Can anyone help me with the Queries to Find out in VPC Flowlogs , Top ip to find 403,502 ,404 Error in aws cloud watch Logs Insights?? I have tried this but did not get the desire output!!
filter action="REJECT"
| stats count(*) as numRejection by srcAddr
| sort nymRejection desc
and
filter protocol=17 | stats count(*) by srcAddr