Get the EventBridge events with a specific detail field that does not match any value in a list.
Cloudwatch Log Insights snippet that returns the EventBridge events for a given detail field that that does not matches any value in a list
fields @timestamp
| filter detail.field-value NOT IN ["value1", "value2", "value3"] # replace field-value and value1, value2, value3 with actual values.
| sort @timestamp desc
< Back to snippets
Learn more about Cloudwach Logs Insights.
Running the CloudWatch snippet
Click on the button below to open up the snippet directly into your AWS account.
Manually running the CloudWatch snippet
1. Open CloudWatch console
2. Select Logs, and then choose Logs Insights.
3. In the Select log group(s) drop down, choose one or more log groups to query.
4. Copy snippet into query text area.
5. Click "Run Query"
Additional resources
Created by:
