# MySQL (MariaDB) Overview dashboard empty

**URL:** <https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 25, 2018, 8:18pm UTC](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115 "2018-01-25T20:18:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![castle9mm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/castle9mm/32/26916_2.png) [@castle9mm](https://discuss.elastic.co/u/castle9mm)\
**Post date:** [January 25, 2018, 8:18pm UTC](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115/1 "2018-01-25T20:18:55Z")

</div>

Hello, sorry for what's probably a basic beginner issue but my MySQL Overview dashboard in Kibana is empty. I'm trying to use Filebeat with AutoDiscover to capture the mysql error & slow query logs from a MariaDB container.

I _think_ I have the autodiscover setup correctly since I can see general messages in the Discover page when I start/stop the mariadb container and also see access denied warnings as well.

 ![17%20PM](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e70c0aee92f4415843dd4c11f43d010cc1a3ab3e.png)

In the container, i have slow queries logging properly to the local container /var/log/mysql/mariadb-slow.log file.

I'm assuming that I need to modify the filebeat/modules.d/mysql.yml file to adjust the slow log path but I'm unsure how to point it to the dynamic container.

**filebeat.yml**

```
filebeat.config:
  modules:
    path: ${path.config}/modules.d/*.yml
    reload.enabled: false

filebeat.prospectors:
- type: docker
  containers.ids:
    - '*'
  document_type: docker
  processors:
    - add_docker_metadata: ~

filebeat.autodiscover:
  providers:
    - type: docker
      templates:
        - condition:
            contains:
              docker.container.image: "mariadb"
          config:
            - module: mysql
              access:
                prospector:
                  type: docker
                  containers.ids:
                    - "${data.docker.container.id}"

processors:
- add_cloud_metadata:

output.elasticsearch:
  hosts: ['LB.ELK.rancher.internal:9200']

setup.kibana:
  host: "LB.ELK.rancher.internal:5601"

```

**modules.d/mysql.yml**

```
- module: mysql
  # Error logs
  error:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    #var.paths:

  # Slow logs
  slowlog:
    enabled: true

    # Set custom paths for the log files. If left empty,
    # Filebeat will choose the paths depending on your OS.
    #var.paths: ["/var/log/mysql/mariadb-slow.log*"]

```

Any guidance would be super helpful as I'm feeling pretty stupid.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [January 26, 2018, 11:07am UTC](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115/2 "2018-01-26T11:07:44Z")

</div>

Hi @castle9mm,

I'm afraid there is not an easy way to get logs from a file inside the container, you have to do something special to gain access to them, these are some options:

- Update container command to include a `tail` to the log file you are interested in.
- Put the log file in a common volume, and use another container (sidecar) to read it. The sidecar can be Filebeat or just a tail (then you capture its stdout with Filebeat).

I would go with modifying MariaDB command to do also the tail. Hope this helps

Best regards

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 23, 2018, 11:08am UTC](https://discuss.elastic.co/t/mysql-mariadb-overview-dashboard-empty/117115/3 "2018-02-23T11:08:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.