Filtering queries Find slowest write queries parse @message /Query_time: (?<queryTime>.*?) Lock_time: (<?lockTime>.*?) Rows_sent: (?<rowsSent>.*?) Rows_examined: (?<rowsExamined>.*?)\s(?<query>.*?)$/ | filter @message like /(?i)insert/ | sort queryTime desc | limit 10