我正试图在cloudwatch中设置一个警报。监视器应在日志中搜索特定字符串，例如：
在状态下完成执行已成功完成
下面你可以在cloudwatch中找到关于字符串的日志：
@MESSAGE: {"log":"[25/Mar/2021:16:04:21 +0000] category=BACKEND severity=NOTICE msgID=414 msg=Backup task recurringBackupTask-20210325160000000 finished execution in the state Completed successfullyn","stream":"stdout","docker":{"container_id":"389f974c00190dec6cb9bdf4617618b989078fc503ecbe8aff50aad2c0703cb9"},"kubernetes":{"container_name":"ds","namespace_name":"users","pod_name":"ds-cts-2","container_image":"912682637080.dkr.ecr.eu-central-1.amazonaws.com/forgeops-v7/ds-cts@sha256:a7ef0afacbca756614228fbf4b518fc2c68d26ae67b6d013ef7ee13f053c97dd","container_image_id":"docker-pullable://912682637080.dkr.ecr.eu-central-1.amazonaws.com/forgeops-v7/ds-cts@sha256:a7ef0afacbca756614228fbf4b518fc2c68d26ae67b6d013ef7ee13f053c97dd","pod_id":"8c776a54-6ab2-4089-a80f-9e4b171d694d","host":"ip-10-6-23-94.eu-central-1.compute.internal","labels":{"affinity":"directory","app":"ds-cts","controller-revision-hash":"ds-cts-5cd69c68bf","tier":"ds","app_kubernetes_io/managed-by":"skaffold","app_kubernetes_io/name":"forgerock","linkerd_io/control-plane-ns":"linkerd","linkerd_io/proxy-statefulset":"ds-cts","linkerd_io/workload-ns":"users","skaffold_dev/run-id":"forgeops-int-7","statefulset_kubernetes_io/pod-name":"ds-cts-2"},"master_url":"https://172.20.0.1:443/api","namespace_id":"438bb425-03db-4193-b007-7517f46f12d3","namespace_labels":{"app_kubernetes_io/name":"users","app_kubernetes_io/part-of":"users"}}}
LOG: [25/Mar/2021:16:04:21 +0000] category=BACKEND severity=NOTICE msgID=414 msg=Backup task recurringBackupTask-20210325160000000 finished execution in the state Completed successfully
所以我创建了这个度量：
{($.kubernetes.container_name= "ds") && ($.log = "finished execution in the state Completed successfully")}
一旦创建了警报并附加了度量，它似乎就不起作用了，因为它找不到字符串，所以它总是处于警报状态
你有什么建议？度量是错的吗？我已经尝试了很多组合，但似乎都不起作用。
提前感谢
最好的MC
试试这个：
{($.kubernetes.container_name= "ds") && ($.log = "*finished execution in the state Completed successfully*")}