New featureMedium

Amazon CloudWatch supports creating alarms from log queries

Amazon CloudWatch now allows creating alarms directly from log queries, eliminating intermediate steps and enabling monitoring and alerting within the log analysis workflow

Amazon CloudWatch has released the ability to create alarms from log queries. This allows you to configure an alarm on a log query and specify the alarm threshold directly, eliminating the need to first create metric filters or custom metrics as intermediate steps. This streamlines the path to actively monitoring the data in your logs and monitoring and alerting on it. For example, you can write a query to count error rates by service, set a threshold, and receive an alarm notification with log context when errors spike-all in a single workflow. Alarms created from log queries support all standard CloudWatch Alarm actions, including Amazon SNS notifications and Amazon EventBridge integrations. This feature is available in all commercial AWS Regions except Middle East (UAE) and Middle East (Bahrain). You can create log query-based alarms using the Amazon CloudWatch console, AWS Command Line Interface (AWS CLI), AWS CloudFormation, and AWS SDKs.

Read the original AWS announcement

Related articles and terms

Building Unified Monitoring with Amazon CloudWatch - Designing Metrics, Logs, and AlarmsBuild unified monitoring with the three pillars of metrics, logs, and alarms. This article covers interactive analysis with Logs Insights, high-precision notifications with composite alarms, and leveraging Embedded Metric Format.Amazon CloudWatchA fully managed monitoring service that provides unified monitoring and analysis of metrics, logs, and events for AWS resources and applicationsThe Integration Power of the AWS Observability Stack - Operational Transparency Through CloudWatch, X-Ray, and CloudTrailThis article examines the integration level of the AWS observability stack centered on CloudWatch, X-Ray, and CloudTrail, comparing it with Azure Monitor and GCP Cloud Logging to explain how the three pillars of metrics, traces, and logs drive differences in operational quality.Why CloudWatch Logs Costs More Than You Expect - The Cost Structure of Ingestion, Storage, and AnalysisThis article explains the pricing structure where CloudWatch Logs ingestion costs over 20 times more than storage, the cost explosions caused by VPC Flow Logs and Lambda logs, and optimization strategies using the Infrequent Access class and S3 export.DevOps Notifications with AWS Chatbot - Integrating AWS Events with Slack and TeamsLearn how to deliver CloudWatch alarm and CodePipeline notifications to Slack and Teams, and build a ChatOps environment where you can operate AWS using @aws commands from chat.