Ask a Question
Back to All

SeqConnector.Signals.ListAsync never returns

I'm trying to build a cusotmized log viewer for my application and wanted to retrieve and expose the Signals built on the Seq server. When I make this call whether I use await or .Result to get the results, it never returns any data. If I use .Result, it blocks indefinitely. This is my current implementation, but the foreach loop is never hit here. public async void LoadSignals() { var list = await seqConnector.Signals.ListAsync(); foreach (var signal in list) Signals.Add(signal); } The SeqAPI key I'm useing is setup with User-level access and listing log entries works fine. Any guidance would be appreciated.

Event RAM Cache

Is there any settings to limit event ram cache? It is taking too much (8.1GB from 16 GB) and computer is quite busy. =================== 4. System Memory -------------------- Physical Total : 17113866240 Physical Available : 3895492608 Physical Utilization: 0,77237799142691 Commit Limit : 26777542656 Commit Peak : 15783563264 Commit Total : 15397679104 Process Count : 198 Handle Count : 88482 Thread Count : 3301 Kernel Total : 810446848 Kernel Paged : 620425216 Kernel Non-paged : 190021632 Page Size : 4096 System Cache : 2791002112 ==================== 5. Process Memory -------------------- Working Set (Environment): 4252897280 Working Set : 8547864576 Paged : 8786567168 Paged System : 401792 Non-paged System : 669234 Private : 8786567168 Handle Count : 990 Thread Count : 43 ... ==================== 9. Event RAM Cache -------------------- Days Cached : 19,375 Events Cached : 6802210 Is Warming Up : No

Accessing Signal by Title

Is it possible to access a signal it's more user-friendly title? Currently, it looks like Connection.Signals.FindAsync only supports the id, which is a server generated value: ```csharp var signal = connection.Signals.FindAsync("signal-39").Result; ``` How would I go about finding a signal by it's title? Thanks!

Get last 1 minute exception alert

Hi Team, I need to get alert for my api if count of errors exceed from 15 within 1 minute. In threshold app I set alert using below configuration: Condition -> Count>15, Measurement window --> 1 Minute, Level-->Error, Notification App-->email settings but the above setting send me alert mail even when count of error is less than 15. Also, I need this for particular API key/application. Please suggest, need urgent help.

How to reason about alert conditions

Let's say I have a query similar to: ``` select count(*) as count from stream where HttpStatusCode > 500 ``` I want to alert on the number of errors. But I'm not interested in short bursts of errors. I would like to have an alert that would say "hey, you've been getting more than 100 errors each minute last 10 minutes" 1) How is the `count` calculated for the purpose of evaluating the alert condition? Is this a count of all events in the measurement window? 2) In my case, I'm not interested in 1000 errors happening during 1 minute of 10 minute measurement window, but rather in at least 100 errors happening each minute of the 10 minute window. So the sum of errors is the same over 10 minutes, but the distribution is different. Is it possible to set the alert condition like that?

Exception Formatting

When exceptions are logged in the structured events, Seq displays the exception as string. Is there any way to have seq store the exception as a json string, allowing it to be re-hyrdrated into an exception object later on?

Replacing our existing nginx access and error text logs with Seq?

I love Seq! We already use Seq as a sink for several of our .net core apps. However, it would be even more useful if we were able to use it to store events from our front-end, edge facing web servers, which run nginx. So, is there a way to replace our existing nginx access and error text logs with Seq?

Ability to toggle event timestamps in user interface between system TZ and UTC

It would be handy if I could temporarily toggle the view of timestamps in the Seq UI between the system TZ and UTC... the scenario I have is needing to restore an Azure SQL database to a point in time prior to a specific event. Azure requires the restore point to be specified in UTC, and it would save me having to do some timezone maths if I could toggle (or hover over?) the timestamps between UTC and system TZ.

Events.InSignalAsync: afterId not working with large gap

I have a series of events in our Seq log, and am currently testing out the API to incrementally pull down events, using afterId param and LastReadEventId. In this case, I have a very old event (from 4 days ago, Id = 'event-70f3a66095c308d52bd5030000000000'), followed by events from today. When I search with afterId set to the old event, I get an empty resultSet.Events collection. When I search with startAtId set to the old event, I get a single event in the resultSet.Events collection (namely, the old event). If I use one of the newer events from today (Id = 'event-cc126b5b99a708d58cfc030000000000'), I get a mix of events, INCLUDING the oldest event, from 4 days ago. How is afterId expected to work? I would've expected it to only load events added after the given Id, but this does not seem to be the case. Thanks.

Simplest way to port Events between two disconnected Seq Servers

Hi, I'd like to start using Seq on client sites as our default logging solution (licences notwithstanding). Many of the sites will allow us to remote to their environment and examine the logs directly. Some will not allow us access so in order to look at the logs we'll need an "Export to disk / Import from disk" of the Events. There is no network connectivity between the client and us in these instances - emailing a file or shipping a USB stick will be the only method of data sharing. I've tried to use the "seq-import" tool, but it's not able to parse the Compact JSON Format used by the JSON file Archiver (which would be an option). I've also tried to use the File Archiver App but get an error "System.ArgumentException: Requested value 'WARN' was not found" so that's currently not an option. Is there a full "copy / paste" option from the back end? Can I grab the "C:\ProgramData\Seq\Extents" folder and dump it on a new Seq server and expect to see the Events? Any help would be most appreciated! Thanks

Signal Templates

A possible future feature, or maybe it is already supported somehow... I have a situation where I want to lookup messages by correlation id across multiple systems. Unfortunately the property that the the correlation id is logged under isn't the same across these systems, so I have a signal along the lines of... PropertyX = 'some-correlation-id' OR PropertyY = 'some-correlation-id' ... plus other predicates to filter down to the systems/environments in question. What would be great would be the ability to save this signal as a signal template, where 'some-correlation-id' get replaced with a parameter marker (e.g. @CorrelationId) and the Seq user interface then provides a mechanism to enter the actual value of this parameter when the signal template is selected and the query is run (plus the option to save the resulting signal if I wanted to 'bake' the template for some reason). Obviously I can do this myself through the Seq API but lovely if the Seq UI supported this, if it doesn't already and I haven't just RTFM.

Raw JSON to capture Exceptions

Hi - I'm attempting to post raw JSON to Seq including an Exception: { "Events": [{ "Timestamp": "...", "Level": "Error", "MessageTemplate": "Unable to process payment Provider - {provider}", "Properties": { "provider": "XXX", "CardNo": "00000000" }, "Exception": { "Message": "test message", "StackTrace": "..." } }] } I'm hoping to get the bright red Exception box in the log item to show, but I can't seem to convince Seq to even show the exception never less the red box.. can someone let me know what the correct JSON looks like? Thanks, Nic

How does debounce work

There doesnt seem to be any documentation around it. Does it stop all events within the window or just the same event?

Set default signals for all users?

Hello, Is it possible via the seq.api client or otherwise to set the default signals of other users? We would like to ease the onboarding of new users by having SEQ setup with a default set of common signals. Ive played a bit with the client, but I dont see how to gain access to the _watchers_ node of the signals resource. Do I need to auth as the other user to do so? Thanks!

NLog integration

Currently testing the NLog 4.5 RTM with the NLog.Targets.Seq. I'm able to log Error and Debug messages, but none of the other levels are being properly logged. I have configured both a colorConsole and seq to use minLevel="Trace". Console writes all my tests messages, but Seq does not. I'm wondering if this has something to do with NLog using Warn vs Warning, Trace vs Verbose, Info vs Information. Is there a way to get all these levels to log in Seq?

Serilog 2.5.0 (.Net framework 4.7)

Hi, On production I have .net 4.7 as targeted framework. And below are the packages I am using to dump logs in Seq - Serilog (version="2.5.0" ) Serilog.Formatting.Compact (version="1.0.0" ) Serilog.Sinks.Seq ( version="4.0.0") This is working fine on QA environment with .Net 4.5 framework. But I am not getting logs on production environment. Does this version of Serilog and Seq supports .net 4.7 framework. If yes than what could be the possible issue. Please let me know it's quite urgent. Regards, Ashutosh

Problem with Ingestion

I'm currently working on implementing some logging into a javascript client. Earlier today I was able to see my messages coming through to seq and suddenly they stopped making it to the event log. I'm still seeing new messages from the server which is using the same message format, and when I go to the diagnostics tab I can see that the accepted/arrived arrived value is getting incremented. I am sending the payload to the raw endpoint and as I mentioned I was seeing the events come all the way through earlier today. I don't see any errors in the ingestion log, and I'm receiving 201s on the posts to the endpoint. As far as I can tell it seems that it should still be working. Are there some sort of caps on the raw events that can be sent through in a day? I'm pretty baffled by what I'm seeing.


I have a problem with time in Timestamp.The date is correct but time isn't. When I see "Mar 2018 21:04:45.362" in UI after export it to CSV file, it'll change to 2018-03-21T16:34:41.5768598Z.

Stacked chart

Hi , I would like to have a stacked chart with multiple attributes of a property For example I have property called Stats with value as Total:12 Slottime: 4 executiontime:8 I would like to plot in dashboard with bars for each attribute Could you please help me how to do it

Seq Local only for Development

I want my team to use a local seq server with the single user license for development of our applications. This way we don't have API-Keys and environment specific URLs in our source. The downside of this setup is that the single user license has no authentication. The only protection of the log data is the windows firewall. As developers often just disable the windows firewall for a "test" and forget to enable it afterwards, I'm looking for a seq feature to restrict access to seq server to localhost only. Is there such a feature or setting in seq?