AWS Administration - The Definitive Guide - Second Edition

Viewing and filtering captured CloudTrail Logs and Events

With the Trail created, you can now view the captured events and filter them using the event history option from the CloudTrail dashboard's navigation pane. Here, you can view the last 7 days of captured events, and even filter specific ones by using one or more supporting filter attributes.

Here's a quick look at the Filter attributes that you can use in conjunction with the Time range to extract the required events and logs:

• Event ID: Each event captured by CloudTrail has a unique ID that you can filter and view.
• Event name: The name of the event. For example, EC2 events RunInstances, DescribeInstances, and so on.
• Event source: The AWS service to which the request was made. For ...