我有一个 lambda 函数,可以将指标写入Cloudwatch
. 同时,它写入指标,它在日志组中生成一些日志。
INFO:: username: simran+test@abc.com ClinicID: 7667 nodename: MacBook-Pro-2.local
INFO:: username: simran+test2@abc.com ClinicID: 7669 nodename: MacBook-Pro-3.local
INFO:: username: simran+test@abc.com ClinicID: 7668 nodename: MacBook-Pro-4.local
INFO:: username: simran+test3@abc.com ClinicID: 7667 nodename: MacBook-Pro-5.local
INFO:: username: simran+test3@abc.com ClinicID: 7667 nodename: MacBook-Pro-2.local
我需要一种有效的方法来获取给定的不同值。例如,我通过for并且我期望nodename
ClinicId
7667
ClinicId
['MacBook-Pro-2.local', 'MacBook-Pro-5.local']
这是我尝试过的:
query = "fields @timestamp, @message | parse @message \"username: * ClinicID: * nodename: *\" as username, ClinicID, nodename | filter ClinicID = "+ clinic_id
start_query_response = client.start_query(
logGroupName=log_group,
startTime=int(time.mktime((Util.utcnow() - timedelta(hours=hours)).timetuple())),
endTime=int(time.mktime(Util.utcnow().timetuple())),
queryString=query,
)
我考虑过在 Python 中进行迭代start_query_response
,但我不喜欢这个想法。由于7 days
我将要查看的是日志,因此我需要一种有效的方法,而不必7 days
为给定的ClinicID
.