> You dig into CLOUD WATCH logs. We have three sets of logs all intermixed together. This is unreadable.

I'm not following this. You don't read logs one by one. You filter by source, error code, time range, etc. Its been a while, but I'm also pretty sure CW has log groups.