Beautifying the awslamda nested logs Using Logstash in Kibana

Here is what I wrote a week ago.

This is still valid. You should switch to this as it's the "official" way to collect logs from cloudwatch.

There was also a previous discussion regarding this: Sending AWS Cloud Watch Logs to Elasticsearch