Show table of contents Hide table of contents

Platform:

Alert Notification Properties

Notifications from Alerts (including template-based HTML Email) can include the following fields:

Property Contains Example (JSON syntax)
Alert.HavingClause The having clause that represents the alert condition "count > 5"
Alert.Id The id of the alert that triggered the notification "alert-1234"
Alert.OwnerUsername The Seq username of the user who owns the alert, or null if the alert is shared "admin"
Alert.Query The Seq query that generated the alert "select count(*) as count from stream group by time(1m) having count > 5"
Alert.SignalExpressionDescription A human-readable description of the signal applied to the underlying data "Errors in Production"
Alert.TimeGrouping The window over which the alert is measured, as a string "00:30:00"
Alert.Title The title of the alert, as defined on the dashboard "High Error Rate"
Alert.Url A link to the alert itself in Seq "https://seq.example.com/#/alerts/alert-123"
Failures An array of errors that occurred when checking the alert ["X failed", "Y failed"]
NamespacedAlertTitle The title of the alert, prefixed with the owner's username if the alert is persona. "admin / High Error Rate"
Source.ContributingEvents A table of events contributing to this notification See Contributing Events below
Source.RangeEnd The (exclusive) end of the range over which the alert was checked when the notification was triggered "2021-10-28T12:34:56.789"
Source.RangeStart The (inclusive) start of the range over which the alert was checked when the notification was triggered "2021-10-28T12:33:56.789"
Source.Results The results that triggered the notification See Results below
Source.ResultsUrl A link to Seq where the results can be inspected "https://seq.example.com/#/events?q=..."
SuppressedUntil The datetime until which the alert is suppressed "2021-10-28T12:35:56.789"

Contributing events

Contributing events, if included in the notification, are a table represented as an array of arrays.

The first row describes the columns of the table.

  "Source": {
    "ContributingEvents": [
        ["@Id", "ToIsoString(@Timestamp)", "Message"],
        ["event-123", "2021-10-28T12:34:56.789", "Unhandled exception"],
        ["event-456", "2021-10-28T12:34:57.890", "An operation timed out"]
    ],

Results

The results property is a table represented as an array of arrays.

The first row describes the columns of the table.

  "Source": {
    "Results": [
        ["time", "Application", "count"],
        ["2021-10-28T12:34:56.789", "Cafe", 7],
        ["2021-10-28T12:34:57.890", "Warehousing", 11]
    ],

Notification properties

Properties that are explicitly added to the alert's notification properties are included at the root of the notification payload.