log
2 rows where body_bytes_sent = 108589 sorted by request_time descending
This data as json, CSV (advanced)
| Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 203 | 203 | 2021-08-05T19:13:51.962383+00:00 app[web.1]: measure#nginx.service=1.500 request="GET / HTTP/1.1" status_code=200 request_id=581544e7-af43-4fbf-b477-33702d2deb3b remote_addr="10.1.29.75" forwarded_for="34.132.160.115, 162.158.75.152" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=108589 referer="http://simonwillison.net/" user_agent="Go-http-client/2.0" request_time="1.500" upstream_response_time="1.500" upstream_connect_time="0.000" upstream_header_time="1.500"; | 1.5 | GET / HTTP/1.1 | 200 | 581544e7-af43-4fbf-b477-33702d2deb3b | 10.1.29.75 | 34.132.160.115, 162.158.75.152 | http | 1.1 vegur | 108589 | http://simonwillison.net/ | Go-http-client/2.0 | 1.5 | 1.5 | 0.0 | 1.5 |
| 294 | 294 | 2021-08-05T19:15:50.308982+00:00 app[web.1]: measure#nginx.service=0.221 request="GET / HTTP/1.1" status_code=200 request_id=2c59e9f2-0659-487e-b7b5-9fb321e06c20 remote_addr="10.1.12.255" forwarded_for="34.147.114.27, 141.101.76.110" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=108589 referer="-" user_agent="newspaper/0.2.8" request_time="0.221" upstream_response_time="0.220" upstream_connect_time="0.000" upstream_header_time="0.220"; | 0.221 | GET / HTTP/1.1 | 200 | 2c59e9f2-0659-487e-b7b5-9fb321e06c20 | 10.1.12.255 | 34.147.114.27, 141.101.76.110 | http | 1.1 vegur | 108589 | - | newspaper/0.2.8 | 0.221 | 0.22 | 0.0 | 0.22 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );