I'm trying to create a multi-faceted time series graph in CloudWatch Log Insights.
I can create a multi-faceted query which is not a time series, and I can create an unfaceted time series query, but I can't seem to do both.
For example: I can do a query that looks like this:
fields @timestamp, someField1, @message
| stats count(*) by someField1, someField2
This will give me a table of results broken down by both someField1 and someField2. I can also do:
fields @timestamp, someField1, @message
| stats count(*) by bin(1h)
This will give me a time series graph.
However, I can't work out how to combine the two, so that I get a time series graph with multiple lines on it.
Is this simply unavailable in AWS CloudWatch logs, or is there a way to do it that I haven't found?