Ask a Question
Back to All

Dashboard Date Range/Date Selector?

Does anyone happen to know if its possible to get a dashboard to show a specific date range - i.e. zoomed in on an important 10 minute window of data? Am I missing something? Thanks

How can i filter by text inside the scope?

If i use Microsoft.Extensions.Logging.ILogger.BeginScope to wrap a series of messages, how can i in seq search for messages inside the scope? For example, seq shows the following property value: Scope ["Processing transfer: 1810121716551221"] I tried several filters to try to search out all messages with the transfer order number but couldn't get any luck. Wondering if this is a supported scenario?

Uninstall/Install Question

Recently, we've noticed that our installation of Seq can consume large amounts of RAM. We ran across [this]( article. Before we went through the steps outlined in the link above (uninstall, install with ram argument, etc...) I wanted to confirm with you: Does log event data in seq persist during/after an uninstall? i.e. if we uninstall/install to set the RAM limit, will that remove any of the data previously logged to Seq? Thanks

Google Authentication Support

Hi, Is that something you are planning to add any time soon? Thanks! Pawel

Is there a Seq 5.0 release date or an expected quarter ?

Enforce TLS 1.2

As part of a security auditing we are in need of enforcing TLS 1.2 to avoid vulnerability exploits from previous versions. Is there any way to configure this kind of enforcement in SEQ? Reference:

AD Groups to Provision Admins

Hi, Would it be possible to add the functionality to allow more than one provisioning rule for more than one AD group. I.E User AD group has one set of permissions, and Admin AD group provisions something else. All access is managed via AD in order for it to be properly audited, currently we have to manually add privileges. I know you can change the new user default permissions but that shifts the problem, rather than solving it. Thanks

Seq eventlog message

Hi, I get an eventlog message stating Seq could not do or took a long time to process maintenance. Our logging store isn't even 20% of what we need to in the end, so if it is already a concern, how can we speed things up? The machine should be fast enough (storage runs about 150MB/sec) I feel something else is up... Can you give us a bit more insights on the message? The message is: seq (2228) Seq-856c47b15a8144b3b9a791066b1a3b79: Database Maintenance has completed a full pass on database 'C:\ProgramData\Seq\Extents\2018-04-04_2018-04-11\extent.seq'. This pass started on 9/10/2018 and ran for a total of 1461671 seconds (16 days). This database maintenance task exceeded the 7 day maintenance completion threshold. One or more of the following actions should be taken: increase the IO performance/throughput of the volume hosting the database, reduce the database size, and/or reduce non-database maintenance IO. 1280 pages seen

Filter to events with nonempty property

What is the filter syntax for specifying that a property that is a collection must be nonempty? This information is not in the Collections section of the Filter Syntax page [1]. [1]

Day of week filter

Hi guys, we are loving Seq so far! We have some critical business applications running as Windows services and scheduled tasks which log to Seq. One use case is we would like to create downtime alerts if these systems ever fail to start when they're supposed to. e.g. one service typically runs once per week between 10am and 11am on Wednesday. So we need to be notified if the service does not log anything during this window. We are able to filter by time of day using TimeOfDay easily enough... e.g. Application = 'MyApplication' and TimeOfDay(@Timestamp, 10) >= TimeSpan('10:00') and TimeOfDay(@Timestamp, 10) <= TimeSpan('11:00') ... but we're struggling to also filter by specific day of the week. Any tips would be greatly appreciated! Thanks, Andy

for window() directive cannot be applied to this query because of embedded temporal clauses

I'm trying to get the latest value of my backup log entry. Following this guide: I'm getting this error on the dashboard widget: > The query could not be executed. > The `for window()` directive cannot be applied to this query because of embedded temporal clauses. The SQL is: select Last(S3Key) as Last from stream where @EventType = 0xECB23E88 limit 1 This works just fine from the Events page, just not in a Dashboard.

Changing the position of legends displayed on graph

Can the position of legends displayed on graph be change to below the graph. For scenarios where there are many legends it overlaps making the graph invisible.

Seq Log installed and hosted on Azure VM is not reachable (403) Forbidden

We have installed Seq log on Azure VM and inbound rules on Network settings for that VM is configured to accept the requests URI: https:/domain:5341" We were trying to log the errors on to the server (Azure VM) from On-prem server, initially it was not reachable with 401 and then we configured inbound rules on that VM to open the port 5431 and then we ran to 403 issue. We have set the Source Port ranges to *, still nothing works. Can you please help us on this issue, and any workaround / setting on Azure portal to fix 403

Sending logs to Seq using UDP

Hello, does Seq support a UDP interface for accepting log events? Our use case is that we want to send logging data to Seq, but if Seq is down we don't want our production systems to be affected -- we'd rather lose log events in this case. Our specific case would be using the NLog adapter, but I'd also be interested in more general information. I couldn't find anything about it in the documentation, except for a very brief mention on Thanks! Will

Company details

Hi, our employees are interested to use your software to quickly identify and diagnose problems in complex applications and microservices. In order to do so I have to receive an official quote and raise a PO on our system, however in order to do so I need to set you up on our system as a new vendor. Please contact me on my email so I can send you a form for completion. Kind regards Agnieszka

No longer receiving logs - System.IO.FileLoadException: Could not load file or assembly 'Serilog.Sinks.File

We are no longer receiving logs on SEQ since last Friday morning. Two changes occurred at that time.... TLS 1.0 was disabled on all servers. ….. (it is now re-enabled on the SEQ server only) Windows updates were run on all servers. …..(all have been removed on the SEQ server only) Full error: App host failed unexpectedly System.IO.FileLoadException: Could not load file or assembly 'Serilog.Sinks.File, Version=, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' or one of its dependencies. The media is write protected. (Exception from HRESULT: 0x80070013) File name: 'Serilog.Sinks.File, Version=, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' at Serilog.Sinks.RollingFile.RollingFileSink.Dispose() at Serilog.LoggerConfiguration.<CreateLogger>b__28_0() at Seq.App.FileArchive.ArchiveWriterReactor.Dispose() at Seq.Apps.GenericHost.Program.<Main>d__0.MoveNext() WRN: Assembly binding logging is turned OFF. To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1. Note: There is some performance penalty associated with assembly bind failure logging. To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog]. Do we need TLS 1.0 turned back on for each server from which we are gathering logs? Is there a technical guide to securing the service protocols? Many thanks...we are done.

{"Error":"Seq is unavailable. Failed to initialize storage: Index was outside the bounds of the array."}

This error is showing when trying to browse SEQ url.

Retention not working?

Hi, I am using retention policy which is to delete All events older than 7 days. However, I still can see some old folders (even older than 1 month) in Seq\Extents folder. Should they be deleted as part of retentions policy? Thank you

Locked out

I've recently turned on AAD authentication and I get an error telling me that my return url is incorrect. I've followed the instructions and add "/aad" onto the end of the root url but I cannot login. It may be because there were no users configured when I turned on AAD and now I'm locked out. I've tried going back to using basic authentication using seq.exe, but as I didn't have any users setup at all, I'm unable to do so as each time I try to a command like seq auth --basic -u=admin -p=admin it tells me that a user with that username was not found. Help! How do I recover my seqlog install?

Runtime Error

Hi! I've just installed Seq on my local laptop and am receiving this error when I Browse to Seq: Seq is unavailable. Failed to initialize storage: 'Newtonsoft.Json.Linq.JObject' does not contain a definition for 'SignalIds' Any ideas? Thanks!