Analyze your AWS network traffic with a visual query builder. No SQL required. Build queries with clicks, view results as tables, charts, or network diagrams.
Demo - drag nodes from the palette onto the canvas to build queries visually
Drag nodes to canvas
SELECT srcaddr, dstaddr, dstport,
SUM(bytes) as total_bytes,
COUNT(*) as flow_count
FROM vpc_flow_logs
WHERE srcaddr IN (SELECT private_ip FROM ec2_instances WHERE name LIKE 'api-%')
AND dstport = 5432
GROUP BY srcaddr, dstaddr, dstport
ORDER BY total_bytes DESCVPC Flow Logs contain valuable network traffic data, but analyzing them traditionally requires writing complex Athena SQL queries. CloudWrangler's visual query builder lets you analyze flow logs without any SQL knowledge.
Simply select the fields you want to see (source IP, destination IP, port, bytes transferred, etc.), add filters (time range, specific IPs, accepted/rejected traffic), and choose your output format. CloudWrangler generates the optimal Athena query and displays your results instantly.
For advanced users, you can also switch to SQL mode and write custom queries directly. Save your queries to run them again later or share them with your team.
View your query results in the format that best suits your needs
View results in a sortable, filterable table. Perfect for detailed analysis and exporting to CSV for further processing.
Visualize traffic patterns with interactive charts. Great for identifying trends, top talkers, and traffic distributions.
See traffic flows as a network diagram. Understand how your resources communicate visually. Perfect for security analysis.
Identify rejected traffic, unexpected connections, and potential security threats. Monitor for port scans, unauthorized access attempts, and data exfiltration patterns.
Troubleshoot connectivity issues between services. Find out why your application can't reach a database or why API calls are failing.
Understand traffic patterns between your resources. Identify top talkers, bandwidth usage, and optimize your architecture based on actual traffic data.
Generate reports showing network traffic for compliance audits. Document what traffic is allowed and rejected in your environment.
Get started quickly with our library of pre-built query templates for common analysis tasks
No! The visual query builder lets you select fields, add filters, and configure output without writing any SQL. You can build powerful queries just by clicking. Advanced users can switch to SQL mode if they prefer.
CloudWrangler uses AWS Athena to query your VPC Flow Logs stored in S3. We help you set up the required Glue table and Athena workgroup, then run queries on your behalf using a read-only IAM role.
CloudWrangler itself is free, but AWS charges for Athena queries based on data scanned (typically $5 per TB). CloudWrangler optimizes queries to minimize costs by using partitioning and only querying the data you need.
Yes! Save your queries to run them again later. You can also share queries with team members and use the pre-built template library to get started quickly.
CloudWrangler supports all VPC Flow Log formats including the default format and custom formats with additional fields like TCP flags, traffic path, and more.