Cloudwatch Handler should filter out timestamp + invocation ID from logs

[honeycombio]

Cloudwatch Handler should filter out timestamp + invocation ID from logs

[reconbot]

I use pino-lambda in my nodejs project. It writes to stdout and could skip this patched console.log but it actually recreates the console log information as it is used by other tools for tracing. I have a JSON payload so I don't want to use the regex parser, but I do want to regex out the beginning of the line.

Currently the JSON parser errors like this

time="2021-07-10T01:21:08Z" level=warning msg="unable to parse line, skipping" error="invalid character '-' after top-level value" line="2021-07-10T01:21:00.854Z\tda58bd36-369b-40db-8199-8cdaa61d8630\tINFO\trequest\t{\"level\":30,\"time\":1625880060854,\"pid\":8,\"hostname\":\"xxxx\",\"module\":\"http:post-graphql\",\"awsRequestId\":\"da58bd36-369b-40db-8199-8cdaa61d8630\",\"apiRequestId\":\"xxxxx=\",\"x-correlation-trace-id\":\"Root=1-60e8f5fb-0bff75572f9d095e13bda637;Parent=40b3921a13d1f18b;Sampled=0\",\"x-correlation-id\":\"da58bd36-369b-40db-8199-8cdaa61d8630\",\"NODE_ENV\":\"staging\",\"functionName\":\"TelleyApiStaging-PostGraphqlHTTPLambda\",\"functionVersion\":\"$LATEST\",\"msg\":\"request\"}\r\n"

and the offending log line that I'd like to support looks like this (according to cloudwatch which parses the json, it's all one line)

2021-07-10T01:21:00.854Z	da58bd36-369b-40db-8199-8cdaa61d8630	INFO	request	
{
    "level": 30,
    "time": 1625880060854,
    "pid": 8,
    "hostname": "xxxx",
    "module": "http:post-graphql",
    "awsRequestId": "da58bd36-369b-40db-8199-8cdaa61d8630",
    "apiRequestId": "xxxxx=",
    "x-correlation-trace-id": "Root=1-60e8f5fb-0bff75572f9d095e13bda637;Parent=40b3921a13d1f18b;Sampled=0",
    "x-correlation-id": "da58bd36-369b-40db-8199-8cdaa61d8630",
    "NODE_ENV": "staging",
    "functionName": "TelleyApiStaging-PostGraphqlHTTPLambda",
    "functionVersion": "$LATEST",
    "msg": "request"
}

[dstrelau]

Thank you for submitting this issue! In an effort to better respond to new issues, we're closing old, inactive issues like this one. If you feel this is still important to consider, please leave a comment.