Comment by bdcravens
Very nice. A lot of the complexity you described is why I've settled on using CloudWatch logs for anything I have on AWS. I don't need a fancy UI, just a powerful querying language for investigation and debugging. With that said, it would be nice to see at least some mechanism for building aggregates queries (for example, 4* results in the last 24 hours by user) but if it's ClickHouse underneath, I assume that's easy using standard ClickHouse tools.
I hate how Cloudwatch itself is so fragmented, and they have three different query languages for logs.
It’s all cognitive overhead I don’t want to learn.