ReleaseBytes
aws AWS What's New ·

CloudWatch adds lookup processor for log enrichment

observabilityawsengineer
feature

Amazon CloudWatch now supports a lookup processor to enrich log events with context from CSV lookup tables directly within CloudWatch Pipelines. This feature allows engineers to map log fields to reference data at ingestion, eliminating the need for external enrichment logic and providing immediate context for queries and alarms. The processor is available in all commercial AWS regions supporting CloudWatch pipelines.

  • →Enrich log events with external data using lookup processor
  • →Simplify log enrichment and improve query performance
  • →Lookup processor availability and access
Features (1) ›
  • Enrich log events with external data using lookup processor

    The new lookup processor in Amazon CloudWatch allows users to upload CSV files containing reference data and match fields in incoming log events against this data to add enriched metadata. This enables scenarios like mapping IP addresses to application teams or error codes to descriptions at ingestion time.

Enhancements (1) ›
  • Simplify log enrichment and improve query performance

    By enriching logs directly within CloudWatch pipelines, this feature eliminates the need to build and maintain custom enrichment logic outside of the service. Enriched logs immediately benefit queries, dashboards, and alarms without post-processing.

Notes (1) ›
  • Lookup processor availability and access

    The lookup processor is available in all AWS commercial regions that support Amazon CloudWatch pipelines and can be configured via the AWS Management Console, AWS CLI, or AWS SDKs.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-cloudwatch-lookup-processor/

Related releases