AWS AmazonCloudWatch documentation change
Summary
Added documentation for the 'Surrounding logs' feature in CloudWatch Logs Insights, which allows viewing log lines before and after specific log records with configurable ranges and keyword search capabilities.
Security assessment
This change documents a new feature for log analysis that provides contextual information around log events. While this feature could be used for security investigations (such as examining logs around security events), the documentation itself does not address a specific security vulnerability, weakness, or incident. It is a general feature enhancement for log analysis capabilities.
Diff
diff --git a/AmazonCloudWatch/latest/logs/AnalyzingLogData.md b/AmazonCloudWatch/latest/logs/AnalyzingLogData.md index 4ae7ce03b..90793e524 100644 --- a//AmazonCloudWatch/latest/logs/AnalyzingLogData.md +++ b//AmazonCloudWatch/latest/logs/AnalyzingLogData.md @@ -47,0 +48,2 @@ The `filterIndex` command is available only in Logs Insights QL. + * [Surrounding logs](./CWL_AnalyzeLogData_SurroundingLogs.html) lets you view log lines before and after any specific log record in your query results to get instant context around critical log events. You can configure the range to view 5, 10, 20, 50, or 100 log lines before and after a selected record, and search for specific keywords within the surrounding logs. + @@ -87,0 +90,2 @@ If your network security team doesn't allow the use of web sockets, you can't cu + * [Viewing surrounding logs in CloudWatch Logs Insights](./CWL_AnalyzeLogData_SurroundingLogs.html) +