On: Cisco Acquires Splunk

[physicles]

We’ve got some logs in CloudWatch, but I barely use it because the query interface is unfathomably slow (in terms of query throughput). Do you use the web interface to query, or some other way?

[ak217 → physicles]

The Logs Insights interface (https://us-east-1.console.aws.amazon.com/cloudwatch/home?reg...) is fast enough for all our needs. You have to make sure you're using Insights and not the plain Logs query APIs, which are indeed very slow.

For some applications, it also makes sense to use the built in Logs API that exports logs to S3 (the export process is very fast) then use any of a variety of tools geared toward searching through data on S3.