Last checked and updated on 01 Jun 2026
What Is New in Grafana 11.4
| Category | Highlights |
|---|---|
| New Features | OpenSearch PPL and SQL query languages added to AWS CloudWatch data source |
| Improvements | Syntax highlighting, autocomplete, field suggestions, and updated cheat sheet for CloudWatch Logs |
How can I query CloudWatch Logs using OpenSearch PPL in Grafana 11.4?
Grafana 11.4 lets you select OpenSearch PPL from the new Query language drop-down when using the AWS CloudWatch data source.
- Open the CloudWatch panel, choose the desired log group, then pick "OpenSearch PPL" as the language.
- Write PPL statements directly in the query editor; the editor now highlights syntax and offers autocomplete for fields discovered in the selected log groups.
source = my-log-group | where level = 'ERROR' | sort @timestamp desc | limit 20This flexibility is useful if your team already uses PPL for Elasticsearch queries.
What improvements does the Grafana 11.4 query editor provide for CloudWatch Logs?
The query editor now includes syntax highlighting, real-time autocomplete, and field suggestions for both OpenSearch PPL and SQL.
- Keywords, functions, and operators are color-coded, reducing visual parsing errors.
- As you type, Grafana suggests log fields, operators, and even common query snippets.
- When you select a log group, the editor surfaces discovered fields so you can reference them without memorizing exact names.
SELECT * FROM \"my-log-group\" WHERE level = 'WARN' LIMIT 50These editor upgrades speed up the creation of complex queries and lower the learning curve for new team members.
Where can I find ready-made CloudWatch Logs queries in Grafana 11.4?
Grafana 11.4 ships an updated CloudWatch Logs cheat sheet that lists the most commonly used queries.
- Open the cheat sheet from the CloudWatch data source UI; each entry is a clickable example.
- Clicking an example automatically populates the query editor, allowing you to tweak the query for your environment.
- The cheat sheet covers both OpenSearch PPL and SQL patterns, such as error rate calculations, latency histograms, and user-session tracing.
This feature reduces the time spent searching documentation and helps teams adopt best-practice queries faster.
Frequently Asked Questions
Can I use OpenSearch SQL in Grafana 11.4 to join CloudWatch log streams?
Yes you can write SQL JOIN statements against CloudWatch Logs Insights when you select the OpenSearch SQL language.
Does the new query editor affect existing CloudWatch panels?
Existing panels continue to work unchanged; the new editor features are additive and do not require migration.
Is there a performance impact when using OpenSearch PPL?
Performance is comparable to the native Logs Insights QL because the queries are still executed by the CloudWatch service.
How do I access the updated cheat sheet for CloudWatch Logs?
Open the AWS CloudWatch data source settings and click the "Cheat sheet" button to view ready-made queries.
What syntax highlighting colors are used for PPL keywords?
Keywords appear in blue, strings in green, and functions in purple, making the query easier to read.
Can I copy a sample query from the cheat sheet into a Grafana dashboard JSON?
You can copy the plain-text query, such as SELECT * FROM \"my-log-group\" WHERE level = 'WARN' LIMIT 50, and paste it into the dashboard JSON definition.