which services used to implement log user events

Hello @nam,

This depends on the type of logs you are storing and querying.

For example, if you are pushing to cloudwatch logs, you can use the AWS CloudWatch logs for querying: https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_QuerySyntax-examples.html

You can also use Athena connector to Cloudwatch: https://docs.aws.amazon.com/athena/latest/ug/connectors-cloudwatch.html

If you are storing logs in S3, you can use Athena to query logs directly from S3. https://docs.aws.amazon.com/athena/latest/ug/querying-apache-logs.html

The important factor is in what format are you producing logs, how much logs would be produced and how you are querying the logs.