I might be weird, but I find gron invaluable for figuring out what I need to pass to jq.
gron log.json | grep https
# see a json.log.entries[334].request.url
jq -r '.log.entries[] | .request.url' log.json