Search Shortcut cmd + k | ctrl + k
cloudwatch

Read and write Amazon CloudWatch telemetry with OTLP-shaped SQL tables

Maintainer(s): smithclay

Installing and Loading

INSTALL cloudwatch FROM community;
LOAD cloudwatch;

Example

INSTALL aws;
LOAD aws;
LOAD cloudwatch;

CREATE SECRET (
    TYPE aws,
    PROVIDER credential_chain,
    REGION 'us-east-1'
);

SELECT time_unix_nano, service_name, severity_text, body
FROM read_cloudwatch_logs(
    '/aws/lambda/orders-api',
    filter => 'ERROR',
    start_time => '-1h'
);

About cloudwatch

This extension reads Amazon CloudWatch Logs into the same flat OTLP log schema used by duckdb-otlp and the sibling observability extensions. It also writes OTLP-shaped rows to CloudWatch Logs, exposes CloudWatch alarms, reads AWS X-Ray service dependencies, and can attach an AWS account as a read-only catalog.

Features:

  • AWS credentials through DuckDB's aws and s3 secrets
  • Streaming CloudWatch Logs pagination with retries and query cancellation
  • send_cloudwatch_logs batching for existing log groups and streams
  • Read-only logs, alerts, and service_map catalog schemas
  • CloudWatch metrics queries through read_cloudwatch_metrics

Browser builds are excluded because SigV4 and the AWS credential providers require native OpenSSL and filesystem or metadata access. For complete usage and IAM requirements, visit the extension repository.

Added Functions

function_name function_type description comment examples
read_cloudwatch_logs table NULL NULL  
read_cloudwatch_metrics table NULL NULL  
read_cloudwatch_service_dependencies table NULL NULL  
send_cloudwatch_logs scalar NULL NULL  

Overloaded Functions

This extension does not add any function overloads.

Added Types

This extension does not add any types.

Added Settings

This extension does not add any settings.