Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
I am using serilog.sink.seq to push logs into SEQ (3.4.18), in batch mode. Once in a while, SEQ will reject a payload because it is bigger than max size. Whenever this happens, the SEQ UI will not display new incoming logs for 30sec to a few minutes (it seems the bigger the payload, the longer it hangs). While SEQ apparently hangs, I can see that my serilog sink is chugging away, it keeps sending to SEQ without any apparent errors. After the hang period, all logs that have been sent are now seen. Is there a way to avoid that, the issue is that when the rejected paylod is very big, it can take upwards of 5-10minutes for SEQ to "un-hang" - this tends to cause panic amongst people monitoring the logs as it seems like our logging system goes down. Thanks,
Posted by PL Ladouceur 3 years ago
Hi, I've been using seq with a single user with our own domain (http://seq.ourdomain.com) with no problems at all. We recently decided to purchase a licence so we could add more users. After entering the licence whilst accessing seq externally, I got a 404 when trying to add an admin password and when refreshing the page I now get the default IIS welcome page. I can still access it fine on the server it is installed, but anywhere else I get the default IIS page. It's odd because it was working perfectly before adding the licence. Would you be able to help me out on this one as it seems to be quite unexpected behaviour after working so well. Thanks
Posted by Lloyd 3 years ago
Hi. Is it possible to do addition/subraction of numbers i query? I'm trying something like: select ToIsoString(Min(@Timestamp)) AS StartTime, ToIsoString(Max(@Timestamp)) AS EndTime, (Max(@Timestamp) - Min(@Timestamp)) AS TimeSpan from stream where ETLModule = 'Baseline' group by BatchId order by StartTime ASC The (Max(@Timestamp) - Min(@Timestamp)) gives me an error
Posted by Erling Brandvik 3 years ago
I am using Dynamic Level Control with Serilog, in an MVC application and in 2 WebApi applications. In the MVC application it works. after some logs, the level switches dynamically. However in the WebApi applications the exact same code (it is in a library) doesn't work. The level never changes. So not every message will be visible in Seq. Since the Seq Sink uses HttpClient internally, is it possible that I've broken the dynamic level control because of some global filters? Would it be possible to break the functionality by altering the global httpconfiguration? Maybe that's why it doesn't work?
Posted by Marcel Wijnands 3 years ago
Is it possible in SEQ to combine the functionality of the filter syntax and the SQL queries? Or will there be support for it in the future? We want to be able to execute a select query for example: Select A,B,C From stream WHERE UserName='[email protected]' and when selecting an event, we want to be able to see all the properties of that event. In short, we would like to have a way to use a select when using the filter syntax.
Posted by Mathieu 3 years ago
When we try to make a new app instance run on all existing events we get the message: Could not save app instance Apps cannot currently run over existing events unless disk buffering is used. I can't find any reference to "disk buffering" anywhere else in the admin interface. All the best, Matthew
Posted by Matthew Popat 3 years ago
I am a software developer running a bank of system tests that are necessary to test Daylight Savings transitions. As such, the tests do a lot of changing of the system clock on my machine throughout the test run. Diagnostic logging is being done from the application into seq via Serilog. If I go to open the seq page, I get a license error: The single-user license only permits one user to access Seq. Log queries have been disabled for ten minutes; please close Seq on additional machines to remove this message and re-enable log queries. To try Seq in a team environment, please request a trial license certificate from the Seq website. There are no additional machines accessing the site, and no other users than myself. The only way I have been able to clear this message and re-enable queries is by uninstalling Seq and reinstalling it, which is very frustrating. I believe Seq is somehow reacting to the big time and date changes on the system in a way that is causing this issue. This has only started happening to me since I upgraded to 3.4.20 but I've since observed this behaviour in 3.4.18 too.
Posted by Dylan Tusler 3 years ago
Is there a way to get at data within an array using the handlebars syntax? I've tried {{From.[0].Address}} but it doesn't work. However I can search for From[0]["Address"] = "[email protected]" and results come back fine. Am I getting the syntax wrong, or do arrays not work in email templates? Cheers!
Posted by Dan Woolstencroft 3 years ago
EventFlow is every easy to connect multiple inputs and outputs. Is there a plan to support EventFlow for Seq? My scenario is the following, Serilog -> EventFlow -> Seq in a service fabric environment.
Posted by Zhichao Hong 3 years ago
We have a number of test environments where we have SEQ installed. We use each SEQ server for applications we have in that environment. When creating API keys in each environment it would be useful to be able to keep the same key across all the instances of SEQ. is it possible to define the key when creating one or edit them afterwards?
Posted by David Wright 3 years ago
Hey there, I'm trying to automatically deploy seq to a VM using Azure Resource Manager and a powershell script I found and adapted here: https://gist.github.com/bjcull/d566d237ed172ae9c524bc289c41eda9 Everything appears to install to the correct location, however the service cannot start. Please note that if I navigate to where seq lives and run "seq run" the application appears to start up for the first time correctly. The error I'm getting from the service (found in event viewer) is below: Application: Seq.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.ArgumentException at System.IO.Path.CheckInvalidPathChars(System.String, Boolean) at System.IO.Path.NormalizePath(System.String, Boolean, Int32, Boolean) at System.IO.Path.GetFullPathInternal(System.String) at Seq.Server.Cli.Features.StoragePathFeature.<Enable>b__26_0(System.String) at Seq.Cli.OptionSet+<>c__DisplayClass21_0.<Add>b__0(Seq.Cli.OptionValueCollection) at Seq.Cli.Option.Invoke(Seq.Cli.OptionContext) at Seq.Cli.OptionSet.ParseValue(System.String, Seq.Cli.OptionContext) at Seq.Cli.OptionSet.Parse(System.String, Seq.Cli.OptionContext) at Seq.Cli.OptionSet.Parse(System.Collections.Generic.IEnumerable`1<System.String>) at Seq.Cli.Command.Invoke(System.String[], System.IO.TextWriter, System.IO.TextWriter) at Seq.Server.Program.Main(System.String[]) This leads me to believe there's an invalid path somewhere, but I can't figure out where. When viewing the properties of the service, it has this as the path to executable: "C:\Program Files\Seq\Seq.exe" run --storage="F:\SeqData\" The seq.json file found in F:\SeqData has the following content: { "cache": { "systemRamTarget": 0.9 }, "diagnostics": { "internalLogPath": "C:\\ProgramData\\Seq\\Logs\\", "internalLoggingLevel": "Information" }, "api": { "listenUris": [ "http://localhost:80/" ], "ingestionPort": null, "corsAllowedOrigins": [] }, "storage": { "masterKey": "[removed for this question]" } } Any help would be greatly appreciated :) Cheers, Ben.
Posted by Ben Cull 3 years ago
I have Seq installed on our AppServer. I need to access the Seq UI over a public domain and am trying to use IISv8.5 to set up a reverse proxy to expose the UI. I currently have a domain already which points to the IP of the app server. I have a wild card cert for *.mysite.com and have added SSL bindings to the seq.mysite.com domain. I have also installed ARR3.0 and setup the reverse proxy rules: <?xml version="1.0" encoding="UTF-8"?> <configuration> <system.webServer> <rewrite> <rules> <rule name="ReverseProxyInboundRule1" stopProcessing="true"> <match url="(.*)" /> <action type="Rewrite" url="http://0.0.0.0:5342/{R:1}" /> </rule> </rules> <outboundRules> <rule name="ReverseProxyOutboundRule1" preCondition="ResponseIsHtml1"> <match filterByTags="A, Form, Img" pattern="^http(s)?://0.0.0.0:5342/(.*)" /> <action type="Rewrite" value="http{R:1}://seq.mysite.com/{R:2}" /> </rule> <preConditions> <preCondition name="ResponseIsHtml1"> <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" /> </preCondition> </preConditions> </outboundRules> </rewrite> </system.webServer> </configuration> However, I get a 502 error: 502 - Web server received an invalid response while acting as a gateway or proxy server. There is a problem with the page you are looking for, and it cannot be displayed. When the Web server (while acting as a gateway or proxy) contacted the upstream content server, it received an invalid response from the content server. Any ideas?
Posted by Wil 3 years ago
Hello, Followed the example code to the t for posting json with a c# poco to Seq, unfortunately I keep getting "BadRequest". Here's the invalid json. [{"Timestamp":"2017-02-19T18:53:39.0728523-08:00","Level":"Verbose","MessageTemplate":"Testing Windows Console","Properties":{"MachineName":"A6230072MT3P","Application":"PLEnterprise.Console.exe","Category":"cSystem","Session":"8faf69b9-3ad5-4a05-b6a1-202771fc3e93","Executable":"PLEnterprise.Console.exe","ErrorNumber":9999,"Id":"3053d744-1d86-47e6-8e7f-2e5801947ba2","key":"Value"},"Exception":null}] Nothing stands out as being wrong, so another set of eyes would help. Thank you, Stephen
Posted by Stephen Patten 3 years ago
Hi, A some time ago I've set up the Retention Policy: After: 30 days Delete: All Events When I view Diagnostics > Storage shows: Out of 50.5 recorded days, 50.5 days totalling 12934410 events are cached in RAM. When checking files under: SEQ\Extents\ there still exist the folder with content e.g.: 2017-01-04_2017-01-11 When checking some events older that 30 days and < 50 days there is: No Events... Does a purge mechanism of SEQ working properly? Thanks in advance, Igor
Posted by Igor 3 years ago
We're using seq to log sql commands from our application. Some of them are quite big - about 3k inserts. The issue we have is that those bigger log entries are not stored in seq. Instead we see internal diagnostics log saying: "Rejecting payload from "::1" due to invalid JSON structure". Payload limits are set to ~10MB. Do you have any clue why big log entries aren't saved correctly to seq? (Log sent to seq is valid JSON structure)
Posted by Tomasz Raciborski 3 years ago
Hi, I'am trying to understand Seq API, through which we can filter out the specific events logged. Do we have any API which will return me all the events logged respective to a given search. Thanks. Regards, Varsha
Posted by Varsha 3 years ago