log
1 row where forwarded_for = "2001:250:5002:8100::6687, 172.68.254.121" and remote_addr = "10.1.58.55" sorted by request_time descending
This data as json, CSV (advanced)
| Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 382 | 382 | 2021-08-05T19:17:06.207573+00:00 app[web.1]: measure#nginx.service=1.661 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=db8baa13-d5cc-4823-b528-6b5071e1943a remote_addr="10.1.58.55" forwarded_for="2001:250:5002:8100::6687, 172.68.254.121" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36" request_time="1.661" upstream_response_time="1.664" upstream_connect_time="0.000" upstream_header_time="1.656"; | 1.661 | GET /atom/everything/ HTTP/1.1 | 200 | db8baa13-d5cc-4823-b528-6b5071e1943a | 10.1.58.55 | 2001:250:5002:8100::6687, 172.68.254.121 | http | 1.1 vegur | 155913 | - | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 | 1.661 | 1.664 | 0.0 | 1.656 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );