logs: log: 2 rows where where body_bytes_sent = 0 and remote_addr = "10.1.7.130" sorted by request

2 rows where body_bytes_sent = 0 and remote_addr = "10.1.7.130" sorted by request_time descending

descending

Link	rowid	line	measure#nginx.service	request	status_code	request_id	remote_addr	forwarded_for	forwarded_proto	via	body_bytes_sent	referer	user_agent	request_time ▲	upstream_response_time	upstream_connect_time	upstream_header_time
296	296	2021-08-05T19:15:51.241317+00:00 app[web.1]: measure#nginx.service=0.055 request="GET /2016 HTTP/1.1" status_code=301 request_id=ee8aad28-c37c-4ee9-bb3f-f24e2b9b517f remote_addr="10.1.7.130" forwarded_for="34.147.114.27, 141.101.105.129" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=0 referer="-" user_agent="newspaper/0.2.8" request_time="0.055" upstream_response_time="0.056" upstream_connect_time="0.000" upstream_header_time="0.056";	0.055	GET /2016 HTTP/1.1	301	ee8aad28-c37c-4ee9-bb3f-f24e2b9b517f	10.1.7.130	34.147.114.27, 141.101.105.129	http	1.1 vegur	0	-	newspaper/0.2.8	0.055	0.056	0.0	0.056
300	300	2021-08-05T19:15:51.544439+00:00 app[web.1]: measure#nginx.service=0.045 request="GET /tags HTTP/1.1" status_code=301 request_id=0348dd88-7441-42a4-b7cc-7bb70afc0cfe remote_addr="10.1.7.130" forwarded_for="34.147.114.27, 172.69.54.94" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=0 referer="-" user_agent="newspaper/0.2.8" request_time="0.045" upstream_response_time="0.044" upstream_connect_time="0.000" upstream_header_time="0.044";	0.045	GET /tags HTTP/1.1	301	0348dd88-7441-42a4-b7cc-7bb70afc0cfe	10.1.7.130	34.147.114.27, 172.69.54.94	http	1.1 vegur	0	-	newspaper/0.2.8	0.045	0.044	0.0	0.044

Advanced export

JSON shape: default, array, newline-delimited

CREATE TABLE "log" (
   [line] TEXT,
   [measure#nginx.service] FLOAT,
   [request] TEXT,
   [status_code] INTEGER,
   [request_id] TEXT,
   [remote_addr] TEXT,
   [forwarded_for] TEXT,
   [forwarded_proto] TEXT,
   [via] TEXT,
   [body_bytes_sent] INTEGER,
   [referer] TEXT,
   [user_agent] TEXT,
   [request_time] FLOAT,
   [upstream_response_time] FLOAT,
   [upstream_connect_time] FLOAT,
   [upstream_header_time] FLOAT
);