How to filter out duplicate values from CloudWatch logs?

Question

I have my Android app's logs in CloudWatch. One event am tracking is giving data like this.

Using 'count_distinct' it's giving count as 242 and while using 'count', it gives 243. So one duplicate entry is there.

I have id field as well. And i guess it might be repeating. How can i filter it out?

gangreen · Accepted Answer · 2021-05-27T05:02:08.757

7

Assuming you have 242 unique IDs among the 243 log events, you can group on ID and filter out the unique results like this:

stats count() as cnt by ID | filter cnt > 1

edited May 27 '21 at 05:02

answered Jun 08 '20 at 07:50

gangreen

Thanks so much. – Jehong Ahn May 20 '21 at 09:04
@gangreeen do you know how to filter out duplicate values, of any kind? Like lets say I want to filter all contactId events logged AFTER the first one. – Steve Smith Feb 18 '22 at 22:27

score 0 · Answer 2 · answered Jun 22 '23 at 23:44

0

answered Jun 22 '23 at 23:44

RamNat

2 Answers2