CloudTrail Lake Conditions

0

I have a CloudTrail Lake and using the following conditions but not getting any all the results event though I know that there are API calls made those days. Please advise.

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 00:00:00'

已提问 10 个月前228 查看次数
1 回答
2
已接受的回答

The eventTime consists of date and time. In your example condition, you are using '2023-05-05 00:00:00' and that includes the date and the time. Using your condition, the result set will only include events between '2023-05-05 00:00:00' and '2023-05-06 00:00:00' (meaning not including '2023-05-06 00:00:01' to '2023-05-06 23:59:59')

If you would like to filter for the whole day of the range, consider including the time. Eg:

WHERE eventTime >= '2023-05-05 00:00:00' AND eventTime <= '2023-05-06 23:59:59'

Or consider removing the time in your condition like the example below.

DATE_FORMAT(eventTime, '%Y%m%d') >= ‘20230505’ AND DATE_FORMAT(eventTime, '%Y%m%d') <= ‘20230506’

profile pictureAWS
专家
已回答 10 个月前
profile pictureAWS
专家
已审核 10 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则