Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
Is there any settings to limit event ram cache? It is taking too much (8.1GB from 16 GB) and computer is quite busy. =================== 4. System Memory -------------------- Physical Total : 17113866240 Physical Available : 3895492608 Physical Utilization: 0,77237799142691 Commit Limit : 26777542656 Commit Peak : 15783563264 Commit Total : 15397679104 Process Count : 198 Handle Count : 88482 Thread Count : 3301 Kernel Total : 810446848 Kernel Paged : 620425216 Kernel Non-paged : 190021632 Page Size : 4096 System Cache : 2791002112 ==================== 5. Process Memory -------------------- Working Set (Environment): 4252897280 Working Set : 8547864576 Paged : 8786567168 Paged System : 401792 Non-paged System : 669234 Private : 8786567168 Handle Count : 990 Thread Count : 43 ... ==================== 9. Event RAM Cache -------------------- Days Cached : 19,375 Events Cached : 6802210 Is Warming Up : No
Posted by Pavel Krystýnek about a year ago
Is it possible to access a signal it's more user-friendly title? Currently, it looks like Connection.Signals.FindAsync only supports the id, which is a server generated value: ```csharp var signal = connection.Signals.FindAsync("signal-39").Result; ``` How would I go about finding a signal by it's title? Thanks!
Posted by Aaron Schnarr about a year ago
Hi Team, I need to get alert for my api if count of errors exceed from 15 within 1 minute. In threshold app I set alert using below configuration: Condition -> Count>15, Measurement window --> 1 Minute, Level-->Error, Notification App-->email settings but the above setting send me alert mail even when count of error is less than 15. Also, I need this for particular API key/application. Please suggest, need urgent help.
Posted by Ashutosh Shandilya about a year ago
Let's say I have a query similar to: ``` select count(*) as count from stream where HttpStatusCode > 500 ``` I want to alert on the number of errors. But I'm not interested in short bursts of errors. I would like to have an alert that would say "hey, you've been getting more than 100 errors each minute last 10 minutes" 1) How is the `count` calculated for the purpose of evaluating the alert condition? Is this a count of all events in the measurement window? 2) In my case, I'm not interested in 1000 errors happening during 1 minute of 10 minute measurement window, but rather in at least 100 errors happening each minute of the 10 minute window. So the sum of errors is the same over 10 minutes, but the distribution is different. Is it possible to set the alert condition like that?
Posted by Marcin Budny about a year ago
I love Seq! We already use Seq as a sink for several of our .net core apps. However, it would be even more useful if we were able to use it to store events from our front-end, edge facing web servers, which run nginx. So, is there a way to replace our existing nginx access and error text logs with Seq?
Posted by Simon Chester about a year ago
It would be handy if I could temporarily toggle the view of timestamps in the Seq UI between the system TZ and UTC... the scenario I have is needing to restore an Azure SQL database to a point in time prior to a specific event. Azure requires the restore point to be specified in UTC, and it would save me having to do some timezone maths if I could toggle (or hover over?) the timestamps between UTC and system TZ.
Posted by James Webster about a year ago
I have a series of events in our Seq log, and am currently testing out the API to incrementally pull down events, using afterId param and LastReadEventId. In this case, I have a very old event (from 4 days ago, Id = 'event-70f3a66095c308d52bd5030000000000'), followed by events from today. When I search with afterId set to the old event, I get an empty resultSet.Events collection. When I search with startAtId set to the old event, I get a single event in the resultSet.Events collection (namely, the old event). If I use one of the newer events from today (Id = 'event-cc126b5b99a708d58cfc030000000000'), I get a mix of events, INCLUDING the oldest event, from 4 days ago. How is afterId expected to work? I would've expected it to only load events added after the given Id, but this does not seem to be the case. Thanks.
Posted by Aaron Schnarr about a year ago
Hi, I'd like to start using Seq on client sites as our default logging solution (licences notwithstanding). Many of the sites will allow us to remote to their environment and examine the logs directly. Some will not allow us access so in order to look at the logs we'll need an "Export to disk / Import from disk" of the Events. There is no network connectivity between the client and us in these instances - emailing a file or shipping a USB stick will be the only method of data sharing. I've tried to use the "seq-import" tool, but it's not able to parse the Compact JSON Format used by the JSON file Archiver (which would be an option). I've also tried to use the File Archiver App but get an error "System.ArgumentException: Requested value 'WARN' was not found" so that's currently not an option. Is there a full "copy / paste" option from the back end? Can I grab the "C:\ProgramData\Seq\Extents" folder and dump it on a new Seq server and expect to see the Events? Any help would be most appreciated! Thanks
Posted by Nic about a year ago
A possible future feature, or maybe it is already supported somehow... I have a situation where I want to lookup messages by correlation id across multiple systems. Unfortunately the property that the the correlation id is logged under isn't the same across these systems, so I have a signal along the lines of... PropertyX = 'some-correlation-id' OR PropertyY = 'some-correlation-id' ... plus other predicates to filter down to the systems/environments in question. What would be great would be the ability to save this signal as a signal template, where 'some-correlation-id' get replaced with a parameter marker (e.g. @CorrelationId) and the Seq user interface then provides a mechanism to enter the actual value of this parameter when the signal template is selected and the query is run (plus the option to save the resulting signal if I wanted to 'bake' the template for some reason). Obviously I can do this myself through the Seq API but lovely if the Seq UI supported this, if it doesn't already and I haven't just RTFM.
Posted by James Webster about a year ago
Hi - I'm attempting to post raw JSON to Seq including an Exception: { "Events": [{ "Timestamp": "...", "Level": "Error", "MessageTemplate": "Unable to process payment Provider - {provider}", "Properties": { "provider": "XXX", "CardNo": "00000000" }, "Exception": { "Message": "test message", "StackTrace": "..." } }] } I'm hoping to get the bright red Exception box in the log item to show, but I can't seem to convince Seq to even show the exception never less the red box.. can someone let me know what the correct JSON looks like? Thanks, Nic
Posted by Nic about a year ago
Hello, Is it possible via the seq.api client or otherwise to set the default signals of other users? We would like to ease the onboarding of new users by having SEQ setup with a default set of common signals. Ive played a bit with the client, but I dont see how to gain access to the _watchers_ node of the signals resource. Do I need to auth as the other user to do so? Thanks!
Posted by Nathan about a year ago
Currently testing the NLog 4.5 RTM with the NLog.Targets.Seq. I'm able to log Error and Debug messages, but none of the other levels are being properly logged. I have configured both a colorConsole and seq to use minLevel="Trace". Console writes all my tests messages, but Seq does not. I'm wondering if this has something to do with NLog using Warn vs Warning, Trace vs Verbose, Info vs Information. Is there a way to get all these levels to log in Seq?
Posted by Aaron Schnarr about a year ago
Hi, On production I have .net 4.7 as targeted framework. And below are the packages I am using to dump logs in Seq - Serilog (version="2.5.0" ) Serilog.Formatting.Compact (version="1.0.0" ) Serilog.Sinks.Seq ( version="4.0.0") This is working fine on QA environment with .Net 4.5 framework. But I am not getting logs on production environment. Does this version of Serilog and Seq supports .net 4.7 framework. If yes than what could be the possible issue. Please let me know it's quite urgent. Regards, Ashutosh
Posted by ashutosh shandilya about a year ago
I'm currently working on implementing some logging into a javascript client. Earlier today I was able to see my messages coming through to seq and suddenly they stopped making it to the event log. I'm still seeing new messages from the server which is using the same message format, and when I go to the diagnostics tab I can see that the accepted/arrived arrived value is getting incremented. I am sending the payload to the raw endpoint and as I mentioned I was seeing the events come all the way through earlier today. I don't see any errors in the ingestion log, and I'm receiving 201s on the posts to the endpoint. As far as I can tell it seems that it should still be working. Are there some sort of caps on the raw events that can be sent through in a day? I'm pretty baffled by what I'm seeing.
Posted by Walter Abbott about a year ago
Hi , I would like to have a stacked chart with multiple attributes of a property For example I have property called Stats with value as Total:12 Slottime: 4 executiontime:8 I would like to plot in dashboard with bars for each attribute Could you please help me how to do it
Posted by VidyaSagar about a year ago
I want my team to use a local seq server with the single user license for development of our applications. This way we don't have API-Keys and environment specific URLs in our source. The downside of this setup is that the single user license has no authentication. The only protection of the log data is the windows firewall. As developers often just disable the windows firewall for a "test" and forget to enable it afterwards, I'm looking for a seq feature to restrict access to seq server to localhost only. Is there such a feature or setting in seq?
Posted by Christian Kölla about a year ago
Hi Team, Can you please help me how can I set up an alert which can give me all errors/exceptions within say 5 Mins. Below is my query I am using but this does not give me error(s) occured in a duration. select count(*) as count from stream where Application='SomeApplication' and Method='SomeMethod' group by time(5s) limit 10000
Posted by ashutosh shandilya about a year ago