Built-in Properties
Search expressions and queries can make use of system-provided data.
All Seq events expose a set of built-in properties that are distinguished by the @
symbol in their name:
<th style={{ textAlign: "left" }}>
Description
</th>
<th style={{ textAlign: "left" }}>
Example Contents
</th>
<th style={{ textAlign: "left" }}>
Usage
</th>
</tr>
<td style={{ textAlign: "left" }}>
An integer indicating the order in which the event arrived at the Seq server
</td>
<td style={{ textAlign: "left" }}>
*12344*
</td>
<td style={{ textAlign: "left" }}>
`@Arrived <= Arrived('event-d8ce...0000')`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Data`
</td>
<td style={{ textAlign: "left" }}>
The internal representation of the event as a single structured object.
</td>
<td style={{ textAlign: "left" }}>
*\{ "@t": ... }*
</td>
<td style={{ textAlign: "left" }}>
`Contains(ToJson(@Data), 'coffee')`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@EventType`
</td>
<td style={{ textAlign: "left" }}>
A hash of the *message template* that was used to generate the event
</td>
<td style={{ textAlign: "left" }}>
*0x5432a8ff*
</td>
<td style={{ textAlign: "left" }}>
`@EventType <> 0x5432a8ff`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Exception`
</td>
<td style={{ textAlign: "left" }}>
The exception associated with the event if any, as a string
</td>
<td style={{ textAlign: "left" }}>
*System.InvalidOp...*
</td>
<td style={{ textAlign: "left" }}>
`@Exception like '%zero%'`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Id`
</td>
<td style={{ textAlign: "left" }}>
The event's unique id in Seq
</td>
<td style={{ textAlign: "left" }}>
*event-d8ce...0000*
</td>
<td style={{ textAlign: "left" }}>
`@Id = 'event-d8ce...0000'`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Level`
</td>
<td style={{ textAlign: "left" }}>
The logging level of the event, as a string
</td>
<td style={{ textAlign: "left" }}>
Warning
</td>
<td style={{ textAlign: "left" }}>
`@Level <> 'Warning'`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Message`
</td>
<td style={{ textAlign: "left" }}>
The text message associated with the event
</td>
<td style={{ textAlign: "left" }}>
*Failed to open file...*
</td>
<td style={{ textAlign: "left" }}>
`@RenderedMessage like 'Failed%'`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@MessageTemplate`
</td>
<td style={{ textAlign: "left" }}>
The message template used to generate the event
</td>
<td style={{ textAlign: "left" }}>
*Logged in \{Username}*
</td>
<td style={{ textAlign: "left" }}>
`@MessageTemplate = 'Logged in {Username}'`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Properties`
</td>
<td style={{ textAlign: "left" }}>
A dictionary with all properties associated with the event *(Seq 3.1)*
</td>
<td style={{ textAlign: "left" }}>
`{"Name": "alice.example", "ThreadId": 10}`
</td>
<td style={{ textAlign: "left" }}>
`@Properties['some irregular identifier']`
</td>
</tr>
<tr>
<td style={{ textAlign: "left" }}>
`@Timestamp`
</td>
<td style={{ textAlign: "left" }}>
The UTC timestamp associated with the event
</td>
<td style={{ textAlign: "left" }}>
*2015-02-28T13:56:20.293Z*
</td>
<td style={{ textAlign: "left" }}>
`@Timestamp > DateTime('2015-01-13 06:00Z')`
</td>
</tr>
Property |
---|
`@Arrived` |
Quick filter shortcuts
Many queries listed here are provided as one-click shortcuts via the row of blue links beneath the message text in an expanded log event -
Id
,Level
,Type
and so-on.
Updated 5 days ago