log
3 rows where body_bytes_sent = 155913 and remote_addr = "10.1.57.54" sorted by request_time descending
This data as json, CSV (advanced)
| Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 363 | 363 | 2021-08-05T19:16:34.601469+00:00 app[web.1]: measure#nginx.service=0.198 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=cced8e38-ff7d-4b05-a0c2-b406d451548a remote_addr="10.1.57.54" forwarded_for="13.48.146.90, 162.158.183.233" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="Tiny Tiny RSS/21.02-c70fc6801 (http://tt-rss.org/)" request_time="0.198" upstream_response_time="0.196" upstream_connect_time="0.000" upstream_header_time="0.192"; | 0.198 | GET /atom/everything/ HTTP/1.1 | 200 | cced8e38-ff7d-4b05-a0c2-b406d451548a | 10.1.57.54 | 13.48.146.90, 162.158.183.233 | http | 1.1 vegur | 155913 | - | Tiny Tiny RSS/21.02-c70fc6801 (http://tt-rss.org/) | 0.198 | 0.196 | 0.0 | 0.192 |
| 398 | 398 | 2021-08-05T19:17:29.694091+00:00 app[web.1]: measure#nginx.service=0.162 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=a4d1f536-9ed0-4c2d-9963-3042ea06dc18 remote_addr="10.1.57.54" forwarded_for="128.199.232.239, 172.70.147.48" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36" request_time="0.162" upstream_response_time="0.164" upstream_connect_time="0.000" upstream_header_time="0.160"; | 0.162 | GET /atom/everything/ HTTP/1.1 | 200 | a4d1f536-9ed0-4c2d-9963-3042ea06dc18 | 10.1.57.54 | 128.199.232.239, 172.70.147.48 | http | 1.1 vegur | 155913 | - | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36 | 0.162 | 0.164 | 0.0 | 0.16 |
| 397 | 397 | 2021-08-05T19:17:29.483806+00:00 app[web.1]: measure#nginx.service=0.147 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=278271b4-2cd8-45d9-a756-9a47935b798e remote_addr="10.1.57.54" forwarded_for="31.170.123.77, 141.101.99.230" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="Fever/1.39 (Feed Parser; http://feedafever.com; Allow like Gecko)" request_time="0.147" upstream_response_time="0.148" upstream_connect_time="0.000" upstream_header_time="0.140"; | 0.147 | GET /atom/everything/ HTTP/1.1 | 200 | 278271b4-2cd8-45d9-a756-9a47935b798e | 10.1.57.54 | 31.170.123.77, 141.101.99.230 | http | 1.1 vegur | 155913 | - | Fever/1.39 (Feed Parser; http://feedafever.com; Allow like Gecko) | 0.147 | 0.148 | 0.0 | 0.14 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );