Log Viewer

    Umbraco ships with a built-in Log Viewer feature. This allows you to filter and view log entries and perform much more complex search queries to help you find the log entries that you are interested in your Umbraco site. You can find the log viewer in the settings section.


    Have you ever wanted to find all log entries which contains the same request ID or find all items in the log where a property called duration is greater than 1000ms? With the power of structured logging and a query language we are able to search and find log items for very specific scenarios. When debugging the client site you should now have more power to see and find patterns in your log files and get rid of those pesky errors.

    Example queries

    Here are a handful example queries to get you started, however the saved searches contain some further examples. For more details on the syntax head over to the https://github.com/serilog/serilog-filters-expressions project.

    Find all logs that are from the namespace 'Umbraco.Core'
    StartsWith(SourceContext, 'Umbraco.Core')

    Find all logs that have the property 'Duration' and the duration is greater than 1000ms
    Has(Duration) and Duration > 1000

    Find all logs where the message has localhost in it with SQL like
    @Message like '%localhost%'

    Saved Searches

    When writing a custom query that you wish to use often, it is possible to save this and use the dropdown to re-use your saved search. To add a new saved search, use the search box to type your query and click the star icon. In doing so you can give it a friendly name. The saved queries are saved in the database in the table umbracoLogViewerQuery.

    Implementing your own Log Viewer

    With the flexibility of Umbraco, we give you the power to implement your own ILogViewer where you are able to fetch logs and the saved searched from a different location such as Azure table storage.

    Create your own implementation

    To do this we can implement a base class SerilogLogViewerSourceBase from Umbraco.Cms.Core.Logging.Viewer like so. Note: This uses the WindowsAzure.Storage nuget package

    using System;
    using System.Collections.Generic;
    using System.Linq;
    using Microsoft.WindowsAzure.Storage;
    using Microsoft.WindowsAzure.Storage.Table;
    using Serilog;
    using Serilog.Events;
    using Serilog.Formatting.Compact.Reader;
    using Umbraco.Cms.Core.Logging.Viewer;
    using Serilog.Sinks.AzureTableStorage;
    namespace My.Website
        public class AzureTableLogViewer : SerilogLogViewerSourceBase
            public AzureTableLogViewer(ILogViewerConfig logViewerConfig, ILogger serilogLog)
                : base(logViewerConfig, serilogLog)
            public override bool CanHandleLargeLogs => true;
            public override bool CheckCanOpenLogs(LogTimePeriod logTimePeriod)
                // This method will not be called - as we have indicated that this 'CanHandleLargeLogs'
                throw new NotImplementedException();
            protected override IReadOnlyList<LogEvent> GetLogs(LogTimePeriod logTimePeriod, ILogFilter filter, int skip, int take)
                var cloudStorage = CloudStorageAccount.Parse("DefaultEndpointsProtocol=https;AccountName=ACCOUNT_NAME;AccountKey=KEY;EndpointSuffix=core.windows.net");
                var tableClient = cloudStorage.CreateCloudTableClient();
                CloudTable table = tableClient.GetTableReference("LogEventEntity");
                var logs = new List<LogEvent>();
                var count = 0;
                // Create the table query
                // TODO: Use a range query to filter by start & end date on the Timestamp
                TableContinuationToken token = null;
                var results = new List<LogEventEntity>();
                    var queryResult = table.ExecuteQuerySegmentedAsync(new TableQuery<LogEventEntity>(), token).GetAwaiter().GetResult();
                    token = queryResult.ContinuationToken;
                } while (token != null);
                // Loop through the results, displaying information about the entity.
                foreach (var entity in results.Skip(skip))
                    // Reads the compact JSON format stored in the 'Data' column back to a LogEvent
                    // Same as the JSON txt files does
                    var logItem = LogEventReader.ReadFromString(entity.Data);
                    if (count > skip + take)
                    if (count < skip)
                    if (filter.TakeLogEvent(logItem))
                return logs;
            public override IReadOnlyList<SavedLogSearch> GetSavedSearches()
                //TODO: Fetch from Azure Table
                return base.GetSavedSearches();
            public override IReadOnlyList<SavedLogSearch> AddSavedSearch(string name, string query)
                //TODO: Add to Azure Table
                return base.AddSavedSearch(name, query);
            public override IReadOnlyList<SavedLogSearch> DeleteSavedSearch(string name, string query)
                //TODO: Remove from Azure Table
                return base.DeleteSavedSearch(name, query);

    Register implementation

    Umbraco needs to be made aware that there is a new implementation of an ILogViewer to register and replace the default JSON LogViewer that we ship in the core of Umbraco.

    using Umbraco.Cms.Core.Composing;
    using Umbraco.Cms.Core.DependencyInjection;
    using Umbraco.Cms.Infrastructure.DependencyInjection;
    namespace My.Website
        public class LogViewerSavedSearches : IComposer
            public void Compose(IUmbracoBuilder builder)

    Configure Umbraco to log to Azure Table Storage

    Now with the above two classes, we have the plumbing in place to view logs from an Azure Table, however, we are not persisting our logs into the Azure table storage account. So we need to configure the Serilog logging pipeline to store our logs into Azure table storage.

    • Install Serilog.Sinks.AzureTableStorage from Nuget
    • Add a new sink to the appsettings with credentials (so logs persist to Azure)

    The following sink needs to be added to the array Serilog:WriteTo.

    "Name": "AzureTableStorage",
    "Args": {
      "storageTableName": "LogEventEntity",
      "formatter": "Serilog.Formatting.Compact.CompactJsonFormatter, Serilog.Formatting.Compact",
      "connectionString": "DefaultEndpointsProtocol=https;AccountName=ACCOUNT_NAME;AccountKey=KEY;EndpointSuffix=core.windows.net"}

    For more in depth information about logging and how to configure it, please read the logging documentation.

    Compact Log Viewer - Desktop App

    This is a desktop tool for viewing & querying JSON log files from disk in the same way as the built in logviewer dashboard of Umbraco.

    English badge