Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
Hi I am getting following error in logs. "Failed to apply retention policy {RetentionPolicyId}","@l":"Error","@x":"Microsoft.Isam.Esent.Interop.EsentDatabaseDirtyShutdownException: Database was not shutdown cleanly. Recovery must first be run to properly complete database operations for the previous shutdown.\r\n at Flare.Storage.Esent.Data.EsentDBSession..ctor(Instance instance, String path, Action notifyDisposed)\r\n at Flare.Storage.Esent.Data.EsentDB.BeginSession(Action notifyDisposed, String tag)\r\n at Flare.Storage.Esent.EsentStorageExtent.BeginSession(String tag)\r\n at Flare.Storage.Esent.EsentStorageExtent.<LazyDelete>d__18.MoveNext()\r\n at Flare.Events.EventStore.Delete(EventStoreRange range, CancellationToken cancel)\r\n at Flare.Queries.DataStore.Delete(EventStoreRange range, CancellationToken cancel)\r\n at Seq.Server.Features.Retention.RetentionPolicyApplier.ApplyPolicy(RetentionPolicyState retentionPolicy, Dictionary`2 associatedSignals, HashSet`1 retained, CancellationToken cancel)\r\n at Seq.Server.Features.Retention.RetentionPolicyApplier.Apply(CancellationToken cancel)","RetentionPolicyId":"retentionpolicy-15","SourceContext":"Seq.Server.Features.Retention.RetentionPolicyApplier"} I'm not able to delete events manually also.
Posted by Binil Prasad 5 months ago
We are using Seq 5.1.3200. Our Seq server is mostly working, but a couple things seem wrong. The first thing I noticed is an exclamation mark in a red circle in the header next to "events". If I click on it, a popup appears with the text Server Status The server is unavailable Trying to investigate this problem myself, I attempted to load the diagnostics page in settings, but that page failed to load saying Could not load diagnostics An unhandled error occurred while serving the request (token: {some GUID that is different every time}). How can I fix these problems?
Posted by Tyson Williams 6 months ago
I have been attempting to run the official docker container for Seq with a different user, but it appears that the `Seq` executable has permissions that require root to run it. It would be good if the container could be run as an alternate user.
Posted by Jason Heard 6 months ago
I'm trying to copy the extents and signals from one machine to another for archival queries. I've gone through the backup and restore steps using the original master key from the original machine, and all my custom signals and filters are showing up in the browser. Next, i copied the extents folder into the c:\ProgramData\seq folder, stopped and restarted seq. When i browse seq, no events are displayed. Is there an additional step I need to perform?
Posted by Aaron Schnarr 6 months ago
I deployed the Seq docker image version 5.1.3200 to a host with 16GB of RAM. Seq is the only application running on the host. After a few days of operation, the Seq web UI shows a red exclamation point ("the server is unavailable"), and the diagnostics page says "could not load diagnostics." Seq's error log in the data directory is full of stack traces similar to this one: ``` [2019-12-23T00:00:12.2517401+00:00 ERR] HTTP GET /api/diagnostics/status?initial=false responded 500 in 10.5039 ms System.ComponentModel.Win32Exception (12): Cannot allocate memory at Interop.Sys.ForkAndExecProcess(String filename, String[] argv, String[] envp, String cwd, Boolean redirectStdin, Boolean redirectStdout, Boolean redirectStderr, Boolean setUser, UInt32 userId, UInt32 groupId, Int32& lpChildPid, Int32& stdinFd, Int32& stdoutFd, Int32& stderrFd, Boolean shouldThrow) at System.Diagnostics.Process.StartCore(ProcessStartInfo startInfo) at System.Diagnostics.Process.Start() at System.Diagnostics.Process.Start(ProcessStartInfo startInfo) at Flare.Internal.OS.CaptiveProcess.Run(String fullExePath, String args, Action`1 writeStdout, Action`1 writeStderr, String workingDirectory, Boolean elevated) at Flare.Util.IO.DiskUtil.GetFreeSpaceBytes(String path) at Flare.Events.EventStore.GetMetrics() at Seq.Server.Web.Api.DiagnosticsController.GetServerStatus() at lambda_method(Closure , Object , Object[] ) at Microsoft.AspNetCore.Mvc.Internal.ActionMethodExecutor.SyncActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeActionMethodAsync() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeNextActionFilterAsync() at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Rethrow(ActionExecutedContext context) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeInnerFilterAsync() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeNextResourceFilter() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Rethrow(ResourceExecutedContext context) at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted) at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeFilterPipelineAsync() at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeAsync() at Microsoft.AspNetCore.Builder.RouterMiddleware.Invoke(HttpContext httpContext) at Seq.Server.Web.Middleware.WebSocketAcceptMiddleware.Invoke(HttpContext context) at Seq.Server.Web.Middleware.RequestAuthenticationMiddleware.Invoke(HttpContext httpContext) at Seq.Server.Web.Middleware.BrowserSecurityOptionsMiddleware.Invoke(HttpContext context) at Seq.Server.Web.Middleware.RequestCompletionMiddleware.Invoke(HttpContext httpContext) ``` The system has about 600 MB of memory free. How can I fix this? Should I try setting `SEQ_CACHE_SYSTEMRAMTARGET` to something lower than the default 0.9?
Posted by Will Rogers 6 months ago
Hello, We are looking at a two node installation with events replicated from a master node to another passive DR. Both of these are will be running as docker containers on separate physical hosts (and sites for that matter). I like and understand the replication application. However, this app only replicates ingest data. If we wish to 'fail-over to the DR' node, there is a complicated sequence of commands that we would need to execute in order to restore the backup from the live server. So a couple of suggestions/questions. 1. How complicated would it be to allow one apply the backup file from within the Seq UI ? Providing we supply the secret key and the backup file, this should not be too complicated ? 2. Is it possible to simply replicate signals/users etc like the replication app already does for ingest data ? If this were possible then in a DR situation, the number of steps required would be significantly less. 3. Ideally, what we actually want is a kind of multi-master topology (with two nodes), but I appreciate that this is also quite hard..
Posted by A 6 months ago
I ran the docker using a second mounted logic hard disk drive, located in /mnt/data. However, after I set the retention policy to keep logs for 2 days, I can still see old events in Extents folder.
Posted by Nico 6 months ago
Steps to reproduce: 1. Open Seq in a browser tab 2. Set the TO timestamp box to "NOW". Let t_TO be this timestamp. 3. Wait for an event to be displayed. Let t_FROM be its timestamp. 4. Click the event 5. Click "Event" in the event 6. Click "Search FROM timestamp" Expected behavior: The FROM box contains t_FROM and the TO box contains t_TO. Actual behavior: The FROM box contains t_FROM and the TO box is empty. Workaround: Before step 6, copy the contents of the TO box to the clipboard. Perform step 6. Then paste the contents of the clipboard into the TO box. Discussion: When I investigate an issue, I find the first and last relevant events at sequenal log levels (first Information, then Debug, then Verbose) and limit my search by the timestamps of these events. By clearing one of the timestamp boxes when setting the other, I have to employ the above workaround. If I wanted the TO box cleared, then I would click the "x" on the right of the filled box. Of course there is nothing special about the relative roles of "TO" and "FROM" in this "question" (really a bug report).
Posted by Tyson Williams 6 months ago
I'm attempting to deploy Seq in a Kubernetes cluster with the /data path mapped to a persistent volume, however every time I try to spin up the container with that directory mapped (and empty), I get this error when I try to load the webpage: Seq is unavailable. Failed to initialize storage: A document with id `license-server` was not found. I'm using the datalust/seq:latest image, that is currently 5.1.3200. Any ideas on how to get it working while ensuring that the data is persisted?
Posted by Michael 6 months ago
In Seq dashboard, is there any way to filter logs by log level numbers? For example, assuming log levels are like below: ``` enum LogEventLevels { Fatal = 60, Error = 50, Warn = 40, Information = 30, Debug = 20, Trace = 10, } ``` Filter as: ``` LogLevel >= LogEventLevels.Information ``` to log information and above? I would be surprised if this is not supported because this is a very basic thing in any logging library. Thanks!
Posted by orad 7 months ago
Hey! Say I have a log event like this: Log.Information("Food was ordered: {Food}", new[] { "pizza", "sandwich", "hamburger" }); Is there a way I can count and group by the values in the Food collection? Ideally I'd like to have a pie chart that counts all the foods that were ordered. If I simply do something like this: Select count(*) from stream where @EventType = 0xE918C3C9 group by Food then obviously that won't work since it just shows counts all the different combination of foods :) Thanks!
Posted by Chris 7 months ago
Hi, I'm trying to display a table of the time since last event grouped by various parameters select Round(TotalMilliSeconds(Now() - max(@Timestamp)) / (1000 * 3600), 0) as HoursSinceLastEvent from stream group by Tenant, Application, StockImportName, StockExportName order by HoursSinceLastEvent And while this works great in the query editor, it doesn't work as a table dashboard widget, with the error message "The `for window()` directive cannot be applied to this query because of embedded temporal clauses." Somehow weirdly, it works as a line/bar/point graph, but not as a table. If I display @Timestamp instead of calculating the time since timestamp it works as a table
Posted by Tore Birkeland 7 months ago