Our Blog

Amazon CloudWatch Logs introduces lookup query command

Published
March 31, 2026
https://aws.amazon.com/about-aws/whats-new/2026/03/cloudwatch-lookup-query-command/

Amazon CloudWatch Logs Insights Updates

Amazon CloudWatch Logs Insights now supports a new lookup command to enrich log query results with data from reference tables. This feature helps developers, DevOps engineers, and SREs interpret logs containing opaque identifiers like GUIDs, IP addresses, or internal resource IDs.

With the lookup command, you can join log data against a lookup table at query time, enriching results with meaningful values. For example, you can translate a customer ID into a customer name or map an internal IP address to the owning team. This makes log analysis faster and more intuitive without requiring pre-processing pipelines.

What to do

  • Upload a CSV file by navigating to CloudWatch → Settings → Logs.
  • Use the lookup command in your Logs Insights queries by specifying a log field, a lookup table name, and one or more columns.
  • CSV data does not count toward CloudWatch Logs Insights per GB of data scanned query charges.

Source: AWS release notes




If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.

Follow our blog

Get the latest insights and advice on AWS services from our experts.

By clicking Sign Up you're confirming that you agree with our Terms and Conditions.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Related posts

Check out other insights from the team at West Loop Strategy.

View all
https://aws.amazon.com/about-aws/whats-new/2025/11/e-invoice-delivery-sap-ariba-coupa-procurement-portals/

AWS Introduces E-Invoice delivery for AWS customers using SAP Ariba and Coupa procurement portals

Today, AWS announces the general availability of AWS E-Invoice delivery, a new capability that enables AWS customers to connect their SAP Ariba and Coupa procurement portal accounts with AWS and retrieve POs
Read more
https://aws.amazon.com/about-aws/whats-new/2025/10/aws-nitro-enclaves-available-in-all-regions/

AWS announces Nitro Enclaves are now available in all AWS Regions

AWS Nitro Enclaves is an Amazon EC2 capability that enables customers to create isolated compute environments (enclaves) to further protect and securely process highly sensitive data within their EC2 instances
Read more
https://aws.amazon.com/about-aws/whats-new/2025/12/amazon-opensearch-service-gpu-accelerated-auto-optimized-vector-indexes

Amazon OpenSearch Service adds GPU-accelerated and auto-optimized vector indexes

You can now build billion-scale vector databases in under an hour on Amazon OpenSearch Service with GPU-acceleration, and auto-optimize vector indexes for optimal trade-offs between search quality, speed and cost
Read more
View all