rights reserved. ログ タイムスタンプが記録された、 時間の経過とともに起こったイベントの記録 2024-08-02 12:34:56,789 INFO [main] com.example.MyApp - Application started successfully 2024-08-02 12:34:59,789 INFO [main] com.example.MyApp - User ‘Ryuji.hori' logged in successfully 2024-08-02 12:35:01,123 ERROR [main] com.example.MyApp - Failed to connect to database -アプリケーションログ、DBログ、セキュリティログ など様々 とあるアプリケーションログの例
rights reserved. ログ アプリケーションログの例 2024-08-02 12:34:56,789 INFO [main] com.example.MyApp - Application started successfully 2024-08-02 12:34:59,789 INFO [main] com.example.MyApp - User ‘Ryuji.hori' logged in successfully 2024-08-02 12:35:01,123 ERROR [main] com.example.MyApp - Failed to connect to database 「Ryuji.Hori」というユーザがログイン成功 した⽇時がわかる アプリがDB接続失敗した⽇時がわかる
rights reserved. ログの構造化によるクエリの差 35 fields @timestamp, @message | filter user = ”ryuji.hori" and action = "login" and status = "success" | stats count() as login_success_count { "timestamp": "2024-08-03T12:00:00Z", "user": "ryuji.hori", "action": "login", "status": "success” } 非構造化ログ 構造化されたログ 2024-08-03T12:00:00Z ryuji.hori performed login action with status success クエリ クエリ fields @timestamp, @message | parse @message " * * performed * action with status *" as user, action, status | filter user = ”ryuji.hori" and action = "login" and status = "success” | stats count() as login_success_count ⽣成AIでクエリを⾃動⽣成も・・ハンズオンでどうぞ CloudWatch Logs Insights