How To: CloudWatch Logs From Lambda (3 Min) | AWS Logs Insights скачать в хорошем качестве

How To: CloudWatch Logs From Lambda (3 Min) | AWS Logs Insights

In this tutorial, you'll learn how to access CloudWatch logs from a Lambda function in AWS. — Facebook:   / gokcedbsql   — Video Transcript — Hi guys, this is Abhi from Gokcedb. In this video, you're going to learn how to access cloud watch logs using a lambda function in AWS. Let's start by going to the AWS console and search for cloud watch. Click on logs insights in the left menu then pick a time duration. For the log group, I'm going to select my web application firewall log and then copy and paste a pre-written query. Here, I'm selecting a bunch of fields followed by sorting. The result is in descending timestamp order and then limiting the results to 5 records. Let's go back to the AWS console and search for IAM. Click on roles then hit the create role button. Select lambda under use case then hit next. Search for cloud watch then select cloudwatch full access then click next. Give your role a name then hit the create role button. Go back to the AWS console and this time search for lambda. Click on the create function button and give your function a name. Select python for runtime and for the default execution role. Pick the IAM role that we just created. Click on create function then scroll down to the code source section. Here, I'm going to copy and paste pre-written python code. On line 1, I'm importing the borto 3 library which is the AWS SDK. On line 8, I'm initiating the borrow 3 client and on line 10/ I'm defining the query. On line 16, I'm using the start underscore query method to initiate the query. On line 27, I'm running a while loop and capturing the results of the query in the response variable. Finally, on line 35, I'm running a for loop and parsing the query results, and printing them on the console. Hit the deploy button then click on test. Give your test event a name then hit save. Click on test again to test your lambda function. Looks like our lambda function timed out because the query took more than three seconds to return. To fix this, click on the configuration tab then click on the general configuration in the left menu. Hit the edit button then increase the time-out setting to say 10 seconds. Click on save then hit the test button again to retest your lambda function. This time, our function seems to have worked as expected because we can see the cloud watch log results in our console. There you have it. Make sure you like, subscribe, and turn on the notification bell. Until next time. import boto3 from datetime import datetime, timedelta import json import time def lambda_handler(event, context): client = boto3.client('logs') query = """fields @timestamp, action, httpRequest.clientIp, httpRequest.country, httpRequest.uri, terminatingRuleId | sort @timestamp desc | LIMIT 5 """ log_group = 'aws-waf-logs-test' start_query_response = client.start_query( logGroupName=log_group, startTime=int((datetime.today() - timedelta(hours=24)).timestamp()), endTime=int(datetime.now().timestamp()), queryString=query, ) query_id = start_query_response['queryId'] response = None while response is None or response['status'] == 'Running': print('Waiting for query to complete ...') time.sleep(1) response = client.get_query_results(queryId=query_id) response_string = str(response).replace("'", '"') json_object = json.loads(response_string) for counter, j_obj_results in enumerate(json_object["results"]): print("Result #", counter+1) for j_obj in j_obj_results: print("field:", j_obj['field'], "value:", j_obj['value']) return { 'statusCode': 200, 'body': "Success" }