Check the CloudWatch logs page and update its Discover step for ES|QL mode #9201

Discover opens in ES|QL mode by default from 9.6 and in serverless (#8973). Step 5 of the "Monitor CloudWatch logs" page tells readers to select the index pattern that matches the Firehose stream name in Discover. Readers in ES|QL mode don't see a data view menu.

The page also needs a check against a live setup:

• Confirm which data stream the Lambda logs land in when readers follow the steps. The page and its screenshot use logs-aws.generic-default, and the screenshot shows a delivery stream with es_datastream_name set to that value. Step 3 doesn't set that parameter, and the Amazon Data Firehose integration docs say logs go to logs-awsfirehose-default by default.
• Align the text and the screenshot with the confirmed data stream.
• Add an ES|QL way to view the logs in Discover next to the classic mode steps.

Page: solutions/observability/cloud/monitor-cloudwatch-logs.md

Related: #9017, #4898, #8973