estimate

Use the estimate command to return the estimated bytes that the query would scan over the selected log groups and time range, without running the query. Using the estimated bytes returned by this command, you can refine your log group selection, time range and filters before you run the query. The estimate command incurs no CloudWatch Logs Insights query charges.

The estimate command must be the last command in the query.

Note

The value that estimate returns is approximate and can differ from the actual volume of data scanned when you run the query.

Syntax

| estimate

Example

The following query returns an estimate of the volume of data, in bytes, that the query would scan without running it.

fields @timestamp, @message
| filter @message like /error/
| estimate