AWS Cloudwatch Query Snippets

aws cwl snippets

# Parse api-gateway log pattern for space separated message cloudwatch
fields @timestamp
| parse '* - - "*" * * * - * * * *' as ip, timestamp, method, route, http, req_id, req_latency, code, req_size
| filter code = 200
| sort @timestamp desc
| limit 20

# Parse with filter on field with regex
fields @timestamp
| parse '* - - "*" * * * - * * * *' as ip, timestamp, method, route, http, req_id, req_latency, code, req_size
| filter code like /5\d\d/
| sort @timestamp desc
| limit 20