Saving and Re-running CloudWatch Logs Insights Queries

After you have created a query, you can save it so that you can run it again later. Your saved queries are kept in a folder structure to help you keep them organized. You can save as many as 1000 CloudWatch Logs Insights queries, per Region per account.

To save a query, you must be logged in to a role that has the logs:PutQueryDefinition permission. To see a list of saved queries, you must be logged in to a role that has the logs:DescribeQueryDefinitions permission.

To save a query

1. Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/.

2. In the navigation pane, choose Insights.

3. In the query editor, create a query.

4. Choose Save.

   If you don't see a Save button, you need to change to the new design for the CloudWatch Logs console. To do so:

   1. In the navigation pane, choose Log groups.

   2. Choose Try the new design.

   3. In the navigation pane, choose Insights and return to step 3 of this procedure.

5. Enter a name for the query.

6. (Optional) Choose a folder where you want to save the query. Select Create new to create a folder. If you create a new folder, you can use slash (/) characters in the folder name to define a folder structure. For example, naming a new folder folder-level-1/folder-level-2 creates a top-level folder called folder-level-1, with another folder called folder-level-2 inside that folder. The query is saved in folder-level-2.

7. (Optional) Change the query's log groups or query text.

8. Choose Save.

To run a saved query

1. Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/.

2. In the navigation pane, choose Insights.

3. On the right, choose Queries.

4. Select your query from Saved queries list. It appears in the query editor.

5. Choose Run.

To save a new version of a saved query

1. Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/.

2. In the navigation pane, choose Insights.

3. On the right, choose Queries.

4. Select your query from Saved queries list. It appears in the query editor.

5. Modify the query. If you need to run it to check your work, choose Run query.

6. When you are ready to save the new version, choose Actions, Save as.

7. Enter a name for the query.

8. (Optional) Choose a folder where you want to save the query. Select Create new to create a folder. If you create a new folder, you can use slash (/) characters in the folder name to define a folder structure. For example, naming a new folder folder-level-1/folder-level-2 creates a top-level folder called folder-level-1, with another folder called folder-level-2 inside that folder. The query is saved in folder-level-2.

9. (Optional) Change the query's log groups or query text.

10. Choose Save.

To delete a query, you must be logged in to a role that has the logs:DeleteQueryDefinition permission.

To edit or delete a saved query

1. Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/.

2. In the navigation pane, choose Insights.

3. On the right, choose Queries.

4. Select your query from Saved queries list. It appears in the query editor.

5. Choose Actions, Edit or Actions, Delete.