You can now use Amazon Athena to query data using Logstash Grok filters . Grok is useful for applying patterns to parse unstructured data, usually logs. The patterns are easier to use than regular expressions, because each Grok pattern is essentially a named regular expression. This makes it easier to identify and re-use deserialization patterns. Grok provides a set of pre-defined patterns. You can also create custom patterns.