CloudWatchLogs / Client / list_log_anomaly_detectors



Retrieves a list of the log anomaly detectors in the account.

See also: AWS API Documentation

Request Syntax

response = client.list_log_anomaly_detectors(
  • filterLogGroupArn (string) – Use this to optionally filter the results to only include anomaly detectors that are associated with the specified log group.

  • limit (integer) – The maximum number of items to return. If you don’t specify a value, the default maximum value of 50 items is used.

  • nextToken (string) – The token for the next set of items to return. The token expires after 24 hours.

Return type:



Response Syntax

    'anomalyDetectors': [
            'anomalyDetectorArn': 'string',
            'detectorName': 'string',
            'logGroupArnList': [
            'evaluationFrequency': 'ONE_MIN'|'FIVE_MIN'|'TEN_MIN'|'FIFTEEN_MIN'|'THIRTY_MIN'|'ONE_HOUR',
            'filterPattern': 'string',
            'anomalyDetectorStatus': 'INITIALIZING'|'TRAINING'|'ANALYZING'|'FAILED'|'DELETED'|'PAUSED',
            'kmsKeyId': 'string',
            'creationTimeStamp': 123,
            'lastModifiedTimeStamp': 123,
            'anomalyVisibilityTime': 123
    'nextToken': 'string'

Response Structure

  • (dict) –

    • anomalyDetectors (list) –

      An array of structures, where each structure in the array contains information about one anomaly detector.

      • (dict) –

        Contains information about one anomaly detector in the account.

        • anomalyDetectorArn (string) –

          The ARN of the anomaly detector.

        • detectorName (string) –

          The name of the anomaly detector.

        • logGroupArnList (list) –

          A list of the ARNs of the log groups that this anomaly detector watches.

          • (string) –

        • evaluationFrequency (string) –

          Specifies how often the anomaly detector runs and look for anomalies.

        • filterPattern (string) –

          A symbolic description of how CloudWatch Logs should interpret the data in each log event. For example, a log event can contain timestamps, IP addresses, strings, and so on. You use the filter pattern to specify what to look for in the log event message.

        • anomalyDetectorStatus (string) –

          Specifies the current status of the anomaly detector. To pause an anomaly detector, use the enabled parameter in the UpdateLogAnomalyDetector operation.

        • kmsKeyId (string) –

          The ID of the KMS key assigned to this anomaly detector, if any.

        • creationTimeStamp (integer) –

          The date and time when this anomaly detector was created.

        • lastModifiedTimeStamp (integer) –

          The date and time when this anomaly detector was most recently modified.

        • anomalyVisibilityTime (integer) –

          The number of days used as the life cycle of anomalies. After this time, anomalies are automatically baselined and the anomaly detector model will treat new occurrences of similar event as normal.

    • nextToken (string) –

      The token for the next set of items to return. The token expires after 24 hours.


  • CloudWatchLogs.Client.exceptions.InvalidParameterException

  • CloudWatchLogs.Client.exceptions.ResourceNotFoundException

  • CloudWatchLogs.Client.exceptions.ServiceUnavailableException

  • CloudWatchLogs.Client.exceptions.OperationAbortedException