diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index 6d42ee36d06..d52117ba847 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -42,6 +42,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Add grok pattern to support redis 5.0.3 log timestamp. {issue}9819[9819] {pull}10033[10033]
 - Now save the 'first seen' timestamp in `event.created` (previously `read_timestamp`),
   instead of saving the parsed date. Now aligned with `event.created` semantics elsewhere. {pull}10139[10139]
+- Rename `mysql.error.thread_id` and `mysql.slowlog.id` to `mysql.thread_id`. {pull}10161[10161]
+- Remove `mysql.error.timestamp`  and `mysql.slowlog.timestamp`. {pull}10161[10161]
 
 *Heartbeat*
 
diff --git a/dev-tools/ecs-migration.yml b/dev-tools/ecs-migration.yml
index 0bdbfdf10a1..c7d6afe508e 100644
--- a/dev-tools/ecs-migration.yml
+++ b/dev-tools/ecs-migration.yml
@@ -551,7 +551,7 @@
   alias: true
 
 - from: mysql.error.thread_id
-  to: process.thread.id
+  to: mysql.thread_id
   alias: true
 
 - from: mysql.slowlog.ip
@@ -566,6 +566,10 @@
   to: user.name
   alias: true
 
+- from: mysql.slowlog.id
+  to: mysql.thread_id
+  alias: true
+
 ## NGINX module
 
 - from: nginx.access.user_name
diff --git a/filebeat/docs/fields.asciidoc b/filebeat/docs/fields.asciidoc
index 9711da595ff..b89806d781a 100644
--- a/filebeat/docs/fields.asciidoc
+++ b/filebeat/docs/fields.asciidoc
@@ -6322,27 +6322,29 @@ Fields from the MySQL log files.
 
 
 
-[float]
-== error fields
-
-Contains fields from the MySQL error logs.
+*`mysql.thread_id`*::
++
+--
+type: long
 
+The connection or thread ID for the query.
 
 
-*`mysql.error.timestamp`*::
-+
 --
-The timestamp from the log line.
+
+[float]
+== error fields
+
+Contains fields from the MySQL error logs.
 
 
---
 
 *`mysql.error.thread_id`*::
 +
 --
 type: alias
 
-alias to: process.thread.id
+alias to: mysql.thread_id
 
 --
 
@@ -6419,16 +6421,6 @@ type: long
 The number of rows modified by the query.
 
 
---
-
-*`mysql.slowlog.timestamp`*::
-+
---
-type: long
-
-The unix timestamp taken from the `SET timestamp` query.
-
-
 --
 
 *`mysql.slowlog.query`*::
@@ -6442,10 +6434,9 @@ The slow query.
 *`mysql.slowlog.id`*::
 +
 --
-type: long
-
-The connection or thread ID for the query.
+type: alias
 
+alias to: mysql.thread_id
 
 --
 
diff --git a/filebeat/module/mysql/_meta/fields.yml b/filebeat/module/mysql/_meta/fields.yml
index 62763f8d463..59cc658481f 100644
--- a/filebeat/module/mysql/_meta/fields.yml
+++ b/filebeat/module/mysql/_meta/fields.yml
@@ -9,3 +9,7 @@
       description: >
         Fields from the MySQL log files.
       fields:
+        - name: thread_id
+          type: long
+          description: >
+            The connection or thread ID for the query.
diff --git a/filebeat/module/mysql/error/_meta/fields.yml b/filebeat/module/mysql/error/_meta/fields.yml
index 39a7949da7d..a4ad44ef2fb 100644
--- a/filebeat/module/mysql/error/_meta/fields.yml
+++ b/filebeat/module/mysql/error/_meta/fields.yml
@@ -3,13 +3,9 @@
   description: >
     Contains fields from the MySQL error logs.
   fields:
-    - name: timestamp
-      description: >
-        The timestamp from the log line.
-
     - name: thread_id
       type: alias
-      path: process.thread.id
+      path: mysql.thread_id
       migration: true
     - name: level
       type: alias
diff --git a/filebeat/module/mysql/error/ingest/pipeline.json b/filebeat/module/mysql/error/ingest/pipeline.json
index a541ed29aa0..0c77ca01cbf 100644
--- a/filebeat/module/mysql/error/ingest/pipeline.json
+++ b/filebeat/module/mysql/error/ingest/pipeline.json
@@ -5,7 +5,7 @@
         "field": "message",
         "patterns": [
           "%{LOCALDATETIME:mysql.error.timestamp} (\\[%{DATA:log.level}\\] )?%{GREEDYDATA:message}",
-          "%{DATA:mysql.error.timestamp} %{NUMBER:process.thread.id:long} \\[%{DATA:log.level}\\] %{GREEDYDATA:message}",
+          "%{DATA:mysql.error.timestamp} %{NUMBER:mysql.thread_id:long} \\[%{DATA:log.level}\\] %{GREEDYDATA:message}",
           "%{GREEDYDATA:message}"
         ],
         "ignore_missing": true,
@@ -28,6 +28,11 @@
         ],
         "ignore_failure": true
       }
+    }, {
+      "remove":{
+        "field": "mysql.error.timestamp",
+        "ignore_missing": true
+      }
     }],
   "on_failure" : [{
     "set" : {
diff --git a/filebeat/module/mysql/error/test/error.log-expected.json b/filebeat/module/mysql/error/test/error.log-expected.json
index 59ecbd65a01..486756d8a26 100644
--- a/filebeat/module/mysql/error/test/error.log-expected.json
+++ b/filebeat/module/mysql/error/test/error.log-expected.json
@@ -8,7 +8,6 @@
         "input.type": "log",
         "log.offset": 0,
         "message": "mysqld_safe Starting mysqld daemon with databases from /usr/local/var/mysql",
-        "mysql.error.timestamp": "161209 13:08:33",
         "service.type": "mysql"
     },
     {
@@ -21,8 +20,7 @@
         "log.level": "Warning",
         "log.offset": 92,
         "message": "TIMESTAMP with implicit DEFAULT value is deprecated. Please use --explicit_defaults_for_timestamp server option (see documentation for more details).",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.335060Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -35,8 +33,7 @@
         "log.level": "Warning",
         "log.offset": 282,
         "message": "Insecure configuration for --secure-file-priv: Current value does not restrict location of generated files. Consider setting it to a valid, non-empty path.",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.335892Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -49,8 +46,7 @@
         "log.level": "Note",
         "log.offset": 478,
         "message": "/usr/local/Cellar/mysql/5.7.10/bin/mysqld (mysqld 5.7.10) starting as process 61571 ...",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.336610Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -63,8 +59,7 @@
         "log.level": "Warning",
         "log.offset": 603,
         "message": "Setting lower_case_table_names=2 because file system for /usr/local/var/mysql/ is case insensitive",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.345527Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -77,8 +72,7 @@
         "log.level": "Note",
         "log.offset": 742,
         "message": "InnoDB: Mutexes and rw_locks use GCC atomic builtins",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.351596Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -91,8 +85,7 @@
         "log.level": "Note",
         "log.offset": 832,
         "message": "/usr/local/Cellar/mysql/5.7.10/bin/mysqld: ready for connections.",
-        "mysql.error.timestamp": "2016-12-09T12:08:33.784722Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -115,8 +108,7 @@
         "log.level": "Note",
         "log.offset": 1002,
         "message": "InnoDB: page_cleaner: 1000ms intended loop took 772568ms. The settings might not be optimal. (flushed=0 and evicted=0, during the time.)",
-        "mysql.error.timestamp": "2016-12-09T22:21:02.443689Z",
-        "process.thread.id": 0,
+        "mysql.thread_id": 0,
         "service.type": "mysql"
     },
     {
@@ -129,7 +121,6 @@
         "log.level": "Warning",
         "log.offset": 1176,
         "message": "Using unique option prefix myisam-recover instead of myisam-recover-options is deprecated and will be removed in a future release. Please use the full name instead.",
-        "mysql.error.timestamp": "161209 14:18:50",
         "service.type": "mysql"
     },
     {
@@ -142,7 +133,6 @@
         "log.level": "Note",
         "log.offset": 1367,
         "message": "Plugin 'FEDERATED' is disabled.",
-        "mysql.error.timestamp": "161209 14:18:50",
         "service.type": "mysql"
     },
     {
@@ -154,7 +144,6 @@
         "input.type": "log",
         "log.offset": 1422,
         "message": "InnoDB: The InnoDB memory heap is disabled",
-        "mysql.error.timestamp": "161209 14:18:50",
         "service.type": "mysql"
     }
 ]
\ No newline at end of file
diff --git a/filebeat/module/mysql/fields.go b/filebeat/module/mysql/fields.go
index 2ac249397f2..8825a56ce11 100644
--- a/filebeat/module/mysql/fields.go
+++ b/filebeat/module/mysql/fields.go
@@ -31,5 +31,5 @@ func init() {
 
 // Asset returns asset data
 func Asset() string {
-	return "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"
+	return "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"
 }
diff --git a/filebeat/module/mysql/slowlog/_meta/fields.yml b/filebeat/module/mysql/slowlog/_meta/fields.yml
index 64abf9085c3..38147609ba9 100644
--- a/filebeat/module/mysql/slowlog/_meta/fields.yml
+++ b/filebeat/module/mysql/slowlog/_meta/fields.yml
@@ -24,17 +24,13 @@
       type: long
       description: >
         The number of rows modified by the query.
-    - name: timestamp
-      type: long
-      description: >
-        The unix timestamp taken from the `SET timestamp` query.
     - name: query
       description: >
         The slow query.
     - name: id
-      type: long
-      description: >
-        The connection or thread ID for the query.
+      type: alias
+      path: mysql.thread_id
+      migration: true
     - name: schema
       type: keyword
       description: >
diff --git a/filebeat/module/mysql/slowlog/ingest/pipeline.json b/filebeat/module/mysql/slowlog/ingest/pipeline.json
index 0f9e224d5cc..9d517d30535 100644
--- a/filebeat/module/mysql/slowlog/ingest/pipeline.json
+++ b/filebeat/module/mysql/slowlog/ingest/pipeline.json
@@ -4,7 +4,7 @@
     "grok": {
       "field": "message",
       "patterns":[
-        "^# User@Host: %{USER:user.name}(\\[%{USER:mysql.slowlog.current_user}\\])? @ %{HOSTNAME:source.domain}? \\[%{IP:source.ip}?\\](\\s*Id:\\s* %{NUMBER:mysql.slowlog.id:long})?\n(# Thread_id:%{SPACE}%{NUMBER:mysql.slowlog.id}%{METRICSPACE}Schema: %{WORD:mysql.slowlog.schema}?%{METRICSPACE}QC_hit: %{WORD:mysql.slowlog.query_cache_hit}\n)?%{METRICSPACE}Query_time: %{NUMBER:mysql.slowlog.query_time.sec:float}%{METRICSPACE}Lock_time: %{NUMBER:mysql.slowlog.lock_time.sec:float}%{METRICSPACE}Rows_sent: %{NUMBER:mysql.slowlog.rows_sent:long}%{METRICSPACE}Rows_examined: %{NUMBER:mysql.slowlog.rows_examined:long}%{METRICSPACE}(Rows_affected: %{NUMBER:mysql.slowlog.rows_affected:long}%{METRICSPACE})?(Full_scan: %{WORD:mysql.slowlog.full_scan}%{METRICSPACE})?(Full_join: %{WORD:mysql.slowlog.full_join}%{METRICSPACE})?(Tmp_table: %{WORD:mysql.slowlog.tmp_table}%{METRICSPACE})?(Tmp_table_on_disk: %{WORD:mysql.slowlog.tmp_table_on_disk}%{METRICSPACE})?(Filesort: %{WORD:mysql.slowlog.filesort}%{METRICSPACE})?(Filesort_on_disk: %{WORD:mysql.slowlog.filesort_on_disk}%{METRICSPACE})?(Merge_passes: %{NUMBER:mysql.slowlog.merge_passes}%{METRICSPACE})?(Priority_queue: %{WORD:mysql.slowlog.priority_queue}%{METRICSPACE})?%{EXPLAIN}?(use %{WORD:mysql.slowlog.schema};\n)?SET timestamp=%{NUMBER:mysql.slowlog.timestamp:long};\n%{GREEDYMULTILINE:mysql.slowlog.query}"
+        "^# User@Host: %{USER:user.name}(\\[%{USER:mysql.slowlog.current_user}\\])? @ %{HOSTNAME:source.domain}? \\[%{IP:source.ip}?\\](\\s*Id:\\s* %{NUMBER:mysql.thread_id:long})?\n(# Thread_id:%{SPACE}%{NUMBER:mysql.thread_id}%{METRICSPACE}Schema: %{WORD:mysql.slowlog.schema}?%{METRICSPACE}QC_hit: %{WORD:mysql.slowlog.query_cache_hit}\n)?%{METRICSPACE}Query_time: %{NUMBER:mysql.slowlog.query_time.sec:float}%{METRICSPACE}Lock_time: %{NUMBER:mysql.slowlog.lock_time.sec:float}%{METRICSPACE}Rows_sent: %{NUMBER:mysql.slowlog.rows_sent:long}%{METRICSPACE}Rows_examined: %{NUMBER:mysql.slowlog.rows_examined:long}%{METRICSPACE}(Rows_affected: %{NUMBER:mysql.slowlog.rows_affected:long}%{METRICSPACE})?(Full_scan: %{WORD:mysql.slowlog.full_scan}%{METRICSPACE})?(Full_join: %{WORD:mysql.slowlog.full_join}%{METRICSPACE})?(Tmp_table: %{WORD:mysql.slowlog.tmp_table}%{METRICSPACE})?(Tmp_table_on_disk: %{WORD:mysql.slowlog.tmp_table_on_disk}%{METRICSPACE})?(Filesort: %{WORD:mysql.slowlog.filesort}%{METRICSPACE})?(Filesort_on_disk: %{WORD:mysql.slowlog.filesort_on_disk}%{METRICSPACE})?(Merge_passes: %{NUMBER:mysql.slowlog.merge_passes}%{METRICSPACE})?(Priority_queue: %{WORD:mysql.slowlog.priority_queue}%{METRICSPACE})?%{EXPLAIN}?(use %{WORD:mysql.slowlog.schema};\n)?SET timestamp=%{NUMBER:mysql.slowlog.timestamp:long};\n%{GREEDYMULTILINE:mysql.slowlog.query}"
         ],
       "pattern_definitions" : {
         "GREEDYMULTILINE": "(.|\n)*",
@@ -51,6 +51,11 @@
       "formats": ["UNIX"],
       "ignore_failure": true
     }
+  }, {
+    "remove":{
+      "field": "mysql.slowlog.timestamp",
+      "ignore_missing": true
+    }
   }, {
     "gsub": {
       "field": "mysql.slowlog.query",
diff --git a/filebeat/module/mysql/slowlog/test/mariadb-10.1.21.log-expected.json b/filebeat/module/mysql/slowlog/test/mariadb-10.1.21.log-expected.json
index bbeb1870112..3e979082548 100644
--- a/filebeat/module/mysql/slowlog/test/mariadb-10.1.21.log-expected.json
+++ b/filebeat/module/mysql/slowlog/test/mariadb-10.1.21.log-expected.json
@@ -12,14 +12,13 @@
         ],
         "log.offset": 24,
         "mysql.slowlog.current_user": "root",
-        "mysql.slowlog.id": "5",
         "mysql.slowlog.lock_time.sec": 0.0,
         "mysql.slowlog.query": "select sleep(2);",
         "mysql.slowlog.query_cache_hit": false,
         "mysql.slowlog.query_time.sec": 2.000652,
         "mysql.slowlog.rows_examined": 0,
         "mysql.slowlog.rows_sent": 1,
-        "mysql.slowlog.timestamp": 1528898676,
+        "mysql.thread_id": "5",
         "service.type": "mysql",
         "source.domain": "localhost",
         "source.ip": "121.0.0.1",
diff --git a/filebeat/module/mysql/slowlog/test/mariadb-10.2.12.log-expected.json b/filebeat/module/mysql/slowlog/test/mariadb-10.2.12.log-expected.json
index 8517b4a6fda..6517ef123f2 100644
--- a/filebeat/module/mysql/slowlog/test/mariadb-10.2.12.log-expected.json
+++ b/filebeat/module/mysql/slowlog/test/mariadb-10.2.12.log-expected.json
@@ -12,7 +12,6 @@
         ],
         "log.offset": 437,
         "mysql.slowlog.current_user": "root",
-        "mysql.slowlog.id": "8",
         "mysql.slowlog.lock_time.sec": 0.0,
         "mysql.slowlog.query": "select sleep(2)\nAS foo;",
         "mysql.slowlog.query_cache_hit": false,
@@ -20,7 +19,7 @@
         "mysql.slowlog.rows_affected": 0,
         "mysql.slowlog.rows_examined": 0,
         "mysql.slowlog.rows_sent": 1,
-        "mysql.slowlog.timestamp": 1547741043,
+        "mysql.thread_id": "8",
         "service.type": "mysql",
         "source.domain": "localhost",
         "user.name": "root"
@@ -42,7 +41,6 @@
         "mysql.slowlog.filesort_on_disk": false,
         "mysql.slowlog.full_join": false,
         "mysql.slowlog.full_scan": true,
-        "mysql.slowlog.id": "25844",
         "mysql.slowlog.lock_time.sec": 0.0,
         "mysql.slowlog.merge_passes": "0",
         "mysql.slowlog.priority_queue": false,
@@ -53,9 +51,9 @@
         "mysql.slowlog.rows_examined": 53022772,
         "mysql.slowlog.rows_sent": 0,
         "mysql.slowlog.schema": "blah",
-        "mysql.slowlog.timestamp": 1547741058,
         "mysql.slowlog.tmp_table": true,
         "mysql.slowlog.tmp_table_on_disk": false,
+        "mysql.thread_id": "25844",
         "service.type": "mysql",
         "source.ip": "192.168.0.10",
         "user.name": "root"
diff --git a/filebeat/module/mysql/slowlog/test/mariadb-explain.log-expected.json b/filebeat/module/mysql/slowlog/test/mariadb-explain.log-expected.json
index 562e9317c92..40ee56904bd 100644
--- a/filebeat/module/mysql/slowlog/test/mariadb-explain.log-expected.json
+++ b/filebeat/module/mysql/slowlog/test/mariadb-explain.log-expected.json
@@ -12,7 +12,6 @@
         ],
         "log.offset": 24,
         "mysql.slowlog.current_user": "root",
-        "mysql.slowlog.id": "2",
         "mysql.slowlog.lock_time.sec": 0.000337,
         "mysql.slowlog.query": "select count(*) from customer, orders, nation\n  where c_custkey=o_custkey\n    and c_nationkey=n_nationkey\n    and n_name='GERMANY';",
         "mysql.slowlog.query_cache_hit": false,
@@ -20,7 +19,7 @@
         "mysql.slowlog.rows_examined": 65633,
         "mysql.slowlog.rows_sent": 1,
         "mysql.slowlog.schema": "dbt3sf1",
-        "mysql.slowlog.timestamp": 1384261412,
+        "mysql.thread_id": "2",
         "service.type": "mysql",
         "source.domain": "localhost",
         "user.name": "root"
diff --git a/filebeat/module/mysql/slowlog/test/mysql-5.7.22.log-expected.json b/filebeat/module/mysql/slowlog/test/mysql-5.7.22.log-expected.json
index 1c675dd94c2..68c950eefc6 100644
--- a/filebeat/module/mysql/slowlog/test/mysql-5.7.22.log-expected.json
+++ b/filebeat/module/mysql/slowlog/test/mysql-5.7.22.log-expected.json
@@ -12,13 +12,12 @@
         ],
         "log.offset": 41,
         "mysql.slowlog.current_user": "root",
-        "mysql.slowlog.id": 7234,
         "mysql.slowlog.lock_time.sec": 0.0,
         "mysql.slowlog.query": "select sleep(15);",
         "mysql.slowlog.query_time.sec": 15.000223,
         "mysql.slowlog.rows_examined": 0,
         "mysql.slowlog.rows_sent": 1,
-        "mysql.slowlog.timestamp": 1533630467,
+        "mysql.thread_id": 7234,
         "service.type": "mysql",
         "source.ip": "218.76.8.37",
         "user.name": "root"
@@ -41,7 +40,6 @@
         "mysql.slowlog.query_time.sec": 0.000153,
         "mysql.slowlog.rows_examined": 5,
         "mysql.slowlog.rows_sent": 1,
-        "mysql.slowlog.timestamp": 1533630467,
         "service.type": "mysql",
         "source.domain": "localhost",
         "user.name": "debian-sys-maint"
@@ -59,13 +57,12 @@
         ],
         "log.offset": 526,
         "mysql.slowlog.current_user": "appuser",
-        "mysql.slowlog.id": 10997316,
         "mysql.slowlog.lock_time.sec": 0.000212,
         "mysql.slowlog.query": "SELECT mcu.mcu_guid, mcu.cus_guid, mcu.mcu_url, mcu.mcu_crawlelements, mcu.mcu_order, GROUP_CONCAT(mca.mca_guid SEPARATOR \";\") as mca_guid\n                    FROM kat_mailcustomerurl mcu, kat_customer cus, kat_mailcampaign mca\n                    WHERE cus.cus_guid = mcu.cus_guid\n                        AND cus.pro_code = 'CYB'\n                        AND cus.cus_offline = 0\n                        AND mca.cus_guid = cus.cus_guid\n                        AND (mcu.mcu_date IS NULL OR mcu.mcu_date < CURDATE())\n                        AND mcu.mcu_crawlelements IS NOT NULL\n                    GROUP BY mcu.mcu_guid\n                    ORDER BY mcu.mcu_order ASC\n                    LIMIT 1000;",
         "mysql.slowlog.query_time.sec": 4.071491,
         "mysql.slowlog.rows_examined": 1489615,
         "mysql.slowlog.rows_sent": 1000,
-        "mysql.slowlog.timestamp": 1533630467,
+        "mysql.thread_id": 10997316,
         "service.type": "mysql",
         "source.domain": "apphost",
         "source.ip": "1.1.1.1",
@@ -84,13 +81,12 @@
         ],
         "log.offset": 1438,
         "mysql.slowlog.current_user": "appuser",
-        "mysql.slowlog.id": 10999834,
         "mysql.slowlog.lock_time.sec": 3.6e-05,
         "mysql.slowlog.query": "call load_stats(1, '2017-04-28 00:00:00');",
         "mysql.slowlog.query_time.sec": 10.346539,
         "mysql.slowlog.rows_examined": 4751313,
         "mysql.slowlog.rows_sent": 0,
-        "mysql.slowlog.timestamp": 1533630467,
+        "mysql.thread_id": 10999834,
         "service.type": "mysql",
         "source.domain": "apphost",
         "source.ip": "1.1.1.1",