gron log.json | grep https # see a json.log.entries[334].request.url jq -r '.log.entries[] | .request.url' log.json