CloudWatch Logs quotas - Amazon CloudWatch Logs

CloudWatch Logs quotas

The following tables provide the default service quotas, also referred to as limits, for CloudWatch Logs for an AWS account. Most of these service quotas, but not all, are listed under the Amazon CloudWatch Logs namespace in the Service Quotas console. To request a quota increase for those quotas, see the procedure later in this section.

Resource Default quota

Account-level policies

One account-level subscription filter policy per account.

One account-level data protection policy per account.

These quotas can't be changed.

Batch size

The maximum batch size is 1,048,576 bytes. This size is calculated as the sum of all event messages in UTF-8, plus 26 bytes for each log event. This quota can't be changed.

Data archiving

Up to 5 GB of data archiving for free. This quota can't be changed.

CreateLogGroup

10 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.

CreateLogStream

50 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.

Custom data identifiers

Each data protection policy can include up to 10 custom data identifiers. You can request a quota increase.

Each regular expression that defines a custom data identifier can include up to 200 characters. This quota can't be changed.

DeleteLogGroup

10 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.

DeleteLogStream

15 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.

DescribeLogGroups

10 transactions per second (TPS/account/Region). You can request a quota increase.

DescribeLogStreams

25 transactions per second (TPS/account/Region). You can request a quota increase.

Discovered log fields

CloudWatch Logs Insights can discover a maximum of 1000 log event fields in a log group. This quota can't be changed.

For more information, see Supported logs and discovered fields.

Extracted log fields in JSON logs

CloudWatch Logs Insights can extract a maximum of 200 log event fields from a JSON log. This quota can't be changed.

For more information, see Supported logs and discovered fields.

Export task

One active (running or pending) export task at a time, per account. This quota can't be changed.

FilterLogEvents

25 requests per second in US East (N. Virginia).

10 requests per second in the following Regions:

  • US East (Ohio)

  • US West (N. California)

  • US West (Oregon)

  • Africa (Cape Town)

  • Asia Pacific (Hong Kong)

  • Asia Pacific (Mumbai)

  • Asia Pacific (Seoul)

  • Asia Pacific (Singapore)

  • Asia Pacific (Tokyo)

  • Asia Pacific (Sydney)

  • Canada (Central)

  • Europe (Ireland)

  • Europe (London)

  • Europe (Milan)

  • Europe (Paris)

  • Europe (Stockholm)

  • Middle East (Bahrain)

  • South America (São Paulo)

  • AWS GovCloud (US-East)

  • AWS GovCloud (US-West)

5 requests per second in all other Regions.

This quota can't be changed.

GetLogEvents

30 requests per second in Europe (Paris).

25 requests per second in the following Regions:

  • US East (N. Virginia)

  • US East (Ohio)

  • US West (N. California)

  • Africa (Cape Town)

  • Asia Pacific (Hong Kong)

  • Asia Pacific (Mumbai)

  • Asia Pacific (Seoul)

  • Asia Pacific (Singapore)

  • Asia Pacific (Tokyo)

  • Asia Pacific (Sydney)

  • Canada (Central)

  • Europe (London)

  • Europe (Milan)

  • Europe (Stockholm)

  • Middle East (Bahrain)

  • South America (São Paulo)

  • AWS GovCloud (US-East)

  • AWS GovCloud (US-West)

10 requests per second in all other Regions.

This quota can't be changed.

We recommend subscriptions if you are continuously processing new data. If you need historical data, we recommend exporting your data to Amazon S3.

Incoming data

Up to 5 GB of incoming data for free. This quota can't be changed.

Live Tail concurrent sessions.

15 concurrent sessions. You can request a quota increase.

Live Tail: log groups searched in one session.

Maximum of 10 log groups scanned in one Live Tail session. This quota can't be changed.

Log event size

256 KB (maximum). This quota can't be changed.

Log groups

1,000,000 log groups per account per Region. You can request a quota increase.

There is no quota on the number of log streams that can belong to one log group.

Metrics filters

100 per log group. This quota can't be changed.

Embedded metric format metrics

100 metrics per log event and 30 dimensions per metric. For more information about the embedded metric format, see Specification: Embedded Metric Format in the Amazon CloudWatch User Guide.

PutLogEvents

The maximum batch size of a PutLogEvents request is 1MB. This size is calculated as the sum of all event messages in UTF-8, plus 26 bytes for each log event.

2500 transactions per second per account per Region, except for the following Regions where the quota is 5000 transactions per second per account per Region: US East (N. Virginia), US West (Oregon), Europe (Ireland), Europe (Milan), Europe (Paris), and Europe (Stockholm). You can request an increase to the per-second throttling quota by using the Service Quotas service.

Query execution timeout

Queries in CloudWatch Logs Insights time out after 60 minutes. This time limit can't be changed.

Queried log groups

A maximum of 50 log groups can be queried in a single CloudWatch Logs Insights query. This quota can't be changed.

Query concurrency

For Standard class log groups, a maximum of 30 concurrent CloudWatch Logs Insights queries, including queries that have been added to dashboards.

For Infrequnt Access class log groups, a maximum of 5 concurrent CloudWatch Logs Insights queries, including queries that have been added to dashboards.

These quotas can't be changed.

Query availability

Queries constructed in the console are available for 30 days, via the History command. This availability period can't be changed.

Query definitions created by using PutQueryDefinition do not expire.

Query results availability

Results from a query are retrievable for 7 days. This availability time can't be changed.

Query results displayed in console

By default, up to 1000 rows of query results are displayed on the console. You can use the limit command in a query to increase this to as many as 10,000 rows. For more information, see CloudWatch Logs Insights query syntax.

Regular expressions

Up to 5 filter patterns containing regular expressions for each log group when creating metric filters or subscription filters. This quota can't be changed.

Up to 2 regular expressions for each filter pattern, when creating a delimited or JSON filter pattern for metric filters and subscription filters or when filtering log events.

Resource policies

Up to 10 CloudWatch Logs resource policies per Region per account. This quota can't be changed.

Saved queries

You can save as many as 1000 CloudWatch Logs Insights queries, per Region per account. This quota can't be changed.

Subscription filters

2 per log group. This quota can't be changed.

Managing your CloudWatch Logs service quotas

CloudWatch Logs has integrated with Service Quotas, an AWS service that enables you to view and manage your quotas from a central location. For more information, see What Is Service Quotas? in the Service Quotas User Guide.

Service Quotas makes it easy to look up the value of your CloudWatch Logs service quotas.

AWS Management Console
To view CloudWatch Logs service quotas using the console
  1. Open the Service Quotas console at https://console.aws.amazon.com/servicequotas/.

  2. In the navigation pane, choose AWS services.

  3. From the AWS services list, search for and select Amazon CloudWatch Logs.

    In the Service quotas list, you can see the service quota name, applied value (if it is available), AWS default quota, and whether the quota value is adjustable.

  4. To view additional information about a service quota, such as the description, choose the quota name.

  5. (Optional) To request a quota increase, select the quota that you want to increase, select Request quota increase, enter or select the required information, and select Request.

To work more with service quotas using the console see the Service Quotas User Guide. To request a quota increase, see Requesting a quota increase in the Service Quotas User Guide.

AWS CLI
To view CloudWatch Logs service quotas using the AWS CLI

Run the following command to view the default CloudWatch Logs quotas.

aws service-quotas list-aws-default-service-quotas \ --query 'Quotas[*].{Adjustable:Adjustable,Name:QuotaName,Value:Value,Code:QuotaCode}' \ --service-code logs \ --output table

To work more with service quotas using the AWS CLI, see the Service Quotas AWS CLI Command Reference. To request a quota increase, see the request-service-quota-increase command in the AWS CLI Command Reference.