Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
There is only a singe user of seq on this machine, however I frequently get the message "The single-user license only permits one user to access Seq. Log queries have been disabled for ten minutes"
Posted by sb about a year ago
This is not a question so much as a feature suggestion: Because we have ended up with a _lot_ of signals, it would be great if we could organize signals in the UI into some sort of tree or folder structure to make it easier to find stuff fast. It's a really, really great product.
Posted by Jim McFadden about a year ago
My team are trying out Seq, one of the issues that we are facing is when sharing links for filtered results the query string contains single quotes which when pasted into something like Slack the trailing quote is ignored. Presumably it is expecting the single quote to be escaped as %27. /#/events?signal=(signal-17~signal-15)&filter=CorrelationId%20%3D%20%2798df009c-681c-4e6f-93c8-29eaa0ef8a10' Is there a way to resolve without waiting for a code fix?
Posted by Matt Davis about a year ago
Hi, Super cool product, love using it and it significantly reduced time to fix issues. If I find issues on the readme.io docs, how do I tell you guys about it? 1) On this page: https://docs.getseq.net/docs/formatting-html-email The email example has a broken link to an old GitHub page. 2) The example of the list of properties is great, but I reckon the most obvious use case it to grab the "Environment" property associated with the API Keys and use that in the email title for alerts. That way, when I get an alert email, I'll know whether its UAT, Staging or Production. I'm pretty sure its something like: Error happened in {{$Properties["EnvironmentCode"]}} But it would be great to have an example like that.
Posted by Stephan Dekker about a year ago
Hi, I'm importing a lot of old events from different sources to provide an ad-hoc reference, but during the import I get this message: An error occurred writing to event storage. I looked at the "extents" directory, and that contains exactly 1000 directories. If I add an event that is written in an existing directory it succeeds, but if it needs to add another directory it fails. Is Seq, by any chance, limited to 1000 directories? Is there a way to extend this limit? Much appreciated
Posted by Marijn about a year ago
Hi, I've set up some dashboard alerts which send emails. I'd ideally like to be able to use the same app for all the alerts. Can I pull out information relating to the alert in a template? Particularly the subject line. Ideally the subject would include the dashboard widget that the alert came from. In the default alert body this comes through as Dashboard Name\Chart name (as in "alert condition {condition} detect on {dashboard name}\{chart name}"). Thanks, Dan.
Posted by Dan Woolstencroft about a year ago
Hi, I'm trying to filter and count some http request based on some values in headers. So far it is working on simple names like RequestHeader.Accept, but it's not working when nested property has dash in its name like RequestHeader.Accept-Encoding. Query from stream always returns null for that property. Is there some different syntax to make it work? Thanks, regards, Vladimir Mihok
Posted by Vladimír Mihok about a year ago
I'd like to produce a histogram-style chart that shows how many occurrences of an event there are in each hour of the day, over whatever range of time, e.g. if an event only occurs at 13:05 and 13:56 each day, then if I look at the current day only, then I would expect to see the bar for 13:00:00 to 13:59:59 have a value of 2 and all others 0. If I expanded the date range to include yesterday and the day before, I would expect the bucket for 13:00 to 13:59 to count 6, etc. It doesn't look like there is a way to access elements of the datetime, e.g. day, day of week, month, year, hour, minute, second? (Converted to my local timezone of course).
Posted by James Webster about a year ago
Hi all We have moved our Seq Server to a different location and now try to enter the license key. We cannot find it in our Email history nor do we receive an Email for password Reset. our Email Adress is [email protected], the Company is Cat Financial Products AG. Could you please assist in recovering the account to login and get the license key? Cheerz Sascha
Posted by Sascha Bauer about a year ago
Hi all, We have (had?) an enterprise license for Seq until today. It just expired. I plan to kick off the customer renewal of this license, but in the meantime was hoping to complete an upgrade. We are currently running 3.4.20, but I know the current version as of today is 4.2. My question is: Given that Seq v4.2 is the latest version, do I have the right to upgrade to any version up until 4.2 at this point? Or do I only have the ability to do any upgrades while under license agreement? If I was to attempt to upgrade today, what is the latest version I'd be allowed to take Seq to? As I mentioned, I'm certain we'll renew the license, but I want to make sure I adhere to the rules during the time when the business is in the process of renewing. Thanks in advance for any help you can give!
Posted by Sean Killeen about a year ago
I am seeing an error across various apps when I route an event from SEQ that has @Level = "DEBUG" `System.ArgumentException: Requested value 'DEBUG' was not found. at System.Enum.EnumResult.SetFailure(ParseFailureKind failure, String failureMessageID, Object failureMessageFormatArgument) at System.Enum.TryParseEnum(Type enumType, String value, Boolean ignoreCase, EnumResult& parseResult) at System.Enum.Parse(Type enumType, String value, Boolean ignoreCase) at Serilog.Formatting.Compact.Reader.LogEventReader.ReadFromJObject(Int32 lineNumber, JObject jObject) at Seq.Apps.GenericHost.AppHost.<SendAsync>d__19.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Seq.Apps.GenericHost.Program.<Main>d__0.MoveNext()` I have seen a similar error when trying to parse these "DEBUG" levels in my Seq.App code and I resolved by ignoring case on the Enum.Parse call: `(Serilog.Events.LogEventLevel)Enum.Parse(typeof(Serilog.Events.LogEventLevel), "DEBUG", ignoreCase: true);` SEQ seems ok with the casing on these levels, but the app host (or the Seq.App lib) doesn't like it. I can look into fixing the casing upstream but is there anything I can do in SEQ to workaround the issue in place? Thanks!
Posted by Nathan about a year ago
If not, this would be a killer feature (to know what else was going on in the system around the same time as an event of interest). At the moment my workflow often involves locating an interesting event, noting its timestamp then manually setting the start/end filters to -30/+30sec respectively of that event. It would be really handy to be able to do this automatically.
Posted by Eddie Stanley about a year ago
Each event provides a drop down under "Type" that includes "Find" and "Exclude". When selecting "Find", the current behavior is to replace the existing query with something like "@EventType = 0xED5F661B". When selecting "Exclude", the current behavior is to add to the existing new signal (or a new new signal if there wasn't one before) a filter containing something like "Not(@EventType = 0xED5F661B)". This is not what I expected to happen. I expected either that both would add their respective query text to the same location: either the current query or the current (or new) new signal, but not one of each. Why is the current behavior the way it is? I would prefer that both modified the current query instead of the current/new new signal. I have two reasons for this. First, there is an easy way to make the current query into a filter in the current/new new signal but not the other way around. Second, the current query is reflected in the URL, which means that duplicating the browser tab also duplicates the query. In contrast to this, filters in a new signal are not copied to a duplicated browser tab. On a related note. I would prefer if selecting "Find" would add to the existing query instead of replacing it.
Posted by Tyson Williams about a year ago
In terms of your Enterprise licence, what is the typical setup for SEQ installation with particular regard to High Availability/Disaster Recovery. Especially if we are only limited to 3 installs on Dev/Staging/Production? Any advice here would be great.
Posted by James Hemphill about a year ago
Hi, We have about 30 users using Seq. They all use Integrated Windows Authentication to log in. We have one user however, that receives the following error when trying to log in: "Could not log in An unhandled error occurred while serving the request (token: xxxxxxxxxxxxxxxxxx)." This use has been configured in Seq exactly the same as all the others that are working. Any ideas? Any place where I can check a log for more information? Thanks! Sean
Posted by Sean Rademeyer about a year ago