Nested query Cloudwatch Log Insights

Question

I use sturctured logs of which the fields are automatically picked up by Insights.  
All logs have a field traceId.  
One log has the field itemId. This logs also has a traceId field.  
  
I want to view all logs based on the itemId.  
  
So I need to find the traceId related to the itemId.  
And use this traceId to view all logs with this traceId.  
This feels like a nested query in SQL.   
How can I achieve a nested query with Insights?  
  
Does something exist in the likes of :

```
fields @message
| filter traceId=(fields @traceId | filter itemId="123" | limit 1)
```

Answer

Hi TheNxtra,  
  
The X-Ray team does not own log insights, I would recommend posting this question to the CloudWatch forum: https://forums.aws.amazon.com/forum.jspa?forumID=138  
  
They should be able to help you with this question even though the query involves an X-Ray trace ID. Please follow up if you have any other questions specific to the X-Ray Service!

Nested query Cloudwatch Log Insights

Conteúdo relevante