Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
Hi, How is the proper way to backup the current Events? 1. Failed with attempts to zip Extents folders - file used by another process 2. /settings/backup is only for configuration not including Events 3. The App: Seq.App.FileArchive didn't produce any output file. Thanks, Igor
Posted by Igor 2 years ago
Hi, Please provide a location or a query that I can find all logs of SEQ process. I want to troubleshoot SEQ's long-lasting CPU high utilisation. 99% for over 7h and still persist just after run a simple query that finished with timeout. Thanks in advance, Igor
Posted by Igor 2 years ago
Hi, Since a few days we're experiencing timeouts on basic queries that a week ago were executed properly. Query example for yesterday time range: select count(*) as logCount from stream where @Level = 'Error' 1. How to troubleshoot query timeouts? 2. How to increase the 1 min built-in timeout value? 3. Is our hardware configuration sufficient? a) Amount of events: 161 days since 24.08.2016, 52GB in Extents folder b) VM in Azure DS11, so: 2vCPU 14GB RAM HDD 126GB PageFile on D:\ built-in local temp. SSD 26GB c) Performance utilisation: From SEQ Diagnostics tab: Rate accepted (last minute) 2000~3000 HDD queue via PerfMon - below 1 Looking forward to your suggestions, Igor
Posted by Igor 2 years ago
Hi, Is there a possibility to obtain similar information like under /settings/diagnostics page but via any kind of cmd solution? It would be needed for a monitoring solution of current utilization with proper alerting. Thanks in advance, Igor
Posted by Igor 2 years ago
Hi there, I have been using Seq for a while and recently configured it with custom retention policies. My aim was to retain data from my Prod environment which is above level Debug or Verbose. I did this with 3 retention policies: * Delete after 3 days where Environment = 'Dev' * Delete after 3 days where Environment = 'Test' * Delete after 7 days where Level = Debug or Verbose ... however I've just gone in to check & it seems that there is only 3 days data left in Seq. I'm using Seq 3.4.18 - how can I check why this data was deleted? I guess I've misconfigured the retention policies but I can't see how. I really need to be able to rely on Seq to hold onto this data for me, for reporting purposes. Thanks, Darren.
Posted by Darren 2 years ago
I'm logging data over to Seq that I want to chart on, but apparently can't unless it is coerced into the proper numeric type. I don't control the absolute source of the data so may have a hard time forcing numeric conversion. Is there a way that using a SQL select query from Seq I can coerce a string value to be interpreted as a number value so that I can properly chart it?
Posted by Norman Harebottle 2 years ago
There isn't a whole lot more than the the title question. Why are the @Timestamp values returned in a SQL query returned as Binary time values? I want to export the data as CSV, or at least be able to read it easily using the Seq table view which is challenging when it is in the binary format. Is there anything I can do to format that differently for CSV export?
Posted by Norman Harebottle 2 years ago
Hi, I know similar questions have asked before but the resolutions haven't seemed to work for my case so I was wondering if someone could shed some light on this for me. When installing seq and listening to an IP Address url on my server, it is easily accessible from both the server and networked machines. But when I try to install to a specific url, such as myseq.domain.com I get dns_unresolved_hostname. Also when using tracert, I get the message "Unable to resolve target system name...". I wonder if I'm doing something wrong, I also installed against an IP address and then added a rule to my hosts file for that IP address and the url but I get the same issue. What would be the best way to set this all up? Is there something I'm doing wrong. Where does the seq installation actually install when just supplying a URL, does it install to a specific IP address. I know it doesn't install to IIS, I do have other sites on that server in IIS, could that conflict in anyway? Thank you for your time!
Posted by Lloyd Powell 2 years ago
We were introducing Slack notifications into production today and ran into an issue when trying to achieve our desired state and what we are trying to do may not be possible. In our other platforms we have rules setup which alert (via PagerDuty, email, slack, etc...) when a certain number of errors (i.e. 10 fatal errors within 5 min timespan), alert the development team. Is something like that possible here? I can see that we can suppress a notification from resending more than every 10 minutes however as it stands it will send on the first fatal error every 10 minutes, not when the count exceeds X over Y.
Posted by James Legan 2 years ago
We've been using Seq with Active Directory authentication in our current environment. We're now moving to an environment that requires a smart card/PIN combo instead of a username/password to authenticate an Active Directory user. We use Kerberos in IIS for our own application, but can't tell if Seq supports this model. Have you encountered this use case before, and is it supported?
Posted by Brian Potocki 2 years ago
Hi, I have an Azure VM running Seq at the moment but want to move it to a new VM with SSD storage (the existing VM doesn't support Azure premium storage disks). I have tried copying the whole c:\programdata\seq folder across to the new machine but when I try to start the service, it fails with a fatal error in the seq log file: 2016-12-15 03:24:36.026 +00:00 [Fatal] An unhandled error occurred System.Security.Cryptography.CryptographicException: Key not valid for use in specified state. at System.Security.Cryptography.ProtectedData.Unprotect(Byte[] encryptedData, Byte[] optionalEntropy, DataProtectionScope scope) at Seq.Server.Cli.RunCommand.Run(TextWriter cout) at Seq.Cli.Command.Invoke(String[] args, TextWriter cout, TextWriter cerr) Any help in doing the migration would be appreciated. Appart from wanting to retain the log history, we currently have ~100 signals configured and at least 30 API keys that need to stay the same as well.
Posted by Eamon Hetherton 2 years ago