'Cloudwatch Log Insights Group Log Entries
I have two different log groups and am retrieving details in different ways.
Once per:
fields @timestamp, message.event.detail.myIdentifier as placeA.myIdentifier
And once with
fields @timestamp
| parse message.event.Records.0.body '"myIdentifier ": "*"' as placeB.myIdentifier
Is there a way to join these log entries by myIdentifier?
Ideally the goal would be to compare the timestamps of all places per identifier.
So e.g.:
| myIdentifier | placeA-timestamp | placeB-timestamp |
|---|---|---|
| First | 12:00:00 | 13:00:00 |
| Second | 12:05:00 | 13:05:00 |
Is there a way to achieve this with cloud watch log insights?
Thanks for your help!
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|
