hands-on lab

Filtering Amazon CloudWatch Log Events

Up to 1h
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


Amazon CloudWatch Logs is an offering from AWS that ingests, stores, and presents log data. It integrates seamlessly with the other AWS services, and can ingest data from applications and services external to AWS as well.

By centralizing your logs, debugging and troubleshooting becomes much easier. You can store logs for analysis, and you can create metrics from your log data that you can graph or alert on.

In this hands-on lab, you will learn how to filter textual and JSON log event data.

Learning objectives

Upon completion of this beginner-level lab, you will be able to:

  • Match and exclude search terms in textual logs
  • Filter on specific values in JSON event logs
  • Create a metric filter and view it in Amazon CloudWatch

Intended audience

  • Candidates for the AWS Certified SysOps Administrator - Associate certification
  • DevOps Engineers
  • Cloud Architects


Familiarity with the following will be beneficial but is not required:

  • Amazon CloudWatch
  • Amazon CloudWatch Logs

The following course and lab can be used to fulfill the prerequisites:


October 17th, 2023 - Updated the instructions and screenshots to reflect the latest UI

July 17, 2023 - Updated lab environment and step instructions

September 18th, 2022 - Updated instructions and screenshots for accuracy

Environment before

Environment after

About the author

Learning paths

Andrew is a Labs Developer with previous experience in the Internet Service Provider, Audio Streaming, and CryptoCurrency industries. He has also been a DevOps Engineer and enjoys working with CI/CD and Kubernetes.

He holds multiple AWS certifications including Solutions Architect Associate and Professional.

Covered topics

Lab steps

Logging In to the Amazon Web Services Console
Filtering Text Log Events
Filtering JSON Log Events