CloudWatch Logs Insights adds 25 new query commands and functions
Amazon CloudWatch Logs Insights has added 25 new query commands and functions to enhance log analysis capabilities. These additions support statistical aggregation, time-series data handling, outlier detection, and event enrichment, enabling deeper insights for engineers analyzing logs. The new commands are available today in all commercial AWS Regions.
- →New commands and functions for CloudWatch Logs Insights
- →Expanded statistical and time-series analysis capabilities
- →Enhanced data correlation and enrichment
- →Availability in all commercial AWS Regions
Features (1) ›
- New commands and functions for CloudWatch Logs Insights
CloudWatch Logs Insights query language now supports 25 new commands and functions, including type conversion, date/time manipulation, string processing, JSON inspection, statistical analysis, and data enrichment. These features allow for more advanced querying, transformation, correlation, and analysis of logs.
Enhancements (2) ›
- Expanded statistical and time-series analysis capabilities
New commands like variance, topk, countFrequent, autoregress, accum, and filldown address common customer needs for statistical aggregation, handling nulls in time-series data, and sessionization. This enhances the ability to perform complex data analysis directly within Logs Insights.
- Enhanced data correlation and enrichment
Functions such as sessionize, logcompare, outlier, where, appendcols, and cidrlookup provide improved capabilities for comparing logs across time windows, detecting outliers, composing queries, and enriching events with lookup data.
Notes (1) ›
- Availability in all commercial AWS Regions
The expanded set of commands and functions for CloudWatch Logs Insights is available starting today in all commercial AWS Regions. Further details can be found in the Amazon CloudWatch Logs documentation.
https://aws.amazon.com/about-aws/whats-new/2026/7/amazon-cloudwatch-logs-insights-ql/
Related releases
- Amazon Aurora DSQL adds multi-Region cluster support in four more Regions AWS What's New ·
- CloudWatch adds managed Prometheus collectors AWS What's New ·
- Amazon EC2 C7i Instances Expand to New Regions AWS What's New ·
- EC2 C7i-flex instances now available in Europe (Milan) region AWS What's New ·
- AWS CodeDeploy Expands to Five New Regions AWS What's New ·
- Redis 8.0 end-of-life date moved to 2026-12-01 endoflife.date ·