AWS AmazonCloudWatch documentation change
Summary
Added type conversion functions, IP analysis utilities, enhanced strcontains, and split function
Security assessment
New IP analysis functions (isPrivateIP/isPublicIP) directly support security investigations by helping identify traffic sources. Type conversions aid log analysis but aren't explicitly security-focused.
Diff
diff --git a/AmazonCloudWatch/latest/logs/CWL_QuerySyntax-operations-functions.md b/AmazonCloudWatch/latest/logs/CWL_QuerySyntax-operations-functions.md index a0e874ccf..d963b0063 100644 --- a//AmazonCloudWatch/latest/logs/CWL_QuerySyntax-operations-functions.md +++ b//AmazonCloudWatch/latest/logs/CWL_QuerySyntax-operations-functions.md @@ -86,0 +87,4 @@ Operation | Result type | Description +`toNumber(fieldName: string)` | number | Converts a string field value to a numeric value. +`toInt(fieldName: string)` | number | Converts a field value to an integer (32-bit). +`toLong(fieldName: string)` | number | Converts a field value to a long integer (64-bit). +`toDouble(fieldName: string)` | number | Converts a field value to a double-precision floating point number. @@ -218,0 +223 @@ Function | Result type | Description +`if(condition: Boolean, trueValue: LogField, falseValue: LogField)` | LogField | Evaluates a condition and returns `trueValue` if the condition is true, or `falseValue` otherwise. @@ -244,0 +250,4 @@ Function | Result type | Description +`ipv4ToNumber(fieldName: string)` | number | Converts an IPv4 address string to its numeric representation. +`isPrivateIP(fieldName: string)` | boolean | Returns `true` if the IP address is in a private range (RFC 1918). +`isPublicIP(fieldName: string)` | boolean | Returns `true` if the IP address is publicly routable. +`isReservedIP(fieldName: string)` | boolean | Returns `true` if the IP address is in a reserved range. @@ -266 +275 @@ Function | Result type | Description -`strcontains(str: string, searchValue: string)` | number | Returns 1 if `str` contains `searchValue` and 0 otherwise. +`strcontains(str: string, searchValue: string)` `strcontains(str: string, searchValue: string, caseInsensitive: boolean)` | number | Returns 1 if `str` contains `searchValue` and 0 otherwise. If the third parameter is set to `true`, the match is case-insensitive. @@ -272,0 +282 @@ Function | Result type | Description +`split(str: string, delimiter: string)` | array | Splits a string by the specified delimiter and returns an array of substrings. @@ -282 +292 @@ subqueries -Fields that contain special characters +Hashing functions