Observability Configuration

The Observability section configures structured logging sinks for Vectra. Logging is powered by Serilog.

Class: Vectra.BuildingBlocks.Configuration.Observability.ObservabilityConfiguration

---

Logging

Class: LoggingConfiguration

Property	Type	Default	Description
DefaultLogLevel	string	"Information"	Minimum log level: Verbose, Debug, Information, Warning, Error, Fatal
File	FileLoggingConfiguration	—	Rolling file sink
Seq	SeqLoggingConfiguration	—	Seq structured log server

---

File Sink

Property	Type	Default	Description
Enabled	bool	true	Enable file logging
Path	string	./logs/vectra-.log	Log file path (supports Serilog rolling tokens like -{Date})

"Observability": {
  "Logging": {
    "DefaultLogLevel": "Information",
    "File": {
      "Enabled": true,
      "Path": "./logs/vectra-.log"
    }
  }
}

---

Seq Sink

Seq provides a searchable, real-time structured log server.

Property	Type	Default	Description
Enabled	bool	false	Enable Seq logging
ServerUrl	string	http://localhost:5341	Seq server URL
ApiKey	string	—	Seq API key (if authentication is enabled)

"Observability": {
  "Logging": {
    "Seq": {
      "Enabled": true,
      "ServerUrl": "http://seq:5341",
      "ApiKey": "your-seq-api-key"
    }
  }
}

---

Structured Log Events

Vectra emits structured log events at key points in the pipeline:

Event	Level	Description
Agent authenticated	Debug	Successful JWT validation
Rate limit exceeded	Warning	Agent exceeded requests/min
Circuit breaker open	Warning	Upstream is temporarily unavailable
Policy denied	Information	Request blocked by policy
HITL suspended	Information	Request held for human review
Risk score computed	Debug	Per-request risk score
Startup failure	Critical	Unhandled exception during startup