Knowing a timestamp where an activity happens, go to your CloudWatch log and search by prefix using the date:
Locate by last event time that is larger than your timestamp. There will be many candidate logs.
Open each candidate log, search with the keyword "INIT_START" to make sure the log started before your timestamp. If it matches, then you can perform other search by keywords.
To locate a particular event in a log stream at a timestamp, search by keyword "END" and it will give you the start and the end of the request. Knowing the time range of the request, then you can perform further search.
No comments:
Post a Comment