Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 19:10:42', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:19:10:42 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:19:10:42 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36"'
inputname: drain rawmsg: '<190>1 2025-12-10T19:10:42.200938+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:19:10:42 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "265", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "a99402a0-d393-45c3-a5a4-f295081d6a20", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "35.83.92.16", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "cb9cb3d4-1d62-f27e-6f91-5aa9d0efaed2", "x-request-start": "1765393842593" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:19:10:42 +0000] \"GET \/robots.txt HTTP\/1.1\" 404 232 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/103.0.5060.134 Safari\/537.36\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T19:10:42.200938+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.088335+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1102", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "aa7a763f-95c6-4584-b8e7-08eebcf64120", "logplex-msg-count": "4", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.89.212.93", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "fd7daaf8-a72f-14f8-0ef7-eaec1a5c8da2", "x-request-start": "1765403183481" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"GET \/ HTTP\/1.1\" 405 178 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.088335+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.171067+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1102", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "aa7a763f-95c6-4584-b8e7-08eebcf64120", "logplex-msg-count": "4", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.89.212.93", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "fd7daaf8-a72f-14f8-0ef7-eaec1a5c8da2", "x-request-start": "1765403183481" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"HEAD \/apps HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.171067+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.254468+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1102", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "aa7a763f-95c6-4584-b8e7-08eebcf64120", "logplex-msg-count": "4", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.89.212.93", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "fd7daaf8-a72f-14f8-0ef7-eaec1a5c8da2", "x-request-start": "1765403183481" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"HEAD \/api\/action HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.254468+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.337057+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1102", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "aa7a763f-95c6-4584-b8e7-08eebcf64120", "logplex-msg-count": "4", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.89.212.93", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "fd7daaf8-a72f-14f8-0ef7-eaec1a5c8da2", "x-request-start": "1765403183481" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"HEAD \/api\/actions HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.337057+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.41963+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "548", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "396cb2a8-7ab3-4f2a-a3e3-20d5608a41f4", "logplex-msg-count": "2", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "35.81.56.183", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "82f2392b-3064-8790-cc0a-a65894e17640", "x-request-start": "1765403183778" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"HEAD \/_next\/data HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.41963+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 10 21:46:23', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-10T21:46:23.503642+00:00 host app web.1 - 172.17.128.1 - - [10/Dec/2025:21:46:23 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "548", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "396cb2a8-7ab3-4f2a-a3e3-20d5608a41f4", "logplex-msg-count": "2", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "35.81.56.183", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "82f2392b-3064-8790-cc0a-a65894e17640", "x-request-start": "1765403183778" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [10\/Dec\/2025:21:46:23 +0000] \"POST \/ HTTP\/1.1\" 400 20 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-10T21:46:23.503642+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.498269+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "GET / HTTP/1.1" 405 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1381", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "97d6a244-68a3-4db9-af1b-c384ba797371", "logplex-msg-count": "5", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "21319ad2-691d-4929-5648-1e52c70de721", "x-request-start": "1765423137896" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"GET \/ HTTP\/1.1\" 405 178 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.498269+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.548585+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /apps HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1381", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "97d6a244-68a3-4db9-af1b-c384ba797371", "logplex-msg-count": "5", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "21319ad2-691d-4929-5648-1e52c70de721", "x-request-start": "1765423137896" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"HEAD \/apps HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.548585+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.598449+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/action HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1381", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "97d6a244-68a3-4db9-af1b-c384ba797371", "logplex-msg-count": "5", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "21319ad2-691d-4929-5648-1e52c70de721", "x-request-start": "1765423137896" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"HEAD \/api\/action HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.598449+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.648463+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /api/actions HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1381", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "97d6a244-68a3-4db9-af1b-c384ba797371", "logplex-msg-count": "5", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "21319ad2-691d-4929-5648-1e52c70de721", "x-request-start": "1765423137896" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"HEAD \/api\/actions HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.648463+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.698239+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "HEAD /_next/data HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "1381", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "97d6a244-68a3-4db9-af1b-c384ba797371", "logplex-msg-count": "5", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.215.74.9", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "21319ad2-691d-4929-5648-1e52c70de721", "x-request-start": "1765423137896" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"HEAD \/_next\/data HTTP\/1.1\" 404 0 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.698239+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:18:57', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:18:57.751732+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:18:57 +0000] "POST / HTTP/1.1" 400 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "270", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "c36c7b06-bda8-4a40-ae81-ed9fe958a14b", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "44.235.124.40", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "b79fbb25-1604-5950-4e8a-377dc7f29acb", "x-request-start": "1765423138147" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:18:57 +0000] \"POST \/ HTTP\/1.1\" 400 20 \"-\" \"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/60.0.3112.113 Safari\/537.36 Assetnote\/1.0.0\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:18:57.751732+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 190,
syslogtag 'app[web.1]', programname: 'app', APP-NAME: 'app', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Dec 11 03:44:45', STRUCTURED-DATA: '-',
msg: '172.17.128.1 - - [11/Dec/2025:03:44:45 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"'
escaped msg: '172.17.128.1 - - [11/Dec/2025:03:44:45 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"'
inputname: drain rawmsg: '<190>1 2025-12-11T03:44:45.050112+00:00 host app web.1 - 172.17.128.1 - - [11/Dec/2025:03:44:45 +0000] "GET /robots.txt HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"'
$!:{ "metadata": { "httpheaders": { "host": "pagerduty-slack-app-log-drains.herokuapp.com", "user-agent": "logfwd", "content-length": "642", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "logplex-frame-id": "fe24579c-b082-4add-a672-beca7f96eb26", "logplex-msg-count": "2", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.89.212.93", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "9921a17b-0a65-05da-7350-a4a95f7be8ca", "x-request-start": "1765424685440" }, "queryparams": { "service": "PagerDuty%20Slack%20App", "environment": "prod", "team": "PagerDuty%20Enablement", "cloud": "Monitoring%20Cloud" } }, "data": { "event": "172.17.128.1 - - [11\/Dec\/2025:03:44:45 +0000] \"GET \/robots.txt HTTP\/1.1\" 404 232 \"-\" \"Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/131.0.0.0 Safari\/537.36; compatible; OAI-SearchBot\/1.3; robots.txt; +https:\/\/openai.com\/searchbot\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "agent_timestamp": "2025-12-11T03:44:45.050112+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "severity": "info", "uuid": "cbcbc710-814f-4857-9b9f-3b4a75c66e62" }, "owner": { "service": "PagerDuty Slack App", "team": "PagerDuty Enablement", "environment": "prod", "cloud": "Monitoring Cloud" } } }
$.:{ "app_id": "d.56c99ab7-0fd6-4c43-a9b5-e761bad4afc1", "source": "app", "dyno": "web.1", "app": "pagerduty-slack-app-prod", "space": "pet-alerting", "region": "oregon", "team": "PagerDuty Enablement", "service": "PagerDuty Slack App", "sourcetype": "-", "environment": "prod", "cloud": "Monitoring Cloud", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" }
$/: