Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
It would be handy if I could temporarily toggle the view of timestamps in the Seq UI between the system TZ and UTC... the scenario I have is needing to restore an Azure SQL database to a point in time prior to a specific event. Azure requires the restore point to be specified in UTC, and it would save me having to do some timezone maths if I could toggle (or hover over?) the timestamps between UTC and system TZ.
Posted by James Webster 3 years ago
I have a series of events in our Seq log, and am currently testing out the API to incrementally pull down events, using afterId param and LastReadEventId. In this case, I have a very old event (from 4 days ago, Id = 'event-70f3a66095c308d52bd5030000000000'), followed by events from today. When I search with afterId set to the old event, I get an empty resultSet.Events collection. When I search with startAtId set to the old event, I get a single event in the resultSet.Events collection (namely, the old event). If I use one of the newer events from today (Id = 'event-cc126b5b99a708d58cfc030000000000'), I get a mix of events, INCLUDING the oldest event, from 4 days ago. How is afterId expected to work? I would've expected it to only load events added after the given Id, but this does not seem to be the case. Thanks.
Posted by Aaron Schnarr 3 years ago
Hi, I'd like to start using Seq on client sites as our default logging solution (licences notwithstanding). Many of the sites will allow us to remote to their environment and examine the logs directly. Some will not allow us access so in order to look at the logs we'll need an "Export to disk / Import from disk" of the Events. There is no network connectivity between the client and us in these instances - emailing a file or shipping a USB stick will be the only method of data sharing. I've tried to use the "seq-import" tool, but it's not able to parse the Compact JSON Format used by the JSON file Archiver (which would be an option). I've also tried to use the File Archiver App but get an error "System.ArgumentException: Requested value 'WARN' was not found" so that's currently not an option. Is there a full "copy / paste" option from the back end? Can I grab the "C:\ProgramData\Seq\Extents" folder and dump it on a new Seq server and expect to see the Events? Any help would be most appreciated! Thanks
Posted by Nic 3 years ago
A possible future feature, or maybe it is already supported somehow... I have a situation where I want to lookup messages by correlation id across multiple systems. Unfortunately the property that the the correlation id is logged under isn't the same across these systems, so I have a signal along the lines of... PropertyX = 'some-correlation-id' OR PropertyY = 'some-correlation-id' ... plus other predicates to filter down to the systems/environments in question. What would be great would be the ability to save this signal as a signal template, where 'some-correlation-id' get replaced with a parameter marker (e.g. @CorrelationId) and the Seq user interface then provides a mechanism to enter the actual value of this parameter when the signal template is selected and the query is run (plus the option to save the resulting signal if I wanted to 'bake' the template for some reason). Obviously I can do this myself through the Seq API but lovely if the Seq UI supported this, if it doesn't already and I haven't just RTFM.
Posted by James Webster 3 years ago
Hi - I'm attempting to post raw JSON to Seq including an Exception: { "Events": [{ "Timestamp": "...", "Level": "Error", "MessageTemplate": "Unable to process payment Provider - {provider}", "Properties": { "provider": "XXX", "CardNo": "00000000" }, "Exception": { "Message": "test message", "StackTrace": "..." } }] } I'm hoping to get the bright red Exception box in the log item to show, but I can't seem to convince Seq to even show the exception never less the red box.. can someone let me know what the correct JSON looks like? Thanks, Nic
Posted by Nic 3 years ago
Hello, Is it possible via the seq.api client or otherwise to set the default signals of other users? We would like to ease the onboarding of new users by having SEQ setup with a default set of common signals. Ive played a bit with the client, but I dont see how to gain access to the _watchers_ node of the signals resource. Do I need to auth as the other user to do so? Thanks!
Posted by Nathan 3 years ago
Currently testing the NLog 4.5 RTM with the NLog.Targets.Seq. I'm able to log Error and Debug messages, but none of the other levels are being properly logged. I have configured both a colorConsole and seq to use minLevel="Trace". Console writes all my tests messages, but Seq does not. I'm wondering if this has something to do with NLog using Warn vs Warning, Trace vs Verbose, Info vs Information. Is there a way to get all these levels to log in Seq?
Posted by Aaron Schnarr 3 years ago
Hi, On production I have .net 4.7 as targeted framework. And below are the packages I am using to dump logs in Seq - Serilog (version="2.5.0" ) Serilog.Formatting.Compact (version="1.0.0" ) Serilog.Sinks.Seq ( version="4.0.0") This is working fine on QA environment with .Net 4.5 framework. But I am not getting logs on production environment. Does this version of Serilog and Seq supports .net 4.7 framework. If yes than what could be the possible issue. Please let me know it's quite urgent. Regards, Ashutosh
Posted by ashutosh shandilya 3 years ago
I'm currently working on implementing some logging into a javascript client. Earlier today I was able to see my messages coming through to seq and suddenly they stopped making it to the event log. I'm still seeing new messages from the server which is using the same message format, and when I go to the diagnostics tab I can see that the accepted/arrived arrived value is getting incremented. I am sending the payload to the raw endpoint and as I mentioned I was seeing the events come all the way through earlier today. I don't see any errors in the ingestion log, and I'm receiving 201s on the posts to the endpoint. As far as I can tell it seems that it should still be working. Are there some sort of caps on the raw events that can be sent through in a day? I'm pretty baffled by what I'm seeing.
Posted by Walter Abbott 3 years ago
Hi , I would like to have a stacked chart with multiple attributes of a property For example I have property called Stats with value as Total:12 Slottime: 4 executiontime:8 I would like to plot in dashboard with bars for each attribute Could you please help me how to do it
Posted by VidyaSagar 3 years ago
I want my team to use a local seq server with the single user license for development of our applications. This way we don't have API-Keys and environment specific URLs in our source. The downside of this setup is that the single user license has no authentication. The only protection of the log data is the windows firewall. As developers often just disable the windows firewall for a "test" and forget to enable it afterwards, I'm looking for a seq feature to restrict access to seq server to localhost only. Is there such a feature or setting in seq?
Posted by Christian Kölla 3 years ago
Hi Team, Can you please help me how can I set up an alert which can give me all errors/exceptions within say 5 Mins. Below is my query I am using but this does not give me error(s) occured in a duration. select count(*) as count from stream where Application='SomeApplication' and Method='SomeMethod' group by time(5s) limit 10000
Posted by ashutosh shandilya 3 years ago
I'm using Nlog in the application, I have two targets in the Nlog config file, one JSON target, and a Seq target. When I use the logger I'll have a JSON file by 10Kb in a day, while I check the folder in "C:\ProgramData\Seq\Extents" at the same time I have some files by 16MB in the folder. Why I have this difference?
Posted by eliteNeut 3 years ago
Hello Community, I see that Seq 4.2 now allows multiple aggregate functions in the same column. However, whenever I try to do the following: `sum(last(Total))` I get the following error: ``` The query could not be executed. The function name `last` was not recognized; to search for text instead, enclose the filter in "double quotes". ``` I essentially have this `Total` as the last emitted value for the day, and this creates a nice layout of the last 7 days [using a helpful tip by Mr. Seq himself](https://nblumhardt.com/2018/02/last-day-log-searches/), but now I would like to roll up those 7 days and get the total and the average for the past week. Any guidance/pointers would be greatly appreciated! Thank you, Michael
Posted by Michael DeMond 3 years ago
Because I didn't have proper retention policies in place, our Seq instance has events currently stretching back to October of 2017. What is the quickest way to purge everything older than, say, 14 days? I tried the "manual delete" function but I'm not sure it's doing anything, as I can watch the "Count in RAM" number continue to climb even though it should be deleting nearly all events.
Posted by Marty Tippin 3 years ago