Skip to content

CloudTrail Lake will no longer be open to new customers starting May 31, 2026

Description

CloudTrail Lake will no longer be open to new customers starting May 31, 2026. If you would like to use CloudTrail Lake, sign up prior to that date. Existing customers can continue to use the service as normal. For more information, see CloudTrail Lake availability change.

Gets event data results of a query. You must specify the QueryID value returned by the start_query operation.

Usage

cloudtrail_get_query_results(EventDataStore, QueryId, NextToken,
  MaxQueryResults, EventDataStoreOwnerAccountId)

Arguments

  • EventDataStore

    The ARN (or ID suffix of the ARN) of the event data store against which the query was run.

  • QueryId

    [required] The ID of the query for which you want to get results.

  • NextToken

    A token you can use to get the next page of query results.

  • MaxQueryResults

    The maximum number of query results to display on a single page.

  • EventDataStoreOwnerAccountId

    The account ID of the event data store owner.

Value

A list with the following syntax:

list(
  QueryStatus = "QUEUED"|"RUNNING"|"FINISHED"|"FAILED"|"CANCELLED"|"TIMED_OUT",
  QueryStatistics = list(
    ResultsCount = 123,
    TotalResultsCount = 123,
    BytesScanned = 123
  ),
  QueryResultRows = list(
    list(
      list(
        "string"
      )
    )
  ),
  NextToken = "string",
  ErrorMessage = "string"
)

Request syntax

svc$get_query_results(
  EventDataStore = "string",
  QueryId = "string",
  NextToken = "string",
  MaxQueryResults = 123,
  EventDataStoreOwnerAccountId = "string"
)