Namespace Amazon.CDK.AWS.Logs

Amazon CloudWatch Logs Construct Library

This library supplies constructs for working with CloudWatch Logs.

Log Groups/Streams

The basic unit of CloudWatch is a Log Group. Every log group typically has the same kind of data logged to it, in the same format. If there are multiple applications or services logging into the Log Group, each of them creates a new Log Stream.

Every log operation creates a "log event", which can consist of a simple string or a single-line JSON object. JSON objects have the advantage that they afford more filtering abilities (see below).

The only configurable attribute for log streams is the retention period, which configures after how much time the events in the log stream expire and are deleted.

The default retention period if not supplied is 2 years, but it can be set to one of the values in the RetentionDays enum to configure a different retention period (including infinite retention).

// Configure log group for short retention
var logGroup = new LogGroup(stack, "LogGroup", new LogGroupProps {
    Retention = RetentionDays.ONE_WEEK
});// Configure log group for infinite retention
var logGroup = new LogGroup(stack, "LogGroup", new LogGroupProps {
    Retention = Infinity
});

LogRetention

The LogRetention construct is a way to control the retention period of log groups that are created outside of the CDK. The construct is usually used on log groups that are auto created by AWS services, such as AWS lambda.

This is implemented using a CloudFormation custom resource which pre-creates the log group if it doesn't exist, and sets the specified log retention period (never expire, by default).

By default, the log group will be created in the same region as the stack. The logGroupRegion property can be used to configure log groups in other regions. This is typically useful when controlling retention for log groups auto-created by global services that publish their log group to a specific region, such as AWS Chatbot creating a log group in us-east-1.

By default, the log group created by LogRetention will be retained after the stack is deleted. If the RemovalPolicy is set to DESTROY, then the log group will be deleted when the stack is deleted.

Log Group Class

CloudWatch Logs offers two classes of log groups:

For more details please check: log group class documentation

Resource Policy

CloudWatch Resource Policies allow other AWS services or IAM Principals to put log events into the log groups. A resource policy is automatically created when addToResourcePolicy is called on the LogGroup for the first time:

var logGroup = new LogGroup(this, "LogGroup");
logGroup.AddToResourcePolicy(new PolicyStatement(new PolicyStatementProps {
    Actions = new [] { "logs:CreateLogStream", "logs:PutLogEvents" },
    Principals = new [] { new ServicePrincipal("es.amazonaws.com") },
    Resources = new [] { logGroup.LogGroupArn }
}));

Or more conveniently, write permissions to the log group can be granted as follows which gives same result as in the above example.

var logGroup = new LogGroup(this, "LogGroup");
logGroup.GrantWrite(new ServicePrincipal("es.amazonaws.com"));

Similarly, read permissions can be granted to the log group as follows.

var logGroup = new LogGroup(this, "LogGroup");
logGroup.GrantRead(new ServicePrincipal("es.amazonaws.com"));

Be aware that any ARNs or tokenized values passed to the resource policy will be converted into AWS Account IDs. This is because CloudWatch Logs Resource Policies do not accept ARNs as principals, but they do accept Account ID strings. Non-ARN principals, like Service principals or Any principals, are accepted by CloudWatch.

Encrypting Log Groups

By default, log group data is always encrypted in CloudWatch Logs. You have the option to encrypt log group data using a AWS KMS customer master key (CMK) should you not wish to use the default AWS encryption. Keep in mind that if you decide to encrypt a log group, any service or IAM identity that needs to read the encrypted log streams in the future will require the same CMK to decrypt the data.

Here's a simple example of creating an encrypted Log Group using a KMS CMK.

using Amazon.CDK.AWS.KMS;


new LogGroup(this, "LogGroup", new LogGroupProps {
    EncryptionKey = new Key(this, "Key")
});

See the AWS documentation for more detailed information about encrypting CloudWatch Logs.

Subscriptions and Destinations

Log events matching a particular filter can be sent to either a Lambda function or a Kinesis stream.

If the Kinesis stream lives in a different account, a CrossAccountDestination object needs to be added in the destination account which will act as a proxy for the remote Kinesis stream. This object is automatically created for you if you use the CDK Kinesis library.

Create a SubscriptionFilter, initialize it with an appropriate Pattern (see below) and supply the intended destination:

using Amazon.CDK.AWS.Logs.Destinations;

Function fn;
LogGroup logGroup;


new SubscriptionFilter(this, "Subscription", new SubscriptionFilterProps {
    LogGroup = logGroup,
    Destination = new LambdaDestination(fn),
    FilterPattern = FilterPattern.AllTerms("ERROR", "MainThread"),
    FilterName = "ErrorInMainThread"
});

When you use KinesisDestination, you can choose the method used to distribute log data to the destination by setting the distribution property.

using Amazon.CDK.AWS.Logs.Destinations;
using Amazon.CDK.AWS.Kinesis;

Stream stream;
LogGroup logGroup;


new SubscriptionFilter(this, "Subscription", new SubscriptionFilterProps {
    LogGroup = logGroup,
    Destination = new KinesisDestination(stream),
    FilterPattern = FilterPattern.AllTerms("ERROR", "MainThread"),
    FilterName = "ErrorInMainThread",
    Distribution = Distribution.RANDOM
});

Metric Filters

CloudWatch Logs can extract and emit metrics based on a textual log stream. Depending on your needs, this may be a more convenient way of generating metrics for you application than making calls to CloudWatch Metrics yourself.

A MetricFilter either emits a fixed number every time it sees a log event matching a particular pattern (see below), or extracts a number from the log event and uses that as the metric value.

Example:

new MetricFilter(this, "MetricFilter", new MetricFilterProps {
    LogGroup = logGroup,
    MetricNamespace = "MyApp",
    MetricName = "Latency",
    FilterPattern = FilterPattern.All(FilterPattern.Exists("$.latency"), FilterPattern.RegexValue("$.message", "=", "bind: address already in use")),
    MetricValue = "$.latency"
});

Remember that if you want to use a value from the log event as the metric value, you must mention it in your pattern somewhere.

A very simple MetricFilter can be created by using the logGroup.extractMetric() helper function:

LogGroup logGroup;

logGroup.ExtractMetric("$.jsonField", "Namespace", "MetricName");

Will extract the value of jsonField wherever it occurs in JSON-structured log records in the LogGroup, and emit them to CloudWatch Metrics under the name Namespace/MetricName.

Exposing Metric on a Metric Filter

You can expose a metric on a metric filter by calling the MetricFilter.metric() API. This has a default of statistic = 'avg' if the statistic is not set in the props.

LogGroup logGroup;

var mf = new MetricFilter(this, "MetricFilter", new MetricFilterProps {
    LogGroup = logGroup,
    MetricNamespace = "MyApp",
    MetricName = "Latency",
    FilterPattern = FilterPattern.Exists("$.latency"),
    MetricValue = "$.latency",
    Dimensions = new Dictionary<string, string> {
        { "ErrorCode", "$.errorCode" }
    },
    Unit = Unit.MILLISECONDS
});

//expose a metric from the metric filter
var metric = mf.Metric();

//you can use the metric to create a new alarm
//you can use the metric to create a new alarm
new Alarm(this, "alarm from metric filter", new AlarmProps {
    Metric = metric,
    Threshold = 100,
    EvaluationPeriods = 2
});

Metrics for IncomingLogs and IncomingBytes

Metric methods have been defined for IncomingLogs and IncomingBytes within LogGroups. These metrics allow for the creation of alarms on log ingestion, ensuring that the log ingestion process is functioning correctly.

To define an alarm based on these metrics, you can use the following template:

var logGroup = new LogGroup(this, "MyLogGroup");
var incomingEventsMetric = logGroup.MetricIncomingLogEvents();
new Alarm(this, "HighLogVolumeAlarm", new AlarmProps {
    Metric = incomingEventsMetric,
    Threshold = 1000,
    EvaluationPeriods = 1
});

var logGroup = new LogGroup(this, "MyLogGroup");
var incomingBytesMetric = logGroup.MetricIncomingBytes();
new Alarm(this, "HighDataVolumeAlarm", new AlarmProps {
    Metric = incomingBytesMetric,
    Threshold = 5000000,  // 5 MB
    EvaluationPeriods = 1
});

Patterns

Patterns describe which log events match a subscription or metric filter. There are three types of patterns:

All patterns are constructed by using static functions on the FilterPattern class.

In addition to the patterns above, the following special patterns exist:

Text Patterns

Text patterns match if the literal strings appear in the text form of the log line.

Examples:

// Search for lines that contain both "ERROR" and "MainThread"
var pattern1 = FilterPattern.AllTerms("ERROR", "MainThread");

// Search for lines that either contain both "ERROR" and "MainThread", or
// both "WARN" and "Deadlock".
var pattern2 = FilterPattern.AnyTermGroup(new [] { "ERROR", "MainThread" }, new [] { "WARN", "Deadlock" });

JSON Patterns

JSON patterns apply if the log event is the JSON representation of an object (without any other characters, so it cannot include a prefix such as timestamp or log level). JSON patterns can make comparisons on the values inside the fields.

Fields in the JSON structure are identified by identifier the complete object as $ and then descending into it, such as $.field or $.list[0].field.

Example:

// Search for all events where the component field is equal to
// "HttpServer" and either error is true or the latency is higher
// than 1000.
var pattern = FilterPattern.All(FilterPattern.StringValue("$.component", "=", "HttpServer"), FilterPattern.Any(FilterPattern.BooleanValue("$.error", true), FilterPattern.NumberValue("$.latency", ">", 1000)), FilterPattern.RegexValue("$.message", "=", "bind address already in use"));

Space-delimited table patterns

If the log events are rows of a space-delimited table, this pattern can be used to identify the columns in that structure and add conditions on any of them. The canonical example where you would apply this type of pattern is Apache server logs.

Text that is surrounded by "..." quotes or [...] square brackets will be treated as one column.

After constructing a SpaceDelimitedTextPattern, you can use the following two members to add restrictions:

Multiple restrictions can be added on the same column; they must all apply.

Example:

// Search for all events where the component is "HttpServer" and the
// result code is not equal to 200.
var pattern = FilterPattern.SpaceDelimited("time", "component", "...", "result_code", "latency").WhereString("component", "=", "HttpServer").WhereNumber("result_code", "!=", 200);

Logs Insights Query Definition

Creates a query definition for CloudWatch Logs Insights.

Example:

new QueryDefinition(this, "QueryDefinition", new QueryDefinitionProps {
    QueryDefinitionName = "MyQuery",
    QueryString = new QueryString(new QueryStringProps {
        Fields = new [] { "@timestamp", "@message" },
        ParseStatements = new [] { "@message \"[*] *\" as loggingType, loggingMessage", "@message \"<*>: *\" as differentLoggingType, differentLoggingMessage" },
        FilterStatements = new [] { "loggingType = \"ERROR\"", "loggingMessage = \"A very strange error occurred!\"" },
        Sort = "@timestamp desc",
        Limit = 20
    })
});

Data Protection Policy

Creates a data protection policy and assigns it to the log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data. When a user who does not have permission to view masked data views a log event that includes masked data, the sensitive data is replaced by asterisks.

For more information, see Protect sensitive log data with masking.

For a list of types of managed identifiers that can be audited and masked, see Types of data that you can protect.

If a new identifier is supported but not yet in the DataIdentifiers enum, the name of the identifier can be supplied as name in the constructor instead.

To add a custom data identifier, supply a custom name and regex to the CustomDataIdentifiers constructor. For more information on custom data identifiers, see Custom data identifiers.

Each policy may consist of a log group, S3 bucket, and/or Firehose delivery stream audit destination.

Example:

using Amazon.CDK.AWS.KinesisFirehose.Alpha;
using Amazon.CDK.AWS.KinesisFirehose.Destinations.Alpha;


var logGroupDestination = new LogGroup(this, "LogGroupLambdaAudit", new LogGroupProps {
    LogGroupName = "auditDestinationForCDK"
});

var bucket = new Bucket(this, "audit-bucket");
var s3Destination = new S3Bucket(bucket);

var deliveryStream = new DeliveryStream(this, "Delivery Stream", new DeliveryStreamProps {
    Destination = s3Destination
});

var dataProtectionPolicy = new DataProtectionPolicy(new DataProtectionPolicyProps {
    Name = "data protection policy",
    Description = "policy description",
    Identifiers = new [] { DataIdentifier.DRIVERSLICENSE_US,  // managed data identifier
        new DataIdentifier("EmailAddress"),  // forward compatibility for new managed data identifiers
        new CustomDataIdentifier("EmployeeId", "EmployeeId-\\d{9}") },  // custom data identifier
    LogGroupAuditDestination = logGroupDestination,
    S3BucketAuditDestination = bucket,
    DeliveryStreamNameAuditDestination = deliveryStream.DeliveryStreamName
});

new LogGroup(this, "LogGroupLambda", new LogGroupProps {
    LogGroupName = "cdkIntegLogGroup",
    DataProtectionPolicy = dataProtectionPolicy
});

Notes

Be aware that Log Group ARNs will always have the string :* appended to them, to match the behavior of the CloudFormation AWS::Logs::LogGroup resource.

Classes

CfnAccountPolicy	Creates or updates an account-level data protection policy or subscription filter policy that applies to all log groups or a subset of log groups in the account.
CfnAccountPolicyProps	Properties for defining a `CfnAccountPolicy`.
CfnDelivery	This structure contains information about one delivery in your account.
CfnDeliveryDestination	This structure contains information about one delivery destination in your account.
CfnDeliveryDestinationProps	Properties for defining a `CfnDeliveryDestination`.
CfnDeliveryProps	Properties for defining a `CfnDelivery`.
CfnDeliverySource	Creates or updates one delivery source in your account.
CfnDeliverySourceProps	Properties for defining a `CfnDeliverySource`.
CfnDestination	The AWS::Logs::Destination resource specifies a CloudWatch Logs destination.
CfnDestinationProps	Properties for defining a `CfnDestination`.
CfnIntegration	Creates an integration between CloudWatch Logs and another service in this account.
CfnIntegration.OpenSearchResourceConfigProperty	This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service.
CfnIntegration.ResourceConfigProperty	This structure contains configuration details about an integration between CloudWatch Logs and another entity.
CfnIntegrationProps	Properties for defining a `CfnIntegration`.
CfnLogAnomalyDetector	Creates or updates an anomaly detector that regularly scans one or more log groups and look for patterns and anomalies in the logs.
CfnLogAnomalyDetectorProps	Properties for defining a `CfnLogAnomalyDetector`.
CfnLogGroup	The `AWS::Logs::LogGroup` resource specifies a log group.
CfnLogGroupProps	Properties for defining a `CfnLogGroup`.
CfnLogStream	The `AWS::Logs::LogStream` resource specifies an Amazon CloudWatch Logs log stream in a specific log group.
CfnLogStreamProps	Properties for defining a `CfnLogStream`.
CfnMetricFilter	The `AWS::Logs::MetricFilter` resource specifies a metric filter that describes how CloudWatch Logs extracts information from logs and transforms it into Amazon CloudWatch metrics.
CfnMetricFilter.DimensionProperty	Specifies the CloudWatch metric dimensions to publish with this metric.
CfnMetricFilter.MetricTransformationProperty	`MetricTransformation` is a property of the `AWS::Logs::MetricFilter` resource that describes how to transform log streams into a CloudWatch metric.
CfnMetricFilterProps	Properties for defining a `CfnMetricFilter`.
CfnQueryDefinition	Creates a query definition for CloudWatch Logs Insights.
CfnQueryDefinitionProps	Properties for defining a `CfnQueryDefinition`.
CfnResourcePolicy	Creates or updates a resource policy that allows other AWS services to put log events to this account.
CfnResourcePolicyProps	Properties for defining a `CfnResourcePolicy`.
CfnSubscriptionFilter	The `AWS::Logs::SubscriptionFilter` resource specifies a subscription filter and associates it with the specified log group.
CfnSubscriptionFilterProps	Properties for defining a `CfnSubscriptionFilter`.
CfnTransformer	Creates or updates a log transformer for a single log group.
CfnTransformer.AddKeyEntryProperty	This object defines one key that will be added with the addKeys processor.
CfnTransformer.AddKeysProperty	This processor adds new key-value pairs to the log event.
CfnTransformer.CopyValueEntryProperty	This object defines one value to be copied with the copyValue processor.
CfnTransformer.CopyValueProperty	This processor copies values within a log event.
CfnTransformer.CsvProperty	The `CSV` processor parses comma-separated values (CSV) from the log events into columns.
CfnTransformer.DateTimeConverterProperty	This processor converts a datetime string into a format that you specify.
CfnTransformer.DeleteKeysProperty	This processor deletes entries from a log event. These entries are key-value pairs.
CfnTransformer.GrokProperty	This processor uses pattern matching to parse and structure unstructured data.
CfnTransformer.ListToMapProperty	This processor takes a list of objects that contain key fields, and converts them into a map of target keys.
CfnTransformer.LowerCaseStringProperty	This processor converts a string to lowercase.
CfnTransformer.MoveKeyEntryProperty	This object defines one key that will be moved with the moveKey processor.
CfnTransformer.MoveKeysProperty	This processor moves a key from one field to another. The original key is deleted.
CfnTransformer.ParseCloudfrontProperty	This processor parses CloudFront vended logs, extract fields, and convert them into JSON format.
CfnTransformer.ParseJSONProperty	This processor parses log events that are in JSON format.
CfnTransformer.ParseKeyValueProperty	This processor parses a specified field in the original log event into key-value pairs.
CfnTransformer.ParsePostgresProperty	Use this processor to parse RDS for PostgreSQL vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.ParseRoute53Property	Use this processor to parse Route 53 vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.ParseVPCProperty	Use this processor to parse Amazon VPC vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.ParseWAFProperty	Use this processor to parse AWS WAF vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.ProcessorProperty	This structure contains the information about one processor in a log transformer.
CfnTransformer.RenameKeyEntryProperty	This object defines one key that will be renamed with the renameKey processor.
CfnTransformer.RenameKeysProperty	Use this processor to rename keys in a log event.
CfnTransformer.SplitStringEntryProperty	This object defines one log field that will be split with the splitString processor.
CfnTransformer.SplitStringProperty	Use this processor to split a field into an array of strings using a delimiting character.
CfnTransformer.SubstituteStringEntryProperty	This object defines one log field key that will be replaced using the substituteString processor.
CfnTransformer.SubstituteStringProperty	This processor matches a key’s value against a regular expression and replaces all matches with a replacement string.
CfnTransformer.TrimStringProperty	Use this processor to remove leading and trailing whitespace.
CfnTransformer.TypeConverterEntryProperty	This object defines one value type that will be converted using the typeConverter processor.
CfnTransformer.TypeConverterProperty	Use this processor to convert a value type associated with the specified key to the specified type.
CfnTransformer.UpperCaseStringProperty	This processor converts a string field to uppercase.
CfnTransformerProps	Properties for defining a `CfnTransformer`.
ColumnRestriction
CrossAccountDestination	A new CloudWatch Logs Destination for use in cross-account scenarios.
CrossAccountDestinationProps	Properties for a CrossAccountDestination.
CustomDataIdentifier	A custom data identifier.
DataIdentifier	A data protection identifier.
DataProtectionPolicy	Creates a data protection policy for CloudWatch Logs log groups.
DataProtectionPolicyProps	Properties for creating a data protection policy.
Distribution	The method used to distribute log data to the destination.
FilterPattern	A collection of static methods to generate appropriate ILogPatterns.
JsonPattern	Base class for patterns that only match JSON log events.
LogGroup	Define a CloudWatch Log Group.
LogGroupClass	Class of Log Group.
LogGroupProps	Properties for a LogGroup.
LogRetention	Creates a custom resource to control the retention policy of a CloudWatch Logs log group.
LogRetentionProps	Construction properties for a LogRetention.
LogRetentionRetryOptions	Retry options for all AWS API calls.
LogStream	Define a Log Stream in a Log Group.
LogStreamProps	Properties for a LogStream.
LogSubscriptionDestinationConfig	Properties returned by a Subscription destination.
MetricFilter	A filter that extracts information from CloudWatch Logs and emits to CloudWatch Metrics.
MetricFilterOptions	Properties for a MetricFilter created from a LogGroup.
MetricFilterProps	Properties for a MetricFilter.
QueryDefinition	Define a query definition for CloudWatch Logs Insights.
QueryDefinitionProps	Properties for a QueryDefinition.
QueryString	Define a QueryString.
QueryStringProps	Properties for a QueryString.
ResourcePolicy	Resource Policy for CloudWatch Log Groups.
ResourcePolicyProps	Properties to define Cloudwatch log group resource policy.
RetentionDays	How long, in days, the log contents will be retained.
SpaceDelimitedTextPattern	Space delimited text pattern.
StreamOptions	Properties for a new LogStream created from a LogGroup.
SubscriptionFilter	A new Subscription on a CloudWatch log group.
SubscriptionFilterOptions	Properties for a new SubscriptionFilter created from a LogGroup.
SubscriptionFilterProps	Properties for a SubscriptionFilter.

Interfaces

CfnIntegration.IOpenSearchResourceConfigProperty	This structure contains configuration details about an integration between CloudWatch Logs and OpenSearch Service.
CfnIntegration.IResourceConfigProperty	This structure contains configuration details about an integration between CloudWatch Logs and another entity.
CfnMetricFilter.IDimensionProperty	Specifies the CloudWatch metric dimensions to publish with this metric.
CfnMetricFilter.IMetricTransformationProperty	`MetricTransformation` is a property of the `AWS::Logs::MetricFilter` resource that describes how to transform log streams into a CloudWatch metric.
CfnTransformer.IAddKeyEntryProperty	This object defines one key that will be added with the addKeys processor.
CfnTransformer.IAddKeysProperty	This processor adds new key-value pairs to the log event.
CfnTransformer.ICopyValueEntryProperty	This object defines one value to be copied with the copyValue processor.
CfnTransformer.ICopyValueProperty	This processor copies values within a log event.
CfnTransformer.ICsvProperty	The `CSV` processor parses comma-separated values (CSV) from the log events into columns.
CfnTransformer.IDateTimeConverterProperty	This processor converts a datetime string into a format that you specify.
CfnTransformer.IDeleteKeysProperty	This processor deletes entries from a log event. These entries are key-value pairs.
CfnTransformer.IGrokProperty	This processor uses pattern matching to parse and structure unstructured data.
CfnTransformer.IListToMapProperty	This processor takes a list of objects that contain key fields, and converts them into a map of target keys.
CfnTransformer.ILowerCaseStringProperty	This processor converts a string to lowercase.
CfnTransformer.IMoveKeyEntryProperty	This object defines one key that will be moved with the moveKey processor.
CfnTransformer.IMoveKeysProperty	This processor moves a key from one field to another. The original key is deleted.
CfnTransformer.IParseCloudfrontProperty	This processor parses CloudFront vended logs, extract fields, and convert them into JSON format.
CfnTransformer.IParseJSONProperty	This processor parses log events that are in JSON format.
CfnTransformer.IParseKeyValueProperty	This processor parses a specified field in the original log event into key-value pairs.
CfnTransformer.IParsePostgresProperty	Use this processor to parse RDS for PostgreSQL vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.IParseRoute53Property	Use this processor to parse Route 53 vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.IParseVPCProperty	Use this processor to parse Amazon VPC vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.IParseWAFProperty	Use this processor to parse AWS WAF vended logs, extract fields, and and convert them into a JSON format.
CfnTransformer.IProcessorProperty	This structure contains the information about one processor in a log transformer.
CfnTransformer.IRenameKeyEntryProperty	This object defines one key that will be renamed with the renameKey processor.
CfnTransformer.IRenameKeysProperty	Use this processor to rename keys in a log event.
CfnTransformer.ISplitStringEntryProperty	This object defines one log field that will be split with the splitString processor.
CfnTransformer.ISplitStringProperty	Use this processor to split a field into an array of strings using a delimiting character.
CfnTransformer.ISubstituteStringEntryProperty	This object defines one log field key that will be replaced using the substituteString processor.
CfnTransformer.ISubstituteStringProperty	This processor matches a key’s value against a regular expression and replaces all matches with a replacement string.
CfnTransformer.ITrimStringProperty	Use this processor to remove leading and trailing whitespace.
CfnTransformer.ITypeConverterEntryProperty	This object defines one value type that will be converted using the typeConverter processor.
CfnTransformer.ITypeConverterProperty	Use this processor to convert a value type associated with the specified key to the specified type.
CfnTransformer.IUpperCaseStringProperty	This processor converts a string field to uppercase.
ICfnAccountPolicyProps	Properties for defining a `CfnAccountPolicy`.
ICfnDeliveryDestinationProps	Properties for defining a `CfnDeliveryDestination`.
ICfnDeliveryProps	Properties for defining a `CfnDelivery`.
ICfnDeliverySourceProps	Properties for defining a `CfnDeliverySource`.
ICfnDestinationProps	Properties for defining a `CfnDestination`.
ICfnIntegrationProps	Properties for defining a `CfnIntegration`.
ICfnLogAnomalyDetectorProps	Properties for defining a `CfnLogAnomalyDetector`.
ICfnLogGroupProps	Properties for defining a `CfnLogGroup`.
ICfnLogStreamProps	Properties for defining a `CfnLogStream`.
ICfnMetricFilterProps	Properties for defining a `CfnMetricFilter`.
ICfnQueryDefinitionProps	Properties for defining a `CfnQueryDefinition`.
ICfnResourcePolicyProps	Properties for defining a `CfnResourcePolicy`.
ICfnSubscriptionFilterProps	Properties for defining a `CfnSubscriptionFilter`.
ICfnTransformerProps	Properties for defining a `CfnTransformer`.
IColumnRestriction
ICrossAccountDestinationProps	Properties for a CrossAccountDestination.
IDataProtectionPolicyProps	Properties for creating a data protection policy.
IFilterPattern	Interface for objects that can render themselves to log patterns.
ILogGroup
ILogGroupProps	Properties for a LogGroup.
ILogRetentionProps	Construction properties for a LogRetention.
ILogRetentionRetryOptions	Retry options for all AWS API calls.
ILogStream
ILogStreamProps	Properties for a LogStream.
ILogSubscriptionDestination	Interface for classes that can be the destination of a log Subscription.
ILogSubscriptionDestinationConfig	Properties returned by a Subscription destination.
IMetricFilterOptions	Properties for a MetricFilter created from a LogGroup.
IMetricFilterProps	Properties for a MetricFilter.
IQueryDefinitionProps	Properties for a QueryDefinition.
IQueryStringProps	Properties for a QueryString.
IResourcePolicyProps	Properties to define Cloudwatch log group resource policy.
IStreamOptions	Properties for a new LogStream created from a LogGroup.
ISubscriptionFilterOptions	Properties for a new SubscriptionFilter created from a LogGroup.
ISubscriptionFilterProps	Properties for a SubscriptionFilter.

Select your cookie preferences

Customize cookie preferences

Essential

Performance

Functional

Advertising

Unable to save cookie preferences

Namespace Amazon.CDK.AWS.Logs

Amazon CloudWatch Logs Construct Library

Log Groups/Streams

LogRetention

Log Group Class

Resource Policy

Encrypting Log Groups

Subscriptions and Destinations

Metric Filters

Exposing Metric on a Metric Filter

Metrics for IncomingLogs and IncomingBytes

Patterns

Text Patterns

JSON Patterns

Space-delimited table patterns

Logs Insights Query Definition

Data Protection Policy

Notes

Classes

Interfaces