CODEWITHSUNDEEP
amazon-cloudwatchamazon-cloudwatchlogs
user3625533
user3625533

Reputation: 415

Cloud watch query for message like list of strings

Am using a query to search the messages like 'string' using below

fields @timestamp, @message
| filter @message like /engineer/
| sort @timestamp desc
| limit 20

wants to search message contains any of the strings in a list and tried the below query but, its not working. Am getting the results which does not contain those values.

fields @timestamp, @message
| filter @message like /[engineer|doctor|builder]/
| sort @timestamp desc
| limit 20

Intention is to get logs which contains engineer OR doctor OR builder

Upvotes: 5

Views: 8200

Answers (1)

Dejan Peretin
Dejan Peretin

Reputation: 12089

This should work:

filter @message like /(engineer|builder|doctor)/

Using the square brackets will match individual characters, [doctor] matches something like (d|o|c|t|o|r)

Upvotes: 6

Related Questions