Advanced AI Prompt for CloudWatch Log Insights to Custom Metric Transformation

Act as a Cloud Security Operations (SOC) Analyst. Engineer a precise technical specification for a CloudWatch Metric Filter designed to autonomously parse terabytes of unstructured text data within the [LOG_GROUP]. Define a highly optimized regex [SEARCH_PATTERN] to isolate critical security events (e.g., 'Failed Login Attempt' or 'Invalid Token'). You must dictate the precise [METRIC_VALUE_EXTRACTION] logic required to mathematically convert these text-based log hits into quantifiable, numerical custom metrics (e.g., extracting the bytes transferred or simply counting occurrences). Generate the CloudFormation resource for an Alarm that triggers the moment the extracted value violently breaches the [ALARM_THRESHOLD]. Supplement this with a heavily optimized CloudWatch Logs Insights query string allowing engineers to manually audit the raw underlying log streams during the resulting incident.