AWS CloudWatch Logs Insights: Query Patterns

CloudWatch Logs Insights uses a SQL-like query language. Here are my most-used patterns.

Find Errors

fields @timestamp, @message
| filter @message like /ERROR/
| sort @timestamp desc
| limit 100

Latency Percentiles

filter @type = "REPORT"
| stats avg(@duration), pct(@duration, 95), pct(@duration, 99) by bin(1h)