Search AWS CloudWatch Logs with Insights queries and flexible time ranges from your command line.
Project description
saws
Searches AWS CloudWatch Logs with Insights queries and flexible time ranges from your command line.
NAME
qaws.py -- Search AWS CloudWatch logs
SYNOPSIS
qaws.py [-g groups...] \
[-t starttime | starttime endtime] \
[-q query]
DESCRIPTION
-g --groups groups ...
Specify 1 to N logging groups like "/ecs/someservice1"
-t --time starttime | starttime endtime
Specify starttime in history to more recent endtime in present.
Possible formats for time specification is:
ISO time: "2000-01-01T00:00:00"
Epoch in seconds: "1590314700"
Time relative to Now:
"1h" 1 hour ago
"1h 60m" 2 hours ago
"1h 60m 3600s" 3 hours ago
"3600s 60m 1h" 3 hours ago as well (order doesn't matter)
"3600s 3600s 3600s" 3 hours ago as well (items are repeatable)
"1y 1mo 1w 1d 1h 1m 1s" is possible as well
-g --query query
Query exactly as it is usually written in AWS CloudWatch Insights in Web Console:
fields @timestamp, @message
| filter @message like 'event'
| limit 10"
- It can take few minutes (~2 minutes) until logs appears in CloudWatch and therefore fetching logs
with '-t "1m"' may not return any results
- Even if you set '|limit 1' in --query then CloudWatch will anyway search over entire specified '-t "10d"'
history which can take lot of time
EXAMPLES
qaws.py \
--groups "/ecs/myservice0" \
--time "1h" \
--query "fields @message"
qaws.py \
--groups "/ecs/myservice0" "/ecs/myservice1" "/ecs/myservice2" \
--time "1h 30m" \
--query "fields @message"
qaws.py \
--groups "/ecs/myservice0" \
--time "1h" "30m" \
--query "fields @timestamp @message | filter @message like 'event' | limit 15"
qaws.py \
--groups "/ecs/myservice0" \
--time "2020-05-24T00:00:00" "2020-05-24T12:00:00" \
--query "fields @message | filter @message like 'event'"
qaws.py \
--groups "/ecs/myservice0" \
--time "1y" "2020-05-24T00:00:00" \
--query "fields @message | filter @message like 'event'"
qaws.py \
--groups "/ecs/myservice0" \
--time "2020-05-24T00:00:00" "5h" \
--query "fields @message | filter @message like 'event' | limit 15"
AUTHORS
Jiri Kacirek (kacirek.j@gmail.com) 2020
IMPLEMENTATION
Python 3.8
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
qaws-0.0.4.tar.gz
(3.8 kB
view hashes)
Built Distribution
qaws-0.0.4-py3-none-any.whl
(5.3 kB
view hashes)