Untitled

query_id=$(aws logs start-query \
    --log-group-names "your-log-group-name" \
    --start-time $(date -d '5 minutes ago' +%s) \
    --end-time $(date +%s) \
    --query-string "fields @timestamp, @message | filter @message like /your-filter-string/" \
    --region your-region \
    --output json | jq -r '.queryId')

aws logs get-query-results --query-id "$query_id" --region your-region