cwl

Simple CLI and TUI for browsing Cloudwatch logs in the terminal.

Aims to be as simple as possible but no simpler.

Install

Using Go:

go install github.com/derricw/cwl@latest

Using the install script:

curl -sL https://api.github.com/repos/derricw/cwl/releases/latest | \
  grep "browser_download_url.*$(uname -s | tr '[A-Z]' '[a-z]').*$(uname -m | sed 's/x86_64/amd64/').tar.gz" | \
  cut -d '"' -f 4 | \
  xargs curl -sL | \
  tar xz && sudo mv cwl /usr/local/bin/

Or download the binary from the releases page and place it in your PATH.

Use

Basic

List log groups:

cwl groups

List streams for a group:

cwl streams /my/log/group

Write events from a stream to stdout:

cwl events arn:aws:logs:us-west-2:12345657890:log-group:/aws/batch/job:log-stream:my_batch_job_12345

Tail a log stream:

cwl events -f arn:aws:logs:us-west-2:12345657890:log-group:/aws/batch/job:log-stream:my_batch_job_12345

Use a specific AWS profile (otherwise uses default credential chain):

cwl -p testProfile groups

Query a log group using cloudwatch query language:

cwl query /my/log/group -q "fields @timestamp, @message | sort @timestamp desc | limit 5"

Omit the group to query all log groups:

cwl query -q "fields @timestamp, @message | sort @timestamp desc | limit 5"

Using in a pipeline

Each command can read input from stdin, so you can compose with other tools like fzf or grep:

cwl streams /aws/batch/job | fzf | cwl events

Start searching many log streams for a keyword and dump to file:

cwl streams /aws/batch/job | cwl events | grep "ERROR" > errors.log

TUI

Use with no arguments to start a TUI:

cwl