Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
Hello, I'm new to Seq so just getting setup and couldn't find the answer through google search. My previous solution for logging was using .NET Core Serilog Sinks to an SQL Db where I had configured a table for storing the logs, along with additional columns that stored the enriched parameters from the logs obtained. These additional columns would store additional attributes which means the user could then review the logs in my App and quickly identify/review the other attributes. The default layout of Seq doesn't currently work for me because i can only see the timestamp to the far LHS and then the message. I'd like to be able to show some additional columns in Serilog UI that present some of the other attributes that were created through the enriched logging process. Is there a configuration I should review to set this up? thanks
Posted by Oliver Bentley 7 months ago
The Email+ app keeps crashing with the error bellow. After restarting Seq the problem goes away, but after a while it crashes again. System.IO.FileNotFoundException: Could not load file or assembly 'Serilog.Formatting.Compact.Reader, Version=1.0.3.0, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' or one of its dependencies. The system cannot find the file specified. File name: 'Serilog.Formatting.Compact.Reader, Version=1.0.3.0, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' at Seq.Apps.GenericHost.AppHost.ReadSerilogEvent(String clef, String& eventId, UInt32& eventType) at Seq.Apps.GenericHost.AppHost.<SendTypedEventAsync>d__17.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Seq.Apps.GenericHost.AppHost.<SendAsync>d__16.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Seq.Apps.GenericHost.Program.<Main>d__0.MoveNext() WRN: Assembly binding logging is turned OFF. To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1. Note: There is some performance penalty associated with assembly bind failure logging. To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].
Posted by Shrage Smilowitz 7 months ago
I've setup a seq server with multiple listening endpoints on Port 80 and 443. seq config -n production -k api.listenUris -v "https://seq.<mydomain>.com,http://seq.<mydomain>.com" seq config -n test -k api.listenUris -v "https://seq-test.<mydomain>.com,http://seq-test.<mydomain>.com" seq config -n development -k api.listenUris -v "https://seq-development.<mydomain>.com,http://seq-development.<mydomain>.com" I have then also setup to use AzureAd Authentication and filled out all the information successfully. I've have worked out the correct redirecturi in my App Registration (https://<server>/aad). When I attempt to perform my AzureAd authentication I get an azureAd login failure because Seq is putting the http://seq-development.<mydomain>.com/aad address on the end of the request instead of the https one. If I change the redirecturi to https whilst on the azureAd login site I login and redirect successfully Is there something that I have misconfigured?
Posted by Paul Farry 7 months ago
Hello, We want to purchase your Enterprise partner license. However our process dictates we add you as a preferred vendor in our procurement system. Can you please send me an email address that our procurement department and I can use to communicate with you regarding payment, etc.? Regards, Surajit Chatterjee
Posted by Surajit Chatterjee 7 months ago
Hello team, our payment was not accepted at first, we processed it second time with same outcome. the reality shows differently, since we have the amount blocked twice in the bank. please refund/unblock one of the payments and send us the invoice https://prnt.sc/t1ffi8 https://prnt.sc/t1fe06 in the meantime, as a payment technology we can provide you a seamless payment solution, that overcome such cases, while increasing your approval ration. Contact us: www.bridgerpay.com
Posted by Tatiana Indge 7 months ago
I have recently added file archive app to seq. I was expecting to log everything in current event. but unfortunately it only log event information like date, level and Message. I have defined some variable like Request Data, Correlation id, Response status and much more. I want to log all these mandatory information too. I didn't see any option in File Archive app to specify the specific attributes to be logged.
Posted by Kamran Asim 7 months ago
Trying to restore from windows to Linux from backup. Upgraded windows seq server to 5.1.3200. Trying to transfer a seq instance. {"@t":"2020-06-17T03:23:34.3218977Z","@mt":"Seq {SeqVersion} running on OS {OSCaption}","SeqVersion":"5.1.3200","OSCaption":"Linux 5.3.0-1017-aws #18~18.04.1-Ubuntu SMP Wed Apr 8 15:12:16 UTC 2020","SourceContext":"Seq.Server.Features.Diagnostics.EnvironmentInformationWriter"} {"@t":"2020-06-17T03:23:35.1206660Z","@mt":"Seq listening on {ListenUris}","ListenUris":["http://localhost/","http://localhost:5341/"]} {"@t":"2020-06-17T03:23:35.1442248Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.1705667Z","@mt":"Opening event store at {ExtentsPath}","ExtentsPath":"/data/Extents","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:23:35.1709631Z","@mt":"Available storage engines in order of preference are {Engines}","Engines":["FLARE"],"SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:23:35.2253562Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2645755Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the server license","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2678224Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the Administrator account","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2755110Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure the public NuGet feed","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2896044Z","@mt":"Applying migration {MigrationName}","MigrationName":"Store the default system configuration","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2950987Z","@mt":"Applying migration {MigrationName}","MigrationName":"Ensure the license supports this version","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2979978Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default SQL queries","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3021249Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default queries visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3206839Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3242637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default signals visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3349822Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the shared overview dashboard","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3559019Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the default API key","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3618625Z","@mt":"Applying migration {MigrationName}","MigrationName":"Apply groupings to initial signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3666483Z","@mt":"Applying migration {MigrationName}","MigrationName":"Show built-in signals to new users upon creation","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3741133Z","@mt":"Applying migration {MigrationName}","MigrationName":"Assign index ids to signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3760385Z","@mt":"Applying migration {MigrationName}","MigrationName":"Pre-existing dashboards are protected by default","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3843175Z","@mt":"Setting protected flag on {DashboardId}","DashboardId":"dashboard-14"} {"@t":"2020-06-17T03:23:35.3867777Z","@mt":"Applying migration {MigrationName}","MigrationName":"User default workspace reflects earlier view","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3905532Z","@mt":"Creating default workspace for {UserId}","UserId":"user-admin"} {"@t":"2020-06-17T03:23:35.3951349Z","@mt":"Applying migration {MigrationName}","MigrationName":"New user defaults include shared dashboards","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3980599Z","@mt":"Applying migration {MigrationName}","MigrationName":"Update app invocation control properties","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4034637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Extend the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4073565Z","@mt":"Applying migration {MigrationName}","MigrationName":"Set the default roles for new users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4089116Z","@mt":"Applying migration {MigrationName}","MigrationName":"Personal dashboards are never protected","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4110242Z","@mt":"Storage subsystem available"} {"@t":"2020-06-17T03:24:35.4665376Z","@mt":"{CollectionCount} more generation 2 garbage collection(s) occurred","CollectionCount":1,"SourceContext":"Seq.Server.Features.Diagnostics.GCLogger"} {"@t":"2020-06-17T03:24:56.3717931Z","@mt":"Termination signal received"} {"@t":"2020-06-17T03:24:56.4060871Z","@mt":"Signalling for {Workers} worker task(s) to complete","Workers":3,"SourceContext":"Flare.Workers.WorkerPool"} {"@t":"2020-06-17T03:25:00.3093741Z","@mt":"Stopping {Tasks} scheduled tasks","Tasks":13,"SourceContext":"Seq.Server.Tasks.TaskRunner"} {"@t":"2020-06-17T03:25:00.3104770Z","@mt":"Stopping broadcast channel","SourceContext":"Flare.Events.Broadcast.BroadcastChannel"} {"@t":"2020-06-17T03:25:01.1437381Z","@mt":"Stopping input channel","SourceContext":"Seq.Server.Features.Apps.Inputs.InputChannel"} {"@t":"2020-06-17T03:25:01.4430472Z","@mt":"Closing event store","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:25:01.4452658Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:25:01.4480119Z","@mt":"Server stopped cleanly"} {"@t":"2020-06-17T03:27:25.7942923Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:27:25.8745025Z","@mt":"Restoring from {BackupFile}","BackupFile":"/data/seq-Hangfire_20200616.seqbac"} {"@t":"2020-06-17T03:27:25.8755980Z","@mt":"Decrypting content"} {"@t":"2020-06-17T03:27:25.8839655Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} [email protected]:/data/hangfire/Logs# sudo vi seq-20200617.log {"@t":"2020-06-17T03:23:35.2950987Z","@mt":"Applying migration {MigrationName}","MigrationName":"Ensure the license supports this version","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2979978Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default SQL queries","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3021249Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default queries visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3206839Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3242637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default signals visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3349822Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the shared overview dashboard","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3559019Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the default API key","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3618625Z","@mt":"Applying migration {MigrationName}","MigrationName":"Apply groupings to initial signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3666483Z","@mt":"Applying migration {MigrationName}","MigrationName":"Show built-in signals to new users upon creation","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3741133Z","@mt":"Applying migration {MigrationName}","MigrationName":"Assign index ids to signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3760385Z","@mt":"Applying migration {MigrationName}","MigrationName":"Pre-existing dashboards are protected by default","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3843175Z","@mt":"Setting protected flag on {DashboardId}","DashboardId":"dashboard-14"} {"@t":"2020-06-17T03:23:35.3867777Z","@mt":"Applying migration {MigrationName}","MigrationName":"User default workspace reflects earlier view","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3905532Z","@mt":"Creating default workspace for {UserId}","UserId":"user-admin"} {"@t":"2020-06-17T03:23:35.3951349Z","@mt":"Applying migration {MigrationName}","MigrationName":"New user defaults include shared dashboards","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3980599Z","@mt":"Applying migration {MigrationName}","MigrationName":"Update app invocation control properties","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4034637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Extend the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4073565Z","@mt":"Applying migration {MigrationName}","MigrationName":"Set the default roles for new users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4089116Z","@mt":"Applying migration {MigrationName}","MigrationName":"Personal dashboards are never protected","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4110242Z","@mt":"Storage subsystem available"} {"@t":"2020-06-17T03:24:35.4665376Z","@mt":"{CollectionCount} more generation 2 garbage collection(s) occurred","CollectionCount":1,"SourceContext":"Seq.Server.Features.Diagnostics.GCLogger"} {"@t":"2020-06-17T03:24:56.3717931Z","@mt":"Termination signal received"} {"@t":"2020-06-17T03:24:56.4060871Z","@mt":"Signalling for {Workers} worker task(s) to complete","Workers":3,"SourceContext":"Flare.Workers.WorkerPool"} {"@t":"2020-06-17T03:25:00.3093741Z","@mt":"Stopping {Tasks} scheduled tasks","Tasks":13,"SourceContext":"Seq.Server.Tasks.TaskRunner"} {"@t":"2020-06-17T03:25:00.3104770Z","@mt":"Stopping broadcast channel","SourceContext":"Flare.Events.Broadcast.BroadcastChannel"} {"@t":"2020-06-17T03:25:01.1437381Z","@mt":"Stopping input channel","SourceContext":"Seq.Server.Features.Apps.Inputs.InputChannel"} {"@t":"2020-06-17T03:25:01.4430472Z","@mt":"Closing event store","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:25:01.4452658Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:25:01.4480119Z","@mt":"Server stopped cleanly"} {"@t":"2020-06-17T03:27:25.7942923Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:27:25.8745025Z","@mt":"Restoring from {BackupFile}","BackupFile":"/data/seq-Hangfire_20200616.seqbac"} {"@t":"2020-06-17T03:27:25.8755980Z","@mt":"Decrypting content"} {"@t":"2020-06-17T03:27:25.8839655Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"}
Posted by Sarthak Jain 7 months ago
Hi everyone, I have trouble doing the following thing. For each info I log, I have my own parameter(not the log time) called time using DateTime variable in C#. Each of my info has its own time and a message. Then what I tried to do only showing the earliest dateTime for each message. For example, if I have two info with the same message "Warning: XXX missing" both on 2020-04-16T20:10:35.4630000 and 2020-04-12T20:10:35.4630000. Then on the dashboard for this message I want to have the date 2020-04-12T20:10:35.4630000 which is the earlier one. Does anyone try to do the same thing? Thanks
Posted by Ariel Tan 7 months ago
I'm trying to use a docker-compose.yml file to manage standing-up my Seq instance. We are running into the problem where the diagnostics functionality fails when it reports that it is out of memory. `--memory=16g --memory-swap=16g` is supposed to resolve the issue but we don't use `docker run`, I'm using `docker-compose up -d` but I can't get a docker-compose.yml that will stand this up. Here is the most recent docker-compose file that I thought should work but doesn't. If I remove the `entrypoint:` and the `command:` lines from the YAML file, sea runs, but eventually the diagnostics crash. ``` version: "2.0" networks: web: external: true services: sea: entrypoint: /run.sh command: --memory=16g --memory-swap=16g image: datalust/seq:latest volumes: - /datadrive:/data environment: - ACCEPT_EULA=Y - BASE_URI=https://seq.dptsprotrans.com networks: - web labels: - traefik.backend=seq - traefik.frontend.rule=Host:seq.dptsprotrans.com - traefik.docker.network=web - traefik.port=80 ``` I've found this GitHub issue but there isn't sufficient info on that to help me around this problem. Various other Google searches also point to this, but none have helped. https://github.com/datalust/seq-tickets/issues/835 Thanks in advance.
Posted by Dave White 7 months ago
I have a large amount of events I would like to export. The problem is, I created a query and a time upper bound and lower bound, but the query returns more than the 1024 limit. I have a LOT of events I want to export. Is there a quicker way to do this than to break it down into smaller time intervals and run the query over and over?
Posted by Jonathan Hop 7 months ago
Hi, I have an SEQ instance that has been up for over 200 days and we are now getting connection timeouts. It's running in Kubernetes in a pod. I have tried proxying directly to the container and even running curl while execed into the container, however the result is the same, a timeout after a while. This is not reflected in the logs: ──────────────────────────────────────── Seq ♦ Machine data, for humans. ─────────── © 2019 Datalust Pty Ltd ──── Running as server; press Ctrl+C to exit. [03:57:28 INF] Seq "5.1.3200" running on OS "Linux 4.15.0-1052-azure #57-Ubuntu SMP Tue Jul 23 19:07:16 UTC 2019" [03:57:31 INF] Seq listening on ["http://localhost/", "http://localhost:5341/"] [03:57:31 INF] Seq using canonical URI "http://seq.tmacomms.com/" [03:57:31 INF] Opening document store "/data/Documents/documents.lmdb" [03:57:31 INF] Opening event store at "/data/Extents" [03:57:31 INF] Available storage engines in order of preference are ["FLARE"] [03:57:31 INF] Cache warm-up is required [03:57:31 INF] Storage subsystem available [03:57:31 INF] Started "sqelf" process 84 for "appinstance-28" [03:57:31 INF] Started "Seq.Apps.GenericHost" process 83 for "appinstance-18" [03:58:08 INF] Deduplication buffer renewed on reaching {"Schemata": 467, "Strings": 116819} [03:58:54 INF] Deduplication buffer renewed on reaching {"Schemata": 397, "Strings": 135727} [03:59:56 INF] Deduplication buffer renewed on reaching {"Schemata": 332, "Strings": 163272} [03:59:56 INF] Cancelling segment warm-up to avoid swapping [03:59:57 INF] Initial memory cache warm-up "completed" in 146023.9995 ms [03:59:57 INF] 125 segments warmed up ({"Schemata": 176, "Strings": 1891}) [04:06:13 INF] Memory is overutilized, so cooling down segment "2020-06-04T19:00:00.0000000Z" (469847 events) Does anyone know what's going on or how I could better troubleshoot this? SEQ is giving me no information
Posted by Anthony Murphy 7 months ago
Does Seq Apps support netstandard 2.0 class library? My class library project target netstandard 2.0 and has reference to System.Data.SqlClient.dll 4.8.1. I receive this error when from Seq when loading the using the app System.PlatformNotSupportedException: System.Data.SqlClient is not supported on this platform.
Posted by Chan Vu 7 months ago
I have a property named Order on a log. The Order contains several values. I want to group by one of them For example: select count(*) as count from stream where @Properties.Order is not null group by @Properties.Order.Service, time(5m) limit 10000 The query could not be executed. Syntax error (line 5, column 20): unexpected keyword `Order`, expected identifier. I can understand if the query becomes unparsable because of the 'Order' part but how do I escape it? For example: select count(*) as count from stream where @Properties.[Order] is not null group by @Properties.[Order].Service, time(5m) limit 10000 /Peter
Posted by Peter Wikström 7 months ago