Discussions

I notice that we can query for sql queries but I don't seem to able to get the result of a query via the API, is it possible?

Hi, Is it possible to have multiple servers on one machine?

What is the HTTP web request format for the API? You list the api uri's but not the attributes or json format for the body. I'm trying to login via a web request with. POST https://{seq server}/api/users/login x-www-form-urlencoded Username: {myusername} Password: {plaintextpassword} It's returns: "Error": "An unhandled error occurred while serving the request (token: ...)." header is: Accept: application/vnd.datalust.seq.v7+json Content-Type: application/x-www-form-urlencoded X-Seq-ApiKey: {mykey} Tried Content-Type: application/json { "Username":"username", "Password":"password" }

We're seeing poor performance using Seq on Linux (docker). CPU0 is capping out at 100% whilst the other CPUs are doing basically nothing. Is there some process that only runs on CPU0?

I'm wondering if anyone has tried hosting Seq using Azure Container Instances? I'm assuming the fact they don't have a true hard drive and that they use "Azure Files" for storage would cause performance to be too slow to be of much use (if it could even work at all)?

Hello, we are trying to automatically provision users by using System --> "Automatically provision user-level access". New users get provisioned, if we do not specify "Automatic provisioning group". Since we do not want to grant access to everyone, we want to use the group setting.However, when specified, new users are not created and recieve a "Authentication failed" message, when trying to login. We are currently investigating, but it seems, that nested groups are not honoured. Our active directory group (group type: domain-local, security) only contains other groups (group type: universal, security). Did I do something wrong or is group nesting an unsupported scenario? We are using Seq 5.1.3118. Log: {"@t":"2019-06-11T09:17:29.8678290Z","@mt":"User {Username} successfully authenticated, but is not in the group specified for automatic provisioning","Username":"USER","Principal":{"Id":"principal-public","OnBehalfOfUserId":null},"ActionId":"2a071f44-8f0a-483d-ab88-97f6188972e2","ActionName":"Seq.Server.Web.UI.WindowsAuthenticationController.SignOnWindowsUser (Seq)","RequestId":"800072ca-0000-d200-b63f-84710c7967bb","RequestPath":"/integrated","CorrelationId":null} Thank you very much

We are planning to purchase SEQ enterprise license we would like to know the address of the company in order to fillout purchase justification form. please let me know if you have any US location or association in US.

Using the search to find shared signals is a little annoying because I can't always guess what they might be called. Also, sometimes I just want to discover what other people on my team have shared without specifically knowing what I'm looking for. Right now I use the old search for all the vowels trick.

How to skip password kind of sensitive information logging while logging custom object?

Hi, When I try to enable SSO in SEQ I get the following error: "Could not saving authentication details The server responded with HTTP status code 403 (Forbidden)." I am logged to SEQ using basic auth as a user with Admin permissions. Am I missing something?

I am not able to get any commands to work using the docker container. Using exec or running commands using the method found here: https://docs.datalust.co/docs/running-server-commands what am I missing?

Hi. We are trying to move our Seq instance from a Windows VM (service installation) to Kubernetes (using the latest v. 5.x image from docker). In this process we need to install a custom Seq app from our own Nuget feed (using Myget). When adding this app in a Seq instance using docker, we keep getting errors. I'm including stack traces below. Installing the same app on a Seq instance running on a local machine as a Windows service (exact same Seq version), works perfectly. Stacktraces: Without providing a version (which states it defaults to latest): ``` Microsoft.CSharp.RuntimeBinder.RuntimeBinderException: Cannot perform runtime binding on a null reference at CallSite.Target(Closure , CallSite , Object ) at System.Dynamic.UpdateDelegates.UpdateAndExecute1[T0,TRet](CallSite site, T0 arg0) at Seq.Server.Features.Installation.NuGet.PackageRepositoryV3.FindLatestVersionAsync(String packageId, Boolean allowPrereleaseVersions, Boolean allowUnlisted) at Seq.Server.Features.Installation.AppPackageStore.GetOrInstallAsync(NuGetFeed feed, String packageId, String version, Boolean force) at Seq.Server.Features.Installation.AppPackageInstaller.DownloadAndInterrogateAsync(String nuGetFeedId, String packageId, String version, Boolean force) at Seq.Server.Features.Installation.AppPackageInstaller.InstallPackageAsync(String nuGetFeedId, String packageId, String version) at Seq.Server.Web.Api.AppsController.InstallPackage(String feedId, String packageId, String version) ``` With an exact version: ``` Unable to install package "SeqToAzureQueue" v"2.0.0" from "nugetfeed-16" Newtonsoft.Json.JsonReaderException: Unexpected character encountered while parsing value: <. Path '', line 0, position 0. at Newtonsoft.Json.JsonTextReader.ParseValue() at Newtonsoft.Json.JsonReader.ReadForType(JsonContract contract, Boolean hasConverter) at Newtonsoft.Json.Serialization.JsonSerializerInternalReader.Deserialize(JsonReader reader, Type objectType, Boolean checkAdditionalContent) at Newtonsoft.Json.JsonSerializer.DeserializeInternal(JsonReader reader, Type objectType) at Newtonsoft.Json.JsonConvert.DeserializeObject(String value, Type type, JsonSerializerSettings settings) at Newtonsoft.Json.JsonConvert.DeserializeObject[T](String value, JsonSerializerSettings settings) at Seq.Server.Features.Installation.NuGet.PackageRepositoryV3.<>c.<<JsonAsync>b__5_0>d.MoveNext() --- End of stack trace from previous location where exception was thrown --- at Seq.Server.Features.Installation.NuGet.PackageRepositoryV3.RequestAsync[T](HttpMethod method, String path, Func`2 withResponse) at Seq.Server.Features.Installation.NuGet.PackageRepositoryV3.JsonAsync(HttpMethod method, String path) at Seq.Server.Features.Installation.NuGet.PackageRepositoryV3.FindPackageAsync(String packageId, SemVersion version) at Seq.Server.Features.Installation.AppPackageStore.GetOrInstallAsync(NuGetFeed feed, String packageId, String version, Boolean force) at Seq.Server.Features.Installation.AppPackageInstaller.DownloadAndInterrogateAsync(String nuGetFeedId, String packageId, String version, Boolean force) at Seq.Server.Features.Installation.AppPackageInstaller.InstallPackageAsync(String nuGetFeedId, String packageId, String version) at Seq.Server.Web.Api.AppsController.InstallPackage(String feedId, String packageId, String version) ```

I know how to configure the SEQ server to retain events until some constant amount of time has passed. Is it possible to customize this further? As an example, suppose both events from staging and production went to the same server. I can easily distinguish these events by enriching them with an environment key (with value "staging" or "production" respectively). Is it possible for me to configure a shorter retentions for the events from staging and a longer retention for the events from production?

Hi, Could you please clarify how to use Serilog + Seq in the AWS Lambda Function. I've done configuration: private static void ConfigureLogger() { var levelSwitch = new LoggingLevelSwitch(); Log.Logger = new LoggerConfiguration() .MinimumLevel.ControlledBy(levelSwitch) .WriteTo.Seq(seq_url, apiKey: seq_apiKey, controlLevelSwitch: levelSwitch) .CreateLogger(); } Also tried to call Log.CloseAndFlush() at the end of my func and still no results.

Hi, Is there any function so that Alert condition checks for events between 8 AM to 4PM

How can I remove windows user from SEQ? When I try seqcli user remove -n nemke I got "The command failed: 401 - Please log in"

We have a number of different projects feeding into our server so generally start our search with something like `ProjectId="ABC"`, then find the property value we're looking for e.g. `UserName` -which is appended to all events. Selecting it clears the filter bar and replaces it with just `UserName="xyz"` which is ok but it would be better if you were further refining the current filter rather than resetting it i.e. it would be `ProjectId="ABC" && UserName="xyz"`

Love the new "Search FROM timestamp" and "Search TO timestamp" -it's really handy when trying to timebox a set of issues but it would be better if it only updated the relevant date field (at the moment it clears the other one i.e. "FROM" clears "TO"). Scenario: 1. I filter the rough time period from/to to the nearest hour I know the issue was 2. I find the last message I'm interested in after scrolling down so select "Search TO timestamp" -the "FROM" clears 3. I re-input "FROM" and find the start of the time period so set the "Search FROM timestamp" and the TO is cleared

A lot of the time when looking through logs for something else you spot something you'd like to send to a dev (or while discussing an issue). It would be great if you could "Copy link to clipboard" -similar to the "Find just this" or "Permalink" but they don't hit the mark: "Find just this" - updates the current view which is a pain while you're investigating things "Permalink" - means the event is around forever which you may not want

Hello, we are running Seq in a Docker container. As we saw issue probably related to memory issue we wanted to configure `cache.systemRamTarget` by setting the `SEQ_CACHE_SYSTEMRAMTARGET` environment variable. It was still crashing and so we did change `Seq.json` and since then it seems to be running stable. Is there a way to check the actually applied Seq configuration running in Docker? I just want to validate if the environment variable was overriding the configuration as expected.