diff --git a/lib/data_requests/local/fetch_cloudwatch_logs.rb b/lib/data_requests/local/fetch_cloudwatch_logs.rb
index 4b0910e2de8..733d155cf37 100644
--- a/lib/data_requests/local/fetch_cloudwatch_logs.rb
+++ b/lib/data_requests/local/fetch_cloudwatch_logs.rb
@@ -78,7 +78,7 @@ def cloudwatch_client
       def query_string
         <<~QUERY
           fields @timestamp, @message
-          | filter @message like /#{uuid}/
+          | filter properties.user_id = '#{uuid}' and name != 'IRS Attempt API: Event metadata'
         QUERY
       end