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Post date:** [August 4, 2022, 10:49am UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398/1 "2022-08-04T10:49:37Z")

</div>

Hi,

i have filebeat 7.16.2 installed with mysql module enabled to collect mariadb logs.

```auto
- module: mysql
  error:
    enabled: true
    var.paths: ["/home/user/var/log/*_error.log"]
  slowlog:
    enabled: true
    var.paths: ["/home/user/var/log/*-slow.log"]

```

I can confirm that the module is enabled:

```auto
[user]$ ./filebeat modules enable mysql 
Module mysql is already enabled

```

the logs are still not parsed correctly though (they are untouched at all). I still have everything in one message field:

`"message": "2022-08-04 12:43:19 2217716 [Warning] Aborted connection 2217716 to db: 'db' user: 'user' host: 'localhost' (Got timeout reading communication packets)"`

Does anyone have any ideas what I do wrong?

Thanks

---

<div class="post-metadata">

**Author:** ![TiagoQueiroz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tiagoqueiroz/32/107061_2.png) [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)\
**Post date:** [August 4, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398/2 "2022-08-04T13:51:47Z")

</div>

Hi @Kosodrom,

Which version of MariaDB are you running? Do you see any errors on Filebeat or in the events on Elasticsearch/Kibana (look for an `error` key in the event).

The [docs](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-mysql.html#_compatibility_23) are pretty clear about the versions the module has been tested with:

> The `mysql` module was tested with logs from MySQL 5.5, 5.7 and 8.0, MariaDB 10.1, 10.2 and 10.3, and Percona 5.7 and 8.0.
> 
> On Windows, the module was tested with MySQL installed from the Chocolatey repository.

If you still don't find the cause of the issue, then run Filebeat with [log level debug](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-logging.html#level) and look the logs for more clues (or post them here). Just bear in mind that log level debug with all selectors enabled will log all events sent to Elasticsearch, hence they might have sensitive information.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 1, 2022, 3:52pm UTC](https://discuss.elastic.co/t/filebeat-mysql-module-does-not-work-for-mariadb-logs/311398/3 "2022-09-01T15:52:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.