# AWS::Logs::QueryDefinition The resource schema for AWSLogs QueryDefinition ## Syntax To declare this entity in your AWS CloudFormation template, use the following syntax: ### JSON
{
"Type" : "AWS::Logs::QueryDefinition",
"Properties" : {
"Name" : String,
"QueryString" : String,
"LogGroupNames" : [ String, ... ],
}
}
### YAML
Type: AWS::Logs::QueryDefinition
Properties:
Name: String
QueryString: String
LogGroupNames:
- String
## Properties
#### Name
A name for the saved query definition
_Required_: No
_Type_: String
_Minimum_: 1
_Maximum_: 255
_Pattern_: ^([^:*\/]+\/?)*[^:*\/]+$
_Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
#### QueryString
The query string to use for this definition
_Required_: No
_Type_: String
_Minimum_: 1
_Maximum_: 10000
_Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
#### LogGroupNames
Optionally define specific log groups as part of your query definition
_Required_: No
_Type_: List of String
_Update requires_: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
## Return Values
### Ref
When you pass the logical ID of this resource to the intrinsic `Ref` function, Ref returns the QueryDefinitionId.
### Fn::GetAtt
The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.
For more information about using the `Fn::GetAtt` intrinsic function, see [Fn::GetAtt](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference-getatt.html).
#### QueryDefinitionId
Unique identifier of a query definition