invocations == 0).errors > 0).throttles > 0).Last 100 Errors:
fields @timestamp, @message
| filter @message like /Error/
| sort @timestamp desc
| limit 100
Percentage of Cold Starts:
fields @timestamp, @message
| stats count() as totalInvocations, sum(isColdStart) as coldStarts
| filter @message like /START RequestId: [ID] Version: $LATEST/
| eval isColdStart = @message like /Init Duration/
| eval coldStartPercentage = coldStarts / totalInvocations * 100
Average Memory Usage:
fields @timestamp, @memorySize, @maxMemoryUsed
| stats avg(@maxMemoryUsed / @memorySize * 100) as avgMemoryUsage