I am trying to create a Cloudwatch alarm based on a metric filter. The messages being sent to Cloudwatch Logs are in JSON format following Elastic Common Schema. Example of message
The problem I am having is how to use the flatten key "log.level", if I try to use this filter {$.log.level = "error"} it will not work. Testing the pattern
