CloudTrail Lake Conditions

0

I have a CloudTrail Lake and using the following conditions but not getting any all the results event though I know that there are API calls made those days. Please advise.

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 00:00:00'

demandé il y a 10 mois229 vues
1 réponse
2
Réponse acceptée

The eventTime consists of date and time. In your example condition, you are using '2023-05-05 00:00:00' and that includes the date and the time. Using your condition, the result set will only include events between '2023-05-05 00:00:00' and '2023-05-06 00:00:00' (meaning not including '2023-05-06 00:00:01' to '2023-05-06 23:59:59')

If you would like to filter for the whole day of the range, consider including the time. Eg:

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 23:59:59'

Or consider removing the time in your condition like the example below.

DATE_FORMAT(eventTime, '%Y%m%d') >= ‘20230505’ AND DATE_FORMAT(eventTime, '%Y%m%d') <= ‘20230506’

profile pictureAWS
EXPERT
répondu il y a 10 mois
profile pictureAWS
EXPERT
vérifié il y a 10 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions