ReleaseBytes
aws AWS What's New ·

CloudWatch Logs Insights adds string, encode/decode, and parse commands

observabilityawsengineer
feature

Amazon CloudWatch Logs Insights now supports 13 new query commands and functions for string manipulation, encoding/decoding, and log parsing. These enhancements allow users to derive deeper insights by performing operations like URL encoding, Base64 decoding, logfmt parsing, and calculating geographic distances directly within queries. The new capabilities are available today in all commercial AWS Regions and are particularly useful for analyzing non-JSON log formats and complex data.

  • →New commands and functions enhance CloudWatch Logs Insights query capabilities
  • →Improved log filtering, parsing, and data expansion
  • →New commands and functions available globally
Features (1) ›
  • New commands and functions enhance CloudWatch Logs Insights query capabilities

    Thirteen new commands and functions have been added to CloudWatch Logs Insights, enabling powerful log analysis. These include string manipulation (round, startswith, endswith, case, regex_replace), encoding/decoding (urlencode, urldecode, base64encode, base64decode), and parsing/analysis (parse logfmt, expand, relevantfields).

Enhancements (1) ›
  • Improved log filtering, parsing, and data expansion

    Users can now filter logs by string prefixes, decode Base64 payloads, parse logfmt logs into fields, expand nested JSON arrays, calculate distances between coordinates, and automatically surface relevant fields in high-cardinality log groups. These features streamline complex log analysis tasks.

Notes (1) ›
  • New commands and functions available globally

    The newly added commands and functions for CloudWatch Logs Insights are available today in all commercial AWS Regions. More information can be found in the Amazon CloudWatch Logs documentation.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-logs-insights/

Related releases