CloudWatch Logs Filter case insensitive multiple terms or connected

Manuel picture Manuel · Mar 4, 2017 · Viewed 10.2k times · Source

I'm just trying to create an alarm based on CloudWatch Logs Filter which triggers on multiple terms (or connected, not and) and is case insensitive

Using "error warning" as pattern is not working

I'm looking for filter pattern reacting to all of the following errors and warnings:

ERROR: first sample
Error: second sample
error: third sample
{ ERROR: "fourth sample"}
{type: "error"}
WARNING: SOMETHING BAD!
{ WARNING: "fifth sample"}

Answer

Sach picture Sach · Oct 16, 2018

If you need to filter upon some strings you can OR them as follows:

?"String1" ?"String2" 

and so on. Try it.