log
1 row where body_bytes_sent = 155913 and remote_addr = "10.1.93.20" sorted by request_time descending
This data as json, CSV (advanced)
Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer | user_agent | request_time ▲ | upstream_response_time | upstream_connect_time | upstream_header_time |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
156 | 156 | 2021-08-05T19:12:40.619236+00:00 app[web.1]: measure#nginx.service=0.230 request="GET /atom/everything/ HTTP/1.1" status_code=200 request_id=3e2db9f8-93f2-4722-b342-0e313c236bc1 remote_addr="10.1.93.20" forwarded_for="147.182.164.48, 172.70.114.105" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=155913 referer="-" user_agent="NewsBlur Feed Fetcher - 555 subscribers - http://www.newsblur.com/site/790/simon-willisons-weblog (\x22Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15\x22)" request_time="0.230" upstream_response_time="0.228" upstream_connect_time="0.000" upstream_header_time="0.220"; | 0.23 | GET /atom/everything/ HTTP/1.1 | 200 | 3e2db9f8-93f2-4722-b342-0e313c236bc1 | 10.1.93.20 | 147.182.164.48, 172.70.114.105 | http | 1.1 vegur | 155913 | - | NewsBlur Feed Fetcher - 555 subscribers - http://www.newsblur.com/site/790/simon-willisons-weblog (\x22Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15\x22) | 0.23 | 0.228 | 0.0 | 0.22 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );