# Who could help me to find a conf file in Logstash for MySQL slowlog

**URL:** https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113
**Category:** Logstash
**Created:** [June 8, 2015, 3:57am UTC](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113 "2015-06-08T03:57:41Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![apaul](https://avatars.discourse-cdn.com/v4/letter/a/ce7236/32.png) [@apaul](https://discuss.elastic.co/u/apaul)
#### Post date: [June 8, 2015, 3:57am UTC](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113/1 "2015-06-08T03:57:41Z")

</div>

Hi

I have a simple data with mysql slow query format as below.

2015-05-26 09:06:39^^^apaul[apaul] @ [192.168.1.1]^^^00:00:14^^^00:00:00^^^36772^^^2090463^^^mysql^^^select \* from general\_log

The Separator is ^^^, Now I want to send the data to ES like this format  
datetime: 2015-05-26 09:06:39  
user:apaul  
sql:select \* from general\_log

Could anyone tell me how to write a filter conf?

Thanks  
Apaul

---

<div class="post-metadata">

### Author: ![aland](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@aland](https://discuss.elastic.co/u/aland)
#### Post date: [June 10, 2015, 12:27pm UTC](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113/2 "2015-06-10T12:27:40Z")

</div>

Your mysql slow query log format is not the same as mine - is it standard?  
I used [http://www.phase2technology.com/blog/adding-mysql-slow-query-logs-to-logstash/](http://www.phase2technology.com/blog/adding-mysql-slow-query-logs-to-logstash/) to help me.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:37am UTC](https://discuss.elastic.co/t/who-could-help-me-to-find-a-conf-file-in-logstash-for-mysql-slowlog/2113/3 "2017-07-06T05:37:55Z")

</div>


