log
3 rows where body_bytes_sent = 155913 and remote_addr = "10.1.17.204" sorted by request_time descending
This data as json, CSV (advanced)
| Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 379 | 379 | 2021-08-05T19:17:04.502646+00:00 app[web.1]: measure#nginx.service=3.098 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=885ed3a0-a2c7-439a-9a79-98176847d8b7 remote_addr="10.1.17.204" forwarded_for="178.255.113.33, 162.158.134.87" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="NextCloud-News/1.0" request_time="3.098" upstream_response_time="3.096" upstream_connect_time="0.000" upstream_header_time="3.092"; | 3.098 | GET /atom/everything/ HTTP/1.1 | 200 | 885ed3a0-a2c7-439a-9a79-98176847d8b7 | 10.1.17.204 | 178.255.113.33, 162.158.134.87 | http | 1.1 vegur | 155913 | - | NextCloud-News/1.0 | 3.098 | 3.096 | 0.0 | 3.092 |
| 232 | 232 | 2021-08-05T19:14:28.455994+00:00 app[web.1]: measure#nginx.service=0.279 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=710f5b89-211f-42bb-92cf-240f3bb5047a remote_addr="10.1.17.204" forwarded_for="79.147.57.124, 188.114.110.171" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) News Explorer/1.9" request_time="0.279" upstream_response_time="0.280" upstream_connect_time="0.000" upstream_header_time="0.272"; | 0.279 | GET /atom/everything/ HTTP/1.1 | 200 | 710f5b89-211f-42bb-92cf-240f3bb5047a | 10.1.17.204 | 79.147.57.124, 188.114.110.171 | http | 1.1 vegur | 155913 | - | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/605.1.15 (KHTML, like Gecko) News Explorer/1.9 | 0.279 | 0.28 | 0.0 | 0.272 |
| 106 | 106 | 2021-08-05T19:11:21.653819+00:00 app[web.1]: measure#nginx.service=0.272 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=20f1bb8e-0a06-4e91-a595-d1c958d7df6e remote_addr="10.1.17.204" forwarded_for="147.182.168.0, 172.70.110.145" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="NewsBlur Feed Fetcher - 555 subscribers - http://www.newsblur.com/site/5020414/simon-willisons-weblog (\x22Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15\x22)" request_time="0.272" upstream_response_time="0.272" upstream_connect_time="0.000" upstream_header_time="0.268"; | 0.272 | GET /atom/everything/ HTTP/1.1 | 200 | 20f1bb8e-0a06-4e91-a595-d1c958d7df6e | 10.1.17.204 | 147.182.168.0, 172.70.110.145 | http | 1.1 vegur | 155913 | - | NewsBlur Feed Fetcher - 555 subscribers - http://www.newsblur.com/site/5020414/simon-willisons-weblog (\x22Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15\x22) | 0.272 | 0.272 | 0.0 | 0.268 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );