N
The Global Insight

How do I access AWS CloudWatch logs

Author

Matthew Martinez

Updated on April 10, 2026

Open the CloudWatch console at . In the navigation pane, choose Log groups. For Log Groups, choose the log group to view the streams.

How do I view AWS logs?

To see your log data, sign in to the AWS Management Console, and open the CloudWatch console. In the left navigation pane, choose the Logs tab. Find your log group in the list of groups and open the log group. Your log group name is the Name that you set when you set up logging in the Amazon OpenSearch Service wizard.

Can we download logs from CloudWatch?

The latest AWS CLI has a CloudWatch Logs cli, that allows you to download the logs as JSON, text file or any other output supported by AWS CLI.

Where is CloudWatch logs stored?

For an example of the type of data that CloudWatch writes into CloudTrail log files, see Logging Amazon CloudWatch Logs API calls in AWS CloudTrail. AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources for your users.

How do I view error logs in CloudWatch?

  1. Set up CloudWatch API access logging using the API Gateway console. …
  2. Run the filter-log-events AWS CLI command on the API Gateway access logs using your preferred search utility. …
  3. Check the response to your filter-log-events command to identify errors.

How do I download AWS logs?

To download and read a log file Open the Amazon S3 console at . Choose the bucket and choose the log file that you want to download. Choose Download or Download as and follow the prompts to save the file. This saves the file in compressed format.

How do I download logs from CloudWatch log group?

Step 4: Create an export task Open the CloudWatch console at /cloudwatch/ . In the navigation pane, choose Log groups. On the Log Groups screen, choose the name of the log group. Choose Actions, Export data to Amazon S3.

How do I share CloudWatch logs?

To share log data across accounts, you need to establish a log data sender and receiver: Log data sender—gets the destination information from the recipient and lets CloudWatch Logs know that it is ready to send its log events to the specified destination.

How are CloudWatch logs stored?

CloudWatch monitors multiple EC2 machines. The logs are stored on S3 using the native CloudWatch export S3 export functionality.

How do I process CloudWatch logs?
  1. Go to the Triggers tab of your Lambda function.
  2. Select Add Trigger.
  3. In the Add Trigger prompt, click the box as instructed and select CloudWatch Logs from the drop-down menu.
  4. Select a CloudWatch Log Group to add to your function. …
  5. Add a Filter Name to your trigger.
Article first time published on

How do I retrieve log data from CloudWatch logs?

  1. Use subscription filters to stream log data to another receiving source in real time.
  2. Run a query with CloudWatch Logs Insights.
  3. Export log data to Amazon Simple Storage Service (Amazon S3) for batch use cases.

What is CloudWatch logs in AWS?

CloudWatch Logs lets you monitor and troubleshoot your systems and applications using your existing system, application and custom log files. With CloudWatch Logs, you can monitor your logs, in near real time, for specific phrases, values or patterns.

How do I check Kinesis logs?

  1. Choose Data Firehose in the navigation pane.
  2. On the navigation bar, choose an AWS Region.
  3. Choose a delivery stream name to go to the delivery stream details page.
  4. Choose Error Log to view a list of error logs related to data delivery failure.

How do I access CloudWatch logs from Lambda?

  1. Open the Functions page of the Lambda console.
  2. Choose a function.
  3. Choose Monitor. A graphical representation of the metrics for the Lambda function are shown.
  4. Choose View logs in CloudWatch.

How do I automate CloudWatch logs?

  1. In the navigation pane, choose Automation.
  2. Choose the Preferences tab, and then choose Edit.
  3. Select the check box next to Send output to CloudWatch Logs.
  4. (Recommended) Select the check box next to Encrypt log data.

How do I search CloudWatch logs for text?

  1. In the navigation pane, choose Log groups.
  2. For Log Groups, choose the name of the log group containing the log stream to search.
  3. For Log Streams, choose the name of the log stream to search.
  4. Under Log events, enter the filter syntax to use.

How do I transfer RDS logs to CloudWatch?

  1. Open the Amazon RDS console.
  2. Choose Databases from the navigation pane.
  3. Select the DB instance that you want to use to export log data to CloudWatch.
  4. Choose Modify.
  5. From the Log exports section, select Audit log.
  6. Choose Continue.

How do I monitor application logs in CloudWatch?

  1. Create a custom ec2 IAM role with Cloudwatch log write access.
  2. Install Cloudwatch logs ec2 agent.
  3. Configure log sources in the Cloudwatch agent configuration file.
  4. Start the agent with the configuration file.
  5. Validate logs in Cloudwatch dashboard.

How do I push CloudWatch logs to another account?

  1. Create an Amazon S3 bucket in the destination account. …
  2. Create a destination for Kinesis Data Firehose in the destination account. …
  3. Enable VPC Flow Logs and push the logs to Amazon CloudWatch for the source account.

How do I stream log data from CloudWatch logs to a cross region and cross-account Kinesis data stream?

  1. Create a destination data stream in Kinesis in the data recipient account with an AWS Identity and Access Management (IAM) role and trust policy. …
  2. Create a subscription filter in your account.

How do I push Elasticsearch to CloudWatch logs?

Go to the AWS CloudWatch console and click on Logs at the left most; select the CloudTrail Log group that we just created earlier, and click on Actions and select Stream to Amazon Elasticsearch Service.

How do I get DynamoDB logs?

Open the CloudWatch console at /cloudwatch/. In the navigation pane, choose Metrics. Select the DynamoDB namespace. You can also use the CLI to get the metrics for a given time period.

How do I find my EC2 instance logs?

  1. In the left navigation pane, choose Instances, and select the instance.
  2. Choose Actions, Monitor and troubleshoot, Get system log.

How do I check my VPC flow logs in CloudWatch?

  1. In the navigation pane, choose Logs, and select the log group that contains your flow log. …
  2. Select the log stream that contains the ID of the network interface for which to view the flow log records.

How do I check my AWS Kinesis stream data?

To access metrics using the CloudWatch console Open the CloudWatch console at . On the navigation bar, choose a Region. In the navigation pane, choose Metrics. In the CloudWatch Metrics by Category pane, choose Kinesis Metrics.

What is Kinesis logging?

Last updated 2021-09-01. Fastly’s Real-Time Log Streaming feature can send log files to Amazon Kinesis Data Streams. Amazon Kinesis Data Streams (KDS) is a real-time data streaming service that can continuously capture data from a variety of sources.

Can't connect to HEC endpoint?

If you are seeing an error message “Could not connect to the HEC endpoint. Make sure that the HEC endpoint URL is valid and reachable from Kinesis Firehose,” then your SSL certificate might not be valid.

How can I access the output of print statements from Lambda?

To output logs from your function code, you can use the print method , or any logging library that writes to stdout or stderr . The following example logs the values of environment variables and the event object. The Python runtime logs the START , END , and REPORT lines for each invocation.

How do I install CloudWatch log agent?

  1. Connect to your Amazon Linux instance. …
  2. Update your Amazon Linux instance to pick up the latest changes in the package repositories. …
  3. Install the awslogs package. …
  4. Edit the /etc/awslogs/awslogs. …
  5. By default, the /etc/awslogs/awscli.

How do I export CloudWatch logs from S3 using lambda?

In a previous article we went through the steps on how to setup your AWS environment to Export EC2 logs to CloudWatch. In this article we will build on that and go through the steps to automate exporting CloudWatch Logs to S3. To accomplish this, we will be using the following AWS services: S3 (Bucket & Bucket Policy)