Nested query Cloudwatch Log Insights

0

I use sturctured logs of which the fields are automatically picked up by Insights.
All logs have a field traceId.
One log has the field itemId. This logs also has a traceId field.

I want to view all logs based on the itemId.

So I need to find the traceId related to the itemId.
And use this traceId to view all logs with this traceId.
This feels like a nested query in SQL.
How can I achieve a nested query with Insights?

Does something exist in the likes of :

fields @message
| filter traceId=(fields @traceId | filter itemId="123" | limit 1)
asked 5 years ago4383 views
1 Answer
0

Hi TheNxtra,

The X-Ray team does not own log insights, I would recommend posting this question to the CloudWatch forum: https://forums.aws.amazon.com/forum.jspa?forumID=138

They should be able to help you with this question even though the query involves an X-Ray trace ID. Please follow up if you have any other questions specific to the X-Ray Service!

AWS
answered 5 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions