Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190, syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Dec 11 18:38:32', STRUCTURED-DATA: '-', msg: '172.17.128.1 - - [11/Dec/2025:18:38:32 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"' escaped msg: '172.17.128.1 - - [11/Dec/2025:18:38:32 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"' inputname: drain rawmsg: '<190>1 2025-12-11T18:38:32.210784+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:18:38:32 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "199", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "44d5f0a4-048a-43e4-b97d-742c6fbd3fe7", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "35.81.56.183", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "b513abf6-9d5e-d0e2-465b-39ccab718735", "x-request-start": "1765478312616" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:18:38:32 +0000] \"POST \/ HTTP\/1.1\" 400 20 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T18:38:32.210784+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: