AWS CloudWatch #

Cloudwatch log insights #

Parse message value #

fields   @message, @tm
| filter @message =~ 'Finished '
| filter @message =~ 'ms'
| parse @message "* after * ms*" as prefix, tm, suffix
| display tm, @message, @timestamp
| sort tm desc
| limit 200