~/codewithstu

// open_source

AWS Log Group Queries

OpenTofu module for creating reusable CloudWatch Log Insights saved queries across multiple log groups with folder-based organization

View on GitHub

Overview

This module creates CloudWatch Log Insights query definitions across specified log groups, providing reusable saved queries for operational monitoring and debugging.

Key Features

  • Define multiple named queries in a single module call
  • Apply queries across multiple log groups simultaneously
  • Optional folder prefix for organizing queries in the CloudWatch console
  • Map-based query definitions for clean, declarative configuration

Usage

module "log_queries" {
  source = "git::https://github.com/Im5tu/opentofu-aws-log-group-queries.git?ref=main"
 
  log_groups = [
    "/aws/lambda/my-api",
    "/aws/lambda/my-worker"
  ]
 
  queries = {
    "Error Count"   = "filter @message like /ERROR/ | stats count(*) as error_count by bin(1h)"
    "Recent Errors" = "filter @message like /ERROR/ | sort @timestamp desc | limit 100"
  }
 
  prefix = "MyApp"
}