Structured Logging in .NET Core Worker Service with Serilog - Write logs to Amazon CloudWatch

In this post, I'll show how to use Serilog in a .NET Worker Service to perform Structured Logging and persist log data to AWS CloudWatch.

You will also learn how to use AWS CloudWatch Log Insights to query log data to determine how structured logging can benefit you.


  1. Visual Studio
  2. .NET 6
  3. AWS Account

Step 1: Create a .NET Worker Service

Open Visual Studio, create New Project, and select Worker Service template.


On the next dialog, enter Project Name and select Next. Select the latest framework, I am selecting .NET6 for now.

Step 2: Add Serilog to the .NET Worker Service

To add Serilog to your .NET Worker Service (Non-Web) application, install the following NuGet packages.

Install-Package Serilog.Extensions.Hosting
Install-Package Serilog.Settings.Configuration
Install-Package Serilog.Sinks.Console
Install-Package AWS.Logger.SeriLog
  • Serilog.Extensions.Hosting - This package provides an extension method UseSerilog() to add Serilog provider to Non-web .NET Core applications. Since this package depends on Serilog, it automatically installs that as well.

  • Serilog.Settings.Configuration - This package allows you to read Serilog configurations from Microsoft.Extensions.Configuration sources, including .NET Core's appsettings.json file.

Install Serilog sink packages

Serilog provides sinks for writing logs at various destinations. Here is a complete list of supported sinks. To follow this blog post, you can just install the following sinks.

  • Serilog.Sinks.Console - This package writes logs to Console.
  • AWS.Logger.SeriLog - This package writes logs to AWS CloudWatch. This is an official NuGet package managed by AWS.

Step 3: Configure Serilog in Worker Service

Open Program.cs file, and update the code as shown below.

IHost host = Host.CreateDefaultBuilder(args)
    .ConfigureServices(services =>
    .UseSerilog((hostingContext, services, loggerConfiguration) => loggerConfiguration
    .Enrich.FromLogContext()) // <-- This line adds support for structured logging

The preceding code uses UseSerilog() extension method to add the Serilog logging provider to your application. Next, it reads configuration from IConfiguration sources, which is appsettings.json for this demo. Finally, it adds support for structured logging from the Enrich.FromLogContext() line.

Now let's modify appsettings.json file to add Serilog configuration.

  "Logging": { // <-- You can remove this Logging section, as this is no longer used
    "LogLevel": {
      "Default": "Information",
      "Microsoft.Hosting.Lifetime": "Information"
  "Serilog": {
    "Using": [ "Serilog.Sinks.Console", "AWS.Logger.SeriLog" ],
    "LogGroup": "WorkerService.LoggingDemo.LogGroup",
    "LogStreamNamePrefix": "dev",
    "Region": "ap-south-1",
    "MinimumLevel": "Debug",
    "WriteTo": [
      { "Name": "Console" },
        "Name": "AWSSeriLog",
        "Args": {
          "textFormatter": "Serilog.Formatting.Json.JsonFormatter, Serilog"
    "Properties": {
      "Application": "WorkerService.LoggingDemo"

Finally, edit worker.cs file and update the code to include a logging statement as shown in the following code snippet.

public class Worker : BackgroundService
    private readonly ILogger<Worker> _logger;

    public Worker(ILogger<Worker> logger)
        _logger = logger;

    protected override async Task ExecuteAsync(CancellationToken stoppingToken)
        while (!stoppingToken.IsCancellationRequested)
            // Example of structured logging (logging properties along with log event)
            _logger.LogInformation("Order {OrderId} by {Email} has been processed successfully.", 1, "");

            await Task.Delay(1000, stoppingToken);

Step 4: Run the application to generate logs

Build and run the application by pressing F5, you should see the logs in Console as shown shown below.


Step 5: Viewing the output in AWS CloudWatch Logs & Logs Insights

Logs generated in the previous step have also been written to AWS CloudWatch automatically through the configured CloudWatch sink.

Follow the instructions below to view the logs in AWS CloudWatch.

  1. Go to AWS CloudWatch and see the output for structured logging. As you can see, the logs are in JSON format rather than plain text.


  2. Next, go to AWS CloudWatch, and select Logs Insights.

  3. Select the Log Groups from the dropdown and write a query to filter logs.

  4. See the below screenshot of the filtered logs in AWS CloudWatch Logs Insights.



In this post, you learned how to use Serilog to perform structure logging in AWS CloudWatch from your .NET Worker Service. Please share your views and feedback in the section below.

Thank You ❤️

Buy Me A Coffee