# How to filter “select” queries
**URL:** https://discuss.elastic.co/t/how-to-filter-select-queries/173766
**Category:** Logstash
**Created:** [March 25, 2019, 1:55pm UTC](https://discuss.elastic.co/t/how-to-filter-select-queries/173766 "2019-03-25T13:55:57Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@angham](https://discuss.elastic.co/u/angham)
#### Post date: [March 25, 2019, 1:55pm UTC](https://discuss.elastic.co/t/how-to-filter-select-queries/173766/1 "2019-03-25T13:55:57Z")
How to filter “select” queries from a log file that contains over 30000 lines
this is my log file
"15:49:05,479 DEBUG [org.hibernate.stat.internal.ConcurrentStatisticsImpl] (default task-43) HHH000117: HQL: select T from translator\_MenuTranslator T where (T.codeMessage = ?1 and (T.language = ?2 and (T.label = ?3 and T.label = ?4))), time: 2ms, rows: 0
"
filter{
grok { match =\> ["message", "%{TIME:timestamp}\s%{LOGLEVEL:level} [%{JAVACLASS:class}]\s(%{GREEDYDATA:thread}) HHH000117: HQL: %{GREEDYDATA:text}" ]}
if [type] == "logs" {
dissect { mapping =\> ["message", '%{[@metadata][ts]} [%{}] [%{}] %{[@metadata][text]}' ]}}
mutate { add\_field =\> { "[@metadata][static]" =\> "1" } }
if [@metadata][text] =~ /^select/ {
grok { match =\> ["[@metadata][text]", %{GREEDYDATA:query}" ]}
}
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 22, 2019, 1:56pm UTC](https://discuss.elastic.co/t/how-to-filter-select-queries/173766/2 "2019-04-22T13:56:00Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.