Amazon CloudWatchLogs putLogEvents in PHP gives er

Question

hi guys i'm trying to put Log on amazon CloudWatchLogs like this:

$response2 = $amzonLoger->putLogEvents([

            'logGroupName' => 'myGroup',
            'logStreamName' => 'myStream',
            'logEvents' => [
                [
                    'timestamp' => time(),
                    'message' => 'message'
                ],
            ],
            'sequenceToken' => lastToken,
        ]);
        var_dump($response2);

but always i've this response :

bject(Guzzle\Service\Resource\Model)#289 (2) { ["structure":protected]=> NULL ["data":protected]=> array(2) { ["nextSequenceToken"]=> string(56) "495401145812734324234234236420825819917076850" ["rejectedLogEventsInfo"]=> array(1) { ["tooOldLogEventEndIndex"]=> int(1) } } }

can u help me understanding what does mean ["rejectedLogEventsInfo"]=> array(1) { ["tooOldLogEventEndIndex"]=> int(1), I will be very grateful for the help.

Answer 1

Your error is telling you that the timestamp you are using is not good.

http://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_PutLogEvents.html

From doc:

None of the log events in the batch can be more than 2 hours in the future.
None of the log events in the batch can be older than 14 days or the retention period of the log group.

If using current time and current time is correct you may be in a different time zone (that is more than 2 hours ahead of UTC). Use UTC time for events timestamp.

Answer 2

Cloudwatch API expects timestamp in epoch microseconds, not seconds. Took me a while to figure that out. Thanks to the PHP snippet above.

Answer 3

ok guys i found the solution adding this line instead of time() function of php . following this example cloudWatchLogs.

'timestamp' =>  round(microtime(true) * 1000),

i hope that this can help someone on the future thanks.