Configure for Contributing events?

[Chrille79]

Is there a way to configure so the teams message include Contributing Events Today the teams message is as following

What i want is the title and the contributing events

SEQ: 2021.3 Seq.Apps.Teams: 2.0.38

[nblumhardt]

FWIW this one is on my list, I'm not sure if anyone else is concurrently digging into it.

The main roadblock for me is my incomplete understanding of the card format that the Teams API uses, so suggestions from that angle would be super useful :-)

[nblumhardt]

https://github.com/AntoineGa/Seq.App.Teams/issues/12#issuecomment-937487338 has an example of how this looks in the Slack integration; each event is a timestamp and hyperlinked message. A similar layout might work nicely here, too.

[Chrille79]

@nblumhardt that is what I want. If it is possible to add custom SEQ attribute (Application) to the contributing event title it would be perfect

[nblumhardt]

Hi Christian, I think this is what notification properties (Environment and Team, in the linked screenshot) should provide. You can configure them as part of the alert in Seq. Is that what you're looking for?

[Chrille79]

The alert in seq is

select count(*) as count
from stream
group by time(1m)
having count > 5
limit 100

But the different events has the attribute Application. So I want the contributing event title to contain Application Contributing Events <Application> - @Message

Exemple

MORE THAN 5 ERRORS
--------------------------
Contributing Events
2021-11-03 08:19:33 Application X - Could not serialize
2021-11-03 08:19:34 Application Y - Error when calling Application X

[nblumhardt]

Gotcha! I see what you mean 👍 ... Seq doesn't currently expose that info, unfortunately, but worth us thinking about.

Though, if you group by Application this would cause an Application column to show up in Results, which the notification event carries and which could be formatted into the Teams notification 🤔 (check out the example email notification here for an idea of how the results fit in: https://docs.datalust.co/docs/alerts#what-do-notifications-look-like).

[AntoineGa]

@nblumhardt : from https://docs.datalust.co/docs/alerts#what-do-notifications-look-like i understand that Contributing Events are "up to ten of the errors that triggered the alert." . Should we see Contributing Events as a second query using property of the first event of the first query, limited to ten to:

• give flexibility in the definition of Contributing Events
• limit message size ?

the card format is a nightmare

[nblumhardt]

Sorry about the slow reply, @AntoineGa. Linking contributing events as a query could be a nice addition. It's not necessary to include ten, however - the number is configurable for each alert notification.

In my own usage so far, I'm really enjoying having the contributing events directly there in the notification. I often get alerts to my phone, which isn't logged into Seq, and so seeing some event details (especially when dealing with errors) can save me running to open up a laptop for more info.