CloudWatch Logs Insights adds 25 new query commands and functions
Amazon CloudWatch Logs Insights has added 25 new query commands and functions to enhance log analysis capabilities. These additions support statistical aggregation, time-series data handling, outlier detection, and event enrichment, enabling deeper insights for engineers analyzing logs. The new commands are available today in all commercial AWS Regions.
- →New commands and functions for CloudWatch Logs Insights
- →Expanded statistical and time-series analysis capabilities
- →Enhanced data correlation and enrichment
- →Availability in all commercial AWS Regions
Features (1) ›
- New commands and functions for CloudWatch Logs Insights
CloudWatch Logs Insights query language now supports 25 new commands and functions, including type conversion, date/time manipulation, string processing, JSON inspection, statistical analysis, and data enrichment. These features allow for more advanced querying, transformation, correlation, and analysis of logs.
Enhancements (2) ›
- Expanded statistical and time-series analysis capabilities
New commands like variance, topk, countFrequent, autoregress, accum, and filldown address common customer needs for statistical aggregation, handling nulls in time-series data, and sessionization. This enhances the ability to perform complex data analysis directly within Logs Insights.
- Enhanced data correlation and enrichment
Functions such as sessionize, logcompare, outlier, where, appendcols, and cidrlookup provide improved capabilities for comparing logs across time windows, detecting outliers, composing queries, and enriching events with lookup data.
Notes (1) ›
- Availability in all commercial AWS Regions
The expanded set of commands and functions for CloudWatch Logs Insights is available starting today in all commercial AWS Regions. Further details can be found in the Amazon CloudWatch Logs documentation.
https://aws.amazon.com/about-aws/whats-new/2026/7/amazon-cloudwatch-logs-insights-ql/
Related releases
- Amazon RDS PostgreSQL 19 Beta 2 Now in Preview Environment AWS What's New ·
- EC2 surfaces public SSM parameters for AMIs AWS What's New ·
- Amazon Redshift adds rg.large and rg.12xlarge Graviton-powered instance sizes AWS What's New ·
- S3 Event Notifications Include System-Generated Tags AWS What's New ·
- Amazon EC2 High Memory U7in-24TB instances launch in Paris AWS What's New ·
- AWS Control Tower AFT re-applies customizations on account OU move AWS What's New ·