Warning: file_get_contents(/data/phpspider/zhask/data//catemap/1/amazon-web-services/14.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181

Warning: file_get_contents(/data/phpspider/zhask/data//catemap/8/logging/2.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Amazon web services AWS Cloudwatch度量过滤_Amazon Web Services_Logging_Amazon Cloudwatch_Cloudwatch - Fatal编程技术网

Amazon web services AWS Cloudwatch度量过滤

Amazon web services AWS Cloudwatch度量过滤,amazon-web-services,logging,amazon-cloudwatch,cloudwatch,Amazon Web Services,Logging,Amazon Cloudwatch,Cloudwatch,在AWS Cloudwatch中,我想从日志数据中提取一个值。但是,该值位于消息字段中。我是否可以获取最后一个空格分隔的值并将其记录下来 i、 e.我的日志流: {"timestamp": 145674445, "message": "Starting new HTTP connection (1): XXXX", "severity": "INFO", "module": "connectionpool", "stack": []} {"timestamp": 145676445, "mess

在AWS Cloudwatch中,我想从日志数据中提取一个值。但是,该值位于消息字段中。我是否可以获取最后一个空格分隔的值并将其记录下来

i、 e.我的日志流:

{"timestamp": 145674445, "message": "Starting new HTTP connection (1): XXXX", "severity": "INFO", "module": "connectionpool", "stack": []}
{"timestamp": 145676445, "message": "Starting new HTTP connection (1): XXXX", "severity": "INFO", "module": "connectionpool", "stack": []}
{"timestamp": 145676445, "message": "deactivated campaign: XXXX05XXXX554aaXXXX9069d4XXXXe7, runtime: 2.63", "severity": "INFO", "module": "credentials", "stack": []}
对于最后一个日志,我想在如下内容上过滤模式

{($.message ="deactivated campaign:*, runtime: *")}
我希望我记录的度量值是2.63,或者最后一个空格分隔的字符串

我正在使用GUI来实现这一点,但无法找到一种方法。可能吗

非常感谢您的帮助

看看

类似于这样的内容(尚未测试,但大致如下):

这是行不通的,因为运行时不是JSON输入中的一个字段;它是消息字段的一个子字段(因为没有更好的词)。
metricFilter: { $.message = "deactivated campaign:*" } metricValue: $.runtime