Seq Documentation and Support

Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!

Get Started    
Ask A Question

Questions

5

Restore failed ?

Hi Nick, I have a staging server with SEQ and my local machine with both the 2020.1 version. I would restore data from staging server to my local machine. No issues messages, but the data seems not restored. Why ? ``` C:\Windows\system32>seq service stop Stopping Seq... Waiting up to 60 seconds for apps to unload and the service to stop (currently: Running)... Stopped. C:\Windows\system32>seq restore --master-key="bEa0OGgZg+HqHj00cbtZ7tLUoiz2dBkBUaojc/q3E0A=" --backup="D:\Temp\SEQ\seq_20201114.seqbac" [11:24:48 INF] Opening metastore "C:\\ProgramData\\Seq\\Documents\\default.quince" This will clear all metadata (users, signals, ...) from the current instance and replace it with the contents of backup D:\Temp\SEQ\seq_20201114.seqbac. Press `y` to continue, or any other key to cancel. [11:25:01 INF] Restoring from "D:\\Temp\\SEQ\\seq_20201114.seqbac" [11:25:01 INF] Decrypting content [11:25:01 INF] Extracting content [11:25:01 INF] Reading manifest [11:25:01 INF] Checking manifest [11:25:01 INF] Clearing out existing documents [11:25:02 INF] Restoring documents [11:25:02 INF] Import stage completed with 26 entries [11:25:02 INF] Restoring "seq.app.emailplus 2.0.92" [11:25:02 WRN] Could not restore the NuGet package "seq.app.emailplus"; manual reconfiguration may be required [11:25:02 INF] Closing metastore Restoration is complete. Any Seq app instances must be explicitly re-enabled. C:\Windows\system32>seq service start Starting Seq... Waiting up to 15 seconds for the service to start (currently: Stopped)... Started. ``` Thank you Nick for this beautiful work. Claudio

Posted by Claudio Barca 15 days ago

8

No data is indexed

Hi, after upgrading to Seq 2020.4 I was wondering, why no data is shown as indexed under Data --> Storage. (Indexed 0 bytes, Unindexed 196 GB). I am even getting a message in the UI/Server Status "The last index attempt failed". I don't think it has to do something with 2020.4. The errors are just displayed more clearly. We should met all index conditions here: https://docs.datalust.co/docs/indexing Seq log shows some errors:. Do we have a misconfiguration? {"@t":"2020-11-17T02:43:08.6817441Z","@mt":"Applying {Count} retention policies","Count":2,"SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} {"@t":"2020-11-17T02:43:08.6818222Z","@mt":"Removing all events before {DeletingUntilUtc:u} under policy {RetentionPolicyId}","@r":["2020-05-21 02:40:00Z"],"DeletingUntilUtc":"2020-05-21T02:40:00.0000000Z","RetentionPolicyId":"retentionpolicy-35","SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} {"@t":"2020-11-17T02:43:08.6893614Z","@mt":"Retention policy progressed in {Elapsed:0.000} ms (headway: {Headway}×), will resume from {ResumeStart:u}","@r":["7.482","2020-05-21 02:40:00Z"],"Elapsed":7.4818,"Headway":null,"ResumeStart":"2020-05-21T02:40:00.0000000Z","SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} {"@t":"2020-11-17T02:43:08.6925681Z","@mt":"Removing events before {DeletingUntilUtc:u} matching {RemovedSignalExpression} under policy {RetentionPolicyId} (deleting from {DeletingFrom:u})","@r":["2020-10-03 02:40:00Z","2020-10-02 21:00:00Z"],"DeletingUntilUtc":"2020-10-03T02:40:00.0000000Z","RemovedSignalExpression":"`signal-1168` Union `signal-151`","RetentionPolicyId":"retentionpolicy-33","DeletingFrom":"2020-10-02T21:00:00.0000000Z","SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} {"@t":"2020-11-17T02:43:08.6927160Z","@mt":"The policy ran but took no action; elapsed {Elapsed:0.000} ms","@r":["0.111"],"Elapsed":0.1114,"SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} {"@t":"2020-11-17T02:43:08.6927487Z","@mt":"Retention processing and compaction took {Elapsed} ms; allocating {Allocation} ms for indexing","Elapsed":11.6737,"Allocation":599988.3263} {"@t":"2020-11-17T02:43:08.6927639Z","@mt":"Beginning indexing","SourceContext":"Seq.Server.Features.Indexing.EventStoreIndexer"} {"@t":"2020-11-17T02:43:09.9153190Z","@mt":"Exception from task {TaskName}","@l":"Error","@x":"System.Text.RegularExpressions.RegexMatchTimeoutException: The RegEx engine has timed out while trying to match a pattern to an input string. This can occur for many reasons, including very large inputs or excessive backtracking caused by nested quantifiers, back-references and other factors.\r\n at System.Text.RegularExpressions.RegexRunner.DoCheckTimeout()\r\n at Go3(RegexRunner )\r\n at System.Text.RegularExpressions.RegexRunner.Scan(Regex regex, String text, Int32 textbeg, Int32 textend, Int32 textstart, Int32 prevlen, Boolean quick, TimeSpan timeout)\r\n at System.Text.RegularExpressions.Regex.Run(Boolean quick, Int32 prevlen, String input, Int32 beginning, Int32 length, Int32 startat)\r\n at System.Text.RegularExpressions.Regex.IsMatch(String input, Int32 startat)\r\n at lambda_method(Closure , StructuredEvent )\r\n at Flare.Expressions.FilterPlanPredicate.Includes(StructuredEvent evt)\r\n at Flare.Storage.StorageEngine.UpdateIndexes(IndexPredicate[] indexPredicates, CancellationToken cancel)\r\n at Flare.Events.EventStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel)\r\n at Flare.Queries.DataStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel)\r\n at Seq.Server.Features.Indexing.EventStoreIndexer.Index(TimeSpan allocatedIndexingTime, CancellationToken cancel)\r\n at Seq.Server.Features.Retention.RetentionAndIndexingTask.Execute(CancellationToken cancel)\r\n at Seq.Server.Tasks.TaskRunTimer.Execute(CancellationToken cancel)\r\n at Seq.Server.Tasks.TaskRunTimer.<OnTimer>b__9_0(CancellationToken cancel)","TaskName":"Retention and Indexing","SourceContext":"Seq.Server.Tasks.TaskRunTimer"}

Posted by Sebastian Segerer 18 days ago

3

AKS out of memory exception

I have started 2020.3 in a pod but after a while the logs show OutOfMemoryEception and the app isn't responding. This is is the yaml: apiVersion: v1 kind: Pod metadata: name: seq labels: app: seq spec: nodeSelector: "kubernetes.io/os": linux containers: - name: seq image: mediafy.azurecr.io/datalust/seq:2020.3 resources: requests: memory: "2Gi" cpu: "250m" limits: memory: "4Gi" cpu: "500m" ports: - containerPort: 80 - containerPort: 5341 env: - name: ACCEPT_EULA value: "Y" volumeMounts: - mountPath: "/data" name: volume volumes: - name: volume persistentVolumeClaim: claimName: seq-managed-disk This is a piece of logs from the pod which is keep repeating: [23:33:47 ERR] Exception from task "Retention and Indexing" System.OutOfMemoryException: Exception of type 'System.OutOfMemoryException' was thrown. at Newtonsoft.Json.JsonTextReader.Read() at Flare.MemoryEncoding.Serializer.Deserialize(Span`1 documentBytes, SharedAssets shared) at Flare.Storage.StorageEngine.UpdateIndexes(IndexPredicate[] indexPredicates, CancellationToken cancel) at Flare.Events.EventStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel) at Flare.Queries.DataStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel) at Seq.Server.Features.Indexing.EventStoreIndexer.Index(TimeSpan allocatedIndexingTime, CancellationToken cancel) at Seq.Server.Features.Retention.RetentionAndIndexingTask.Execute(CancellationToken cancel) at Seq.Server.Tasks.TaskRunTimer.Execute(CancellationToken cancel) at Seq.Server.Tasks.TaskRunTimer.<OnTimer>b__9_0(CancellationToken cancel) [23:34:30 INF] 1 more generation 2 garbage collection(s) occurred [23:38:05 INF] Metrics sampled [23:42:46 INF] Native storage metrics sampled [23:43:05 INF] Metrics sampled [23:43:39 INF] Applying 1 retention policies [23:43:39 INF] Removing all events before "2020-08-10T23:40:00.0000000Z" under policy "retentionpolicy-36" [23:43:39 INF] Retention policy progressed in 0.0634 ms (headway: null×), will resume from "2020-08-10T23:40:00.0000000Z" [23:43:39 INF] Retention processing and compaction took 5.7259 ms; allocating 599994.2741 ms for indexing [23:43:39 INF] Beginning indexing [23:43:56 ERR] Exception from task "Retention and Indexing" System.OutOfMemoryException: Exception of type 'System.OutOfMemoryException' was thrown. at Newtonsoft.Json.JsonTextReader.EnsureBufferNotEmpty() at Newtonsoft.Json.JsonTextReader.ReadStringIntoBuffer(Char quote) at Newtonsoft.Json.JsonTextReader.ParseValue() at Flare.MemoryEncoding.Serializer.ReadProperty(JsonTextReader json, List`1 properties, List`1 values, SharedAssets sharedAssets) at Flare.MemoryEncoding.Serializer.ReadObject(JsonTextReader json, SharedAssets shared) at Flare.MemoryEncoding.Serializer.Deserialize(Span`1 documentBytes, SharedAssets shared) at Flare.Storage.StorageEngine.UpdateIndexes(IndexPredicate[] indexPredicates, CancellationToken cancel) at Flare.Events.EventStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel) at Flare.Queries.DataStore.UpdateIndexes(IEnumerable`1 indexes, CancellationToken cancel) at Seq.Server.Features.Indexing.EventStoreIndexer.Index(TimeSpan allocatedIndexingTime, CancellationToken cancel) at Seq.Server.Features.Retention.RetentionAndIndexingTask.Execute(CancellationToken cancel) at Seq.Server.Tasks.TaskRunTimer.Execute(CancellationToken cancel) at Seq.Server.Tasks.TaskRunTimer.<OnTimer>b__9_0(CancellationToken cancel) How much memory does it need? Or is there other configuration that I'm missing?

Posted by Costin Morariu 26 days ago