cloudwatch logs insights parse json array