logs: log: 1 row where where referer = "http://simonwillison.net/" and request = "GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1" sorted by request

1 row where referer = "http://simonwillison.net/" and request = "GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1" sorted by request_time descending

descending

Link	rowid	line	measure#nginx.service	request	status_code	request_id	remote_addr	forwarded_for	forwarded_proto	via	body_bytes_sent	referer	user_agent	request_time ▲	upstream_response_time	upstream_connect_time	upstream_header_time
237	237	2021-08-05T19:14:37.519495+00:00 app[web.1]: measure#nginx.service=2.377 request="GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1" status_code=200 request_id=3afae2a7-5d99-4b50-aba3-66bfbda42012 remote_addr="10.1.7.41" forwarded_for="95.130.216.20, 162.158.183.125" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=4266 referer="http://simonwillison.net/" user_agent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)" request_time="2.377" upstream_response_time="2.376" upstream_connect_time="0.000" upstream_header_time="2.376";	2.377	GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1	200	3afae2a7-5d99-4b50-aba3-66bfbda42012	10.1.7.41	95.130.216.20, 162.158.183.125	http	1.1 vegur	4266	http://simonwillison.net/	Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)	2.377	2.376	0.0	2.376

Advanced export

JSON shape: default, array, newline-delimited

CREATE TABLE "log" (
   [line] TEXT,
   [measure#nginx.service] FLOAT,
   [request] TEXT,
   [status_code] INTEGER,
   [request_id] TEXT,
   [remote_addr] TEXT,
   [forwarded_for] TEXT,
   [forwarded_proto] TEXT,
   [via] TEXT,
   [body_bytes_sent] INTEGER,
   [referer] TEXT,
   [user_agent] TEXT,
   [request_time] FLOAT,
   [upstream_response_time] FLOAT,
   [upstream_connect_time] FLOAT,
   [upstream_header_time] FLOAT
);