Events with detail field that matches any value in a list

Get the EventBridge events with a specific detail field that matches any value in a list.

Cloudwatch Log Insights snippet that returns the EventBridge events for a given detail field that that matches any value in a list

fields @timestamp
| filter detail.field-value IN ["value1", "value2", "value3"]  # replace field-value and value1, value2, value3 with actual values.
| sort @timestamp desc
                                


< Back to snippets

GitHub icon View this snippet on GitHub


Running the CloudWatch snippet

Click on the button below to open up the snippet directly into your AWS account.

Manually running the CloudWatch snippet

2. Select Logs, and then choose Logs Insights.
3. In the Select log group(s) drop down, choose one or more log groups to query.
4. Copy snippet into query text area.
5. Click "Run Query"

Created by:

Rahul Sringeri

Rahul Sringeri

Technical Account Manager at AWS for Strategic Accounts