Explore Log Insights queries

Use the Log Insights query builder to explore how different query patterns solve different troubleshooting scenarios.

The builder shows 6 scenarios from the video: error spikes, slow API endpoints, failed authentication, database timeouts, memory leaks, and request tracing. For each scenario, you can see the pre-built query, toggle between QL, OpenSearch PPL, and OpenSearch SQL syntax, and see the simulated query results.

Experiment with the advanced techniques: parse for extracting fields, regex for pattern matching, and calculated fields for derived values.

Question: Your Lambda function logs JSON entries with a duration field. You want to find the average duration per API endpoint, but only for requests slower than 1 second. Which query components do you need?