CloudTrail Lake Conditions

0

I have a CloudTrail Lake and using the following conditions but not getting any all the results event though I know that there are API calls made those days. Please advise.

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 00:00:00'

posta 10 mesi fa229 visualizzazioni
1 Risposta
2
Risposta accettata

The eventTime consists of date and time. In your example condition, you are using '2023-05-05 00:00:00' and that includes the date and the time. Using your condition, the result set will only include events between '2023-05-05 00:00:00' and '2023-05-06 00:00:00' (meaning not including '2023-05-06 00:00:01' to '2023-05-06 23:59:59')

If you would like to filter for the whole day of the range, consider including the time. Eg:

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 23:59:59'

Or consider removing the time in your condition like the example below.

DATE_FORMAT(eventTime, '%Y%m%d') >= ‘20230505’ AND DATE_FORMAT(eventTime, '%Y%m%d') <= ‘20230506’

profile pictureAWS
ESPERTO
con risposta 10 mesi fa
profile pictureAWS
ESPERTO
verificato 10 mesi fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande