CloudWatch Logs quotas

The following tables provide the default service quotas, also referred to as limits, for CloudWatch Logs for an AWS account. Most of these service quotas, but not all, are listed under the Amazon CloudWatch Logs namespace in the Service Quotas console. To request a quota increase for those quotas, see the procedure later in this section.

Resource	Default quota
Batch size	The maximum batch size is 1,048,576 bytes. This size is calculated as the sum of all event messages in UTF-8, plus 26 bytes for each log event. This quota can't be changed.
Data archiving	Up to 5 GB of data archiving for free. This quota can't be changed.
CreateLogGroup	5 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.
CreateLogStream	50 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.
DeleteLogGroup	5 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.
DeleteLogStream	5 transactions per second (TPS/account/Region), after which transactions are throttled. You can request a quota increase.
DescribeLogGroups	5 transactions per second (TPS/account/Region). You can request a quota increase.
DescribeLogStreams	5 transactions per second (TPS/account/Region). You can request a quota increase.
Discovered log fields	CloudWatch Logs Insights can discover a maximum of 1000 log event fields in a log group. This quota can't be changed. For more information, see Supported logs and discovered fields.
Extracted log fields in JSON logs	CloudWatch Logs Insights can extract a maximum of 200 log event fields from a JSON log. This quota can't be changed. For more information, see Supported logs and discovered fields.
Export task	One active (running or pending) export task at a time, per account. This quota can't be changed.
FilterLogEvents	25 requests per second in US East (N. Virginia). 10 requests per second in the following Regions: US East (Ohio) US West (N. California) US West (Oregon) Africa (Cape Town) Asia Pacific (Hong Kong) Asia Pacific (Mumbai) Asia Pacific (Seoul) Asia Pacific (Singapore) Asia Pacific (Tokyo) Asia Pacific (Sydney) Canada (Central) Europe (Ireland) Europe (London) Europe (Milan) Europe (Paris) Europe (Stockholm) Middle East (Bahrain) South America (São Paulo) AWS GovCloud (US-East) AWS GovCloud (US-West) 5 requests per second in all other Regions. This quota can't be changed.
GetLogEvents	30 requests per second in Europe (Paris). 25 requests per second in the following Regions: US East (N. Virginia) US East (Ohio) US West (N. California) Africa (Cape Town) Asia Pacific (Hong Kong) Asia Pacific (Mumbai) Asia Pacific (Seoul) Asia Pacific (Singapore) Asia Pacific (Tokyo) Asia Pacific (Sydney) Canada (Central) Europe (London) Europe (Milan) Europe (Stockholm) Middle East (Bahrain) South America (São Paulo) AWS GovCloud (US-East) AWS GovCloud (US-West) 10 requests per second in all other Regions. This quota can't be changed. We recommend subscriptions if you are continuously processing new data. If you need historical data, we recommend exporting your data to Amazon S3.
Incoming data	Up to 5 GB of incoming data for free. This quota can't be changed.
Live Tail concurrent sessions.	15 concurrent sessions. You can request a quota increase.
Live Tail: log groups searched in one session.	Maximum of 10 log groups scanned in one Live Tail session. This quota can't be changed.
Log event size	256 KB (maximum). This quota can't be changed.
Log groups	1,000,000 log groups per account per Region. You can request a quota increase. There is no quota on the number of log streams that can belong to one log group.
Metrics filters	100 per log group. This quota can't be changed.
Embedded metric format metrics	100 metrics per log event and 30 dimensions per metric. For more information about the embedded metric format, see Specification: Embedded Metric Format in the Amazon CloudWatch User Guide.
PutLogEvents	The maximum batch size of a PutLogEvents request is 1MB. 800 transactions per second per account per Region, except for the following Regions where the quota is 1500 transactions per second per account per Region: US East (N. Virginia), US West (Oregon), and Europe (Ireland). You can request an increase to the per-second throttling quota by using the Service Quotas service.
Query execution timeout	Queries in CloudWatch Logs Insights time out after 60 minutes. This time limit can't be changed.
Queried log groups	A maximum of 50 log groups can be queried in a single CloudWatch Logs Insights query. This quota can't be changed.
Query concurrency	For Standard class log groups, a maximum of 30 concurrent CloudWatch Logs Insights queries, including queries that have been added to dashboards. For Infrequnt Access class log groups, a maximum of 5 concurrent CloudWatch Logs Insights queries, including queries that have been added to dashboards. These quotas can't be changed.
Query availability	Queries constructed in the console are available for 30 days, via the History command. This availability period can't be changed. Query definitions created by using PutQueryDefinition do not expire.
Query results availability	Results from a query are retrievable for 7 days. This availability time can't be changed.
Query results displayed in console	By default, up to 1000 rows of query results are displayed on the console. You can use the limit command in a query to increase this to as many as 10,000 rows. For more information, see CloudWatch Logs Insights query syntax.
Regular expressions	Up to 5 filter patterns containing regular expressions for each log group when creating metric filters or subscription filters. This quota can't be changed. Up to 2 regular expressions for each filter pattern, when creating a delimited or JSON filter pattern for metric filters and subscription filters or when filtering log events.
Resource policies	Up to 10 CloudWatch Logs resource policies per Region per account. This quota can't be changed.
Saved queries	You can save as many as 1000 CloudWatch Logs Insights queries, per Region per account. This quota can't be changed.
Subscription filters	2 per log group. This quota can't be changed.

Managing your CloudWatch Logs service quotas

CloudWatch Logs has integrated with Service Quotas, an AWS service that enables you to view and manage your quotas from a central location. For more information, see What Is Service Quotas? in the Service Quotas User Guide.

Service Quotas makes it easy to look up the value of your CloudWatch Logs service quotas.

AWS Management Console

To view CloudWatch Logs service quotas using the console

1. Open the Service Quotas console at https://console.aws.amazon.com/servicequotas/.

2. In the navigation pane, choose AWS services.

3. From the AWS services list, search for and select Amazon CloudWatch Logs.

   In the Service quotas list, you can see the service quota name, applied value (if it is available), AWS default quota, and whether the quota value is adjustable.

4. To view additional information about a service quota, such as the description, choose the quota name.

5. (Optional) To request a quota increase, select the quota that you want to increase, select Request quota increase, enter or select the required information, and select Request.

To work more with service quotas using the console see the Service Quotas User Guide. To request a quota increase, see Requesting a quota increase in the Service Quotas User Guide.

AWS CLI

To view CloudWatch Logs service quotas using the AWS CLI

Run the following command to view the default CloudWatch Logs quotas.

aws service-quotas list-aws-default-service-quotas \
    --query 'Quotas[*].{Adjustable:Adjustable,Name:QuotaName,Value:Value,Code:QuotaCode}' \
    --service-code logs \
    --output table

To work more with service quotas using the AWS CLI, see the Service Quotas AWS CLI Command Reference. To request a quota increase, see the request-service-quota-increase command in the AWS CLI Command Reference.