How do I identify the CloudWatch log event that initiated a CloudWatch alarm?

Resolution

Manually check the logs from the log group

Complete the following steps:

1. Open the CloudWatch console.
2. In the navigation pane, choose Alarms.
3. Select your alarm.
4. Choose View, and then choose Related Logs.
   Note: When you choose Related Logs, the filter pattern is automatically populated on the Log events page.
5. On the Log events page, enter the correct timeframe of when the log event initiated the alarm.