Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
I often open up multiple seq windows that can be on different chrome windows, in a vm, and sometimes in different browsers at the same time. I just noticed that there is a server status with the following message displayed: The single-user license only permits one user to access Seq. To maintain compliance with Seq's terms of use, purchase an appropriate license or limit access to a single person. If this message is displayed in error, please contact the Seq support team for assistance. Is this something I can ignore. I am pretty sure I am the only person using it.
Posted by Bill Haggerty 2 years ago
We have accidentally deleted all logs before a specific date. We are trying to restore our SEQ instance from backup file but we could not do it. It just restored daily events. We want to restore all historic data before our unfortunate operation. How can we do it?
Posted by Tayfun Cakicier 2 years ago
Hi, I am trying to extract max response time of my each unique scenarios , and it is giving me the highest response time of all. ex. Scenerio 1 has 10 req, scenario 2 has 10 req , scenario 3 has 5 req etc and I want to extract highest reponse time of scenario 1 , 2 and 3, instead it is giving me the highest response time from all the scenario suppose scenario 1 consists the max response time then it is showing me 10 rows with highest response time of scenario. I need max of all 10 req from scenario 1 and 2 etc
Posted by snehlata 2 years ago
I'm currently looking for a way to scale seq. The main issue is the number of events and looking back when data is not in memory. Currently with 16Gb of RAM, I can see about 6 hours of logs. I can add more ram, but even 64 gigs would allow me to see 1 day at most, I'd like to look for data for a week or more, and with Seq I'm not seeing the way. So, is there any way to speed up SEQ other than having lots of memory? 1. is it possible to index some types of events so they're always fast to find, or at least don't require scanning the entire database on disk? 2. Is it possible to scale to more than one server somehow?
Posted by Natan 2 years ago
When the console is running (with a Console.Readline()), the application writes to Seq. But if the application closes without the Console.Readline() then the Seq browser does not have time to receive all the logs, and only reports the first few. Any tips here would be great. Thanks, James
Posted by James Hemphill 2 years ago
Hi Trying to log properties so they are searchable using NLog. I know I can use @ to serialize objects in messages - but how to do the same for properties? Pseudo c# code that works (I can e.g. search for x.status=0 ): class MyClass { public int status { get; set; } }; var x = new MyClass(); log.Debug().Message("Write {@x}", x).Write(); Pseudo c# code no working (only x class name is serialized): class MyClass { public int status { get; set; } var x= new MyClass(); log.Debug().Message("Write Hi").Property("x", x).Write(); How do I make MyClass serailized so I can search i when logging it as a user Property Regards
Posted by Karsten Rasmussen 2 years ago
Hi, Is there a way to use EventType in Dashboard charts? I want to be able to display data on specific events, and I'd like to try to avoid adding in a specific parameter to differentiate. EventType does this brilliantly in the event view, but so far I've been unsuccessful in using it on the Dashboard. Thanks.
Posted by Dan Woolstencroft 2 years ago
I did see this question: https://docs.getseq.net/discuss/583f40ad85752b39002d64d7 I'm currently using seq 4.2.839 and I'm running a query "select count(*) from stream group by Application". If I set the From-To time to the current day it returns without issue (and pretty fast 4-5 seconds). If I extend that time by a day I get "The query execution timeout of 00:01:00 was reached. In Admin -> Preferences -> Query timeout is currently set to 600. I'm not sure why it's still defaulting to 60. Thanks
Posted by Ken Wilcox 2 years ago
I'm trying to build a cusotmized log viewer for my application and wanted to retrieve and expose the Signals built on the Seq server. When I make this call whether I use await or .Result to get the results, it never returns any data. If I use .Result, it blocks indefinitely. This is my current implementation, but the foreach loop is never hit here. public async void LoadSignals() { var list = await seqConnector.Signals.ListAsync(); foreach (var signal in list) Signals.Add(signal); } The SeqAPI key I'm useing is setup with User-level access and listing log entries works fine. Any guidance would be appreciated.
Posted by James LaPenn 2 years ago
Is there any settings to limit event ram cache? It is taking too much (8.1GB from 16 GB) and computer is quite busy. =================== 4. System Memory -------------------- Physical Total : 17113866240 Physical Available : 3895492608 Physical Utilization: 0,77237799142691 Commit Limit : 26777542656 Commit Peak : 15783563264 Commit Total : 15397679104 Process Count : 198 Handle Count : 88482 Thread Count : 3301 Kernel Total : 810446848 Kernel Paged : 620425216 Kernel Non-paged : 190021632 Page Size : 4096 System Cache : 2791002112 ==================== 5. Process Memory -------------------- Working Set (Environment): 4252897280 Working Set : 8547864576 Paged : 8786567168 Paged System : 401792 Non-paged System : 669234 Private : 8786567168 Handle Count : 990 Thread Count : 43 ... ==================== 9. Event RAM Cache -------------------- Days Cached : 19,375 Events Cached : 6802210 Is Warming Up : No
Posted by Pavel Krystýnek 2 years ago
Is it possible to access a signal it's more user-friendly title? Currently, it looks like Connection.Signals.FindAsync only supports the id, which is a server generated value: ```csharp var signal = connection.Signals.FindAsync("signal-39").Result; ``` How would I go about finding a signal by it's title? Thanks!
Posted by Aaron Schnarr 2 years ago
Hi Team, I need to get alert for my api if count of errors exceed from 15 within 1 minute. In threshold app I set alert using below configuration: Condition -> Count>15, Measurement window --> 1 Minute, Level-->Error, Notification App-->email settings but the above setting send me alert mail even when count of error is less than 15. Also, I need this for particular API key/application. Please suggest, need urgent help.
Posted by Ashutosh Shandilya 2 years ago
Let's say I have a query similar to: ``` select count(*) as count from stream where HttpStatusCode > 500 ``` I want to alert on the number of errors. But I'm not interested in short bursts of errors. I would like to have an alert that would say "hey, you've been getting more than 100 errors each minute last 10 minutes" 1) How is the `count` calculated for the purpose of evaluating the alert condition? Is this a count of all events in the measurement window? 2) In my case, I'm not interested in 1000 errors happening during 1 minute of 10 minute measurement window, but rather in at least 100 errors happening each minute of the 10 minute window. So the sum of errors is the same over 10 minutes, but the distribution is different. Is it possible to set the alert condition like that?
Posted by Marcin Budny 2 years ago
I love Seq! We already use Seq as a sink for several of our .net core apps. However, it would be even more useful if we were able to use it to store events from our front-end, edge facing web servers, which run nginx. So, is there a way to replace our existing nginx access and error text logs with Seq?
Posted by Simon Chester 2 years ago
It would be handy if I could temporarily toggle the view of timestamps in the Seq UI between the system TZ and UTC... the scenario I have is needing to restore an Azure SQL database to a point in time prior to a specific event. Azure requires the restore point to be specified in UTC, and it would save me having to do some timezone maths if I could toggle (or hover over?) the timestamps between UTC and system TZ.
Posted by James Webster 2 years ago
I have a series of events in our Seq log, and am currently testing out the API to incrementally pull down events, using afterId param and LastReadEventId. In this case, I have a very old event (from 4 days ago, Id = 'event-70f3a66095c308d52bd5030000000000'), followed by events from today. When I search with afterId set to the old event, I get an empty resultSet.Events collection. When I search with startAtId set to the old event, I get a single event in the resultSet.Events collection (namely, the old event). If I use one of the newer events from today (Id = 'event-cc126b5b99a708d58cfc030000000000'), I get a mix of events, INCLUDING the oldest event, from 4 days ago. How is afterId expected to work? I would've expected it to only load events added after the given Id, but this does not seem to be the case. Thanks.
Posted by Aaron Schnarr 2 years ago
Hi, I'd like to start using Seq on client sites as our default logging solution (licences notwithstanding). Many of the sites will allow us to remote to their environment and examine the logs directly. Some will not allow us access so in order to look at the logs we'll need an "Export to disk / Import from disk" of the Events. There is no network connectivity between the client and us in these instances - emailing a file or shipping a USB stick will be the only method of data sharing. I've tried to use the "seq-import" tool, but it's not able to parse the Compact JSON Format used by the JSON file Archiver (which would be an option). I've also tried to use the File Archiver App but get an error "System.ArgumentException: Requested value 'WARN' was not found" so that's currently not an option. Is there a full "copy / paste" option from the back end? Can I grab the "C:\ProgramData\Seq\Extents" folder and dump it on a new Seq server and expect to see the Events? Any help would be most appreciated! Thanks
Posted by Nic 2 years ago