CloudWatch Logs Export Converter
Decompress CloudWatch Logs exports from S3, merge split .gz files in timestamp order, and export CSV or JSONL.
Checks before and after data conversion
1Before converting
- Keep the source file and confirm its encoding and data format.
- Check whether the first row contains headers and whether field names look correct.
- For personal or sensitive data, confirm where processing happens and who will receive the output.
2After converting
- Use the preview to verify text, column names, and row counts.
- Open the result in Excel or the destination system and check dates and long numbers.
- Save the converted file under a new name so it can be compared with the source.
Common next steps
What is CloudWatch Logs Export Converter?
Merge split S3 export objects, convert leading epoch milliseconds or ISO timestamps into datetime, and expand JSON messages into searchable columns.
Sort exported chunks whose order is not guaranteed
CloudWatch Logs exports can be split across gzip objects, and event order inside chunks is not guaranteed. This tool sorts parsed events by timestamp.
It reads plain text, timestamp-plus-message lines, JSON Lines, and subscription payloads with logEvents. JSON messages also gain message.* columns.
Supported log rows
- Epoch milliseconds plus message
- ISO 8601 timestamp plus message
- JSON Lines
- Subscription payloads with logEvents
- Plain text without timestamps
Output formats
How to use
- 1Choose one or more exported .gz files
- 2Click convert
- 3Review events in timestamp order
- 4Download CSV or JSONL
FAQ
Does it restore event order?
Rows with parsed timestamps are sorted ascending; rows without timestamps remain at the end.
Can JSON logs become columns?
Yes. JSON objects in message are expanded into columns such as message.level.
Can it handle very large exports?
Processing uses browser memory, so split very large exports into smaller batches.
Related tools for the next step
Need help choosing the right workflow?
The guide section covers format differences, compression tips, and common PDF workflows.