Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:28', STRUCTURED-DATA: '-', msg: 'Cycling' escaped msg: 'Cycling' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:28.56386+00:00 host heroku web.1 - Cycling' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "70", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "c61ab574-bc36-4190-b004-eca6a4b17c2a", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "2ae4c29f-3187-98c6-8bd5-0b06e65f5468", "x-request-start": "1774040788691" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "Cycling", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:28.56386+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "9114082AB225410A904E8BB826001545", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:28', STRUCTURED-DATA: '-', msg: 'State changed from up to stopping' escaped msg: 'State changed from up to stopping' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:28.739449+00:00 host heroku web.1 - State changed from up to stopping' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "97", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "bdd95d2c-f17a-4cfc-af1a-fda135905937", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "35.83.92.16", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "d967ecfa-7f9c-f4de-f49c-f668ac5e628b", "x-request-start": "1774040788866" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "State changed from up to stopping", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:28.739449+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "E5B911A46041431B863694F158E62941", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:42', STRUCTURED-DATA: '-', msg: 'Process exited with status 0' escaped msg: 'Process exited with status 0' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:42.238139+00:00 host heroku web.1 - Process exited with status 0' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "190", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "14d98317-41b2-48cc-9c22-025e45656a57", "logplex-msg-count": "2", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "142afa17-853f-a9b6-0421-f85e90c36e7d", "x-request-start": "1774040802367" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "Process exited with status 0", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:42.238139+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "1142E859AEFF40068EA8AEFFC1CBCF72", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:42', STRUCTURED-DATA: '-', msg: 'State changed from stopping to down' escaped msg: 'State changed from stopping to down' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:42.26249+00:00 host heroku web.1 - State changed from stopping to down' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "190", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "14d98317-41b2-48cc-9c22-025e45656a57", "logplex-msg-count": "2", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "142afa17-853f-a9b6-0421-f85e90c36e7d", "x-request-start": "1774040802367" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "State changed from stopping to down", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:42.26249+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "5E552BB297DB4562B4E013795CA4872A", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:42', STRUCTURED-DATA: '-', msg: 'State changed from provisioning to starting' escaped msg: 'State changed from provisioning to starting' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:42.542546+00:00 host heroku web.1 - State changed from provisioning to starting' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "108", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "37e6934e-a6de-46d5-8e09-2787691b50fe", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8da85896-72c2-affe-8eee-5748aa2c7390", "x-request-start": "1774040802644" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "State changed from provisioning to starting", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:42.542546+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "A981A699251E4F9995F1F85EE409C1BE", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-', TIMESTAMP: 'Mar 20 21:06:46', STRUCTURED-DATA: '-', msg: 'State changed from starting to up' escaped msg: 'State changed from starting to up' inputname: drain rawmsg: '<134>1 2026-03-20T21:06:46.910511+00:00 host heroku web.1 - State changed from starting to up' $!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "97", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "d92d1958-a7bb-4211-85ab-311e30526ba9", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (0c8eb837de5e)", "x-forwarded-for": "35.83.92.16", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "f221ed40-ca7d-c134-b45c-64266642f7b0", "x-request-start": "1774040807012" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "State changed from starting to up", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2026-03-20T21:06:46.910511+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" }, "facility": "local0", "priority": "info", "uuid": "67779EF48D69435D9F35CF88DDB064F6", "dnr": { "environment": "Heroku" } } } $.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "heroku", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" } $/: