Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
I have a server for Seq that had a certificate expire causing the inbound events to fail. On the web server where the events are generated I have Seq installed locally and the missing events are there. I need to find the best way to replicate the missing events from the web server to the seq server without duplicating events if possible. Also what is the recommendation for how to handle when something happens to the Seq server and has stopped allowing connection from the web server sending events. I assume the back and restore might be the best option but I want to avoid duplicate records if possible
Posted by Brian Moore 10 months ago
I am trying to create a new dashboard with a query, but no matter what I put in for my group by time slice (time(6h) in this case) Seq always removes it and defaults to a time(5s) slice. Is this a bug or is this the expected functionality? Am I missing some configuration setting?
Posted by Nick Lillie 10 months ago
Hello Support, During the last week I've been doing some testing with the API. I started off with using the NuGet package and had some challenges but In the end I had better success just writing my own HTTP Client in .NET Core 3.1 and have been sending my own GET requests directly to the Seq Api. I'm using Postman and my own Swagger UI for testing. I'm just a little stuck however while testing a query through the Api using a date&time based search. In the Seq UI via the browser, I used the 'datetime picker' and ran a simple search for events received just from the beginning of today (the results produced just one row/event which is correct as I'd only sent one log event to the Seq server today) http://localhost:5341/#/events?from=2020-06-28T00:00:00.000Z (URL Query string from the Seq Browser UI) However when I run a similar a query through Postman to the Api, I get a lot more events coming back as far as yesterday. Not sure why this is happening? http://localhost:5341/api/events?from=2020-06-28T00:00:00.000Z (GET request used in Postman) I have reviewed the documentation but I couldn't find any examples that covered queries directly to the API. I'd be grateful if you could provide a couple of URI examples. The most common types of search criteria I'm wanting to figure is as follows: > GET events within last hour or day or X hours or X days. > GET events between a start and end period using DateTime filters. > Use paging via the Api to prevent server melt down when there are lots of rows to retrieve from a large query i.e. being able to page through the results bit by bit. Once I understand how to query using time/date through the Rest Api then I should hopefully be able to move forward. I'm already using the SQL Queries via the API (I had to derive my own logic to build up the URI string correctly but this part is working OK) Thanks in advance.
Posted by OLIVER BENTLEY 10 months ago
Dear Support, I created a console using .NET Core 3.1 using your code snippet from https://github.com/datalust/seq-api/blob/dev/example/SeqQuery/Program.cs I'm really struggling here in not understanding how this should work, the console starts then stops straight away with an exception code 1 error. The code examples dont appear to provide any detailed guides in how to use them. Example is the "using DocoptNet;" library as seen in the example code; I had to search for this nuget package not knowing what it does having never used it before, are we supposed to use the console to enter the connection details or should this be hard coded in the example? Do you have a proper sample project to download? i feel i'm not going to get anywhere without a bit more understanding in the example apps and how to even connect successfully to Seq, thanks
Posted by OLIVER BENTLEY 10 months ago
Hello, my question is not directly related to Seq. But maybe you have some insights if this might work or not. I want to ingest Docker logs from my local Docker instance into Seq. The Seq and Sqelf instances are running inside Docker. I added the settings to Docker, but i don't see any Docker related logs in Seq. Sqelf is listening on udp:12201 { "log-driver": "gelf", "log-opts": { "gelf-address": "udp://0.0.0.0:12201" } } I have other processes logging through Sqelf without problems. So the general setup works. Maybe this is caused by "inception" as I'm trying to log from the Docker host to a container that is probably not running (early enough). Any idea?
Posted by Josh D. 10 months ago
Hi there, I have a Kubernetes Cluster, where Seq is running in a pod. I can add a retention and it is working fine, but if the Seq pod was deleted and restarted by the rules of kubernetes, the retention will be deleted also. Is there a way to automatically add a retention on start, or to preconfigure it. Regards Ben
Posted by Ben 10 months ago
Hello, I'm new to Seq so just getting setup and couldn't find the answer through google search. My previous solution for logging was using .NET Core Serilog Sinks to an SQL Db where I had configured a table for storing the logs, along with additional columns that stored the enriched parameters from the logs obtained. These additional columns would store additional attributes which means the user could then review the logs in my App and quickly identify/review the other attributes. The default layout of Seq doesn't currently work for me because i can only see the timestamp to the far LHS and then the message. I'd like to be able to show some additional columns in Serilog UI that present some of the other attributes that were created through the enriched logging process. Is there a configuration I should review to set this up? thanks
Posted by Oliver Bentley 10 months ago
The Email+ app keeps crashing with the error bellow. After restarting Seq the problem goes away, but after a while it crashes again. System.IO.FileNotFoundException: Could not load file or assembly 'Serilog.Formatting.Compact.Reader, Version=1.0.3.0, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' or one of its dependencies. The system cannot find the file specified. File name: 'Serilog.Formatting.Compact.Reader, Version=1.0.3.0, Culture=neutral, PublicKeyToken=24c2f752a8e58a10' at Seq.Apps.GenericHost.AppHost.ReadSerilogEvent(String clef, String& eventId, UInt32& eventType) at Seq.Apps.GenericHost.AppHost.<SendTypedEventAsync>d__17.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Seq.Apps.GenericHost.AppHost.<SendAsync>d__16.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Seq.Apps.GenericHost.Program.<Main>d__0.MoveNext() WRN: Assembly binding logging is turned OFF. To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1. Note: There is some performance penalty associated with assembly bind failure logging. To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].
Posted by Shrage Smilowitz 10 months ago
I've setup a seq server with multiple listening endpoints on Port 80 and 443. seq config -n production -k api.listenUris -v "https://seq.<mydomain>.com,http://seq.<mydomain>.com" seq config -n test -k api.listenUris -v "https://seq-test.<mydomain>.com,http://seq-test.<mydomain>.com" seq config -n development -k api.listenUris -v "https://seq-development.<mydomain>.com,http://seq-development.<mydomain>.com" I have then also setup to use AzureAd Authentication and filled out all the information successfully. I've have worked out the correct redirecturi in my App Registration (https://<server>/aad). When I attempt to perform my AzureAd authentication I get an azureAd login failure because Seq is putting the http://seq-development.<mydomain>.com/aad address on the end of the request instead of the https one. If I change the redirecturi to https whilst on the azureAd login site I login and redirect successfully Is there something that I have misconfigured?
Posted by Paul Farry 11 months ago
Hello, We want to purchase your Enterprise partner license. However our process dictates we add you as a preferred vendor in our procurement system. Can you please send me an email address that our procurement department and I can use to communicate with you regarding payment, etc.? Regards, Surajit Chatterjee
Posted by Surajit Chatterjee 11 months ago
Hello team, our payment was not accepted at first, we processed it second time with same outcome. the reality shows differently, since we have the amount blocked twice in the bank. please refund/unblock one of the payments and send us the invoice https://prnt.sc/t1ffi8 https://prnt.sc/t1fe06 in the meantime, as a payment technology we can provide you a seamless payment solution, that overcome such cases, while increasing your approval ration. Contact us: www.bridgerpay.com
Posted by Tatiana Indge 11 months ago
I have recently added file archive app to seq. I was expecting to log everything in current event. but unfortunately it only log event information like date, level and Message. I have defined some variable like Request Data, Correlation id, Response status and much more. I want to log all these mandatory information too. I didn't see any option in File Archive app to specify the specific attributes to be logged.
Posted by Kamran Asim 11 months ago
Trying to restore from windows to Linux from backup. Upgraded windows seq server to 5.1.3200. Trying to transfer a seq instance. {"@t":"2020-06-17T03:23:34.3218977Z","@mt":"Seq {SeqVersion} running on OS {OSCaption}","SeqVersion":"5.1.3200","OSCaption":"Linux 5.3.0-1017-aws #18~18.04.1-Ubuntu SMP Wed Apr 8 15:12:16 UTC 2020","SourceContext":"Seq.Server.Features.Diagnostics.EnvironmentInformationWriter"} {"@t":"2020-06-17T03:23:35.1206660Z","@mt":"Seq listening on {ListenUris}","ListenUris":["http://localhost/","http://localhost:5341/"]} {"@t":"2020-06-17T03:23:35.1442248Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.1705667Z","@mt":"Opening event store at {ExtentsPath}","ExtentsPath":"/data/Extents","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:23:35.1709631Z","@mt":"Available storage engines in order of preference are {Engines}","Engines":["FLARE"],"SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:23:35.2253562Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2645755Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the server license","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2678224Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the Administrator account","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2755110Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure the public NuGet feed","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2896044Z","@mt":"Applying migration {MigrationName}","MigrationName":"Store the default system configuration","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2950987Z","@mt":"Applying migration {MigrationName}","MigrationName":"Ensure the license supports this version","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2979978Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default SQL queries","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3021249Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default queries visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3206839Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3242637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default signals visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3349822Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the shared overview dashboard","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3559019Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the default API key","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3618625Z","@mt":"Applying migration {MigrationName}","MigrationName":"Apply groupings to initial signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3666483Z","@mt":"Applying migration {MigrationName}","MigrationName":"Show built-in signals to new users upon creation","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3741133Z","@mt":"Applying migration {MigrationName}","MigrationName":"Assign index ids to signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3760385Z","@mt":"Applying migration {MigrationName}","MigrationName":"Pre-existing dashboards are protected by default","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3843175Z","@mt":"Setting protected flag on {DashboardId}","DashboardId":"dashboard-14"} {"@t":"2020-06-17T03:23:35.3867777Z","@mt":"Applying migration {MigrationName}","MigrationName":"User default workspace reflects earlier view","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3905532Z","@mt":"Creating default workspace for {UserId}","UserId":"user-admin"} {"@t":"2020-06-17T03:23:35.3951349Z","@mt":"Applying migration {MigrationName}","MigrationName":"New user defaults include shared dashboards","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3980599Z","@mt":"Applying migration {MigrationName}","MigrationName":"Update app invocation control properties","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4034637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Extend the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4073565Z","@mt":"Applying migration {MigrationName}","MigrationName":"Set the default roles for new users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4089116Z","@mt":"Applying migration {MigrationName}","MigrationName":"Personal dashboards are never protected","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4110242Z","@mt":"Storage subsystem available"} {"@t":"2020-06-17T03:24:35.4665376Z","@mt":"{CollectionCount} more generation 2 garbage collection(s) occurred","CollectionCount":1,"SourceContext":"Seq.Server.Features.Diagnostics.GCLogger"} {"@t":"2020-06-17T03:24:56.3717931Z","@mt":"Termination signal received"} {"@t":"2020-06-17T03:24:56.4060871Z","@mt":"Signalling for {Workers} worker task(s) to complete","Workers":3,"SourceContext":"Flare.Workers.WorkerPool"} {"@t":"2020-06-17T03:25:00.3093741Z","@mt":"Stopping {Tasks} scheduled tasks","Tasks":13,"SourceContext":"Seq.Server.Tasks.TaskRunner"} {"@t":"2020-06-17T03:25:00.3104770Z","@mt":"Stopping broadcast channel","SourceContext":"Flare.Events.Broadcast.BroadcastChannel"} {"@t":"2020-06-17T03:25:01.1437381Z","@mt":"Stopping input channel","SourceContext":"Seq.Server.Features.Apps.Inputs.InputChannel"} {"@t":"2020-06-17T03:25:01.4430472Z","@mt":"Closing event store","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:25:01.4452658Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:25:01.4480119Z","@mt":"Server stopped cleanly"} {"@t":"2020-06-17T03:27:25.7942923Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:27:25.8745025Z","@mt":"Restoring from {BackupFile}","BackupFile":"/data/seq-Hangfire_20200616.seqbac"} {"@t":"2020-06-17T03:27:25.8755980Z","@mt":"Decrypting content"} {"@t":"2020-06-17T03:27:25.8839655Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} [email protected]:/data/hangfire/Logs# sudo vi seq-20200617.log {"@t":"2020-06-17T03:23:35.2950987Z","@mt":"Applying migration {MigrationName}","MigrationName":"Ensure the license supports this version","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.2979978Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default SQL queries","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3021249Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default queries visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3206839Z","@mt":"Applying migration {MigrationName}","MigrationName":"Configure default signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3242637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Make default signals visible to all users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3349822Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the shared overview dashboard","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3559019Z","@mt":"Applying migration {MigrationName}","MigrationName":"Create the default API key","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3618625Z","@mt":"Applying migration {MigrationName}","MigrationName":"Apply groupings to initial signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3666483Z","@mt":"Applying migration {MigrationName}","MigrationName":"Show built-in signals to new users upon creation","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3741133Z","@mt":"Applying migration {MigrationName}","MigrationName":"Assign index ids to signals","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3760385Z","@mt":"Applying migration {MigrationName}","MigrationName":"Pre-existing dashboards are protected by default","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3843175Z","@mt":"Setting protected flag on {DashboardId}","DashboardId":"dashboard-14"} {"@t":"2020-06-17T03:23:35.3867777Z","@mt":"Applying migration {MigrationName}","MigrationName":"User default workspace reflects earlier view","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3905532Z","@mt":"Creating default workspace for {UserId}","UserId":"user-admin"} {"@t":"2020-06-17T03:23:35.3951349Z","@mt":"Applying migration {MigrationName}","MigrationName":"New user defaults include shared dashboards","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.3980599Z","@mt":"Applying migration {MigrationName}","MigrationName":"Update app invocation control properties","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4034637Z","@mt":"Applying migration {MigrationName}","MigrationName":"Extend the built-in roles","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4073565Z","@mt":"Applying migration {MigrationName}","MigrationName":"Set the default roles for new users","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4089116Z","@mt":"Applying migration {MigrationName}","MigrationName":"Personal dashboards are never protected","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:23:35.4110242Z","@mt":"Storage subsystem available"} {"@t":"2020-06-17T03:24:35.4665376Z","@mt":"{CollectionCount} more generation 2 garbage collection(s) occurred","CollectionCount":1,"SourceContext":"Seq.Server.Features.Diagnostics.GCLogger"} {"@t":"2020-06-17T03:24:56.3717931Z","@mt":"Termination signal received"} {"@t":"2020-06-17T03:24:56.4060871Z","@mt":"Signalling for {Workers} worker task(s) to complete","Workers":3,"SourceContext":"Flare.Workers.WorkerPool"} {"@t":"2020-06-17T03:25:00.3093741Z","@mt":"Stopping {Tasks} scheduled tasks","Tasks":13,"SourceContext":"Seq.Server.Tasks.TaskRunner"} {"@t":"2020-06-17T03:25:00.3104770Z","@mt":"Stopping broadcast channel","SourceContext":"Flare.Events.Broadcast.BroadcastChannel"} {"@t":"2020-06-17T03:25:01.1437381Z","@mt":"Stopping input channel","SourceContext":"Seq.Server.Features.Apps.Inputs.InputChannel"} {"@t":"2020-06-17T03:25:01.4430472Z","@mt":"Closing event store","SourceContext":"Flare.Events.EventStore"} {"@t":"2020-06-17T03:25:01.4452658Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:25:01.4480119Z","@mt":"Server stopped cleanly"} {"@t":"2020-06-17T03:27:25.7942923Z","@mt":"Opening document store {DocumentsPath}","DocumentsPath":"/data/Documents/documents.lmdb","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"} {"@t":"2020-06-17T03:27:25.8745025Z","@mt":"Restoring from {BackupFile}","BackupFile":"/data/seq-Hangfire_20200616.seqbac"} {"@t":"2020-06-17T03:27:25.8755980Z","@mt":"Decrypting content"} {"@t":"2020-06-17T03:27:25.8839655Z","@mt":"Closing document store","SourceContext":"Quince.Storage.Lmdb.LmdbDocumentStore"}
Posted by Sarthak Jain 11 months ago