关于INFO级S3对象上传日志被error规则的Metric Filter匹配的技术咨询

各位好，最近碰到个棘手的问题，想请大家帮忙排查下：

我在CloudWatch里配置了一个Metric Filter，目的是专门捕获ERROR级别的日志，但今天发现一条明显是INFO级别的S3对象上传日志居然被这个Filter匹配到了，完全搞不懂哪里出了问题。

这条触发问题的日志内容如下：

[INFO] 2024-09-30T11:56:23.860Z    db69b31b-1864-468c-9e8d-0435d0580427    {"Records": [{"eventVersion": "2.1", "eventSource": "aws:s3", "awsRegion": "ap-south-1", "eventTime": "2024-09-30T11:56:22.885Z", "eventName": "ObjectCreated:Put", "userIdentity": {"principalId": "AWS:AROA24OGH3CYSRAKOVTQB:pibit-lossrun-middleware-lambda"}, "requestParameters": {"sourceIPAddress": "13.233.180.125"}, "responseElements": {"x-amz-request-id": "PXTM7CCFS0Y0BFS5", "x-amz-id-2": "rZYnRdsnprMGued2oG7tDTBqquMst+tB76x1beuIqZV1D7Z0JbgdS2+mISPwfIV2WEks2j9FDZlzo27djBKAlRk4xxeI6mgO"}, "s3": {"s3SchemaVersion": "1.0", "configurationId": "s3-new-doc-upload-trigger-event", "bucket": {"name": "prod-xxcc-lossrun-middleware-bucket", "ownerIdentity": {"principalId": "AWFVTHUZQVQ6X"}, "arn": "arn:aws:s3:::prod-pibit-lossrun-middleware-bucket"}, "object": {"key": "kinetic/lossrun-docs/2024-09-30/6417434c-7f1b-11ef-ade1-4eaefccf8aee/submit_result/Acord_TEST5689.xlsx", "size": 27439, "eTag": "8cb34ea7de75e1a01625cae1d4..."}}]}

我仔细看了日志开头明确标了[INFO]，而且是S3对象上传的成功日志，完全和ERROR不沾边。目前怀疑是不是我的Metric Filter规则写得有漏洞？或者日志内容里某个字段藏了类似ERROR的关键词？

有没有大佬遇到过类似的情况？麻烦给点排查思路，谢谢大家！

备注：内容来源于stack exchange，提问作者KADALI SIVA KUMAR