We're using CloudWatch, Stackdriver and SumoLogic. SumoLogic is by far the best. It still has some room for improvement. But if you're stuck with could providers log aggregators - it's miserable.