What should a SysOps administrator do to meet this requirement?

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in tts own Amazon CloudWatch Logs log group. The company’s security team asks for a count of application errors, grouped by type, across all of the log groups.

What should a SysOps administrator do to meet this requirement?
A . Perform a CloudWatch Logs Insights query that uses the stats command and count function.
B . Perform a CloudWatch Logs search that uses the groupby keyword and count function.
C . Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
D . Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.

View Answer

Answer: A

Explanation:

To count application errors grouped by type across all CloudWatch Logs log groups, use CloudWatch Logs Insights.

Steps:

Access CloudWatch Logs Insights:

Open the CloudWatch console and navigate to Logs Insights.

Reference: Analyzing Log Data with CloudWatch Logs Insights Perform the Query:

Use the following query to count errors grouped by type:

sql

Copy code

fields @timestamp, @message

| filter @message like /error/

| stats count(*) by @message

This query filters for log messages containing the word "error" and counts occurrences grouped by the message content.

Run the Query Across Log Groups:

Select the log groups for all Lambda functions and run the query.

Reference: CloudWatch Logs Insights Query Syntax

Analyze Results:

Analyze the query results to get a count of application errors grouped by type.

Reference: Using CloudWatch Logs Insights

This method provides an efficient way to analyze and count application errors across multiple log

groups.