log
1 row where referer = "http://simonwillison.net/" and remote_addr = "10.1.7.41" sorted by request_time descending
This data as json, CSV (advanced)
Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
237 | 237 | 2021-08-05T19:14:37.519495+00:00 app[web.1]: measure#nginx.service=2.377 request="GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1" status_code=200 request_id=3afae2a7-5d99-4b50-aba3-66bfbda42012 remote_addr="10.1.7.41" forwarded_for="95.130.216.20, 162.158.183.125" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=4266 referer="http://simonwillison.net/" user_agent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E)" request_time="2.377" upstream_response_time="2.376" upstream_connect_time="0.000" upstream_header_time="2.376"; | 2.377 | GET /2021/Jul/23/the-tyranny-of-spreadsheets/ HTTP/1.1 | 200 | 3afae2a7-5d99-4b50-aba3-66bfbda42012 | 10.1.7.41 | 95.130.216.20, 162.158.183.125 | http | 1.1 vegur | 4266 | http://simonwillison.net/ | Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; .NET4.0C; .NET4.0E) | 2.377 | 2.376 | 0.0 | 2.376 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );