Nested query Cloudwatch Log Insights

0

I use sturctured logs of which the fields are automatically picked up by Insights.
All logs have a field traceId.
One log has the field itemId. This logs also has a traceId field.

I want to view all logs based on the itemId.

So I need to find the traceId related to the itemId.
And use this traceId to view all logs with this traceId.
This feels like a nested query in SQL.
How can I achieve a nested query with Insights?

Does something exist in the likes of :

fields @message
| filter traceId=(fields @traceId | filter itemId="123" | limit 1)
preguntada hace 5 años4445 visualizaciones
1 Respuesta
0

Hi TheNxtra,

The X-Ray team does not own log insights, I would recommend posting this question to the CloudWatch forum: https://forums.aws.amazon.com/forum.jspa?forumID=138

They should be able to help you with this question even though the query involves an X-Ray trace ID. Please follow up if you have any other questions specific to the X-Ray Service!

AWS
respondido hace 5 años

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas