CloudWatch Logs Get Query Results

Returns the results from the specified query.

Only the fields requested in the query are returned, along with a @ptr field, which is the identifier for the log record. You can use the value of @ptr in a GetLogRecord operation to get the full log record.

GetQueryResults does not start a query execution. To run a query, use StartQuery.

If the value of the Status field in the output is Running, this operation returns only partial results. If you see a value of Scheduled or Running for the status, you can retry the operation later to see the final results.

External Documentation

To learn more, visit the AWS documentation.

Basic Parameters

Parameter	Description
AWS Region(s)	Enter the desired AWS Region(s). To execute the action in multiple regions, provide a comma-separated list. For example: us-east-1,eu-west-2. If you wish to run the action in all available regions, use the asterisk symbol (*) instead.
Query ID	The ID number of the query.

Advanced Parameters

Parameter	Description
Disable XML To JSON Auto Convert	When checked, XML responses are not automatically converted into JSON format.

Example Output

{
    "results": [
        [
            {
                "field": "string",
                "value": "string"
            }
        ]
    ],
    "statistics": {
        "bytesScanned": 0,
        "recordsMatched": 0,
        "recordsScanned": 0
    },
    "status": "string"
}

Automation Library Example

Cloudwatch Logs Get Query Results with Aws and Send Results Via Email

Preview this Automation on desktop