Built-in Properties
All Seq events expose a set of built-in properties that are distinguished by the @
symbol in their name:
Property | Description | Example Value | Usage |
---|---|---|---|
@Arrived |
An integer indicating the order in which the event arrived at the Seq server | 12344 |
@Arrived <= Arrived('event-d8ce...0000') |
@Data |
The internal representation of the event as a single structured object. | {@t: ...} |
Contains(ToJson(@Data), 'coffee') |
@Elapsed |
A convenience property containing @Timestamp - @Start , giving the duration of the span in Seq's native 100 nanosecond tick resolution |
637840179774790019 |
@Elapsed > 500m |
@EventType |
A hash of the message template that was used to generate the event | 0x5432a8ff |
@EventType <> 0x5432a8ff |
@Exception |
The exception associated with the event if any, as a string | 'System.InvalidOp...' |
@Exception like '%zero%' |
@Id |
The event's unique id in Seq | 'event-d8ce...0000' |
@Id = 'event-d8ce...0000' |
@Level |
The logging level of the event, as a string | 'Warning' |
@Level <> 'Warning' |
@Message |
The text message associated with the event | 'Failed to open file...' |
@RenderedMessage like 'Failed%' |
@MessageTemplate |
The message template used to generate the event | 'Logged in {Username}' |
@MessageTemplate = 'Logged in {Username}' |
@ParentId |
(Optional) The span identifier of the parent span of this span | '180ab3544e957c9...' |
@ParentId = '180ab3544e957c9...' |
@Properties |
An object containing properties associated with the event | {Name: 'alice', Count: 10} |
@Properties['some irregular identifier'] |
@Resource |
An object containing properties associated with the event origin, if any | {'service.name': 'Example'} |
@Resource.service.name |
@Scope |
An object containing properties related to the scope that generated the event, if any | {'name': 'java.awt.event'} |
@Scope.name |
@SpanId |
The span identifier associated with the event, if any, as a string | '180ab3544e957c9...' |
@SpanId = '180ab3544e957c9...' |
@Start |
The timestamp indicating the start of a span; convert to human-readable text with ToIsoString(@Start) |
637840179774790019 |
@Start > DateTime('2015-01-13 06:00Z') |
@Timestamp |
The timestamp associated with the event; convert to human-readable text with ToIsoString(@Timestamp) |
637840179774790019 |
@Timestamp > DateTime('2015-01-13 06:00Z') |
@TraceId |
The trace identifier associated with the event, if any, as a string | '6cf23c2886cbef...' |
@TraceId = '6cf23c2886cbef...' |
Quick filter shortcuts
Many queries listed here are provided as one-click shortcuts via the row of blue links beneath the message text in an expanded log event -
Id
,Level
,Type
and so-on.