CloudTrail Lake Conditions

0

I have a CloudTrail Lake and using the following conditions but not getting any all the results event though I know that there are API calls made those days. Please advise.

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 00:00:00'

gefragt vor 10 Monaten229 Aufrufe
1 Antwort
2
Akzeptierte Antwort

The eventTime consists of date and time. In your example condition, you are using '2023-05-05 00:00:00' and that includes the date and the time. Using your condition, the result set will only include events between '2023-05-05 00:00:00' and '2023-05-06 00:00:00' (meaning not including '2023-05-06 00:00:01' to '2023-05-06 23:59:59')

If you would like to filter for the whole day of the range, consider including the time. Eg:

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 23:59:59'

Or consider removing the time in your condition like the example below.

DATE_FORMAT(eventTime, '%Y%m%d') >= ‘20230505’ AND DATE_FORMAT(eventTime, '%Y%m%d') <= ‘20230506’

profile pictureAWS
EXPERTE
beantwortet vor 10 Monaten
profile pictureAWS
EXPERTE
überprüft vor 10 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen