Questions tagged [amazon-cloudwatchlogs]

CloudWatch Logs by Amazon offers the ability to aggregate and control log events that are sent from AWS or custom services. If you have questions about log groups, log streams, and metric filters, be sure to include this tag. However, if your inquiries solely pertain to CW metrics or alarms, it's best to use amazon-cloudwatch instead.

How can I retrieve the initial IP address from the 'X-Forwarded-For' using a Log Insight Query?

Can someone help me with extracting the initial IP address from the given data: X-Forwarded-For":"1.1.1.1, 2.2.2.2? This is the query I am currently using: fields @timestamp, @message | filter @message like /Endpoint request body after transform ...