Multiple Lambda functions each produce about 1 GB of CloudWatch Logs per day in separate log groups. The security team wants counts of application errors grouped by error type across all these log groups. What should the SysOps admin use?
Choose an answer
Tap an option to check your answer.
Correct answer: Run a CloudWatch Logs Insights query that uses the stats command with the count function..
Why this is the answer
CloudWatch Logs Insights is the most efficient and cost-effective solution for analyzing logs directly within CloudWatch. Its stats command with count function allows you to aggregate data across multiple log groups and group results by specific fields (like error type), directly addressing the requirement. CloudWatch Logs search is a basic text search and does not support advanced aggregation or grouping functions like groupby with count across multiple log groups. Amazon Athena can query CloudWatch Logs, but it requires setting up an AWS Glue Data Catalog and external tables, adding unnecessary complexity and cost for this specific use case. Amazon RDS is a relational database service and is not designed for querying log data directly from CloudWatch Logs.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed