log
2 rows where remote_addr = "10.1.94.69" and status_code = 301 sorted by referer
This data as json, CSV (advanced)
Link | rowid | line | measure#nginx.service | request | status_code | request_id | remote_addr | forwarded_for | forwarded_proto | via | body_bytes_sent | referer ▼ | user_agent | request_time | upstream_response_time | upstream_connect_time | upstream_header_time |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
304 | 304 | 2021-08-05T19:15:52.017176+00:00 app[web.1]: measure#nginx.service=0.287 request="GET /2018 HTTP/1.1" status_code=301 request_id=8998a739-b882-4b7a-9221-48ef42fc0cee remote_addr="10.1.94.69" forwarded_for="34.147.114.27, 172.69.54.15" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=0 referer="-" user_agent="newspaper/0.2.8" request_time="0.287" upstream_response_time="0.288" upstream_connect_time="0.000" upstream_header_time="0.288"; | 0.287 | GET /2018 HTTP/1.1 | 301 | 8998a739-b882-4b7a-9221-48ef42fc0cee | 10.1.94.69 | 34.147.114.27, 172.69.54.15 | http | 1.1 vegur | 0 | - | newspaper/0.2.8 | 0.287 | 0.288 | 0.0 | 0.288 |
316 | 316 | 2021-08-05T19:15:54.187893+00:00 app[web.1]: measure#nginx.service=1.158 request="GET /2011 HTTP/1.1" status_code=301 request_id=e3efaac0-27eb-4b9c-b5fe-4c2cb73b2cc3 remote_addr="10.1.94.69" forwarded_for="34.147.114.27, 141.101.76.170" forwarded_proto="http" via="1.1 vegur" body_bytes_sent=0 referer="-" user_agent="newspaper/0.2.8" request_time="1.158" upstream_response_time="1.160" upstream_connect_time="0.000" upstream_header_time="1.160"; | 1.158 | GET /2011 HTTP/1.1 | 301 | e3efaac0-27eb-4b9c-b5fe-4c2cb73b2cc3 | 10.1.94.69 | 34.147.114.27, 141.101.76.170 | http | 1.1 vegur | 0 | - | newspaper/0.2.8 | 1.158 | 1.16 | 0.0 | 1.16 |
Advanced export
JSON shape: default, array, newline-delimited
CREATE TABLE "log" ( [line] TEXT, [measure#nginx.service] FLOAT, [request] TEXT, [status_code] INTEGER, [request_id] TEXT, [remote_addr] TEXT, [forwarded_for] TEXT, [forwarded_proto] TEXT, [via] TEXT, [body_bytes_sent] INTEGER, [referer] TEXT, [user_agent] TEXT, [request_time] FLOAT, [upstream_response_time] FLOAT, [upstream_connect_time] FLOAT, [upstream_header_time] FLOAT );