1개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
1
I think you are asking to find all events which don't have a value for the field att.resp? In which case, you can use the *filter *command with the *ispresent *function, for example
fields @timestamp, @message
| sort @timestamp desc
| filter NOT ispresent(att.resp
If you want to see more on the Logs Insights syntax see https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_QuerySyntax.html.
답변함 2년 전