Ask a Question

Suggestion: Saveable SQL Style Queries

It would be very useful to have saveable SQL style queries in table format. There are a handful of queries I have saved in a notepad file that I use on a daily basis, it would be awesome if I could just create a dashboard that displayed a table of the results so the rest of the team could have visibility to the data without needing their own copy of the query.

NullReferenceException in response when Seqlog posts to the raw events end-point

Hi. I'm the maintainer of the [Seqlog]( library for Python. I only have a license for Seq 4.x so I haven't tried this myself, but [from what users tell me](, it seems that something has changed in Seq 5.x and when they attempt to use it with the latest version they see the following error (with an HTTP 500 from Seq): ```json { "@t": "2018-11-18T06:10:09.6170577Z", "@mt": "HTTP {RequestMethod} {RequestPath} responded {StatusCode} in {Elapsed:0.0000} ms", "@r": ["0.6036"], "@l": "Error", "@x": "System.NullReferenceException: Object reference not set to an instance of an object.\n at Seq.Server.Web.Api.RawEventsController.TryParseBody(ApiKey apiKey, StorageEventCreationData[]& events, String& errorMessage)\n at Seq.Server.Web.Api.RawEventsController.Ingest()\n at lambda_method(Closure , Object , Object[] )\n at Microsoft.AspNetCore.Mvc.Internal.ActionMethodExecutor.SyncActionResultExecutor.Execute(IActionResultTypeMapper mapper, ObjectMethodExecutor executor, Object controller, Object[] arguments)\n at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeActionMethodAsync()\n at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeNextActionFilterAsync()\n at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Rethrow(ActionExecutedContext context)\n at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)\n at Microsoft.AspNetCore.Mvc.Internal.ControllerActionInvoker.InvokeInnerFilterAsync()\n at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeNextResourceFilter()\n at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Rethrow(ResourceExecutedContext context)\n at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.Next(State& next, Scope& scope, Object& state, Boolean& isCompleted)\n at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeFilterPipelineAsync()\n at Microsoft.AspNetCore.Mvc.Internal.ResourceInvoker.InvokeAsync()\n at Microsoft.AspNetCore.Builder.RouterMiddleware.Invoke(HttpContext httpContext)\n at Seq.Server.Web.Middleware.WebSocketAcceptMiddleware.Invoke(HttpContext context)\n at Seq.Server.Web.Middleware.RequestAuthenticationMiddleware.Invoke(HttpContext httpContext)\n at Seq.Server.Web.Middleware.BrowserSecurityOptionsMiddleware.Invoke(HttpContext context)\n at Seq.Server.Web.Middleware.RequestCompletionMiddleware.Invoke(HttpContext httpContext)", "RequestMethod": "POST", "RequestPath": "/api/events/raw", "StatusCode": 500, "Elapsed": 0.6036, "ErrorToken": "b2c14ff04fbc42348e951aec12f7f637", "RequestProtocol": "HTTP/1.1", "RequestHost": "localhost:5341", "RequestHeaders": { "User-Agent": "python-requests/2.18.4", "Content-Length": "1103" }, "SourceContext": "Seq.Server.Web.Middleware.RequestCompletionMiddleware", "RequestId": "0HLIC0HN27AR5:00000001", "CorrelationId": null, "ConnectionId": "0HLIC0HN27AR5" } ``` The request body is: ```json { "Events": [ { "Timestamp": "2018-11-17 09:05:47.256725+02:00", "Level": "INFO", "MessageTemplate": "Hi, {name}. {greeting}", "Properties": { "MachineName": "IL-GZigelman", "ProcessId": 17860, "LoggerName": "root", "name": "Root logger", "greeting": "Nice to meet you", "ThreadId": 20616, "ThreadName": "MainThread" } }, { "Timestamp": "2018-11-17 09:05:47.256725+02:00", "Level": "INFO", "MessageTemplate": "Hi, {name}! {greeting}", "Properties": { "MachineName": "IL-GZigelman", "ProcessId": 17860, "LoggerName": "A", "name": "world", "greeting": "Nice to meet you", "ThreadId": 20616, "ThreadName": "MainThread" } }, { "Timestamp": "2018-11-17 09:05:47.256725+02:00", "Level": "INFO", "MessageTemplate": "Bye, {name}! {greeting}", "Properties": { "MachineName": "IL-GZigelman", "ProcessId": 17860, "LoggerName": "A.B", "name": "moon", "greeting": "Nice to meet you", "ThreadId": 20616, "ThreadName": "MainThread" } }, { "Timestamp": "2018-11-17 09:05:47.256725+02:00", "Level": "INFO", "MessageTemplate": "By, moon!", "Properties": { "MachineName": "IL-GZigelman", "ProcessId": 17860, "LoggerName": "C", "0": "moon" } } ] } ```

Free space has fallen below the limit

Hi, We have been having a problem Seq filling up our D: drive after a couple of days. It seems like the retention policy isn't deleting the log events from the server so it's filling up the drive where logs are stored. Wondering if there is anything we can do besides increasing our D: drive. Error before logs stops: Free space has fallen below the limit of {LimitBytes} to {AvailableBytes}, events will no longer be accepted","@l":"Error","LimitBytes":300000000,"AvailableBytes":289550336,"SourceContext":"Seq.Server.Features.DiskStorage.StorageTracker"} Thanks

Alerts not firing any more

A couple of days ago I stopped getting emails from the alerts that were firing against our SEQ instance. I made a few changes to a couple of alerts (tweaking the firing criteria) and apps (adding several more users to the emails), but I looked at everything and I don't see where I could have made a mistake. Trying to figure it out, I created a new app that would email just me and then added a new alert with criteria that would have had it trigger nearly immediately. In two instances the alert triggered and I got email. In 2 other instances, I received no email. Has anyone run into something like this before? If so, what did you do to fix it?

SQL Query - WHERE prop [not] IN ('her','tex','prob','ther')

is a query like this possible? currently a use WHERE prop<>'her' and prop<>'tex' and prop<>'prob' and so on. but with many on "prop<>'sss'" the query is extreme slow.

Is NLog Exception layout renderer supported?

Seq version: 5.0.2296 NLog version: 4.5.11 NLog.Targets.Seq version: 1.0.0 Hi! I'm using NLog integration, everything works perfect. I'm logging exceptions with this syntax, as explained here: logger.Error(ex, ex.Message); This causes the full exception showed in Seq dashboard, which is what I needed: Now I want to make sure the inner exceptions to be included in that information, so I wanted to add this Exception layout renderer: ${exception:format=toString,Data:maxInnerExceptionLevel=10} as explained here: In a plain NLog configuration file, I would add that Exception Layout Rendered like this: <targets> <target name="f" type="File" layout="${longdate} ${message} ${exception:format=tostring}"/> </targets> But I have tried adding it to my Seq target tags, and the logs are not written. My actual targets definition is: <targets> <target name="seq" xsi:type="BufferingWrapper" bufferSize="1000" flushTimeout="2000" > <target xsi:type="Seq" serverUrl="http://localhost:5341" apiKey="" > <property name="application" value="${appdomain:format={1\}" /> <property name="class" value="${callsite:className=true:fileName=false:includeSourcePath=false:methodName=false}" /> <property name="method" value="${callsite:className=false:fileName=false:includeSourcePath=false:methodName=true}" /> </target> </target> </targets>

Error after installing 5.0.2296

FYI, I am getting an error after installing 5.0.2296 on Windows 7 (x64) Seq is unavailable. Failed to initialize storage: Unable to load DLL 'Native\flare.dll' or one of its dependencies: The specified procedure could not be found. (Exception from HRESULT: 0x8007007F)

How to get master key for backups when running in Docker

Hi I am running Seq as a Docker Container. If you want to restore from a backup you need the master key. If I attach to the container and run the command seq show-key nothing happens. How can i retrieve my master key? Thanks for the help

System.UriFormatException: 'Invalid URI: The format of the URI could not be determined.'

I get the above error when I run my code. Below is my appsetting.json file and Startup.cs respectively. Even though my seq server is running. Kindly help me resolve it "Seq": { "ApiKey": "1234567890", "LevelOverride": { "Microsoft": "Warning" }, "MinimumLevel": "Trace", "ServerUrl": "http://localhost:5341/" } services.AddLogging(loggingBuilder => { loggingBuilder.AddSeq("Seq"); });

Feature Request: Dashboard Markdown Blocks

Is there difficulty in allowing for markdown blocks in the dashboards? I'd love to provide context for what is being looked at, links to documentation, etc

Alerts: Access Aggregated Message Properties

## Background I have a number of queues that I track. I'm trying to set up thresholds for specific outliers that can have large queues. My current Dashboard query is as so: ``` select Top(@Properties.Total, 1) as TotalMessages where Has(@Properties.Name) group by @Properties.Name ``` ## Goal I'm looking to set up an alert that keys on a specific grouping and has a condition similar to: ``` Condition: TotalMessages > 30000 and @Properties.Name like 'my-queue' ``` ## Problem I can't seem to include the grouped property name in the condition Any ideas?

Feature Request: Tables/List on dashboards

A quick feature request: We'd love to be able to add simple tables on our dashboards! (Keep-up the good work guys - we're loving the new Docker version!)

SLA on Email support

What is the SLA on email support when purchasing a professional licence with 1 years support?

AD Auth

We are experiencing that a single user who used to have access can no longer AD authenticate. I have reconfigured the AD authentication for SEQ, and verified the user in in the group I am auto-provisioning to. Is there an issue around this feature?

Extended info for levels < error

Hi, is it possible to have logged text underneath structured data in Seq UI for levels < error? I mean the place, where Seq shows Exception stack trace. That's almost a blocker for us - we'd like to log jsons and SQL queries on DEBUG level, and it's impossible to read it, when it's in the entry header.

Logging numerics through bunyan-seq

Hi I'm logging numbers through bunyan seq. however, when I try aggregate over these, the aggregate results always show null unless I call `ToNumber` which suggests I'm logging these incorrectly? Any advice?

Use VSTS (aka Azure DevOps) Nuget Feed for Seq Apps

Hi I'm getting unauthorized when installing a package from our VSTS/ADO Nuget Feed. We've tried both the v3 and v2 nuget endpoint (eg Is there a way we may be able to get this working? We use a Personal Access Token (PAT) for authentication to the VSTS feed. In Team City we can authenticate the feed by putting any random username in and the PAT in the password. Via the VSTS REST API we can use Basic auth by base64 encoding a blank username with the PAT (eg base64 ":mypat"). I'm not sure if that's what Seq does but it doesn't allow for an empty username. Thanks Steve

Config Nlog for seq server in c#

Hello, I would like not to use the NLog.config file, and instead i would like to config it in the code it self. My goal is to send logs to my local host in the Seq server. The configuration at the NLog.config file is: <?xml version="1.0" encoding="utf-8" ?> <nlog xmlns="" xmlns:xsi="" xsi:schemaLocation=" NLog.xsd" autoReload="true" throwExceptions="false" internalLogLevel="Off" internalLogFile="c:\temp\nlog-internal.log"> <targets> <target name="seq" xsi:type="BufferingWrapper" bufferSize="1000" flushTimeout="2000"> <target xsi:type="Seq" serverUrl="http://localhost:5341" apiKey="" /> </target> </targets> <rules> <logger name="*" minlevel="Info" writeTo="seq" /> </rules> </nlog> Thanks and have a good day.

Trigger alert if event has not arrived at certain time of day

Hi We are testing SEQ and really like i so far. I have one small problem. We have a few services that are configured to import data at certain times. I would like to be alerted if this process hasn't been started for some reasons. In this case I am not looking for an error, but looking for the absence of a certain event. So I would like to be notified if the event with type ImportingDataSucceeded hasn't been received by SEQ between 1:59 am and 2:01 am each day. Any idea how can achieve this? Thanks in advance Regards Kenneth

Instgram Account Name @seq

Hello, I have the instagram username @seq for sale. Any chance you guys are interested in it?