Ask a Question
Back to All

Lost License Key

HI! Someone deleted our license key from lastpass, could i have it resent to me? Thanks.

Filter data on structured properties data only by like?

I get logs from the Gelf input with context data as JSON. Something like this `Property: ctxt_cookie_data` Value ``` { "cookieconsent_status": "dismiss", "TP": "XXXXXX", "PHPSESSID": "ie8akdgbo13kb8tlrj7uke84a5", "C": "0", "QUICKSTART": "j017s0aimbs9h64ngajbcmo855", } ``` I can use the `like` syntax to query into the property values `ctxt_cookie_data like '%"cookieconsent_status": "checked"%'` This is somewhat verbose but seems to work. Is there something that could make this structured property values more usable? Somehting like `ctxt_cookie_data.cookieconsent_status in ["checked", "whatever"]` Not sure if I'm just missing something or if this is just not possible in general.

12 hour AM/PM time

Hello. Is there a way to show times in 12 hour format for dashboards?

API Keys: Sequence contains more than one matching element

Hello, When going to Settings > API Keys we get the message: Could not load API keys An unhandled error occurred while serving the request Looking trough the SEQ logs we find the following error: System.InvalidOperationException: Sequence contains more than one matching element at System.Linq.Enumerable.SingleOrDefault[TSource](IEnumerable`1 source, Func`2 predicate) at Seq.Server.Features.Inputs.InputApiKeyCache.TryFindPair(String apiKeyId, String& apiKeyToken, InputApiKey& inputApiKey) at Seq.Server.Features.Inputs.InputApiKeyCache.TryFind(ApiKey apiKey, InputApiKey& inputApiKey) at Seq.Server.Web.Api.ApiKeysController.ToEntity(ApiKey document) at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.ToArray() at System.Linq.Enumerable.ToArray[TSource](IEnumerable`1 source) at Seq.Server.Web.Api.ApiKeysController.GetMany(String ownerId) at lambda_method(Closure , Object , Object[] ) at Microsoft.AspNetCore.Mvc.Internal.ActionMethodExecutor.SyncActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeActionMethodAsync() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeNextActionFilterAsync() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Rethrow(ActionExecutedContext context) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeInnerFilterAsync() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeNextResourceFilter() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Rethrow(ResourceExecutedContext context) at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeFilterPipelineAsync() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeAsync() at Microsoft.AspNetCore.Builder.RouterMiddleware.Invoke(HttpContext httpContext) at Seq.Server.Web.Middleware.WebSocketAcceptMiddleware.Invoke(HttpContext context) at Seq.Server.Web.Middleware.RequestAuthenticationMiddleware.Invoke(HttpContext httpContext) at Seq.Server.Web.Middleware.HstsMiddleware.Invoke(HttpContext context) at Seq.Server.Web.Middleware.BrowserSecurityOptionsMiddleware.Invoke(HttpContext context) at Seq.Server.Web.Middleware.RequestCompletionMiddleware.Invoke(HttpContext httpContext) What might be the cause of this ? We're running version 5.0.2497

Copy all signals to another SEQ instance

Is there a way to quickly copy 20+ signals from one instance to another one without doing a backup and restore method? An API method perhaps?

How to Change The Query Timeout on a SEQ Dashboard

When I attempt to refresh a dashboard to get the trends of a certain issue over a longer period of time it continues to timeout saying "The query execution timeout of 00:01:00 was reached". Is there a way this can be adjusted? If so, then how?

docker image with azure active directory

Hello, So far, I've got an Azure Web App running the latest seq docker container (datalust/seq:latest) - this is working great. I am now trying to set up auth with Azure AD. I added an App Registration to my Azure AD and configured the TenantId, ClientId, and ClientSecret in Seq. When I browse to my seq instance, I'm now prompted to log in with azure ad. Upon doing this, I'm properly navigated to the Microsoft login and grant consent prompts. Upon doing this, I receive an error because the redirect uri does not match the one I configured in Azure AD for my Seq App Registration. In the authorize request Seq sends, the redirect uri is http:// but Azure AD requires redirect uris to be https:// I'd rather not have to configure SSL for the docker container. It's ideal to have SSL termination handled further up in the networking stack. Is there any way to configure the docker container to generate an https redirect uri?

API Keys on install

Is there a way to automatically configure API keys, via CLI or config file during initial Seq installation?

Browse Seq Blank Screen

Hi, I've installed the latest version of Seq (5.1.3118.0) with the default installation settings, but when browsing seq I either see a completely blank screen, or just the loading symbol. Console shows; styles.css:1 Failed to load resource: net::ERR_CONNECTION_RESET vendor-1559886813076.min.js:1 Possibly unhandled rejection: {"data":null,"status":-1,"config":{"method":"GET","transformRequest":[null],"transformResponse":[null],"jsonpCallbackParam":"callback","url":"api","headers":{"Accept":"application/json, text/plain, */*"}},"statusText":""} (anonymous) @ vendor-1559886813076.min.js:1 :5341/api:1 Failed to load resource: net::ERR_CONNECTION_RESET I've tried re-installing, but no joy. Any ideas where I have gone wrong?

Gelf input not logging messages with some context

Hello, I'm trying to use the Gelf Input to collect logs from a PHP app. I'm using * and the Monolog Gelf handler that uses the library from above internally. Everything seems to work until some message with some (lengthy) context hits the Seq Gelf input. Result is that the message is simply not logged, without any notice neither on the sender side nor on the receiver side. It doesn't matter if the message gets sent chunked or not. Any idea on how to find out why this message is not logged at all? Are the any known size limitation?

Set passowd for the user admin

Hello. I really like your application. I'm currently using version 4.2, because I use windows server 2008. I don't need a license yet, because I use one. But I would like to set a password for the admin user so that others could not watch the logs. Can I set a password for a single user license ? Thanks.

"Seq is unavailable. Fail…e: Table already exists"

"Seq is unavailable. Fail…e: Table already exists"


Operation terminated with error -550 (JET_errDatabaseDirtyShutdown, Database was not shutdown cleanly. Recovery must first be run to properly complete database operations for the previous shutdown.) a fter 0.16 seconds.

Resaler information

Do you resale through We are unable to purchase direct due to contracts.

Is this possible to view occurence of errors in chart

hello, I would like to see quantity of errors with access in chart. p.e. I have connected application and i find errors with connection by typing adress: in seq. I would like to see on chart how many times in month and when this errors occurs, how can I do that, is this possible?

Is the any way to reduce the time in query optimization, I have loads of IIS log data imported in seq. Sql query like -> select count(*) from stream group by requestpath taking ages to bring back the response

What should be done to enable Kerberos authentication in the ASP.NET and its Docker linux image

I have to implement kebros Authentication, Right now stucking on below points so please provide the clarification on below points - How to use AD Kerberos authentication for ASP.NET Core Web API (linux) inside Docker Swarm? Hi, I have requirement to use Kerberos authentication for ASP.NET WebAPI application deployed in Docker Swarm .NET Core linux containers. WebApi will be used by web clients with Kerberos support. Application also should be connected to active directory to subscribe and get list of all users from AD. Docker Swarm deployed on premises in the organization network. Anyone have experience with such configuration? - What should be done to enable Kerberos authentication in the ASP.NET and its Docker linux image? Will this require 3rd party kerberos tools or it can be handled by .NET Core? - To enable such configuration what should be configured in the SWARM cluster? - What should be used as service principal names (SPN)? And how to get user AD Identity inside ASP.NET? - Is it possible to use multiple container instances of the same application? - How I could use background worker service inside SWARM cluster to sync users list with the AD database? Any help is appreciated

Very Large Indexes

I am considering SEQ as part of our SIEM strategy. Our expected event load is about 5GB a day or about 150GB on a rolling basis. Are expected volume is expected to start at about 6M messages/day. I am concerned primarily about the speed of log queries and secondarily, the ingest-to-query time. Does SEQ regularly support this kind of volume and if so, what are the Azure recommendations for the indexing server?

Laravel support

Hi there, I've been investigating how to send Laravel logs to Seq, but I can't find a way. Does Seq support PHP? Is it possible to send logs from Laravel or Lumen? Thanks in advance

Moving logs from one server to another

Hi, We face a scenario when a QA engineer wants to save and transfer part of the log to developer machine for analysis . Another similar scenario is a customer that required to send his log to support team to analyze. currently the only method is to save to CSV, which makes it very difficult to analyze, as we miss the great filtering capabilities of Seq. What is your recommended approach for such cases? do yo plan to add some feature to better support such cases in the upcoming features? Thanks, Oren.