amazon-cloudwatchlogs - 展平 cloudwatch 中的 JSON 数组项

Question

我在 cloudwatch 中记录了以下消息，我正在尝试在 CloudWatch 见解中将其展平

{
    "LogReferenceId": "36a86fd4-1ecd-4e1e-8cf5-d6179240ffc8",
    "ApplicationName": "User",
    "UriResourceName": "/UserController/Add",
    "Messages": [
        {
            "Message": "Started",
            "TimeStamp": "2020-12-10T09:58:14.3042143Z"
        },
        
        {
            "Message": "Adding tracking information",
            "TimeStamp": "2020-12-10T09:58:14.3661264Z"
        },
        {
            "Message": "compltedCompleted",
            "TimeStamp": "2020-12-10T09:58:14.4015502Z"
        }
    ],
    "Exception": null,
    "Status": "Success"
}

我是 Insights 的新手，AWS 的文档对我没有太大帮助。

我是这样的，但它不起作用

fields @timestamp 
| parse @message '"Messages":[*]' as all
| parse all '"Message":"*"' as Messas

标签： amazon-cloudwatchlogsaws-cloudwatch-log-insights