Search AWS CloudWatch Logs with Insights queries and flexible time ranges from your command line.
Project description
qaws - Query AWS Logs
Command line utility for search in AWS CloudWatch Logs with Insights queries and flexible time ranges.
-
Install latest via pip: https://pypi.org/project/qaws.
-
Execute "qaws" in your command line.
NAME qaws -- QUery AWS CloudWatch logs SYNOPSIS qaws [-g groups...]
[-t starttime | starttime endtime]
[-q query] DESCRIPTION -g --groups groups ... Specify 1 to N logging groups like "/ecs/someservice1" -t --time starttime | starttime endtime Specify starttime in history to more recent endtime in present. Possible formats for time specification is: ISO time: "2000-01-01T00:00:00" Epoch in seconds: "1590314700" Time relative to Now:
"1h" 1 hour ago "1h 60m" 2 hours ago "1h 60m 3600s" 3 hours ago "3600s 60m 1h" 3 hours ago as well (order doesn't matter) "3600s 3600s 3600s" 3 hours ago as well (items are repeatable) "1y 1mo 1w 1d 1h 1m 1s" is possible as well -g --query query Query exactly as it is usually written in AWS CloudWatch Insights in Web Console: fields @timestamp, @message | filter @message like 'event' | limit 10" - It can take few minutes (~2 minutes) until logs appears in CloudWatch and therefore fetching logs with '-t "1m"' may not return any results - Even if you set '|limit 1' in --query then CloudWatch will anyway search over entire specified '-t "10d"' history which can take lot of time EXAMPLES qaws.py
--groups "/ecs/myservice0"
--time "1h"
--query "fields @message" qaws.py
--groups "/ecs/myservice0" "/ecs/myservice1" "/ecs/myservice2"
--time "1h 30m"
--query "fields @message" qaws.py
--groups "/ecs/myservice0"
--time "1h" "30m"
--query "fields @timestamp @message | filter @message like 'event' | limit 15" qaws.py
--groups "/ecs/myservice0"
--time "2020-05-24T00:00:00" "2020-05-24T12:00:00"
--query "fields @message | filter @message like 'event'" qaws.py
--groups "/ecs/myservice0"
--time "1y" "2020-05-24T00:00:00"
--query "fields @message | filter @message like 'event'" qaws.py
--groups "/ecs/myservice0"
--time "2020-05-24T00:00:00" "5h"
--query "fields @message | filter @message like 'event' | limit 15"AUTHORS Jiri Kacirek (kacirek.j@gmail.com) 2020 IMPLEMENTATION Python 3.8
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.