Nested query Cloudwatch Log Insights

0

I use sturctured logs of which the fields are automatically picked up by Insights.
All logs have a field traceId.
One log has the field itemId. This logs also has a traceId field.

I want to view all logs based on the itemId.

So I need to find the traceId related to the itemId.
And use this traceId to view all logs with this traceId.
This feels like a nested query in SQL.
How can I achieve a nested query with Insights?

Does something exist in the likes of :

fields @message
| filter traceId=(fields @traceId | filter itemId="123" | limit 1)
已提问 5 年前4444 查看次数
1 回答
0

Hi TheNxtra,

The X-Ray team does not own log insights, I would recommend posting this question to the CloudWatch forum: https://forums.aws.amazon.com/forum.jspa?forumID=138

They should be able to help you with this question even though the query involves an X-Ray trace ID. Please follow up if you have any other questions specific to the X-Ray Service!

AWS
已回答 5 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则