Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
We had couple of situations were Seq server settings (such as disable authentication, add keys etc.) are changed. How can I see the audit log of the Seq server so that I can see who changed authentication settings etc.?
Posted by Indrajith R about a year ago
Hi, I have 4 retention policies configured to delete logs after a maximum of 30 days. Searching through the logs, I have entries that go way back further than 30 days. Why aren't the policies deleting the entries? Is there a way to manually execute the policies? Thanks, Yohan
Posted by Yohan Belval about a year ago
When we're logging, we add a structure of metadata to each logline. We would like to have a way to define that a signal is based on a nested property in this structure in contrast to first-level properties. How can we achieve this?
Posted by Bernhard Millauer about a year ago
I'm trying to start a Docker container with Seq, but i need to start it already with some api-key, in order to start at same time (with docker-compose) with a API who will send logs using this api-key. I could not find some way to do it only with Seq setting, so i'm using SeqCli; my docker-compose file is like that: ``` version: '3.7' services: logseqcli: image: datalust/seqcli:5.1.251 command: apikey create --title='newapikey' --token='123456' --server=http://logseq depends_on: - logseq logseq: image: datalust/seq:5.1 environment: - ACCEPT_EULA=Y ports: - 2000:80 - 4000:5341 ``` But my SeqCli container is getting the error: ``` logseqcli_1 | The command failed: Connection refused source_logseqcli_1 exited with code 1 ``` How can i fix this, or how can i achieve this without SeqCli? Thanks!
Posted by Rafael Torres Souza about a year ago
Hello, We are receiving the following error after updating from 5.0 to 5.1 Find to detailed log; {"@t":"2020-02-25T09:17:58.8062334Z","@mt":"Uncaught exception from worker {WorkDescription} ({WorkId})","@l":"Error","@x":"Autofac.Core.DependencyResolutionException: An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = TelemetryController (ReflectionActivator), Services = [Seq.Server.Features.Telemetry.TelemetryController], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = SystemSettings (ReflectionActivator), Services = [Seq.Server.Features.Settings.SystemSettings], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = IDocumentStore (DelegateActivator), Services = [Quince.IDocumentStore], Lifetime = Autofac.Core.Lifetime.CurrentScopeLifetime, Sharing = None, Ownership = ExternallyOwned ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = StorageSubsystem (DelegateActivator), Services = [Seq.Server.Storage.StorageSubsystem], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> Flare native storage failed (InternalError), data file `\"C:\\\\ProgramData\\\\Seq\\\\Extents\\\\2019-02-20_2019-02-27\\\\extent.08d696c65b5cc000_08d6978cba850800.c091a3cc12934766bf76720a71c2293f.span\"` is missing. (See inner exception for details.) (See inner exception for details.) (See inner exception for details.) (See inner exception for details.) ---> Autofac.Core.DependencyResolutionException: An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = SystemSettings (ReflectionActivator), Services = [Seq.Server.Features.Settings.SystemSettings], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = IDocumentStore (DelegateActivator), Services = [Quince.IDocumentStore], Lifetime = Autofac.Core.Lifetime.CurrentScopeLifetime, Sharing = None, Ownership = ExternallyOwned ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = StorageSubsystem (DelegateActivator), Services = [Seq.Server.Storage.StorageSubsystem], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> Flare native storage failed (InternalError), data file `\"C:\\\\ProgramData\\\\Seq\\\\Extents\\\\2019-02-20_2019-02-27\\\\extent.08d696c65b5cc000_08d6978cba850800.c091a3cc12934766bf76720a71c2293f.span\"` is missing. (See inner exception for details.) (See inner exception for details.) (See inner exception for details.) ---> Autofac.Core.DependencyResolutionException: An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = IDocumentStore (DelegateActivator), Services = [Quince.IDocumentStore], Lifetime = Autofac.Core.Lifetime.CurrentScopeLifetime, Sharing = None, Ownership = ExternallyOwned ---> An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = StorageSubsystem (DelegateActivator), Services = [Seq.Server.Storage.StorageSubsystem], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> Flare native storage failed (InternalError), data file `\"C:\\\\ProgramData\\\\Seq\\\\Extents\\\\2019-02-20_2019-02-27\\\\extent.08d696c65b5cc000_08d6978cba850800.c091a3cc12934766bf76720a71c2293f.span\"` is missing. (See inner exception for details.) (See inner exception for details.) ---> Autofac.Core.DependencyResolutionException: An error occurred during the activation of a particular registration. See the inner exception for details. Registration: Activator = StorageSubsystem (DelegateActivator), Services = [Seq.Server.Storage.StorageSubsystem], Lifetime = Autofac.Core.Lifetime.RootScopeLifetime, Sharing = Shared, Ownership = OwnedByLifetimeScope ---> Flare native storage failed (InternalError), data file `\"C:\\\\ProgramData\\\\Seq\\\\Extents\\\\2019-02-20_2019-02-27\\\\extent.08d696c65b5cc000_08d6978cba850800.c091a3cc12934766bf76720a71c2293f.span\"` is missing. (See inner exception for details.) ---> System.Exception: Flare native storage failed (InternalError), data file `\"C:\\\\ProgramData\\\\Seq\\\\Extents\\\\2019-02-20_2019-02-27\\\\extent.08d696c65b5cc000_08d6978cba850800.c091a3cc12934766bf76720a71c2293f.span\"` is missing.\r\n at Flare.Storage.Native.FlareResult.EnsureSuccess()\r\n at Flare.Storage.Store.Open(String path)\r\n at Flare.Storage.Native.FlareStorageExtent.OpenStore()\r\n at Flare.Storage.Native.FlareStorageExtent..ctor(IStorageEngine storageEngine, ExtentRange range, String dataFile)\r\n at Flare.Storage.Native.FlareStorageEngine.CreateExtent(ExtentRange range, String dataFile, String instanceName)\r\n at Flare.Storage.Extents.ExtentMap..ctor(IStorageEngine[] storageEngines, String extentsPath)\r\n at Flare.Events.EventStore..ctor(IStorageEngine[] storageEngines, String extentsPath, WorkerPool workerPool, MemoryThresholds memoryThresholds, BroadcastChannel broadcast, IClock clock)\r\n at Seq.Server.SeqServerModule.InitStorageSubsystem(IComponentContext c)\r\n at Autofac.Builder.RegistrationBuilder.<>c__DisplayClass0_0`1.<ForDelegate>b__0(IComponentContext c, IEnumerable`1 p)\r\n at Autofac.Core.Activators.Delegate.DelegateActivator.ActivateInstance(IComponentContext context, IEnumerable`1 parameters)\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n --- End of inner exception stack trace ---\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n at Autofac.Core.Lifetime.LifetimeScope.GetOrCreateAndShare(Guid id, Func`1 creator)\r\n at Autofac.Core.Resolving.InstanceLookup.Execute()\r\n at Autofac.Core.Resolving.ResolveOperation.GetOrCreateInstance(ISharingLifetimeScope currentOperationScope, IComponentRegistration registration, IEnumerable`1 parameters)\r\n at Autofac.ResolutionExtensions.TryResolveService(IComponentContext context, Service service, IEnumerable`1 parameters, Object& instance)\r\n at Autofac.ResolutionExtensions.ResolveService(IComponentContext context, Service service, IEnumerable`1 parameters)\r\n at Autofac.ResolutionExtensions.Resolve[TService](IComponentContext context, IEnumerable`1 parameters)\r\n at Seq.Server.SeqServerModule.<>c.<Load>b__14_10(IComponentContext c)\r\n at Autofac.Builder.RegistrationBuilder.<>c__DisplayClass0_0`1.<ForDelegate>b__0(IComponentContext c, IEnumerable`1 p)\r\n at Autofac.Core.Activators.Delegate.DelegateActivator.ActivateInstance(IComponentContext context, IEnumerable`1 parameters)\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n --- End of inner exception stack trace ---\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n at Autofac.Core.Resolving.InstanceLookup.Execute()\r\n at Autofac.Core.Resolving.ResolveOperation.GetOrCreateInstance(ISharingLifetimeScope currentOperationScope, IComponentRegistration registration, IEnumerable`1 parameters)\r\n at Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()\r\n at Autofac.Core.Activators.Reflection.ReflectionActivator.ActivateInstance(IComponentContext context, IEnumerable`1 parameters)\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n --- End of inner exception stack trace ---\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n at Autofac.Core.Lifetime.LifetimeScope.GetOrCreateAndShare(Guid id, Func`1 creator)\r\n at Autofac.Core.Resolving.InstanceLookup.Execute()\r\n at Autofac.Core.Resolving.ResolveOperation.GetOrCreateInstance(ISharingLifetimeScope currentOperationScope, IComponentRegistration registration, IEnumerable`1 parameters)\r\n at Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()\r\n at Autofac.Core.Activators.Reflection.ReflectionActivator.ActivateInstance(IComponentContext context, IEnumerable`1 parameters)\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n --- End of inner exception stack trace ---\r\n at Autofac.Core.Resolving.InstanceLookup.Activate(IEnumerable`1 parameters, Object& decoratorTarget)\r\n at Autofac.Core.Lifetime.LifetimeScope.GetOrCreateAndShare(Guid id, Func`1 creator)\r\n at Autofac.Core.Resolving.InstanceLookup.Execute()\r\n at Autofac.Core.Resolving.ResolveOperation.GetOrCreateInstance(ISharingLifetimeScope currentOperationScope, IComponentRegistration registration, IEnumerable`1 parameters)\r\n at Autofac.Core.Resolving.ResolveOperation.Execute(IComponentRegistration registration, IEnumerable`1 parameters)\r\n at Autofac.Features.LazyDependencies.LazyRegistrationSource.<>c__DisplayClass5_1`1.<CreateLazyRegistration>b__1()\r\n at System.Lazy`1.ViaFactory(LazyThreadSafetyMode mode)\r\n at System.Lazy`1.ExecutionAndPublication(LazyHelper executionAndPublication, Boolean useDefaultConstructor)\r\n at System.Lazy`1.CreateValue()\r\n at Seq.Server.ServiceProcess.ServerService.<Start>b__13_0(CancellationToken cancel)\r\n at Flare.Workers.WorkerPool.<>c__DisplayClass4_0.<Run>g__DoWork|0()","WorkDescription":"Start background processes","WorkId":"5930abeb-2200-4621-8a9e-b75083fcaf1d","SourceContext":"Flare.Workers.WorkerPool"}
Posted by Beth Oz about a year ago
Hello, I'm triying to link Seq with our AAD, but when i have this error : Could not sign in to Seq One or more errors occurred. (AADSTS50011: The reply URL specified in the request does not match the reply URLs configured for the application: '*******'. Trace ID: *********** Correlation ID: ****** Timestamp: 2020-02-18 11:41:35Z) The client ID is correct. The AAD auth work on HTTP but not on HTTPS. The certificate is OK too. The only differnce between HTTP and HTTPS is the reply URL in Azure app registrations=> Authentication. Could you help me please ?
Posted by Freddy about a year ago
Hello, How can insert the license signature in the license text screen? When i try to paste the license signature i recieved by email, i get an error : "Could not save license details The license format is invalid: data precedes any keys." Thanks for your help.
Posted by Freddy about a year ago
I have followed the steps in the backup and restore documentation and encountered the following error: " Could not restore backup: One or more errors occurred. (Padding is invalid and cannot be removed.)". On the original host machine responsible for creating the backup (linux container): ./bin/seq-server/Seq show-key --storage="/data" This returns the key without issue. On the new host machine (linux container): ./bin/seq-server/Seq restore --master-key="{{KEY}}" --backup="{{FILENAME}}.seqbac" --storage="/data" Because the original host machine is running on an Azure Container instance we do not have access to pass commands directly to the container as suggested in the documentation: "docker run -v $HOST_PATH_TO_SEQ:/data datalust/seq show-key".
Posted by Daniel Offner about a year ago
Occasionally, in our browser based application, we have a javascript error that is intercepted and sent to our servers to log. There is a lot of detail captured in these log entries (basically a giant string), and when we view them in seq, they don't honor any line breaks that have been put into them. This makes them difficult to read. Is there a way to log a string with line breaks to make them easier to read?
Posted by John about a year ago
Hi all! Love Seq. We occasionally get ourselves into a situation with our non-prod Seq server where we're not as attentive as we should be to what's being ingested, and get a low disk warning on our servers. We're looking into setting retention policies for certain signals, etc. but in the interim, I'm wondering if there's a happy path prior to shutting down Seq and losing one or more whole Extents of data. If we were to run a deletion process across a large portion of events using the manual deletion functionality, is there any way to force or encourage Seq to kick off a compaction process, so that we can reclaim some of that space sooner than later? Thanks!
Posted by Sean Killeen about a year ago
We have some apps logging to SEQ through serilog in .NET and java code and there are a few apps that are seeing 401 on every seq event they attempt to send. double checking the config we have never required API auth for events so I am not sure why anyone logging to seq would get an unauthorized response. How can we track down why this may be happening to some of our apps?
Posted by Digital about a year ago