如何在 cloudwatch logs insights 中搜索纯文本？
How to search for plain text in cloudwatch logs insights?
我需要能够使用 Cloudwatch 日志见解搜索某些错误。
我尝试使用解析语法，但没有得到任何结果。
我的永久日志中的示例错误日志
StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]"
at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15)
[2019-07-28T06:37:21.961Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=f141a42d-235f-4a0e-af84-a5264fd251bf)
StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]"
at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15)
[2019-07-28T06:37:23.584Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=4716a8b8-c22a-48af-a371-84ebdac741d2)
StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]"
at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15)
[2019-07-28T06:37:24.482Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=aca7bbbc-7247-4845-94ef-76ed6abddbc1)
首先，将行更改为 文本 以访问纯文本格式的日志：
然后在搜索栏中搜索：
在 cloudwatch 日志控制台中搜索大量日志可能会非常慢，这就是 cloudwatch 日志见解的用武之地。
如果您想在 cloudwatch logs insights 中搜索特定字符串，您可以这样做
fields @timestamp, @message
| filter @message like /your text to search/
| sort @timestamp desc
| limit 20
我需要能够使用 Cloudwatch 日志见解搜索某些错误。
我尝试使用解析语法，但没有得到任何结果。
我的永久日志中的示例错误日志
StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15) [2019-07-28T06:37:21.961Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=f141a42d-235f-4a0e-af84-a5264fd251bf) StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15) [2019-07-28T06:37:23.584Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=4716a8b8-c22a-48af-a371-84ebdac741d2) StatusCodeError: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" at new StatusCodeError (/home/ubuntu/admin-portal-backend/node_modules/request-promise-core/lib/errors.js:32:15) [2019-07-28T06:37:24.482Z] ERROR: Admin API/12643 on ip-172-31-72-36: 400 - "[{"errorCode":400002,"message":"Field Validation Error","details":"Missing mandatory field dbc.","type":"REQUEST_ERROR","field":"dbc"}]" (req_id=aca7bbbc-7247-4845-94ef-76ed6abddbc1)
首先，将行更改为 文本 以访问纯文本格式的日志：
然后在搜索栏中搜索：
在 cloudwatch 日志控制台中搜索大量日志可能会非常慢，这就是 cloudwatch 日志见解的用武之地。
如果您想在 cloudwatch logs insights 中搜索特定字符串，您可以这样做
fields @timestamp, @message
| filter @message like /your text to search/
| sort @timestamp desc
| limit 20