title: AWS Athena WAF Logs
body: <p>Since AWS updated the WAF logs format, my queries don't work anymore as described here:</p>
  <p><a href="https://stackoverflow.com/questions/63055676/using-athena-to-get-terminatingrule-from-rulegrouplist-in-aws-waf-logs/68116980#68116980">Using Athena to get terminatingrule from rulegrouplist in AWS WAF logs</a></p>
  <p>I get this error:</p>
  <pre><code>SYNTAX_ERROR: line 1:224: Unexpected parameters (row(&quot;rulegroupid&quot; varchar,&quot;terminatingrule&quot; varchar,&quot;nonterminatingmatchingrules&quot; array(row(&quot;action&quot; varchar,&quot;ruleid&quot; varchar))), varchar(17)) for function json_extract. Expected: json_extract(varchar(x), JsonPath) , json_extract(json, JsonPath)
  </code></pre>
  <p>Does anyone know how to fix this syntax error?</p>
  <p>thanks</p>