AWS - CloudWatch - Amazon Connect - Filter By First Event - ContactId

Question

Hope you're well. I've been trying to put together a CloudWatch Query that returns the first event in each contactId.

I thought I'd add a count stat, and then exclude all events that were equal to or greater than 2. I'm clearly not doing something right though. Although I am being provided with the count, it seems for some reason that the count is excluding other information from the query. The query returns almost no information on the event that it is counting. I'd like the count to be added, and also INCLUDE the information from the query.

Here is the query I am using:

fields @timestamp, @message
| sort number asc
| stats count(ContactId) as number by ContactId
| filter ContactFlowModuleType = 'SetLoggingBehavior' and Parameters.LoggingBehavior = 'Enable'
| fields @message
| display Results, ContactId, @timestamp, ContactFlowModuleType, number

With this query, it says that 'time stamp' is invalid. I believe the stats clause has something to do with it.

I'm looking to determine the sequence of events on a contactId basis, so that I can exclude all logged events after the initial event. For now, I'd just like to see a count on the basis of ContactId, so I can perform the exclusion myself.

Steve