A three-tier application is deployed within AWS cloud infrastructure. The Operations team is analyzing logs from multiple resources to identify ERROR and associated details with the application. Due to the large size of logs, searching takes a longer time. Team is looking up to your suggestion which will speed up the search.
Which setting can be applied to identify the error from logs quickly?

Answer options:

A.Use metric Filter matching term ERROR & search in a log group without time range.
B.Use metric Filter matching term ERROR & search in a specific log stream without time range.
C.Use metric Filter matching term ERROR and search in a log group with a time range.
D.Use metric Filter matching term ERROR and search in a specific log stream with a time range.

Correct Answer: D
Filter Patterns can be used to search specific entries in a log file. Filter patterns can search from all log streams within a log group or a specific log stream. Also, a time range can be used to narrow down the search, which speeds up the search. In the above case, the Operations Team is trying to search for ERROR messages in log files. For this, they can use a filter pattern as ERROR in a specific log stream in a time range which can speed up the search.
Options A & B are incorrect as not specifying time range will search entire logs slowing down the search.
Option C is incorrect as Log Groups consist of multiple log streams. To speed up a query in a log file, a specific log stream is a better option than looking into entire log streams within a log group.
For more information on searching log data using filter patterns, refer to the following URL,
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SearchDataFilterPattern.html