These docs are for v2023.2. Click to read the latest docs for v2024.3.

Built-in Properties

Search expressions and queries can make use of system-provided data.

All Seq events expose a set of built-in properties that are distinguished by the @ symbol in their name:

PropertyDescriptionExample ValueUsage
@ArrivedAn integer indicating the order in which the event arrived at the Seq server12344@Arrived <= Arrived('event-d8ce...0000')
@DataThe internal representation of the event as a single structured object.{@t: ...}Contains(ToJson(@Data), 'coffee')
@EventTypeA hash of the message template that was used to generate the event0x5432a8ff@EventType <> 0x5432a8ff
@ExceptionThe exception associated with the event if any, as a string'System.InvalidOp...'@Exception like '%zero%'
@IdThe event's unique id in Seq'event-d8ce...0000'@Id = 'event-d8ce...0000'
@LevelThe logging level of the event, as a string'Warning'@Level <> 'Warning'
@MessageThe text message associated with the event'Failed to open file...'@RenderedMessage like 'Failed%'
@MessageTemplateThe message template used to generate the event'Logged in {Username}'@MessageTemplate = 'Logged in {Username}'
@PropertiesAn object containing properties associated with the event{Name: 'alice', Count: 10}@Properties['some irregular identifier']
@ResourceAn object containing properties associated with the event origin, if any{'': 'Example'}@Resource['']
@SpanIdThe span identifier associated with the event, if any, as a string'180ab3544e957c9...'@SpanId = '180ab3544e957c9...'
@TimestampThe timestamp associated with the event; convert to human-readable text with ToIsoString(@Timestamp)637840179774790019@Timestamp > DateTime('2015-01-13 06:00Z')
@TraceIdThe trace identifier associated with the event, if any, as a string'6cf23c2886cbef...'@TraceId = '6cf23c2886cbef...'


Quick filter shortcuts

Many queries listed here are provided as one-click shortcuts via the row of blue links beneath the message text in an expanded log event - Id, Level, Type and so-on.