Skip to content

Instantly share code, notes, and snippets.

@udhos

udhos/cloudwatch_logs_insights_parse_fields.md

Last active November 18, 2021 12:20
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save udhos/017c4ea77ec75ebc84666e59ef40cbdc to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save udhos/017c4ea77ec75ebc84666e59ef40cbdc to your computer and use it in GitHub Desktop.
Download ZIP
cloudwatch_logs_insights_parse_fields.md
Raw
cloudwatch_logs_insights_parse_fields.md 
fields @timestamp, @message
| filter (@message like /records=/)
| parse @message /records=(?<records>\S+)/
| filter records >= 200
| sort @timestamp desc
| limit 2000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment