Welcome to the Seq documentation hub. You'll find comprehensive guides and documentation to help you start working with Seq as quickly as possible, as well as support if you get stuck. Let's jump right in!
In my list of API Keys, I have a key named "None" showing up and when I open it says the following: "These settings apply to events that arrive without a valid API key. To disallow ingestion of events without a valid API key, use the Require an API key when writing events checkbox on the API Keys index page." If I go to the API Keys index page however, the specified checkbox is not available, only "Require authentication for HTTP/S ingestion". Is this the same thing?
Posted by David Taylor 8 months ago
I am using Seq v4.2.1113. I attempt to add a package (Seq.App.FileArchive). Steps: * Open Seq * Go to settings * Go to Apps * Click "Install from Nuget" * Check that nuget.org is in the drop-down * Click the button for `FileArchive` * Watch Seq.App.FileArchive be populated in the textbox * For version, leave Latest (also attempted with specific version numbers) * Click Install **Expected behavior:** App installs **Actual behavior:** * App is not installed * See an error message: `"Could not install app An error occurred while loading packages from 'https://www.nuget.org/api/v2/': Expected an absolute, well formed http URL without a query or fragment. Parameter name: serviceRoot"` * In the console, see a 400 error for `http://[RedactedServerName]/api/apps/install?feedId=nugetfeed-1&packageId=Seq.App.FileArchive&version=` * Upon going to that URL in the browser, see `"Error":"The resource `/api/apps/install` was not found on this server."` (though this is done as a GET request, so may not really be a problem) Any tips on how we might avoid this? We already have apps installed and functioning. Is this a permissions issue?
Posted by Sean Killeen 8 months ago
I have a dashboard alert defined that simply checks for errors (count > 0) in my application and sends an email using an instance of the email+ app. I am using the default email template from github. -------------------- Questions: -------------------- 1) It's not at all clear to me what data is available to me when I'm building the alert email. example: I want to include the application name in the subject line of the email. I've enabled override on the app instances subject property but I can't seem to use {{ApplicationName}} in this context. Is there a schema definition for the data that's available to me when the alert is triggered? 2) When I click the link to "Explore detected results in seq" in the email, I'm brought to a useless results view that shows nothing but the count. I want to be able see the applicable logged events for the alert. please advise...
Posted by Shannon Richards 8 months ago
Users (non admins) are not able to save personal dashboards. They are able to create a personal dashboard and add metrics without issue but when they try to save the get an error or "Could not save dashboard. Only administrators can update protected dashboards.". Is there a way to allow standard users to save their own custom dashboards?
Posted by Dave Lemon 8 months ago
I noticed I was not getting nlog info messages logged in Seq. I'm using the nlog.targets.seq 1.1.0 nuget package (against nlog 4.5.10). I noticed that "@l"="Info" was in the message getting pushed to the Api using the clef format enforced by the nuget package. But Seq never shows it. It will only show if I send with "@l"="Information". Not sure where this translation is suppose to occur or if I messed up a default setting in the seq server where its now being strict about the levels. I do not have any fancy signals or filtering set up...just a vanilla seq server (or so I think it is). When I use Postman to explicitly post the same clef package via api/events/raw?clef, I get a 201 so its definitely getting there. Is there a place I can look in the Seq server to figure out why the messages are not being displayed?
Posted by Mike Koziel 8 months ago
Hi guys, somehow after adding some signals into my dashboard, they are visible at first, but then they become unavailable and saying "The server could not be contacted" in every graph. Do you know why this happens and how i can fix this ? Thanks.
Posted by Mustafa Faruk Kipergil 8 months ago
I'd like to be able to search for an event by displaying just Information (no debug). Once I have an event selected, I'd like to see the Debug statements around it but if I Select "None" is the Signals (to now display Debug and Verbose events), I lose the selection (place) where I was. Is there a way to keep my place or somehow tag an event to go back to it? Thanks again, -Ed
Posted by Ed Landau 8 months ago
I'm not exactly sure what have caused this problem - but our dashboards have suddently started failing - showing a big RED box saying: > An unhandled error occured while serving the request (token: 9df9097ce52b42...and > more). SEQ shows the following in the log: {"@t":"2019-03-11T14:20:19.9793140Z","@mt":"Error serving {RequestUrl} (token: {ErrorToken})","@l":"Error","@x":"Microsoft.Isam.Esent.Interop.EsentBadLogSignatureException: Bad signature for a log file\r\n at Microsoft.Isam.Esent.Interop.Api.JetInit2(JET_INSTANCE& instance, InitGrbit grbit)\r\n at Microsoft.Isam.Esent.Interop.Instance.Init(InitGrbit grbit)\r\n at Flare.Storage.Esent.Data.EsentDB..ctor(String path, String instanceName, Boolean boostWriteConcurrency)\r\n at Flare.Storage.Esent.EsentStorageExtent.BeginSession(String tag)\r\n at Flare.Storage.Esent.EsentStorageExtent.<Get>d__17.MoveNext()\r\n at Flare.Events.EventStore.<Get>d__13.MoveNext()\r\n at Flare.Queries.Executor.QueryExecutor.<ExecuteTimeSlicingPlanPart>d__17.MoveNext()\r\n at Flare.Queries.Executor.QueryExecutor.<ExecuteTimeSlicingPlan>d__16.MoveNext()\r\n at Flare.Queries.Executor.QueryExecutor.CreateTimeSlicingResult(IEventStore store, Nullable`1 rangeStartUtc, Nullable`1 rangeEndUtc, QueryExecutionState state, TimeSlicingPlan ts, QueryCache cache)\r\n at Flare.Queries.Executor.QueryExecutor.Execute(QueryPlan plan, IEventStore store, Nullable`1 rangeStartUtc, Nullable`1 rangeEndUtc, CancellationToken cancel, DateTime now, QueryCache cache)\r\n at Flare.Queries.DataStore.Query(String query, CancellationToken cancel, Nullable`1 rangeStartUtc, Nullable`1 rangeEndUtc, String filter)\r\n at Seq.Server.Web.Api.DataModule.<>c__DisplayClass5_0.<Query>g__Calculate|0(IComponentContext ctx, CancellationToken cancel)\r\n at Seq.Server.Web.Api.DataModule.<>c__DisplayClass5_1.<Query>b__1(CancellationToken ct)\r\n at Flare.Workers.WorkerPool.<>c__DisplayClass4_0.<Run>b__0()\r\n at System.Threading.Tasks.Task.Execute()\r\n--- End of stack trace from previous location where exception was thrown ---\r\n at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()\r\n at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)\r\n at Seq.Server.Web.Api.DataModule.<Query>d__5.MoveNext()\r\n--- End of stack trace from previous location where exception was thrown ---\r\n at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()\r\n at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)\r\n at Seq.Server.Web.Api.DataModule.<<-ctor>b__3_0>d.MoveNext()","RequestUrl":"https://removed.com/api/data?q=select%20count%28%2A%29%20as%20count%0D%0Afrom%20stream%20%0D%0Awhere%20%28%40Timestamp%20%3E%3D%20DateTime%28%272018-12-10T23%3A00%3A00.000Z%27%29%29%0D%0A%20%20and%20%28%40Timestamp%20%3C%20DateTime%28%272019-03-11T14%3A20%3A05.812Z%27%29%29%0D%0Agroup%20by%20time%281d%29%0D%0Alimit%2010000%0D%0A&signal=signal-135&timeoutMS=60000","ErrorToken":"b55b8261aa1a4ecba5292c145a6d303f","RequestId":"05d752a3-d355-437a-8e1d-567c33fc5567"} It seems to affect ALL dashboards - also the one that come as 'default' with SEQ. We are running SEQ 4.2
Posted by Allan Fejerskov Ravn 9 months ago
We have had a curious behaviour - which may or may not be related. let me explain. We had set up our SEQ installation and activated API keys as well as enabled User MGMT - having 3 normal users and 1 admin user. It worked - those users could login. Events with the correct API keys were received :-) Then 'suddently' one day - when I was logging into the SEQ administration - I noticed that it just said "Admin" on the top-right corner and I could not even press "logout" (the menu bullet that usually said ' logout' was gone). After some clicking around I noticed that all the API key's and users had dissappeared - it was as if I hadn't activated user MGMT and API keys at all. Now - I don't know if the following is related to my first description or not - but inside my event viewer under Application it says: seq (3464) Seq-Extent-2019-01-02T00:00:00.0000000Z: Database recovery/restore failed with unexpected error -530. and also seq (3464) Seq-Extent-2019-01-02T00:00:00.0000000Z: Unable to read the header of logfile D:\ProgramData\Seq\Extents\2019-01-02_2019-01-09\edb00002.log. Error -530. We are in the proces of upgrading from SEQ 4.2 to 5.0 - but I'd rather understand this error better before we do. Do you have an idea why this particular file fails? I can email specific logs if needed. Br. Allan
Posted by Allan Fejerskov Ravn 9 months ago
1) Once a property has been added as a column, can it be removed as a column? 2) I used "Log.ForContext<GameBase>()" and it gives the qualified path. Wondering if I can shorten this? 3) Is there an enhancer for Serilog that would add a property to an event AND put it in the message (much like popping an property to a column)? Oh... you are SEQ... but you make Serilog too... right? :) Thanks again!
Posted by Ed Landau 9 months ago
Interactively building queries Hi... I am just starting to look at Serilog and SEQ. I really like what I see but have only been at it for a few days. I have some basic questions: 1. I see if if I click on the green checkmark next to a property for an event I expanded, the filter is set to that property / data. Say the resulting set of events is still large and I want to filter it down more by selecting some other property and selecting the green tick? Is there a way to "AND" this new filter rather than resetting the filter? I could make a signal but that's a few extra steps for a signal I will likely not use again. 2. I saw in on of the discussion topics mention of using CSS in the Setting > themes (now Settings > Instance > Style Overrides). Do you have documentation on this? I would love to learn more... leading to the next question. 3. This is a stretch question but it can't hurt to ask: Is there any way to highlight an event with color (text or background or dot of whatever) based on a regular expression search of the message or some property? Thanks again for a great looking tool. One last suggestion... since I'm a single user using the free license..maybe a PayPal donation button :) -Ed
Posted by Ed Landau 9 months ago
Is it possible to write to an s3 bucket for long term storage and read from that s3 bucket instead of having the data on a machine? I think this would be a great scaleable solution if possible. I love your product but it is really lacking when it comes to long term storage solutions. Any recommendations?
Posted by Shawn Stout 9 months ago
Hello - our SEQ instance runs in Domain A, but authenticates users via LDAP via Domain B Domain Controllers. When trying to change the SEQ service to use a Domain B service account, which will allow the LDAP authentication to occur, we get an "Access Denied" error. Thinking that SEQ is preventing the changing of this. Is there a different way we should be changing the SEQ service logon account?
Posted by Logan Kampsnider 9 months ago