Alert Properties
Notifications from Alerts (including template-based HTML Email) can include the following fields:
Property | Contains | Example (JSON syntax) |
---|---|---|
Alert.HavingClause | The having clause that represents the alert condition | "count > 5" |
Alert.Id | The id of the alert that triggered the notification | "alert-1234" |
Alert.OwnerUsername | The Seq username of the user who owns the alert, or null if the alert is shared | "admin" |
Alert.Query | The Seq query that generated the alert | "select count(*) as count from stream group by time(1m) having count > 5" |
Alert.SignalExpressionDescription | A human-readable description of the signal applied to the underlying data | "Errors in Production" |
Alert.TimeGrouping | The window over which the alert is measured, as a string | "00:30:00" |
Alert.Title | The title of the alert, as defined on the dashboard | "High Error Rate" |
Alert.Url | A link to the alert itself in Seq | "https://seq.example.com/#/alerts/alert-123" |
Failures | An array of errors that occurred when checking the alert | ["X failed", "Y failed"] |
NamespacedAlertTitle | The title of the alert, prefixed with the owner's username if the alert is persona. | "admin / High Error Rate" |
Source.ContributingEvents | A table of events contributing to this notification | See Contributing Events below |
Source.RangeEnd | The (exclusive) end of the range over which the alert was checked when the notification was triggered | "2021-10-28T12:34:56.789" |
Source.RangeStart | The (inclusive) start of the range over which the alert was checked when the notification was triggered | "2021-10-28T12:33:56.789" |
Source.Results | The results that triggered the notification | See Results below |
Source.ResultsUrl | A link to Seq where the results can be inspected | "https://seq.example.com/#/events?q=..." |
SuppressedUntil | The datetime until which the alert is suppressed | "2021-10-28T12:35:56.789" |
Contributing events
Contributing events, if included in the notification, are a table represented as an array of arrays.
The first row describes the columns of the table.
"Source": {
"ContributingEvents": [
["@Id", "ToIsoString(@Timestamp)", "Message"],
["event-123", "2021-10-28T12:34:56.789", "Unhandled exception"],
["event-456", "2021-10-28T12:34:57.890", "An operation timed out"]
],
Results
The results property is a table represented as an array of arrays.
The first row describes the columns of the table.
"Source": {
"Results": [
["time", "Application", "count"],
["2021-10-28T12:34:56.789", "Cafe", 7],
["2021-10-28T12:34:57.890", "Warehousing", 11]
],
Notification properties
Properties that are explicitly added to the alert's notification properties are included at the root of the notification payload.
Updated almost 3 years ago