Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-1] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="4" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" LOG: duration: 21614.917 ms execute : SELECT "Incident"."createdAt" AS "Incident_createdAt", "Incident"."modifiedAt" AS "Incident_modifiedAt", "Incident"."id" AS "Incident_id", "Incident"."subject" AS "Incident_subject", "Incident"."description" AS "Incident_description", "Incident"."caseRecordId" AS "Incident_caseRecordId", "Incident"."caseNumber" AS "Incident_caseNumber", "Incident"."severity" AS "Incident_severity", "Incident"."status" AS "Incident_status", "Incident"."origin" AS "Incident_origin", "Incident"."originReference" AS "Incident_originReference",' escaped msg: '[DATABASE] [12-1] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="4" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" LOG: duration: 21614.917 ms execute : SELECT "Incident"."createdAt" AS "Incident_createdAt", "Incident"."modifiedAt" AS "Incident_modifiedAt", "Incident"."id" AS "Incident_id", "Incident"."subject" AS "Incident_subject", "Incident"."description" AS "Incident_description", "Incident"."caseRecordId" AS "Incident_caseRecordId", "Incident"."caseNumber" AS "Incident_caseNumber", "Incident"."severity" AS "Incident_severity", "Incident"."status" AS "Incident_status", "Incident"."origin" AS "Incident_origin", "Incident"."originReference" AS "Incident_originReference",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-1] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="4" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" LOG: duration: 21614.917 ms execute : SELECT "Incident"."createdAt" AS "Incident_createdAt", "Incident"."modifiedAt" AS "Incident_modifiedAt", "Incident"."id" AS "Incident_id", "Incident"."subject" AS "Incident_subject", "Incident"."description" AS "Incident_description", "Incident"."caseRecordId" AS "Incident_caseRecordId", "Incident"."caseNumber" AS "Incident_caseNumber", "Incident"."severity" AS "Incident_severity", "Incident"."status" AS "Incident_status", "Incident"."origin" AS "Incident_origin", "Incident"."originReference" AS "Incident_originReference",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-1] sql_error_code = 00000 time_ms = \"2025-03-17 10:22:32.368 UTC\" pid=\"1454206\" proc_start_time=\"2025-03-17 10:22:10 UTC\" session_id=\"67d7f7d2.16307e\" vtid=\"6\/5995011\" tid=\"2273998\" log_line=\"4\" database=\"dbgdbhuaqbckn5\" connection_source=\"10.0.169.213(39930)\" user=\"ue3280ufn31cpn\" application_name=\"icc\" LOG: duration: 21614.917 ms execute : SELECT \"Incident\".\"createdAt\" AS \"Incident_createdAt\", \"Incident\".\"modifiedAt\" AS \"Incident_modifiedAt\", \"Incident\".\"id\" AS \"Incident_id\", \"Incident\".\"subject\" AS \"Incident_subject\", \"Incident\".\"description\" AS \"Incident_description\", \"Incident\".\"caseRecordId\" AS \"Incident_caseRecordId\", \"Incident\".\"caseNumber\" AS \"Incident_caseNumber\", \"Incident\".\"severity\" AS \"Incident_severity\", \"Incident\".\"status\" AS \"Incident_status\", \"Incident\".\"origin\" AS \"Incident_origin\", \"Incident\".\"originReference\" AS \"Incident_originReference\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-2] "Incident"."impact" AS "Incident_impact", "Incident"."impactStartTime" AS "Incident_impactStartTime", "Incident"."impactEndTime" AS "Incident_impactEndTime", "Incident"."detectedTime" AS "Incident_detectedTime", "Incident"."gusExportTimestamp" AS "Incident_gusExportTimestamp", "Incident"."category" AS "Incident_category", "Incident"."rootCause" AS "Incident_rootCause", "Incident"."servicesImpacted" AS "Incident_servicesImpacted", "Incident"."closedAt" AS "Incident_closedAt", "Incident"."quipDocLink" AS "Incident_quipDocLink", "Incident"."engagedAt" AS "Incident_engagedAt", "Incident"."lastAttemptedForceExport" AS "Incident_lastAttemptedForceExport", "Incident"."lastExportStatus" AS "Incident_lastExportStatus", "Incident"."createdBy" AS "Incident_createdBy", "Incident"."modifiedBy" AS "Incident_modifiedBy", "Incident"."teamId" AS "Incident_teamId", "Incident"."slackChannelId" AS' escaped msg: '[DATABASE] [12-2] "Incident"."impact" AS "Incident_impact", "Incident"."impactStartTime" AS "Incident_impactStartTime", "Incident"."impactEndTime" AS "Incident_impactEndTime", "Incident"."detectedTime" AS "Incident_detectedTime", "Incident"."gusExportTimestamp" AS "Incident_gusExportTimestamp", "Incident"."category" AS "Incident_category", "Incident"."rootCause" AS "Incident_rootCause", "Incident"."servicesImpacted" AS "Incident_servicesImpacted", "Incident"."closedAt" AS "Incident_closedAt", "Incident"."quipDocLink" AS "Incident_quipDocLink", "Incident"."engagedAt" AS "Incident_engagedAt", "Incident"."lastAttemptedForceExport" AS "Incident_lastAttemptedForceExport", "Incident"."lastExportStatus" AS "Incident_lastExportStatus", "Incident"."createdBy" AS "Incident_createdBy", "Incident"."modifiedBy" AS "Incident_modifiedBy", "Incident"."teamId" AS "Incident_teamId", "Incident"."slackChannelId" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-2] "Incident"."impact" AS "Incident_impact", "Incident"."impactStartTime" AS "Incident_impactStartTime", "Incident"."impactEndTime" AS "Incident_impactEndTime", "Incident"."detectedTime" AS "Incident_detectedTime", "Incident"."gusExportTimestamp" AS "Incident_gusExportTimestamp", "Incident"."category" AS "Incident_category", "Incident"."rootCause" AS "Incident_rootCause", "Incident"."servicesImpacted" AS "Incident_servicesImpacted", "Incident"."closedAt" AS "Incident_closedAt", "Incident"."quipDocLink" AS "Incident_quipDocLink", "Incident"."engagedAt" AS "Incident_engagedAt", "Incident"."lastAttemptedForceExport" AS "Incident_lastAttemptedForceExport", "Incident"."lastExportStatus" AS "Incident_lastExportStatus", "Incident"."createdBy" AS "Incident_createdBy", "Incident"."modifiedBy" AS "Incident_modifiedBy", "Incident"."teamId" AS "Incident_teamId", "Incident"."slackChannelId" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-2] \"Incident\".\"impact\" AS \"Incident_impact\", \"Incident\".\"impactStartTime\" AS \"Incident_impactStartTime\", \"Incident\".\"impactEndTime\" AS \"Incident_impactEndTime\", \"Incident\".\"detectedTime\" AS \"Incident_detectedTime\", \"Incident\".\"gusExportTimestamp\" AS \"Incident_gusExportTimestamp\", \"Incident\".\"category\" AS \"Incident_category\", \"Incident\".\"rootCause\" AS \"Incident_rootCause\", \"Incident\".\"servicesImpacted\" AS \"Incident_servicesImpacted\", \"Incident\".\"closedAt\" AS \"Incident_closedAt\", \"Incident\".\"quipDocLink\" AS \"Incident_quipDocLink\", \"Incident\".\"engagedAt\" AS \"Incident_engagedAt\", \"Incident\".\"lastAttemptedForceExport\" AS \"Incident_lastAttemptedForceExport\", \"Incident\".\"lastExportStatus\" AS \"Incident_lastExportStatus\", \"Incident\".\"createdBy\" AS \"Incident_createdBy\", \"Incident\".\"modifiedBy\" AS \"Incident_modifiedBy\", \"Incident\".\"teamId\" AS \"Incident_teamId\", \"Incident\".\"slackChannelId\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-3] "Incident_slackChannelId", "Incident__createdBy"."id" AS "Incident__createdBy_id", "Incident__createdBy"."email" AS "Incident__createdBy_email", "Incident__createdBy"."active" AS "Incident__createdBy_active", "Incident__createdBy"."name" AS "Incident__createdBy_name", "Incident__createdBy"."firstName" AS "Incident__createdBy_firstName", "Incident__createdBy"."lastName" AS "Incident__createdBy_lastName", "Incident__createdBy"."profile" AS "Incident__createdBy_profile", "Incident__createdBy"."gusUserId" AS "Incident__createdBy_gusUserId", "Incident__createdBy"."slackUserId" AS "Incident__createdBy_slackUserId", "Incident__createdBy"."createdBy" AS "Incident__createdBy_createdBy", "Incident__createdBy"."modifiedBy" AS "Incident__createdBy_modifiedBy", "Incident__createdBy"."createdAt" AS "Incident__createdBy_createdAt", "Incident__createdBy"."modifiedAt" AS' escaped msg: '[DATABASE] [12-3] "Incident_slackChannelId", "Incident__createdBy"."id" AS "Incident__createdBy_id", "Incident__createdBy"."email" AS "Incident__createdBy_email", "Incident__createdBy"."active" AS "Incident__createdBy_active", "Incident__createdBy"."name" AS "Incident__createdBy_name", "Incident__createdBy"."firstName" AS "Incident__createdBy_firstName", "Incident__createdBy"."lastName" AS "Incident__createdBy_lastName", "Incident__createdBy"."profile" AS "Incident__createdBy_profile", "Incident__createdBy"."gusUserId" AS "Incident__createdBy_gusUserId", "Incident__createdBy"."slackUserId" AS "Incident__createdBy_slackUserId", "Incident__createdBy"."createdBy" AS "Incident__createdBy_createdBy", "Incident__createdBy"."modifiedBy" AS "Incident__createdBy_modifiedBy", "Incident__createdBy"."createdAt" AS "Incident__createdBy_createdAt", "Incident__createdBy"."modifiedAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-3] "Incident_slackChannelId", "Incident__createdBy"."id" AS "Incident__createdBy_id", "Incident__createdBy"."email" AS "Incident__createdBy_email", "Incident__createdBy"."active" AS "Incident__createdBy_active", "Incident__createdBy"."name" AS "Incident__createdBy_name", "Incident__createdBy"."firstName" AS "Incident__createdBy_firstName", "Incident__createdBy"."lastName" AS "Incident__createdBy_lastName", "Incident__createdBy"."profile" AS "Incident__createdBy_profile", "Incident__createdBy"."gusUserId" AS "Incident__createdBy_gusUserId", "Incident__createdBy"."slackUserId" AS "Incident__createdBy_slackUserId", "Incident__createdBy"."createdBy" AS "Incident__createdBy_createdBy", "Incident__createdBy"."modifiedBy" AS "Incident__createdBy_modifiedBy", "Incident__createdBy"."createdAt" AS "Incident__createdBy_createdAt", "Incident__createdBy"."modifiedAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-3] \"Incident_slackChannelId\", \"Incident__createdBy\".\"id\" AS \"Incident__createdBy_id\", \"Incident__createdBy\".\"email\" AS \"Incident__createdBy_email\", \"Incident__createdBy\".\"active\" AS \"Incident__createdBy_active\", \"Incident__createdBy\".\"name\" AS \"Incident__createdBy_name\", \"Incident__createdBy\".\"firstName\" AS \"Incident__createdBy_firstName\", \"Incident__createdBy\".\"lastName\" AS \"Incident__createdBy_lastName\", \"Incident__createdBy\".\"profile\" AS \"Incident__createdBy_profile\", \"Incident__createdBy\".\"gusUserId\" AS \"Incident__createdBy_gusUserId\", \"Incident__createdBy\".\"slackUserId\" AS \"Incident__createdBy_slackUserId\", \"Incident__createdBy\".\"createdBy\" AS \"Incident__createdBy_createdBy\", \"Incident__createdBy\".\"modifiedBy\" AS \"Incident__createdBy_modifiedBy\", \"Incident__createdBy\".\"createdAt\" AS \"Incident__createdBy_createdAt\", \"Incident__createdBy\".\"modifiedAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-4] "Incident__createdBy_modifiedAt", "Incident__modifiedBy"."id" AS "Incident__modifiedBy_id", "Incident__modifiedBy"."email" AS "Incident__modifiedBy_email", "Incident__modifiedBy"."active" AS "Incident__modifiedBy_active", "Incident__modifiedBy"."name" AS "Incident__modifiedBy_name", "Incident__modifiedBy"."firstName" AS "Incident__modifiedBy_firstName", "Incident__modifiedBy"."lastName" AS "Incident__modifiedBy_lastName", "Incident__modifiedBy"."profile" AS "Incident__modifiedBy_profile", "Incident__modifiedBy"."gusUserId" AS "Incident__modifiedBy_gusUserId", "Incident__modifiedBy"."slackUserId" AS "Incident__modifiedBy_slackUserId", "Incident__modifiedBy"."createdBy" AS "Incident__modifiedBy_createdBy", "Incident__modifiedBy"."modifiedBy" AS "Incident__modifiedBy_modifiedBy", "Incident__modifiedBy"."createdAt" AS "Incident__modifiedBy_createdAt", "Incident__modifiedBy"."modifiedAt" AS' escaped msg: '[DATABASE] [12-4] "Incident__createdBy_modifiedAt", "Incident__modifiedBy"."id" AS "Incident__modifiedBy_id", "Incident__modifiedBy"."email" AS "Incident__modifiedBy_email", "Incident__modifiedBy"."active" AS "Incident__modifiedBy_active", "Incident__modifiedBy"."name" AS "Incident__modifiedBy_name", "Incident__modifiedBy"."firstName" AS "Incident__modifiedBy_firstName", "Incident__modifiedBy"."lastName" AS "Incident__modifiedBy_lastName", "Incident__modifiedBy"."profile" AS "Incident__modifiedBy_profile", "Incident__modifiedBy"."gusUserId" AS "Incident__modifiedBy_gusUserId", "Incident__modifiedBy"."slackUserId" AS "Incident__modifiedBy_slackUserId", "Incident__modifiedBy"."createdBy" AS "Incident__modifiedBy_createdBy", "Incident__modifiedBy"."modifiedBy" AS "Incident__modifiedBy_modifiedBy", "Incident__modifiedBy"."createdAt" AS "Incident__modifiedBy_createdAt", "Incident__modifiedBy"."modifiedAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-4] "Incident__createdBy_modifiedAt", "Incident__modifiedBy"."id" AS "Incident__modifiedBy_id", "Incident__modifiedBy"."email" AS "Incident__modifiedBy_email", "Incident__modifiedBy"."active" AS "Incident__modifiedBy_active", "Incident__modifiedBy"."name" AS "Incident__modifiedBy_name", "Incident__modifiedBy"."firstName" AS "Incident__modifiedBy_firstName", "Incident__modifiedBy"."lastName" AS "Incident__modifiedBy_lastName", "Incident__modifiedBy"."profile" AS "Incident__modifiedBy_profile", "Incident__modifiedBy"."gusUserId" AS "Incident__modifiedBy_gusUserId", "Incident__modifiedBy"."slackUserId" AS "Incident__modifiedBy_slackUserId", "Incident__modifiedBy"."createdBy" AS "Incident__modifiedBy_createdBy", "Incident__modifiedBy"."modifiedBy" AS "Incident__modifiedBy_modifiedBy", "Incident__modifiedBy"."createdAt" AS "Incident__modifiedBy_createdAt", "Incident__modifiedBy"."modifiedAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-4] \"Incident__createdBy_modifiedAt\", \"Incident__modifiedBy\".\"id\" AS \"Incident__modifiedBy_id\", \"Incident__modifiedBy\".\"email\" AS \"Incident__modifiedBy_email\", \"Incident__modifiedBy\".\"active\" AS \"Incident__modifiedBy_active\", \"Incident__modifiedBy\".\"name\" AS \"Incident__modifiedBy_name\", \"Incident__modifiedBy\".\"firstName\" AS \"Incident__modifiedBy_firstName\", \"Incident__modifiedBy\".\"lastName\" AS \"Incident__modifiedBy_lastName\", \"Incident__modifiedBy\".\"profile\" AS \"Incident__modifiedBy_profile\", \"Incident__modifiedBy\".\"gusUserId\" AS \"Incident__modifiedBy_gusUserId\", \"Incident__modifiedBy\".\"slackUserId\" AS \"Incident__modifiedBy_slackUserId\", \"Incident__modifiedBy\".\"createdBy\" AS \"Incident__modifiedBy_createdBy\", \"Incident__modifiedBy\".\"modifiedBy\" AS \"Incident__modifiedBy_modifiedBy\", \"Incident__modifiedBy\".\"createdAt\" AS \"Incident__modifiedBy_createdAt\", \"Incident__modifiedBy\".\"modifiedAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-5] "Incident__modifiedBy_modifiedAt", "Incident__team"."createdAt" AS "Incident__team_createdAt", "Incident__team"."modifiedAt" AS "Incident__team_modifiedAt", "Incident__team"."id" AS "Incident__team_id", "Incident__team"."externalId" AS "Incident__team_externalId", "Incident__team"."baseConfigJson" AS "Incident__team_baseConfigJson", "Incident__team"."createdBy" AS "Incident__team_createdBy", "Incident__team"."modifiedBy" AS "Incident__team_modifiedBy", "Incident__team"."configId" AS "Incident__team_configId", "Incident__team__createdBy"."id" AS "Incident__team__createdBy_id", "Incident__team__createdBy"."email" AS "Incident__team__createdBy_email", "Incident__team__createdBy"."active" AS "Incident__team__createdBy_active", "Incident__team__createdBy"."name" AS "Incident__team__createdBy_name", "Incident__team__createdBy"."firstName" AS "Incident__team__createdBy_firstName",' escaped msg: '[DATABASE] [12-5] "Incident__modifiedBy_modifiedAt", "Incident__team"."createdAt" AS "Incident__team_createdAt", "Incident__team"."modifiedAt" AS "Incident__team_modifiedAt", "Incident__team"."id" AS "Incident__team_id", "Incident__team"."externalId" AS "Incident__team_externalId", "Incident__team"."baseConfigJson" AS "Incident__team_baseConfigJson", "Incident__team"."createdBy" AS "Incident__team_createdBy", "Incident__team"."modifiedBy" AS "Incident__team_modifiedBy", "Incident__team"."configId" AS "Incident__team_configId", "Incident__team__createdBy"."id" AS "Incident__team__createdBy_id", "Incident__team__createdBy"."email" AS "Incident__team__createdBy_email", "Incident__team__createdBy"."active" AS "Incident__team__createdBy_active", "Incident__team__createdBy"."name" AS "Incident__team__createdBy_name", "Incident__team__createdBy"."firstName" AS "Incident__team__createdBy_firstName",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-5] "Incident__modifiedBy_modifiedAt", "Incident__team"."createdAt" AS "Incident__team_createdAt", "Incident__team"."modifiedAt" AS "Incident__team_modifiedAt", "Incident__team"."id" AS "Incident__team_id", "Incident__team"."externalId" AS "Incident__team_externalId", "Incident__team"."baseConfigJson" AS "Incident__team_baseConfigJson", "Incident__team"."createdBy" AS "Incident__team_createdBy", "Incident__team"."modifiedBy" AS "Incident__team_modifiedBy", "Incident__team"."configId" AS "Incident__team_configId", "Incident__team__createdBy"."id" AS "Incident__team__createdBy_id", "Incident__team__createdBy"."email" AS "Incident__team__createdBy_email", "Incident__team__createdBy"."active" AS "Incident__team__createdBy_active", "Incident__team__createdBy"."name" AS "Incident__team__createdBy_name", "Incident__team__createdBy"."firstName" AS "Incident__team__createdBy_firstName",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-5] \"Incident__modifiedBy_modifiedAt\", \"Incident__team\".\"createdAt\" AS \"Incident__team_createdAt\", \"Incident__team\".\"modifiedAt\" AS \"Incident__team_modifiedAt\", \"Incident__team\".\"id\" AS \"Incident__team_id\", \"Incident__team\".\"externalId\" AS \"Incident__team_externalId\", \"Incident__team\".\"baseConfigJson\" AS \"Incident__team_baseConfigJson\", \"Incident__team\".\"createdBy\" AS \"Incident__team_createdBy\", \"Incident__team\".\"modifiedBy\" AS \"Incident__team_modifiedBy\", \"Incident__team\".\"configId\" AS \"Incident__team_configId\", \"Incident__team__createdBy\".\"id\" AS \"Incident__team__createdBy_id\", \"Incident__team__createdBy\".\"email\" AS \"Incident__team__createdBy_email\", \"Incident__team__createdBy\".\"active\" AS \"Incident__team__createdBy_active\", \"Incident__team__createdBy\".\"name\" AS \"Incident__team__createdBy_name\", \"Incident__team__createdBy\".\"firstName\" AS \"Incident__team__createdBy_firstName\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-6] "Incident__team__createdBy"."lastName" AS "Incident__team__createdBy_lastName", "Incident__team__createdBy"."profile" AS "Incident__team__createdBy_profile", "Incident__team__createdBy"."gusUserId" AS "Incident__team__createdBy_gusUserId", "Incident__team__createdBy"."slackUserId" AS "Incident__team__createdBy_slackUserId", "Incident__team__createdBy"."createdBy" AS "Incident__team__createdBy_createdBy", "Incident__team__createdBy"."modifiedBy" AS "Incident__team__createdBy_modifiedBy", "Incident__team__createdBy"."createdAt" AS "Incident__team__createdBy_createdAt", "Incident__team__createdBy"."modifiedAt" AS "Incident__team__createdBy_modifiedAt", "Incident__team__modifiedBy"."id" AS "Incident__team__modifiedBy_id", "Incident__team__modifiedBy"."email" AS "Incident__team__modifiedBy_email", "Incident__team__modifiedBy"."active" AS "Incident__team__modifiedBy_active",' escaped msg: '[DATABASE] [12-6] "Incident__team__createdBy"."lastName" AS "Incident__team__createdBy_lastName", "Incident__team__createdBy"."profile" AS "Incident__team__createdBy_profile", "Incident__team__createdBy"."gusUserId" AS "Incident__team__createdBy_gusUserId", "Incident__team__createdBy"."slackUserId" AS "Incident__team__createdBy_slackUserId", "Incident__team__createdBy"."createdBy" AS "Incident__team__createdBy_createdBy", "Incident__team__createdBy"."modifiedBy" AS "Incident__team__createdBy_modifiedBy", "Incident__team__createdBy"."createdAt" AS "Incident__team__createdBy_createdAt", "Incident__team__createdBy"."modifiedAt" AS "Incident__team__createdBy_modifiedAt", "Incident__team__modifiedBy"."id" AS "Incident__team__modifiedBy_id", "Incident__team__modifiedBy"."email" AS "Incident__team__modifiedBy_email", "Incident__team__modifiedBy"."active" AS "Incident__team__modifiedBy_active",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-6] "Incident__team__createdBy"."lastName" AS "Incident__team__createdBy_lastName", "Incident__team__createdBy"."profile" AS "Incident__team__createdBy_profile", "Incident__team__createdBy"."gusUserId" AS "Incident__team__createdBy_gusUserId", "Incident__team__createdBy"."slackUserId" AS "Incident__team__createdBy_slackUserId", "Incident__team__createdBy"."createdBy" AS "Incident__team__createdBy_createdBy", "Incident__team__createdBy"."modifiedBy" AS "Incident__team__createdBy_modifiedBy", "Incident__team__createdBy"."createdAt" AS "Incident__team__createdBy_createdAt", "Incident__team__createdBy"."modifiedAt" AS "Incident__team__createdBy_modifiedAt", "Incident__team__modifiedBy"."id" AS "Incident__team__modifiedBy_id", "Incident__team__modifiedBy"."email" AS "Incident__team__modifiedBy_email", "Incident__team__modifiedBy"."active" AS "Incident__team__modifiedBy_active",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-6] \"Incident__team__createdBy\".\"lastName\" AS \"Incident__team__createdBy_lastName\", \"Incident__team__createdBy\".\"profile\" AS \"Incident__team__createdBy_profile\", \"Incident__team__createdBy\".\"gusUserId\" AS \"Incident__team__createdBy_gusUserId\", \"Incident__team__createdBy\".\"slackUserId\" AS \"Incident__team__createdBy_slackUserId\", \"Incident__team__createdBy\".\"createdBy\" AS \"Incident__team__createdBy_createdBy\", \"Incident__team__createdBy\".\"modifiedBy\" AS \"Incident__team__createdBy_modifiedBy\", \"Incident__team__createdBy\".\"createdAt\" AS \"Incident__team__createdBy_createdAt\", \"Incident__team__createdBy\".\"modifiedAt\" AS \"Incident__team__createdBy_modifiedAt\", \"Incident__team__modifiedBy\".\"id\" AS \"Incident__team__modifiedBy_id\", \"Incident__team__modifiedBy\".\"email\" AS \"Incident__team__modifiedBy_email\", \"Incident__team__modifiedBy\".\"active\" AS \"Incident__team__modifiedBy_active\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-7] "Incident__team__modifiedBy"."name" AS "Incident__team__modifiedBy_name", "Incident__team__modifiedBy"."firstName" AS "Incident__team__modifiedBy_firstName", "Incident__team__modifiedBy"."lastName" AS "Incident__team__modifiedBy_lastName", "Incident__team__modifiedBy"."profile" AS "Incident__team__modifiedBy_profile", "Incident__team__modifiedBy"."gusUserId" AS "Incident__team__modifiedBy_gusUserId", "Incident__team__modifiedBy"."slackUserId" AS "Incident__team__modifiedBy_slackUserId", "Incident__team__modifiedBy"."createdBy" AS "Incident__team__modifiedBy_createdBy", "Incident__team__modifiedBy"."modifiedBy" AS "Incident__team__modifiedBy_modifiedBy", "Incident__team__modifiedBy"."createdAt" AS "Incident__team__modifiedBy_createdAt", "Incident__team__modifiedBy"."modifiedAt" AS "Incident__team__modifiedBy_modifiedAt", "Incident__team__collaborators"."id" AS' escaped msg: '[DATABASE] [12-7] "Incident__team__modifiedBy"."name" AS "Incident__team__modifiedBy_name", "Incident__team__modifiedBy"."firstName" AS "Incident__team__modifiedBy_firstName", "Incident__team__modifiedBy"."lastName" AS "Incident__team__modifiedBy_lastName", "Incident__team__modifiedBy"."profile" AS "Incident__team__modifiedBy_profile", "Incident__team__modifiedBy"."gusUserId" AS "Incident__team__modifiedBy_gusUserId", "Incident__team__modifiedBy"."slackUserId" AS "Incident__team__modifiedBy_slackUserId", "Incident__team__modifiedBy"."createdBy" AS "Incident__team__modifiedBy_createdBy", "Incident__team__modifiedBy"."modifiedBy" AS "Incident__team__modifiedBy_modifiedBy", "Incident__team__modifiedBy"."createdAt" AS "Incident__team__modifiedBy_createdAt", "Incident__team__modifiedBy"."modifiedAt" AS "Incident__team__modifiedBy_modifiedAt", "Incident__team__collaborators"."id" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-7] "Incident__team__modifiedBy"."name" AS "Incident__team__modifiedBy_name", "Incident__team__modifiedBy"."firstName" AS "Incident__team__modifiedBy_firstName", "Incident__team__modifiedBy"."lastName" AS "Incident__team__modifiedBy_lastName", "Incident__team__modifiedBy"."profile" AS "Incident__team__modifiedBy_profile", "Incident__team__modifiedBy"."gusUserId" AS "Incident__team__modifiedBy_gusUserId", "Incident__team__modifiedBy"."slackUserId" AS "Incident__team__modifiedBy_slackUserId", "Incident__team__modifiedBy"."createdBy" AS "Incident__team__modifiedBy_createdBy", "Incident__team__modifiedBy"."modifiedBy" AS "Incident__team__modifiedBy_modifiedBy", "Incident__team__modifiedBy"."createdAt" AS "Incident__team__modifiedBy_createdAt", "Incident__team__modifiedBy"."modifiedAt" AS "Incident__team__modifiedBy_modifiedAt", "Incident__team__collaborators"."id" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-7] \"Incident__team__modifiedBy\".\"name\" AS \"Incident__team__modifiedBy_name\", \"Incident__team__modifiedBy\".\"firstName\" AS \"Incident__team__modifiedBy_firstName\", \"Incident__team__modifiedBy\".\"lastName\" AS \"Incident__team__modifiedBy_lastName\", \"Incident__team__modifiedBy\".\"profile\" AS \"Incident__team__modifiedBy_profile\", \"Incident__team__modifiedBy\".\"gusUserId\" AS \"Incident__team__modifiedBy_gusUserId\", \"Incident__team__modifiedBy\".\"slackUserId\" AS \"Incident__team__modifiedBy_slackUserId\", \"Incident__team__modifiedBy\".\"createdBy\" AS \"Incident__team__modifiedBy_createdBy\", \"Incident__team__modifiedBy\".\"modifiedBy\" AS \"Incident__team__modifiedBy_modifiedBy\", \"Incident__team__modifiedBy\".\"createdAt\" AS \"Incident__team__modifiedBy_createdAt\", \"Incident__team__modifiedBy\".\"modifiedAt\" AS \"Incident__team__modifiedBy_modifiedAt\", \"Incident__team__collaborators\".\"id\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-8] "Incident__team__collaborators_id", "Incident__team__collaborators"."email" AS "Incident__team__collaborators_email", "Incident__team__collaborators"."active" AS "Incident__team__collaborators_active", "Incident__team__collaborators"."name" AS "Incident__team__collaborators_name", "Incident__team__collaborators"."firstName" AS "Incident__team__collaborators_firstName", "Incident__team__collaborators"."lastName" AS "Incident__team__collaborators_lastName", "Incident__team__collaborators"."profile" AS "Incident__team__collaborators_profile", "Incident__team__collaborators"."gusUserId" AS "Incident__team__collaborators_gusUserId", "Incident__team__collaborators"."slackUserId" AS "Incident__team__collaborators_slackUserId", "Incident__team__collaborators"."createdBy" AS "Incident__team__collaborators_createdBy", "Incident__team__collaborators"."modifiedBy" AS' escaped msg: '[DATABASE] [12-8] "Incident__team__collaborators_id", "Incident__team__collaborators"."email" AS "Incident__team__collaborators_email", "Incident__team__collaborators"."active" AS "Incident__team__collaborators_active", "Incident__team__collaborators"."name" AS "Incident__team__collaborators_name", "Incident__team__collaborators"."firstName" AS "Incident__team__collaborators_firstName", "Incident__team__collaborators"."lastName" AS "Incident__team__collaborators_lastName", "Incident__team__collaborators"."profile" AS "Incident__team__collaborators_profile", "Incident__team__collaborators"."gusUserId" AS "Incident__team__collaborators_gusUserId", "Incident__team__collaborators"."slackUserId" AS "Incident__team__collaborators_slackUserId", "Incident__team__collaborators"."createdBy" AS "Incident__team__collaborators_createdBy", "Incident__team__collaborators"."modifiedBy" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-8] "Incident__team__collaborators_id", "Incident__team__collaborators"."email" AS "Incident__team__collaborators_email", "Incident__team__collaborators"."active" AS "Incident__team__collaborators_active", "Incident__team__collaborators"."name" AS "Incident__team__collaborators_name", "Incident__team__collaborators"."firstName" AS "Incident__team__collaborators_firstName", "Incident__team__collaborators"."lastName" AS "Incident__team__collaborators_lastName", "Incident__team__collaborators"."profile" AS "Incident__team__collaborators_profile", "Incident__team__collaborators"."gusUserId" AS "Incident__team__collaborators_gusUserId", "Incident__team__collaborators"."slackUserId" AS "Incident__team__collaborators_slackUserId", "Incident__team__collaborators"."createdBy" AS "Incident__team__collaborators_createdBy", "Incident__team__collaborators"."modifiedBy" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-8] \"Incident__team__collaborators_id\", \"Incident__team__collaborators\".\"email\" AS \"Incident__team__collaborators_email\", \"Incident__team__collaborators\".\"active\" AS \"Incident__team__collaborators_active\", \"Incident__team__collaborators\".\"name\" AS \"Incident__team__collaborators_name\", \"Incident__team__collaborators\".\"firstName\" AS \"Incident__team__collaborators_firstName\", \"Incident__team__collaborators\".\"lastName\" AS \"Incident__team__collaborators_lastName\", \"Incident__team__collaborators\".\"profile\" AS \"Incident__team__collaborators_profile\", \"Incident__team__collaborators\".\"gusUserId\" AS \"Incident__team__collaborators_gusUserId\", \"Incident__team__collaborators\".\"slackUserId\" AS \"Incident__team__collaborators_slackUserId\", \"Incident__team__collaborators\".\"createdBy\" AS \"Incident__team__collaborators_createdBy\", \"Incident__team__collaborators\".\"modifiedBy\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-9] "Incident__team__collaborators_modifiedBy", "Incident__team__collaborators"."createdAt" AS "Incident__team__collaborators_createdAt", "Incident__team__collaborators"."modifiedAt" AS "Incident__team__collaborators_modifiedAt", "Incident__team__config"."createdAt" AS "Incident__team__config_createdAt", "Incident__team__config"."modifiedAt" AS "Incident__team__config_modifiedAt", "Incident__team__config"."id" AS "Incident__team__config_id", "Incident__team__config"."createPermission" AS "Incident__team__config_createPermission", "Incident__team__config"."specificPeople" AS "Incident__team__config_specificPeople", "Incident__team__config"."inviteUsers" AS "Incident__team__config_inviteUsers", "Incident__team__config"."inviteChannels" AS "Incident__team__config_inviteChannels", "Incident__team__config"."inviteBots" AS "Incident__team__config_inviteBots",' escaped msg: '[DATABASE] [12-9] "Incident__team__collaborators_modifiedBy", "Incident__team__collaborators"."createdAt" AS "Incident__team__collaborators_createdAt", "Incident__team__collaborators"."modifiedAt" AS "Incident__team__collaborators_modifiedAt", "Incident__team__config"."createdAt" AS "Incident__team__config_createdAt", "Incident__team__config"."modifiedAt" AS "Incident__team__config_modifiedAt", "Incident__team__config"."id" AS "Incident__team__config_id", "Incident__team__config"."createPermission" AS "Incident__team__config_createPermission", "Incident__team__config"."specificPeople" AS "Incident__team__config_specificPeople", "Incident__team__config"."inviteUsers" AS "Incident__team__config_inviteUsers", "Incident__team__config"."inviteChannels" AS "Incident__team__config_inviteChannels", "Incident__team__config"."inviteBots" AS "Incident__team__config_inviteBots",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-9] "Incident__team__collaborators_modifiedBy", "Incident__team__collaborators"."createdAt" AS "Incident__team__collaborators_createdAt", "Incident__team__collaborators"."modifiedAt" AS "Incident__team__collaborators_modifiedAt", "Incident__team__config"."createdAt" AS "Incident__team__config_createdAt", "Incident__team__config"."modifiedAt" AS "Incident__team__config_modifiedAt", "Incident__team__config"."id" AS "Incident__team__config_id", "Incident__team__config"."createPermission" AS "Incident__team__config_createPermission", "Incident__team__config"."specificPeople" AS "Incident__team__config_specificPeople", "Incident__team__config"."inviteUsers" AS "Incident__team__config_inviteUsers", "Incident__team__config"."inviteChannels" AS "Incident__team__config_inviteChannels", "Incident__team__config"."inviteBots" AS "Incident__team__config_inviteBots",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-9] \"Incident__team__collaborators_modifiedBy\", \"Incident__team__collaborators\".\"createdAt\" AS \"Incident__team__collaborators_createdAt\", \"Incident__team__collaborators\".\"modifiedAt\" AS \"Incident__team__collaborators_modifiedAt\", \"Incident__team__config\".\"createdAt\" AS \"Incident__team__config_createdAt\", \"Incident__team__config\".\"modifiedAt\" AS \"Incident__team__config_modifiedAt\", \"Incident__team__config\".\"id\" AS \"Incident__team__config_id\", \"Incident__team__config\".\"createPermission\" AS \"Incident__team__config_createPermission\", \"Incident__team__config\".\"specificPeople\" AS \"Incident__team__config_specificPeople\", \"Incident__team__config\".\"inviteUsers\" AS \"Incident__team__config_inviteUsers\", \"Incident__team__config\".\"inviteChannels\" AS \"Incident__team__config_inviteChannels\", \"Incident__team__config\".\"inviteBots\" AS \"Incident__team__config_inviteBots\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-10] "Incident__team__config"."channelType" AS "Incident__team__config_channelType", "Incident__team__config"."onCreateAction" AS "Incident__team__config_onCreateAction", "Incident__team__config"."reminders" AS "Incident__team__config_reminders", "Incident__team__config"."createdBy" AS "Incident__team__config_createdBy", "Incident__team__config"."modifiedBy" AS "Incident__team__config_modifiedBy", "Incident__team__config"."commId" AS "Incident__team__config_commId", "Incident__team__config"."tceId" AS "Incident__team__config_tceId", "Incident__team__config"."canId" AS "Incident__team__config_canId", "Incident__team__config"."pageId" AS "Incident__team__config_pageId", "Incident__team__config__createdBy"."id" AS "Incident__team__config__createdBy_id", "Incident__team__config__createdBy"."email" AS "Incident__team__config__createdBy_email", "Incident__team__config__createdBy"."active" AS' escaped msg: '[DATABASE] [12-10] "Incident__team__config"."channelType" AS "Incident__team__config_channelType", "Incident__team__config"."onCreateAction" AS "Incident__team__config_onCreateAction", "Incident__team__config"."reminders" AS "Incident__team__config_reminders", "Incident__team__config"."createdBy" AS "Incident__team__config_createdBy", "Incident__team__config"."modifiedBy" AS "Incident__team__config_modifiedBy", "Incident__team__config"."commId" AS "Incident__team__config_commId", "Incident__team__config"."tceId" AS "Incident__team__config_tceId", "Incident__team__config"."canId" AS "Incident__team__config_canId", "Incident__team__config"."pageId" AS "Incident__team__config_pageId", "Incident__team__config__createdBy"."id" AS "Incident__team__config__createdBy_id", "Incident__team__config__createdBy"."email" AS "Incident__team__config__createdBy_email", "Incident__team__config__createdBy"."active" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-10] "Incident__team__config"."channelType" AS "Incident__team__config_channelType", "Incident__team__config"."onCreateAction" AS "Incident__team__config_onCreateAction", "Incident__team__config"."reminders" AS "Incident__team__config_reminders", "Incident__team__config"."createdBy" AS "Incident__team__config_createdBy", "Incident__team__config"."modifiedBy" AS "Incident__team__config_modifiedBy", "Incident__team__config"."commId" AS "Incident__team__config_commId", "Incident__team__config"."tceId" AS "Incident__team__config_tceId", "Incident__team__config"."canId" AS "Incident__team__config_canId", "Incident__team__config"."pageId" AS "Incident__team__config_pageId", "Incident__team__config__createdBy"."id" AS "Incident__team__config__createdBy_id", "Incident__team__config__createdBy"."email" AS "Incident__team__config__createdBy_email", "Incident__team__config__createdBy"."active" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-10] \"Incident__team__config\".\"channelType\" AS \"Incident__team__config_channelType\", \"Incident__team__config\".\"onCreateAction\" AS \"Incident__team__config_onCreateAction\", \"Incident__team__config\".\"reminders\" AS \"Incident__team__config_reminders\", \"Incident__team__config\".\"createdBy\" AS \"Incident__team__config_createdBy\", \"Incident__team__config\".\"modifiedBy\" AS \"Incident__team__config_modifiedBy\", \"Incident__team__config\".\"commId\" AS \"Incident__team__config_commId\", \"Incident__team__config\".\"tceId\" AS \"Incident__team__config_tceId\", \"Incident__team__config\".\"canId\" AS \"Incident__team__config_canId\", \"Incident__team__config\".\"pageId\" AS \"Incident__team__config_pageId\", \"Incident__team__config__createdBy\".\"id\" AS \"Incident__team__config__createdBy_id\", \"Incident__team__config__createdBy\".\"email\" AS \"Incident__team__config__createdBy_email\", \"Incident__team__config__createdBy\".\"active\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-11] "Incident__team__config__createdBy_active", "Incident__team__config__createdBy"."name" AS "Incident__team__config__createdBy_name", "Incident__team__config__createdBy"."firstName" AS "Incident__team__config__createdBy_firstName", "Incident__team__config__createdBy"."lastName" AS "Incident__team__config__createdBy_lastName", "Incident__team__config__createdBy"."profile" AS "Incident__team__config__createdBy_profile", "Incident__team__config__createdBy"."gusUserId" AS "Incident__team__config__createdBy_gusUserId", "Incident__team__config__createdBy"."slackUserId" AS "Incident__team__config__createdBy_slackUserId", "Incident__team__config__createdBy"."createdBy" AS "Incident__team__config__createdBy_createdBy", "Incident__team__config__createdBy"."modifiedBy" AS "Incident__team__config__createdBy_modifiedBy", "Incident__team__config__createdBy"."createdAt" AS' escaped msg: '[DATABASE] [12-11] "Incident__team__config__createdBy_active", "Incident__team__config__createdBy"."name" AS "Incident__team__config__createdBy_name", "Incident__team__config__createdBy"."firstName" AS "Incident__team__config__createdBy_firstName", "Incident__team__config__createdBy"."lastName" AS "Incident__team__config__createdBy_lastName", "Incident__team__config__createdBy"."profile" AS "Incident__team__config__createdBy_profile", "Incident__team__config__createdBy"."gusUserId" AS "Incident__team__config__createdBy_gusUserId", "Incident__team__config__createdBy"."slackUserId" AS "Incident__team__config__createdBy_slackUserId", "Incident__team__config__createdBy"."createdBy" AS "Incident__team__config__createdBy_createdBy", "Incident__team__config__createdBy"."modifiedBy" AS "Incident__team__config__createdBy_modifiedBy", "Incident__team__config__createdBy"."createdAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-11] "Incident__team__config__createdBy_active", "Incident__team__config__createdBy"."name" AS "Incident__team__config__createdBy_name", "Incident__team__config__createdBy"."firstName" AS "Incident__team__config__createdBy_firstName", "Incident__team__config__createdBy"."lastName" AS "Incident__team__config__createdBy_lastName", "Incident__team__config__createdBy"."profile" AS "Incident__team__config__createdBy_profile", "Incident__team__config__createdBy"."gusUserId" AS "Incident__team__config__createdBy_gusUserId", "Incident__team__config__createdBy"."slackUserId" AS "Incident__team__config__createdBy_slackUserId", "Incident__team__config__createdBy"."createdBy" AS "Incident__team__config__createdBy_createdBy", "Incident__team__config__createdBy"."modifiedBy" AS "Incident__team__config__createdBy_modifiedBy", "Incident__team__config__createdBy"."createdAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-11] \"Incident__team__config__createdBy_active\", \"Incident__team__config__createdBy\".\"name\" AS \"Incident__team__config__createdBy_name\", \"Incident__team__config__createdBy\".\"firstName\" AS \"Incident__team__config__createdBy_firstName\", \"Incident__team__config__createdBy\".\"lastName\" AS \"Incident__team__config__createdBy_lastName\", \"Incident__team__config__createdBy\".\"profile\" AS \"Incident__team__config__createdBy_profile\", \"Incident__team__config__createdBy\".\"gusUserId\" AS \"Incident__team__config__createdBy_gusUserId\", \"Incident__team__config__createdBy\".\"slackUserId\" AS \"Incident__team__config__createdBy_slackUserId\", \"Incident__team__config__createdBy\".\"createdBy\" AS \"Incident__team__config__createdBy_createdBy\", \"Incident__team__config__createdBy\".\"modifiedBy\" AS \"Incident__team__config__createdBy_modifiedBy\", \"Incident__team__config__createdBy\".\"createdAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-12] "Incident__team__config__createdBy_createdAt", "Incident__team__config__createdBy"."modifiedAt" AS "Incident__team__config__createdBy_modifiedAt", "Incident__team__config__modifiedBy"."id" AS "Incident__team__config__modifiedBy_id", "Incident__team__config__modifiedBy"."email" AS "Incident__team__config__modifiedBy_email", "Incident__team__config__modifiedBy"."active" AS "Incident__team__config__modifiedBy_active", "Incident__team__config__modifiedBy"."name" AS "Incident__team__config__modifiedBy_name", "Incident__team__config__modifiedBy"."firstName" AS "Incident__team__config__modifiedBy_firstName", "Incident__team__config__modifiedBy"."lastName" AS "Incident__team__config__modifiedBy_lastName", "Incident__team__config__modifiedBy"."profile" AS "Incident__team__config__modifiedBy_profile", "Incident__team__config__modifiedBy"."gusUserId" AS' escaped msg: '[DATABASE] [12-12] "Incident__team__config__createdBy_createdAt", "Incident__team__config__createdBy"."modifiedAt" AS "Incident__team__config__createdBy_modifiedAt", "Incident__team__config__modifiedBy"."id" AS "Incident__team__config__modifiedBy_id", "Incident__team__config__modifiedBy"."email" AS "Incident__team__config__modifiedBy_email", "Incident__team__config__modifiedBy"."active" AS "Incident__team__config__modifiedBy_active", "Incident__team__config__modifiedBy"."name" AS "Incident__team__config__modifiedBy_name", "Incident__team__config__modifiedBy"."firstName" AS "Incident__team__config__modifiedBy_firstName", "Incident__team__config__modifiedBy"."lastName" AS "Incident__team__config__modifiedBy_lastName", "Incident__team__config__modifiedBy"."profile" AS "Incident__team__config__modifiedBy_profile", "Incident__team__config__modifiedBy"."gusUserId" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-12] "Incident__team__config__createdBy_createdAt", "Incident__team__config__createdBy"."modifiedAt" AS "Incident__team__config__createdBy_modifiedAt", "Incident__team__config__modifiedBy"."id" AS "Incident__team__config__modifiedBy_id", "Incident__team__config__modifiedBy"."email" AS "Incident__team__config__modifiedBy_email", "Incident__team__config__modifiedBy"."active" AS "Incident__team__config__modifiedBy_active", "Incident__team__config__modifiedBy"."name" AS "Incident__team__config__modifiedBy_name", "Incident__team__config__modifiedBy"."firstName" AS "Incident__team__config__modifiedBy_firstName", "Incident__team__config__modifiedBy"."lastName" AS "Incident__team__config__modifiedBy_lastName", "Incident__team__config__modifiedBy"."profile" AS "Incident__team__config__modifiedBy_profile", "Incident__team__config__modifiedBy"."gusUserId" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-12] \"Incident__team__config__createdBy_createdAt\", \"Incident__team__config__createdBy\".\"modifiedAt\" AS \"Incident__team__config__createdBy_modifiedAt\", \"Incident__team__config__modifiedBy\".\"id\" AS \"Incident__team__config__modifiedBy_id\", \"Incident__team__config__modifiedBy\".\"email\" AS \"Incident__team__config__modifiedBy_email\", \"Incident__team__config__modifiedBy\".\"active\" AS \"Incident__team__config__modifiedBy_active\", \"Incident__team__config__modifiedBy\".\"name\" AS \"Incident__team__config__modifiedBy_name\", \"Incident__team__config__modifiedBy\".\"firstName\" AS \"Incident__team__config__modifiedBy_firstName\", \"Incident__team__config__modifiedBy\".\"lastName\" AS \"Incident__team__config__modifiedBy_lastName\", \"Incident__team__config__modifiedBy\".\"profile\" AS \"Incident__team__config__modifiedBy_profile\", \"Incident__team__config__modifiedBy\".\"gusUserId\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-13] "Incident__team__config__modifiedBy_gusUserId", "Incident__team__config__modifiedBy"."slackUserId" AS "Incident__team__config__modifiedBy_slackUserId", "Incident__team__config__modifiedBy"."createdBy" AS "Incident__team__config__modifiedBy_createdBy", "Incident__team__config__modifiedBy"."modifiedBy" AS "Incident__team__config__modifiedBy_modifiedBy", "Incident__team__config__modifiedBy"."createdAt" AS "Incident__team__config__modifiedBy_createdAt", "Incident__team__config__modifiedBy"."modifiedAt" AS "Incident__team__config__modifiedBy_modifiedAt", "Incident__team__config__comms"."id" AS "Incident__team__config__comms_id", "Incident__team__config__comms"."emails" AS "Incident__team__config__comms_emails", "Incident__team__config__comms"."channels" AS "Incident__team__config__comms_channels", "Incident__team__config__comms"."useExtended" AS "Incident__team__config__comms_useExtended",' escaped msg: '[DATABASE] [12-13] "Incident__team__config__modifiedBy_gusUserId", "Incident__team__config__modifiedBy"."slackUserId" AS "Incident__team__config__modifiedBy_slackUserId", "Incident__team__config__modifiedBy"."createdBy" AS "Incident__team__config__modifiedBy_createdBy", "Incident__team__config__modifiedBy"."modifiedBy" AS "Incident__team__config__modifiedBy_modifiedBy", "Incident__team__config__modifiedBy"."createdAt" AS "Incident__team__config__modifiedBy_createdAt", "Incident__team__config__modifiedBy"."modifiedAt" AS "Incident__team__config__modifiedBy_modifiedAt", "Incident__team__config__comms"."id" AS "Incident__team__config__comms_id", "Incident__team__config__comms"."emails" AS "Incident__team__config__comms_emails", "Incident__team__config__comms"."channels" AS "Incident__team__config__comms_channels", "Incident__team__config__comms"."useExtended" AS "Incident__team__config__comms_useExtended",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-13] "Incident__team__config__modifiedBy_gusUserId", "Incident__team__config__modifiedBy"."slackUserId" AS "Incident__team__config__modifiedBy_slackUserId", "Incident__team__config__modifiedBy"."createdBy" AS "Incident__team__config__modifiedBy_createdBy", "Incident__team__config__modifiedBy"."modifiedBy" AS "Incident__team__config__modifiedBy_modifiedBy", "Incident__team__config__modifiedBy"."createdAt" AS "Incident__team__config__modifiedBy_createdAt", "Incident__team__config__modifiedBy"."modifiedAt" AS "Incident__team__config__modifiedBy_modifiedAt", "Incident__team__config__comms"."id" AS "Incident__team__config__comms_id", "Incident__team__config__comms"."emails" AS "Incident__team__config__comms_emails", "Incident__team__config__comms"."channels" AS "Incident__team__config__comms_channels", "Incident__team__config__comms"."useExtended" AS "Incident__team__config__comms_useExtended",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-13] \"Incident__team__config__modifiedBy_gusUserId\", \"Incident__team__config__modifiedBy\".\"slackUserId\" AS \"Incident__team__config__modifiedBy_slackUserId\", \"Incident__team__config__modifiedBy\".\"createdBy\" AS \"Incident__team__config__modifiedBy_createdBy\", \"Incident__team__config__modifiedBy\".\"modifiedBy\" AS \"Incident__team__config__modifiedBy_modifiedBy\", \"Incident__team__config__modifiedBy\".\"createdAt\" AS \"Incident__team__config__modifiedBy_createdAt\", \"Incident__team__config__modifiedBy\".\"modifiedAt\" AS \"Incident__team__config__modifiedBy_modifiedAt\", \"Incident__team__config__comms\".\"id\" AS \"Incident__team__config__comms_id\", \"Incident__team__config__comms\".\"emails\" AS \"Incident__team__config__comms_emails\", \"Incident__team__config__comms\".\"channels\" AS \"Incident__team__config__comms_channels\", \"Incident__team__config__comms\".\"useExtended\" AS \"Incident__team__config__comms_useExtended\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-14] "Incident__team__config__comms"."includeSwimlanes" AS "Incident__team__config__comms_includeSwimlanes", "Incident__team__config__tce"."id" AS "Incident__team__config__tce_id", "Incident__team__config__tce"."emails" AS "Incident__team__config__tce_emails", "Incident__team__config__tce"."channels" AS "Incident__team__config__tce_channels", "Incident__team__config__tce"."useExtended" AS "Incident__team__config__tce_useExtended", "Incident__team__config__tce"."includeSwimlanes" AS "Incident__team__config__tce_includeSwimlanes", "Incident__team__config__can"."id" AS "Incident__team__config__can_id", "Incident__team__config__can"."emails" AS "Incident__team__config__can_emails", "Incident__team__config__can"."channels" AS "Incident__team__config__can_channels", "Incident__team__config__can"."useExtended" AS "Incident__team__config__can_useExtended",' escaped msg: '[DATABASE] [12-14] "Incident__team__config__comms"."includeSwimlanes" AS "Incident__team__config__comms_includeSwimlanes", "Incident__team__config__tce"."id" AS "Incident__team__config__tce_id", "Incident__team__config__tce"."emails" AS "Incident__team__config__tce_emails", "Incident__team__config__tce"."channels" AS "Incident__team__config__tce_channels", "Incident__team__config__tce"."useExtended" AS "Incident__team__config__tce_useExtended", "Incident__team__config__tce"."includeSwimlanes" AS "Incident__team__config__tce_includeSwimlanes", "Incident__team__config__can"."id" AS "Incident__team__config__can_id", "Incident__team__config__can"."emails" AS "Incident__team__config__can_emails", "Incident__team__config__can"."channels" AS "Incident__team__config__can_channels", "Incident__team__config__can"."useExtended" AS "Incident__team__config__can_useExtended",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-14] "Incident__team__config__comms"."includeSwimlanes" AS "Incident__team__config__comms_includeSwimlanes", "Incident__team__config__tce"."id" AS "Incident__team__config__tce_id", "Incident__team__config__tce"."emails" AS "Incident__team__config__tce_emails", "Incident__team__config__tce"."channels" AS "Incident__team__config__tce_channels", "Incident__team__config__tce"."useExtended" AS "Incident__team__config__tce_useExtended", "Incident__team__config__tce"."includeSwimlanes" AS "Incident__team__config__tce_includeSwimlanes", "Incident__team__config__can"."id" AS "Incident__team__config__can_id", "Incident__team__config__can"."emails" AS "Incident__team__config__can_emails", "Incident__team__config__can"."channels" AS "Incident__team__config__can_channels", "Incident__team__config__can"."useExtended" AS "Incident__team__config__can_useExtended",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-14] \"Incident__team__config__comms\".\"includeSwimlanes\" AS \"Incident__team__config__comms_includeSwimlanes\", \"Incident__team__config__tce\".\"id\" AS \"Incident__team__config__tce_id\", \"Incident__team__config__tce\".\"emails\" AS \"Incident__team__config__tce_emails\", \"Incident__team__config__tce\".\"channels\" AS \"Incident__team__config__tce_channels\", \"Incident__team__config__tce\".\"useExtended\" AS \"Incident__team__config__tce_useExtended\", \"Incident__team__config__tce\".\"includeSwimlanes\" AS \"Incident__team__config__tce_includeSwimlanes\", \"Incident__team__config__can\".\"id\" AS \"Incident__team__config__can_id\", \"Incident__team__config__can\".\"emails\" AS \"Incident__team__config__can_emails\", \"Incident__team__config__can\".\"channels\" AS \"Incident__team__config__can_channels\", \"Incident__team__config__can\".\"useExtended\" AS \"Incident__team__config__can_useExtended\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-15] "Incident__team__config__can"."includeSwimlanes" AS "Incident__team__config__can_includeSwimlanes", "Incident__team__config__page"."id" AS "Incident__team__config__page_id", "Incident__team__config__page"."services" AS "Incident__team__config__page_services", "Incident__team__scrumTeam"."sfid" AS "Incident__team__scrumTeam_sfid", "Incident__team__scrumTeam"."name" AS "Incident__team__scrumTeam_name", "Incident__team__scrumTeam"."active__c" AS "Incident__team__scrumTeam_active__c", "Incident__team__scrumTeam"."parent_cloud__c" AS "Incident__team__scrumTeam_parent_cloud__c", "Incident__team__scrumTeam"."cloud__c" AS "Incident__team__scrumTeam_cloud__c", "Incident__team__scrumTeam"."createddate" AS "Incident__team__scrumTeam_createddate", "Incident__team__scrumTeam"."product_owner__c" AS "Incident__team__scrumTeam_product_owner__c",' escaped msg: '[DATABASE] [12-15] "Incident__team__config__can"."includeSwimlanes" AS "Incident__team__config__can_includeSwimlanes", "Incident__team__config__page"."id" AS "Incident__team__config__page_id", "Incident__team__config__page"."services" AS "Incident__team__config__page_services", "Incident__team__scrumTeam"."sfid" AS "Incident__team__scrumTeam_sfid", "Incident__team__scrumTeam"."name" AS "Incident__team__scrumTeam_name", "Incident__team__scrumTeam"."active__c" AS "Incident__team__scrumTeam_active__c", "Incident__team__scrumTeam"."parent_cloud__c" AS "Incident__team__scrumTeam_parent_cloud__c", "Incident__team__scrumTeam"."cloud__c" AS "Incident__team__scrumTeam_cloud__c", "Incident__team__scrumTeam"."createddate" AS "Incident__team__scrumTeam_createddate", "Incident__team__scrumTeam"."product_owner__c" AS "Incident__team__scrumTeam_product_owner__c",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-15] "Incident__team__config__can"."includeSwimlanes" AS "Incident__team__config__can_includeSwimlanes", "Incident__team__config__page"."id" AS "Incident__team__config__page_id", "Incident__team__config__page"."services" AS "Incident__team__config__page_services", "Incident__team__scrumTeam"."sfid" AS "Incident__team__scrumTeam_sfid", "Incident__team__scrumTeam"."name" AS "Incident__team__scrumTeam_name", "Incident__team__scrumTeam"."active__c" AS "Incident__team__scrumTeam_active__c", "Incident__team__scrumTeam"."parent_cloud__c" AS "Incident__team__scrumTeam_parent_cloud__c", "Incident__team__scrumTeam"."cloud__c" AS "Incident__team__scrumTeam_cloud__c", "Incident__team__scrumTeam"."createddate" AS "Incident__team__scrumTeam_createddate", "Incident__team__scrumTeam"."product_owner__c" AS "Incident__team__scrumTeam_product_owner__c",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-15] \"Incident__team__config__can\".\"includeSwimlanes\" AS \"Incident__team__config__can_includeSwimlanes\", \"Incident__team__config__page\".\"id\" AS \"Incident__team__config__page_id\", \"Incident__team__config__page\".\"services\" AS \"Incident__team__config__page_services\", \"Incident__team__scrumTeam\".\"sfid\" AS \"Incident__team__scrumTeam_sfid\", \"Incident__team__scrumTeam\".\"name\" AS \"Incident__team__scrumTeam_name\", \"Incident__team__scrumTeam\".\"active__c\" AS \"Incident__team__scrumTeam_active__c\", \"Incident__team__scrumTeam\".\"parent_cloud__c\" AS \"Incident__team__scrumTeam_parent_cloud__c\", \"Incident__team__scrumTeam\".\"cloud__c\" AS \"Incident__team__scrumTeam_cloud__c\", \"Incident__team__scrumTeam\".\"createddate\" AS \"Incident__team__scrumTeam_createddate\", \"Incident__team__scrumTeam\".\"product_owner__c\" AS \"Incident__team__scrumTeam_product_owner__c\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-16] "Incident__team__scrumTeam"."pagerduty_escalation_service_url__c" AS "Incident__team__scrumTeam_pagerduty_escalation_service_url__c", "Incident__team__scrumTeam"."engineering_manager__c" AS "Incident__team__scrumTeam_engineering_manager__c", "Incident__team__scrumTeam"."public_slack_channel__c" AS "Incident__team__scrumTeam_public_slack_channel__c", "Incident__team__scrumTeam"."quip_url__c" AS "Incident__team__scrumTeam_quip_url__c", "Incident__team__scrumTeam"."distribution_lists__c" AS "Incident__team__scrumTeam_distribution_lists__c", "Incident__team__scrumTeam"."pagerduty_primary_team_url__c" AS "Incident__team__scrumTeam_pagerduty_primary_team_url__c", "Incident__team__scrumTeam"."scrum_master__c" AS "Incident__team__scrumTeam_scrum_master__c", "Incident__team__rules"."createdAt" AS "Incident__team__rules_createdAt", "Incident__team__rules"."modifiedAt" AS' escaped msg: '[DATABASE] [12-16] "Incident__team__scrumTeam"."pagerduty_escalation_service_url__c" AS "Incident__team__scrumTeam_pagerduty_escalation_service_url__c", "Incident__team__scrumTeam"."engineering_manager__c" AS "Incident__team__scrumTeam_engineering_manager__c", "Incident__team__scrumTeam"."public_slack_channel__c" AS "Incident__team__scrumTeam_public_slack_channel__c", "Incident__team__scrumTeam"."quip_url__c" AS "Incident__team__scrumTeam_quip_url__c", "Incident__team__scrumTeam"."distribution_lists__c" AS "Incident__team__scrumTeam_distribution_lists__c", "Incident__team__scrumTeam"."pagerduty_primary_team_url__c" AS "Incident__team__scrumTeam_pagerduty_primary_team_url__c", "Incident__team__scrumTeam"."scrum_master__c" AS "Incident__team__scrumTeam_scrum_master__c", "Incident__team__rules"."createdAt" AS "Incident__team__rules_createdAt", "Incident__team__rules"."modifiedAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-16] "Incident__team__scrumTeam"."pagerduty_escalation_service_url__c" AS "Incident__team__scrumTeam_pagerduty_escalation_service_url__c", "Incident__team__scrumTeam"."engineering_manager__c" AS "Incident__team__scrumTeam_engineering_manager__c", "Incident__team__scrumTeam"."public_slack_channel__c" AS "Incident__team__scrumTeam_public_slack_channel__c", "Incident__team__scrumTeam"."quip_url__c" AS "Incident__team__scrumTeam_quip_url__c", "Incident__team__scrumTeam"."distribution_lists__c" AS "Incident__team__scrumTeam_distribution_lists__c", "Incident__team__scrumTeam"."pagerduty_primary_team_url__c" AS "Incident__team__scrumTeam_pagerduty_primary_team_url__c", "Incident__team__scrumTeam"."scrum_master__c" AS "Incident__team__scrumTeam_scrum_master__c", "Incident__team__rules"."createdAt" AS "Incident__team__rules_createdAt", "Incident__team__rules"."modifiedAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-16] \"Incident__team__scrumTeam\".\"pagerduty_escalation_service_url__c\" AS \"Incident__team__scrumTeam_pagerduty_escalation_service_url__c\", \"Incident__team__scrumTeam\".\"engineering_manager__c\" AS \"Incident__team__scrumTeam_engineering_manager__c\", \"Incident__team__scrumTeam\".\"public_slack_channel__c\" AS \"Incident__team__scrumTeam_public_slack_channel__c\", \"Incident__team__scrumTeam\".\"quip_url__c\" AS \"Incident__team__scrumTeam_quip_url__c\", \"Incident__team__scrumTeam\".\"distribution_lists__c\" AS \"Incident__team__scrumTeam_distribution_lists__c\", \"Incident__team__scrumTeam\".\"pagerduty_primary_team_url__c\" AS \"Incident__team__scrumTeam_pagerduty_primary_team_url__c\", \"Incident__team__scrumTeam\".\"scrum_master__c\" AS \"Incident__team__scrumTeam_scrum_master__c\", \"Incident__team__rules\".\"createdAt\" AS \"Incident__team__rules_createdAt\", \"Incident__team__rules\".\"modifiedAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-17] "Incident__team__rules_modifiedAt", "Incident__team__rules"."id" AS "Incident__team__rules_id", "Incident__team__rules"."name" AS "Incident__team__rules_name", "Incident__team__rules"."description" AS "Incident__team__rules_description", "Incident__team__rules"."active" AS "Incident__team__rules_active", "Incident__team__rules"."conditions" AS "Incident__team__rules_conditions", "Incident__team__rules"."actions" AS "Incident__team__rules_actions", "Incident__team__rules"."type" AS "Incident__team__rules_type", "Incident__team__rules"."createdBy" AS "Incident__team__rules_createdBy", "Incident__team__rules"."modifiedBy" AS "Incident__team__rules_modifiedBy", "Incident__team__rules"."team_id" AS "Incident__team__rules_team_id", "Incident__team__rules"."elevatedUsersConfig_id" AS "Incident__team__rules_elevatedUsersConfig_id", "Incident__team__rules__createdBy"."id" AS' escaped msg: '[DATABASE] [12-17] "Incident__team__rules_modifiedAt", "Incident__team__rules"."id" AS "Incident__team__rules_id", "Incident__team__rules"."name" AS "Incident__team__rules_name", "Incident__team__rules"."description" AS "Incident__team__rules_description", "Incident__team__rules"."active" AS "Incident__team__rules_active", "Incident__team__rules"."conditions" AS "Incident__team__rules_conditions", "Incident__team__rules"."actions" AS "Incident__team__rules_actions", "Incident__team__rules"."type" AS "Incident__team__rules_type", "Incident__team__rules"."createdBy" AS "Incident__team__rules_createdBy", "Incident__team__rules"."modifiedBy" AS "Incident__team__rules_modifiedBy", "Incident__team__rules"."team_id" AS "Incident__team__rules_team_id", "Incident__team__rules"."elevatedUsersConfig_id" AS "Incident__team__rules_elevatedUsersConfig_id", "Incident__team__rules__createdBy"."id" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-17] "Incident__team__rules_modifiedAt", "Incident__team__rules"."id" AS "Incident__team__rules_id", "Incident__team__rules"."name" AS "Incident__team__rules_name", "Incident__team__rules"."description" AS "Incident__team__rules_description", "Incident__team__rules"."active" AS "Incident__team__rules_active", "Incident__team__rules"."conditions" AS "Incident__team__rules_conditions", "Incident__team__rules"."actions" AS "Incident__team__rules_actions", "Incident__team__rules"."type" AS "Incident__team__rules_type", "Incident__team__rules"."createdBy" AS "Incident__team__rules_createdBy", "Incident__team__rules"."modifiedBy" AS "Incident__team__rules_modifiedBy", "Incident__team__rules"."team_id" AS "Incident__team__rules_team_id", "Incident__team__rules"."elevatedUsersConfig_id" AS "Incident__team__rules_elevatedUsersConfig_id", "Incident__team__rules__createdBy"."id" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-17] \"Incident__team__rules_modifiedAt\", \"Incident__team__rules\".\"id\" AS \"Incident__team__rules_id\", \"Incident__team__rules\".\"name\" AS \"Incident__team__rules_name\", \"Incident__team__rules\".\"description\" AS \"Incident__team__rules_description\", \"Incident__team__rules\".\"active\" AS \"Incident__team__rules_active\", \"Incident__team__rules\".\"conditions\" AS \"Incident__team__rules_conditions\", \"Incident__team__rules\".\"actions\" AS \"Incident__team__rules_actions\", \"Incident__team__rules\".\"type\" AS \"Incident__team__rules_type\", \"Incident__team__rules\".\"createdBy\" AS \"Incident__team__rules_createdBy\", \"Incident__team__rules\".\"modifiedBy\" AS \"Incident__team__rules_modifiedBy\", \"Incident__team__rules\".\"team_id\" AS \"Incident__team__rules_team_id\", \"Incident__team__rules\".\"elevatedUsersConfig_id\" AS \"Incident__team__rules_elevatedUsersConfig_id\", \"Incident__team__rules__createdBy\".\"id\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-18] "Incident__team__rules__createdBy_id", "Incident__team__rules__createdBy"."email" AS "Incident__team__rules__createdBy_email", "Incident__team__rules__createdBy"."active" AS "Incident__team__rules__createdBy_active", "Incident__team__rules__createdBy"."name" AS "Incident__team__rules__createdBy_name", "Incident__team__rules__createdBy"."firstName" AS "Incident__team__rules__createdBy_firstName", "Incident__team__rules__createdBy"."lastName" AS "Incident__team__rules__createdBy_lastName", "Incident__team__rules__createdBy"."profile" AS "Incident__team__rules__createdBy_profile", "Incident__team__rules__createdBy"."gusUserId" AS "Incident__team__rules__createdBy_gusUserId", "Incident__team__rules__createdBy"."slackUserId" AS "Incident__team__rules__createdBy_slackUserId", "Incident__team__rules__createdBy"."createdBy" AS "Incident__team__rules__createdBy_createdBy",' escaped msg: '[DATABASE] [12-18] "Incident__team__rules__createdBy_id", "Incident__team__rules__createdBy"."email" AS "Incident__team__rules__createdBy_email", "Incident__team__rules__createdBy"."active" AS "Incident__team__rules__createdBy_active", "Incident__team__rules__createdBy"."name" AS "Incident__team__rules__createdBy_name", "Incident__team__rules__createdBy"."firstName" AS "Incident__team__rules__createdBy_firstName", "Incident__team__rules__createdBy"."lastName" AS "Incident__team__rules__createdBy_lastName", "Incident__team__rules__createdBy"."profile" AS "Incident__team__rules__createdBy_profile", "Incident__team__rules__createdBy"."gusUserId" AS "Incident__team__rules__createdBy_gusUserId", "Incident__team__rules__createdBy"."slackUserId" AS "Incident__team__rules__createdBy_slackUserId", "Incident__team__rules__createdBy"."createdBy" AS "Incident__team__rules__createdBy_createdBy",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-18] "Incident__team__rules__createdBy_id", "Incident__team__rules__createdBy"."email" AS "Incident__team__rules__createdBy_email", "Incident__team__rules__createdBy"."active" AS "Incident__team__rules__createdBy_active", "Incident__team__rules__createdBy"."name" AS "Incident__team__rules__createdBy_name", "Incident__team__rules__createdBy"."firstName" AS "Incident__team__rules__createdBy_firstName", "Incident__team__rules__createdBy"."lastName" AS "Incident__team__rules__createdBy_lastName", "Incident__team__rules__createdBy"."profile" AS "Incident__team__rules__createdBy_profile", "Incident__team__rules__createdBy"."gusUserId" AS "Incident__team__rules__createdBy_gusUserId", "Incident__team__rules__createdBy"."slackUserId" AS "Incident__team__rules__createdBy_slackUserId", "Incident__team__rules__createdBy"."createdBy" AS "Incident__team__rules__createdBy_createdBy",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-18] \"Incident__team__rules__createdBy_id\", \"Incident__team__rules__createdBy\".\"email\" AS \"Incident__team__rules__createdBy_email\", \"Incident__team__rules__createdBy\".\"active\" AS \"Incident__team__rules__createdBy_active\", \"Incident__team__rules__createdBy\".\"name\" AS \"Incident__team__rules__createdBy_name\", \"Incident__team__rules__createdBy\".\"firstName\" AS \"Incident__team__rules__createdBy_firstName\", \"Incident__team__rules__createdBy\".\"lastName\" AS \"Incident__team__rules__createdBy_lastName\", \"Incident__team__rules__createdBy\".\"profile\" AS \"Incident__team__rules__createdBy_profile\", \"Incident__team__rules__createdBy\".\"gusUserId\" AS \"Incident__team__rules__createdBy_gusUserId\", \"Incident__team__rules__createdBy\".\"slackUserId\" AS \"Incident__team__rules__createdBy_slackUserId\", \"Incident__team__rules__createdBy\".\"createdBy\" AS \"Incident__team__rules__createdBy_createdBy\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-19] "Incident__team__rules__createdBy"."modifiedBy" AS "Incident__team__rules__createdBy_modifiedBy", "Incident__team__rules__createdBy"."createdAt" AS "Incident__team__rules__createdBy_createdAt", "Incident__team__rules__createdBy"."modifiedAt" AS "Incident__team__rules__createdBy_modifiedAt", "Incident__team__rules__modifiedBy"."id" AS "Incident__team__rules__modifiedBy_id", "Incident__team__rules__modifiedBy"."email" AS "Incident__team__rules__modifiedBy_email", "Incident__team__rules__modifiedBy"."active" AS "Incident__team__rules__modifiedBy_active", "Incident__team__rules__modifiedBy"."name" AS "Incident__team__rules__modifiedBy_name", "Incident__team__rules__modifiedBy"."firstName" AS "Incident__team__rules__modifiedBy_firstName", "Incident__team__rules__modifiedBy"."lastName" AS "Incident__team__rules__modifiedBy_lastName", "Incident__team__rules__modifiedBy"."profile" AS' escaped msg: '[DATABASE] [12-19] "Incident__team__rules__createdBy"."modifiedBy" AS "Incident__team__rules__createdBy_modifiedBy", "Incident__team__rules__createdBy"."createdAt" AS "Incident__team__rules__createdBy_createdAt", "Incident__team__rules__createdBy"."modifiedAt" AS "Incident__team__rules__createdBy_modifiedAt", "Incident__team__rules__modifiedBy"."id" AS "Incident__team__rules__modifiedBy_id", "Incident__team__rules__modifiedBy"."email" AS "Incident__team__rules__modifiedBy_email", "Incident__team__rules__modifiedBy"."active" AS "Incident__team__rules__modifiedBy_active", "Incident__team__rules__modifiedBy"."name" AS "Incident__team__rules__modifiedBy_name", "Incident__team__rules__modifiedBy"."firstName" AS "Incident__team__rules__modifiedBy_firstName", "Incident__team__rules__modifiedBy"."lastName" AS "Incident__team__rules__modifiedBy_lastName", "Incident__team__rules__modifiedBy"."profile" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-19] "Incident__team__rules__createdBy"."modifiedBy" AS "Incident__team__rules__createdBy_modifiedBy", "Incident__team__rules__createdBy"."createdAt" AS "Incident__team__rules__createdBy_createdAt", "Incident__team__rules__createdBy"."modifiedAt" AS "Incident__team__rules__createdBy_modifiedAt", "Incident__team__rules__modifiedBy"."id" AS "Incident__team__rules__modifiedBy_id", "Incident__team__rules__modifiedBy"."email" AS "Incident__team__rules__modifiedBy_email", "Incident__team__rules__modifiedBy"."active" AS "Incident__team__rules__modifiedBy_active", "Incident__team__rules__modifiedBy"."name" AS "Incident__team__rules__modifiedBy_name", "Incident__team__rules__modifiedBy"."firstName" AS "Incident__team__rules__modifiedBy_firstName", "Incident__team__rules__modifiedBy"."lastName" AS "Incident__team__rules__modifiedBy_lastName", "Incident__team__rules__modifiedBy"."profile" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-19] \"Incident__team__rules__createdBy\".\"modifiedBy\" AS \"Incident__team__rules__createdBy_modifiedBy\", \"Incident__team__rules__createdBy\".\"createdAt\" AS \"Incident__team__rules__createdBy_createdAt\", \"Incident__team__rules__createdBy\".\"modifiedAt\" AS \"Incident__team__rules__createdBy_modifiedAt\", \"Incident__team__rules__modifiedBy\".\"id\" AS \"Incident__team__rules__modifiedBy_id\", \"Incident__team__rules__modifiedBy\".\"email\" AS \"Incident__team__rules__modifiedBy_email\", \"Incident__team__rules__modifiedBy\".\"active\" AS \"Incident__team__rules__modifiedBy_active\", \"Incident__team__rules__modifiedBy\".\"name\" AS \"Incident__team__rules__modifiedBy_name\", \"Incident__team__rules__modifiedBy\".\"firstName\" AS \"Incident__team__rules__modifiedBy_firstName\", \"Incident__team__rules__modifiedBy\".\"lastName\" AS \"Incident__team__rules__modifiedBy_lastName\", \"Incident__team__rules__modifiedBy\".\"profile\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-20] "Incident__team__rules__modifiedBy_profile", "Incident__team__rules__modifiedBy"."gusUserId" AS "Incident__team__rules__modifiedBy_gusUserId", "Incident__team__rules__modifiedBy"."slackUserId" AS "Incident__team__rules__modifiedBy_slackUserId", "Incident__team__rules__modifiedBy"."createdBy" AS "Incident__team__rules__modifiedBy_createdBy", "Incident__team__rules__modifiedBy"."modifiedBy" AS "Incident__team__rules__modifiedBy_modifiedBy", "Incident__team__rules__modifiedBy"."createdAt" AS "Incident__team__rules__modifiedBy_createdAt", "Incident__team__rules__modifiedBy"."modifiedAt" AS "Incident__team__rules__modifiedBy_modifiedAt", "Incident__slackChannel"."createdAt" AS "Incident__slackChannel_createdAt", "Incident__slackChannel"."modifiedAt" AS "Incident__slackChannel_modifiedAt", "Incident__slackChannel"."id" AS "Incident__slackChannel_id", "Incident__slackChannel"."name" AS' escaped msg: '[DATABASE] [12-20] "Incident__team__rules__modifiedBy_profile", "Incident__team__rules__modifiedBy"."gusUserId" AS "Incident__team__rules__modifiedBy_gusUserId", "Incident__team__rules__modifiedBy"."slackUserId" AS "Incident__team__rules__modifiedBy_slackUserId", "Incident__team__rules__modifiedBy"."createdBy" AS "Incident__team__rules__modifiedBy_createdBy", "Incident__team__rules__modifiedBy"."modifiedBy" AS "Incident__team__rules__modifiedBy_modifiedBy", "Incident__team__rules__modifiedBy"."createdAt" AS "Incident__team__rules__modifiedBy_createdAt", "Incident__team__rules__modifiedBy"."modifiedAt" AS "Incident__team__rules__modifiedBy_modifiedAt", "Incident__slackChannel"."createdAt" AS "Incident__slackChannel_createdAt", "Incident__slackChannel"."modifiedAt" AS "Incident__slackChannel_modifiedAt", "Incident__slackChannel"."id" AS "Incident__slackChannel_id", "Incident__slackChannel"."name" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-20] "Incident__team__rules__modifiedBy_profile", "Incident__team__rules__modifiedBy"."gusUserId" AS "Incident__team__rules__modifiedBy_gusUserId", "Incident__team__rules__modifiedBy"."slackUserId" AS "Incident__team__rules__modifiedBy_slackUserId", "Incident__team__rules__modifiedBy"."createdBy" AS "Incident__team__rules__modifiedBy_createdBy", "Incident__team__rules__modifiedBy"."modifiedBy" AS "Incident__team__rules__modifiedBy_modifiedBy", "Incident__team__rules__modifiedBy"."createdAt" AS "Incident__team__rules__modifiedBy_createdAt", "Incident__team__rules__modifiedBy"."modifiedAt" AS "Incident__team__rules__modifiedBy_modifiedAt", "Incident__slackChannel"."createdAt" AS "Incident__slackChannel_createdAt", "Incident__slackChannel"."modifiedAt" AS "Incident__slackChannel_modifiedAt", "Incident__slackChannel"."id" AS "Incident__slackChannel_id", "Incident__slackChannel"."name" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-20] \"Incident__team__rules__modifiedBy_profile\", \"Incident__team__rules__modifiedBy\".\"gusUserId\" AS \"Incident__team__rules__modifiedBy_gusUserId\", \"Incident__team__rules__modifiedBy\".\"slackUserId\" AS \"Incident__team__rules__modifiedBy_slackUserId\", \"Incident__team__rules__modifiedBy\".\"createdBy\" AS \"Incident__team__rules__modifiedBy_createdBy\", \"Incident__team__rules__modifiedBy\".\"modifiedBy\" AS \"Incident__team__rules__modifiedBy_modifiedBy\", \"Incident__team__rules__modifiedBy\".\"createdAt\" AS \"Incident__team__rules__modifiedBy_createdAt\", \"Incident__team__rules__modifiedBy\".\"modifiedAt\" AS \"Incident__team__rules__modifiedBy_modifiedAt\", \"Incident__slackChannel\".\"createdAt\" AS \"Incident__slackChannel_createdAt\", \"Incident__slackChannel\".\"modifiedAt\" AS \"Incident__slackChannel_modifiedAt\", \"Incident__slackChannel\".\"id\" AS \"Incident__slackChannel_id\", \"Incident__slackChannel\".\"name\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-21] "Incident__slackChannel_name", "Incident__slackChannel"."createdBy" AS "Incident__slackChannel_createdBy", "Incident__slackChannel"."modifiedBy" AS "Incident__slackChannel_modifiedBy", "Incident__slackChannel__createdBy"."id" AS "Incident__slackChannel__createdBy_id", "Incident__slackChannel__createdBy"."email" AS "Incident__slackChannel__createdBy_email", "Incident__slackChannel__createdBy"."active" AS "Incident__slackChannel__createdBy_active", "Incident__slackChannel__createdBy"."name" AS "Incident__slackChannel__createdBy_name", "Incident__slackChannel__createdBy"."firstName" AS "Incident__slackChannel__createdBy_firstName", "Incident__slackChannel__createdBy"."lastName" AS "Incident__slackChannel__createdBy_lastName", "Incident__slackChannel__createdBy"."profile" AS "Incident__slackChannel__createdBy_profile", "Incident__slackChannel__createdBy"."gusUserId" AS' escaped msg: '[DATABASE] [12-21] "Incident__slackChannel_name", "Incident__slackChannel"."createdBy" AS "Incident__slackChannel_createdBy", "Incident__slackChannel"."modifiedBy" AS "Incident__slackChannel_modifiedBy", "Incident__slackChannel__createdBy"."id" AS "Incident__slackChannel__createdBy_id", "Incident__slackChannel__createdBy"."email" AS "Incident__slackChannel__createdBy_email", "Incident__slackChannel__createdBy"."active" AS "Incident__slackChannel__createdBy_active", "Incident__slackChannel__createdBy"."name" AS "Incident__slackChannel__createdBy_name", "Incident__slackChannel__createdBy"."firstName" AS "Incident__slackChannel__createdBy_firstName", "Incident__slackChannel__createdBy"."lastName" AS "Incident__slackChannel__createdBy_lastName", "Incident__slackChannel__createdBy"."profile" AS "Incident__slackChannel__createdBy_profile", "Incident__slackChannel__createdBy"."gusUserId" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-21] "Incident__slackChannel_name", "Incident__slackChannel"."createdBy" AS "Incident__slackChannel_createdBy", "Incident__slackChannel"."modifiedBy" AS "Incident__slackChannel_modifiedBy", "Incident__slackChannel__createdBy"."id" AS "Incident__slackChannel__createdBy_id", "Incident__slackChannel__createdBy"."email" AS "Incident__slackChannel__createdBy_email", "Incident__slackChannel__createdBy"."active" AS "Incident__slackChannel__createdBy_active", "Incident__slackChannel__createdBy"."name" AS "Incident__slackChannel__createdBy_name", "Incident__slackChannel__createdBy"."firstName" AS "Incident__slackChannel__createdBy_firstName", "Incident__slackChannel__createdBy"."lastName" AS "Incident__slackChannel__createdBy_lastName", "Incident__slackChannel__createdBy"."profile" AS "Incident__slackChannel__createdBy_profile", "Incident__slackChannel__createdBy"."gusUserId" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-21] \"Incident__slackChannel_name\", \"Incident__slackChannel\".\"createdBy\" AS \"Incident__slackChannel_createdBy\", \"Incident__slackChannel\".\"modifiedBy\" AS \"Incident__slackChannel_modifiedBy\", \"Incident__slackChannel__createdBy\".\"id\" AS \"Incident__slackChannel__createdBy_id\", \"Incident__slackChannel__createdBy\".\"email\" AS \"Incident__slackChannel__createdBy_email\", \"Incident__slackChannel__createdBy\".\"active\" AS \"Incident__slackChannel__createdBy_active\", \"Incident__slackChannel__createdBy\".\"name\" AS \"Incident__slackChannel__createdBy_name\", \"Incident__slackChannel__createdBy\".\"firstName\" AS \"Incident__slackChannel__createdBy_firstName\", \"Incident__slackChannel__createdBy\".\"lastName\" AS \"Incident__slackChannel__createdBy_lastName\", \"Incident__slackChannel__createdBy\".\"profile\" AS \"Incident__slackChannel__createdBy_profile\", \"Incident__slackChannel__createdBy\".\"gusUserId\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-22] "Incident__slackChannel__createdBy_gusUserId", "Incident__slackChannel__createdBy"."slackUserId" AS "Incident__slackChannel__createdBy_slackUserId", "Incident__slackChannel__createdBy"."createdBy" AS "Incident__slackChannel__createdBy_createdBy", "Incident__slackChannel__createdBy"."modifiedBy" AS "Incident__slackChannel__createdBy_modifiedBy", "Incident__slackChannel__createdBy"."createdAt" AS "Incident__slackChannel__createdBy_createdAt", "Incident__slackChannel__createdBy"."modifiedAt" AS "Incident__slackChannel__createdBy_modifiedAt", "Incident__slackChannel__modifiedBy"."id" AS "Incident__slackChannel__modifiedBy_id", "Incident__slackChannel__modifiedBy"."email" AS "Incident__slackChannel__modifiedBy_email", "Incident__slackChannel__modifiedBy"."active" AS "Incident__slackChannel__modifiedBy_active", "Incident__slackChannel__modifiedBy"."name" AS' escaped msg: '[DATABASE] [12-22] "Incident__slackChannel__createdBy_gusUserId", "Incident__slackChannel__createdBy"."slackUserId" AS "Incident__slackChannel__createdBy_slackUserId", "Incident__slackChannel__createdBy"."createdBy" AS "Incident__slackChannel__createdBy_createdBy", "Incident__slackChannel__createdBy"."modifiedBy" AS "Incident__slackChannel__createdBy_modifiedBy", "Incident__slackChannel__createdBy"."createdAt" AS "Incident__slackChannel__createdBy_createdAt", "Incident__slackChannel__createdBy"."modifiedAt" AS "Incident__slackChannel__createdBy_modifiedAt", "Incident__slackChannel__modifiedBy"."id" AS "Incident__slackChannel__modifiedBy_id", "Incident__slackChannel__modifiedBy"."email" AS "Incident__slackChannel__modifiedBy_email", "Incident__slackChannel__modifiedBy"."active" AS "Incident__slackChannel__modifiedBy_active", "Incident__slackChannel__modifiedBy"."name" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-22] "Incident__slackChannel__createdBy_gusUserId", "Incident__slackChannel__createdBy"."slackUserId" AS "Incident__slackChannel__createdBy_slackUserId", "Incident__slackChannel__createdBy"."createdBy" AS "Incident__slackChannel__createdBy_createdBy", "Incident__slackChannel__createdBy"."modifiedBy" AS "Incident__slackChannel__createdBy_modifiedBy", "Incident__slackChannel__createdBy"."createdAt" AS "Incident__slackChannel__createdBy_createdAt", "Incident__slackChannel__createdBy"."modifiedAt" AS "Incident__slackChannel__createdBy_modifiedAt", "Incident__slackChannel__modifiedBy"."id" AS "Incident__slackChannel__modifiedBy_id", "Incident__slackChannel__modifiedBy"."email" AS "Incident__slackChannel__modifiedBy_email", "Incident__slackChannel__modifiedBy"."active" AS "Incident__slackChannel__modifiedBy_active", "Incident__slackChannel__modifiedBy"."name" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-22] \"Incident__slackChannel__createdBy_gusUserId\", \"Incident__slackChannel__createdBy\".\"slackUserId\" AS \"Incident__slackChannel__createdBy_slackUserId\", \"Incident__slackChannel__createdBy\".\"createdBy\" AS \"Incident__slackChannel__createdBy_createdBy\", \"Incident__slackChannel__createdBy\".\"modifiedBy\" AS \"Incident__slackChannel__createdBy_modifiedBy\", \"Incident__slackChannel__createdBy\".\"createdAt\" AS \"Incident__slackChannel__createdBy_createdAt\", \"Incident__slackChannel__createdBy\".\"modifiedAt\" AS \"Incident__slackChannel__createdBy_modifiedAt\", \"Incident__slackChannel__modifiedBy\".\"id\" AS \"Incident__slackChannel__modifiedBy_id\", \"Incident__slackChannel__modifiedBy\".\"email\" AS \"Incident__slackChannel__modifiedBy_email\", \"Incident__slackChannel__modifiedBy\".\"active\" AS \"Incident__slackChannel__modifiedBy_active\", \"Incident__slackChannel__modifiedBy\".\"name\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-23] "Incident__slackChannel__modifiedBy_name", "Incident__slackChannel__modifiedBy"."firstName" AS "Incident__slackChannel__modifiedBy_firstName", "Incident__slackChannel__modifiedBy"."lastName" AS "Incident__slackChannel__modifiedBy_lastName", "Incident__slackChannel__modifiedBy"."profile" AS "Incident__slackChannel__modifiedBy_profile", "Incident__slackChannel__modifiedBy"."gusUserId" AS "Incident__slackChannel__modifiedBy_gusUserId", "Incident__slackChannel__modifiedBy"."slackUserId" AS "Incident__slackChannel__modifiedBy_slackUserId", "Incident__slackChannel__modifiedBy"."createdBy" AS "Incident__slackChannel__modifiedBy_createdBy", "Incident__slackChannel__modifiedBy"."modifiedBy" AS "Incident__slackChannel__modifiedBy_modifiedBy", "Incident__slackChannel__modifiedBy"."createdAt" AS "Incident__slackChannel__modifiedBy_createdAt", "Incident__slackChannel__modifiedBy"."modifiedAt" AS' escaped msg: '[DATABASE] [12-23] "Incident__slackChannel__modifiedBy_name", "Incident__slackChannel__modifiedBy"."firstName" AS "Incident__slackChannel__modifiedBy_firstName", "Incident__slackChannel__modifiedBy"."lastName" AS "Incident__slackChannel__modifiedBy_lastName", "Incident__slackChannel__modifiedBy"."profile" AS "Incident__slackChannel__modifiedBy_profile", "Incident__slackChannel__modifiedBy"."gusUserId" AS "Incident__slackChannel__modifiedBy_gusUserId", "Incident__slackChannel__modifiedBy"."slackUserId" AS "Incident__slackChannel__modifiedBy_slackUserId", "Incident__slackChannel__modifiedBy"."createdBy" AS "Incident__slackChannel__modifiedBy_createdBy", "Incident__slackChannel__modifiedBy"."modifiedBy" AS "Incident__slackChannel__modifiedBy_modifiedBy", "Incident__slackChannel__modifiedBy"."createdAt" AS "Incident__slackChannel__modifiedBy_createdAt", "Incident__slackChannel__modifiedBy"."modifiedAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-23] "Incident__slackChannel__modifiedBy_name", "Incident__slackChannel__modifiedBy"."firstName" AS "Incident__slackChannel__modifiedBy_firstName", "Incident__slackChannel__modifiedBy"."lastName" AS "Incident__slackChannel__modifiedBy_lastName", "Incident__slackChannel__modifiedBy"."profile" AS "Incident__slackChannel__modifiedBy_profile", "Incident__slackChannel__modifiedBy"."gusUserId" AS "Incident__slackChannel__modifiedBy_gusUserId", "Incident__slackChannel__modifiedBy"."slackUserId" AS "Incident__slackChannel__modifiedBy_slackUserId", "Incident__slackChannel__modifiedBy"."createdBy" AS "Incident__slackChannel__modifiedBy_createdBy", "Incident__slackChannel__modifiedBy"."modifiedBy" AS "Incident__slackChannel__modifiedBy_modifiedBy", "Incident__slackChannel__modifiedBy"."createdAt" AS "Incident__slackChannel__modifiedBy_createdAt", "Incident__slackChannel__modifiedBy"."modifiedAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-23] \"Incident__slackChannel__modifiedBy_name\", \"Incident__slackChannel__modifiedBy\".\"firstName\" AS \"Incident__slackChannel__modifiedBy_firstName\", \"Incident__slackChannel__modifiedBy\".\"lastName\" AS \"Incident__slackChannel__modifiedBy_lastName\", \"Incident__slackChannel__modifiedBy\".\"profile\" AS \"Incident__slackChannel__modifiedBy_profile\", \"Incident__slackChannel__modifiedBy\".\"gusUserId\" AS \"Incident__slackChannel__modifiedBy_gusUserId\", \"Incident__slackChannel__modifiedBy\".\"slackUserId\" AS \"Incident__slackChannel__modifiedBy_slackUserId\", \"Incident__slackChannel__modifiedBy\".\"createdBy\" AS \"Incident__slackChannel__modifiedBy_createdBy\", \"Incident__slackChannel__modifiedBy\".\"modifiedBy\" AS \"Incident__slackChannel__modifiedBy_modifiedBy\", \"Incident__slackChannel__modifiedBy\".\"createdAt\" AS \"Incident__slackChannel__modifiedBy_createdAt\", \"Incident__slackChannel__modifiedBy\".\"modifiedAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-24] "Incident__slackChannel__modifiedBy_modifiedAt", "Incident__pages"."createdAt" AS "Incident__pages_createdAt", "Incident__pages"."modifiedAt" AS "Incident__pages_modifiedAt", "Incident__pages"."id" AS "Incident__pages_id", "Incident__pages"."serviceId" AS "Incident__pages_serviceId", "Incident__pages"."serviceName" AS "Incident__pages_serviceName", "Incident__pages"."serviceLink" AS "Incident__pages_serviceLink", "Incident__pages"."responderName" AS "Incident__pages_responderName", "Incident__pages"."responderEmail" AS "Incident__pages_responderEmail", "Incident__pages"."responderLink" AS "Incident__pages_responderLink", "Incident__pages"."incidentNumber" AS "Incident__pages_incidentNumber", "Incident__pages"."incidentLink" AS "Incident__pages_incidentLink", "Incident__pages"."success" AS "Incident__pages_success", "Incident__pages"."error" AS "Incident__pages_error",' escaped msg: '[DATABASE] [12-24] "Incident__slackChannel__modifiedBy_modifiedAt", "Incident__pages"."createdAt" AS "Incident__pages_createdAt", "Incident__pages"."modifiedAt" AS "Incident__pages_modifiedAt", "Incident__pages"."id" AS "Incident__pages_id", "Incident__pages"."serviceId" AS "Incident__pages_serviceId", "Incident__pages"."serviceName" AS "Incident__pages_serviceName", "Incident__pages"."serviceLink" AS "Incident__pages_serviceLink", "Incident__pages"."responderName" AS "Incident__pages_responderName", "Incident__pages"."responderEmail" AS "Incident__pages_responderEmail", "Incident__pages"."responderLink" AS "Incident__pages_responderLink", "Incident__pages"."incidentNumber" AS "Incident__pages_incidentNumber", "Incident__pages"."incidentLink" AS "Incident__pages_incidentLink", "Incident__pages"."success" AS "Incident__pages_success", "Incident__pages"."error" AS "Incident__pages_error",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-24] "Incident__slackChannel__modifiedBy_modifiedAt", "Incident__pages"."createdAt" AS "Incident__pages_createdAt", "Incident__pages"."modifiedAt" AS "Incident__pages_modifiedAt", "Incident__pages"."id" AS "Incident__pages_id", "Incident__pages"."serviceId" AS "Incident__pages_serviceId", "Incident__pages"."serviceName" AS "Incident__pages_serviceName", "Incident__pages"."serviceLink" AS "Incident__pages_serviceLink", "Incident__pages"."responderName" AS "Incident__pages_responderName", "Incident__pages"."responderEmail" AS "Incident__pages_responderEmail", "Incident__pages"."responderLink" AS "Incident__pages_responderLink", "Incident__pages"."incidentNumber" AS "Incident__pages_incidentNumber", "Incident__pages"."incidentLink" AS "Incident__pages_incidentLink", "Incident__pages"."success" AS "Incident__pages_success", "Incident__pages"."error" AS "Incident__pages_error",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-24] \"Incident__slackChannel__modifiedBy_modifiedAt\", \"Incident__pages\".\"createdAt\" AS \"Incident__pages_createdAt\", \"Incident__pages\".\"modifiedAt\" AS \"Incident__pages_modifiedAt\", \"Incident__pages\".\"id\" AS \"Incident__pages_id\", \"Incident__pages\".\"serviceId\" AS \"Incident__pages_serviceId\", \"Incident__pages\".\"serviceName\" AS \"Incident__pages_serviceName\", \"Incident__pages\".\"serviceLink\" AS \"Incident__pages_serviceLink\", \"Incident__pages\".\"responderName\" AS \"Incident__pages_responderName\", \"Incident__pages\".\"responderEmail\" AS \"Incident__pages_responderEmail\", \"Incident__pages\".\"responderLink\" AS \"Incident__pages_responderLink\", \"Incident__pages\".\"incidentNumber\" AS \"Incident__pages_incidentNumber\", \"Incident__pages\".\"incidentLink\" AS \"Incident__pages_incidentLink\", \"Incident__pages\".\"success\" AS \"Incident__pages_success\", \"Incident__pages\".\"error\" AS \"Incident__pages_error\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-25] "Incident__pages"."sent" AS "Incident__pages_sent", "Incident__pages"."customMessage" AS "Incident__pages_customMessage", "Incident__pages"."createdBy" AS "Incident__pages_createdBy", "Incident__pages"."modifiedBy" AS "Incident__pages_modifiedBy", "Incident__pages"."incidentId" AS "Incident__pages_incidentId", "Incident__pages__createdBy"."id" AS "Incident__pages__createdBy_id", "Incident__pages__createdBy"."email" AS "Incident__pages__createdBy_email", "Incident__pages__createdBy"."active" AS "Incident__pages__createdBy_active", "Incident__pages__createdBy"."name" AS "Incident__pages__createdBy_name", "Incident__pages__createdBy"."firstName" AS "Incident__pages__createdBy_firstName", "Incident__pages__createdBy"."lastName" AS "Incident__pages__createdBy_lastName", "Incident__pages__createdBy"."profile" AS "Incident__pages__createdBy_profile", "Incident__pages__createdBy"."gusUserId" AS' escaped msg: '[DATABASE] [12-25] "Incident__pages"."sent" AS "Incident__pages_sent", "Incident__pages"."customMessage" AS "Incident__pages_customMessage", "Incident__pages"."createdBy" AS "Incident__pages_createdBy", "Incident__pages"."modifiedBy" AS "Incident__pages_modifiedBy", "Incident__pages"."incidentId" AS "Incident__pages_incidentId", "Incident__pages__createdBy"."id" AS "Incident__pages__createdBy_id", "Incident__pages__createdBy"."email" AS "Incident__pages__createdBy_email", "Incident__pages__createdBy"."active" AS "Incident__pages__createdBy_active", "Incident__pages__createdBy"."name" AS "Incident__pages__createdBy_name", "Incident__pages__createdBy"."firstName" AS "Incident__pages__createdBy_firstName", "Incident__pages__createdBy"."lastName" AS "Incident__pages__createdBy_lastName", "Incident__pages__createdBy"."profile" AS "Incident__pages__createdBy_profile", "Incident__pages__createdBy"."gusUserId" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-25] "Incident__pages"."sent" AS "Incident__pages_sent", "Incident__pages"."customMessage" AS "Incident__pages_customMessage", "Incident__pages"."createdBy" AS "Incident__pages_createdBy", "Incident__pages"."modifiedBy" AS "Incident__pages_modifiedBy", "Incident__pages"."incidentId" AS "Incident__pages_incidentId", "Incident__pages__createdBy"."id" AS "Incident__pages__createdBy_id", "Incident__pages__createdBy"."email" AS "Incident__pages__createdBy_email", "Incident__pages__createdBy"."active" AS "Incident__pages__createdBy_active", "Incident__pages__createdBy"."name" AS "Incident__pages__createdBy_name", "Incident__pages__createdBy"."firstName" AS "Incident__pages__createdBy_firstName", "Incident__pages__createdBy"."lastName" AS "Incident__pages__createdBy_lastName", "Incident__pages__createdBy"."profile" AS "Incident__pages__createdBy_profile", "Incident__pages__createdBy"."gusUserId" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-25] \"Incident__pages\".\"sent\" AS \"Incident__pages_sent\", \"Incident__pages\".\"customMessage\" AS \"Incident__pages_customMessage\", \"Incident__pages\".\"createdBy\" AS \"Incident__pages_createdBy\", \"Incident__pages\".\"modifiedBy\" AS \"Incident__pages_modifiedBy\", \"Incident__pages\".\"incidentId\" AS \"Incident__pages_incidentId\", \"Incident__pages__createdBy\".\"id\" AS \"Incident__pages__createdBy_id\", \"Incident__pages__createdBy\".\"email\" AS \"Incident__pages__createdBy_email\", \"Incident__pages__createdBy\".\"active\" AS \"Incident__pages__createdBy_active\", \"Incident__pages__createdBy\".\"name\" AS \"Incident__pages__createdBy_name\", \"Incident__pages__createdBy\".\"firstName\" AS \"Incident__pages__createdBy_firstName\", \"Incident__pages__createdBy\".\"lastName\" AS \"Incident__pages__createdBy_lastName\", \"Incident__pages__createdBy\".\"profile\" AS \"Incident__pages__createdBy_profile\", \"Incident__pages__createdBy\".\"gusUserId\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-26] "Incident__pages__createdBy_gusUserId", "Incident__pages__createdBy"."slackUserId" AS "Incident__pages__createdBy_slackUserId", "Incident__pages__createdBy"."createdBy" AS "Incident__pages__createdBy_createdBy", "Incident__pages__createdBy"."modifiedBy" AS "Incident__pages__createdBy_modifiedBy", "Incident__pages__createdBy"."createdAt" AS "Incident__pages__createdBy_createdAt", "Incident__pages__createdBy"."modifiedAt" AS "Incident__pages__createdBy_modifiedAt", "Incident__pages__modifiedBy"."id" AS "Incident__pages__modifiedBy_id", "Incident__pages__modifiedBy"."email" AS "Incident__pages__modifiedBy_email", "Incident__pages__modifiedBy"."active" AS "Incident__pages__modifiedBy_active", "Incident__pages__modifiedBy"."name" AS "Incident__pages__modifiedBy_name", "Incident__pages__modifiedBy"."firstName" AS "Incident__pages__modifiedBy_firstName",' escaped msg: '[DATABASE] [12-26] "Incident__pages__createdBy_gusUserId", "Incident__pages__createdBy"."slackUserId" AS "Incident__pages__createdBy_slackUserId", "Incident__pages__createdBy"."createdBy" AS "Incident__pages__createdBy_createdBy", "Incident__pages__createdBy"."modifiedBy" AS "Incident__pages__createdBy_modifiedBy", "Incident__pages__createdBy"."createdAt" AS "Incident__pages__createdBy_createdAt", "Incident__pages__createdBy"."modifiedAt" AS "Incident__pages__createdBy_modifiedAt", "Incident__pages__modifiedBy"."id" AS "Incident__pages__modifiedBy_id", "Incident__pages__modifiedBy"."email" AS "Incident__pages__modifiedBy_email", "Incident__pages__modifiedBy"."active" AS "Incident__pages__modifiedBy_active", "Incident__pages__modifiedBy"."name" AS "Incident__pages__modifiedBy_name", "Incident__pages__modifiedBy"."firstName" AS "Incident__pages__modifiedBy_firstName",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-26] "Incident__pages__createdBy_gusUserId", "Incident__pages__createdBy"."slackUserId" AS "Incident__pages__createdBy_slackUserId", "Incident__pages__createdBy"."createdBy" AS "Incident__pages__createdBy_createdBy", "Incident__pages__createdBy"."modifiedBy" AS "Incident__pages__createdBy_modifiedBy", "Incident__pages__createdBy"."createdAt" AS "Incident__pages__createdBy_createdAt", "Incident__pages__createdBy"."modifiedAt" AS "Incident__pages__createdBy_modifiedAt", "Incident__pages__modifiedBy"."id" AS "Incident__pages__modifiedBy_id", "Incident__pages__modifiedBy"."email" AS "Incident__pages__modifiedBy_email", "Incident__pages__modifiedBy"."active" AS "Incident__pages__modifiedBy_active", "Incident__pages__modifiedBy"."name" AS "Incident__pages__modifiedBy_name", "Incident__pages__modifiedBy"."firstName" AS "Incident__pages__modifiedBy_firstName",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-26] \"Incident__pages__createdBy_gusUserId\", \"Incident__pages__createdBy\".\"slackUserId\" AS \"Incident__pages__createdBy_slackUserId\", \"Incident__pages__createdBy\".\"createdBy\" AS \"Incident__pages__createdBy_createdBy\", \"Incident__pages__createdBy\".\"modifiedBy\" AS \"Incident__pages__createdBy_modifiedBy\", \"Incident__pages__createdBy\".\"createdAt\" AS \"Incident__pages__createdBy_createdAt\", \"Incident__pages__createdBy\".\"modifiedAt\" AS \"Incident__pages__createdBy_modifiedAt\", \"Incident__pages__modifiedBy\".\"id\" AS \"Incident__pages__modifiedBy_id\", \"Incident__pages__modifiedBy\".\"email\" AS \"Incident__pages__modifiedBy_email\", \"Incident__pages__modifiedBy\".\"active\" AS \"Incident__pages__modifiedBy_active\", \"Incident__pages__modifiedBy\".\"name\" AS \"Incident__pages__modifiedBy_name\", \"Incident__pages__modifiedBy\".\"firstName\" AS \"Incident__pages__modifiedBy_firstName\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-27] "Incident__pages__modifiedBy"."lastName" AS "Incident__pages__modifiedBy_lastName", "Incident__pages__modifiedBy"."profile" AS "Incident__pages__modifiedBy_profile", "Incident__pages__modifiedBy"."gusUserId" AS "Incident__pages__modifiedBy_gusUserId", "Incident__pages__modifiedBy"."slackUserId" AS "Incident__pages__modifiedBy_slackUserId", "Incident__pages__modifiedBy"."createdBy" AS "Incident__pages__modifiedBy_createdBy", "Incident__pages__modifiedBy"."modifiedBy" AS "Incident__pages__modifiedBy_modifiedBy", "Incident__pages__modifiedBy"."createdAt" AS "Incident__pages__modifiedBy_createdAt", "Incident__pages__modifiedBy"."modifiedAt" AS "Incident__pages__modifiedBy_modifiedAt", "Incident__roles"."createdAt" AS "Incident__roles_createdAt", "Incident__roles"."modifiedAt" AS "Incident__roles_modifiedAt", "Incident__roles"."id" AS "Incident__roles_id", "Incident__roles"."name" AS' escaped msg: '[DATABASE] [12-27] "Incident__pages__modifiedBy"."lastName" AS "Incident__pages__modifiedBy_lastName", "Incident__pages__modifiedBy"."profile" AS "Incident__pages__modifiedBy_profile", "Incident__pages__modifiedBy"."gusUserId" AS "Incident__pages__modifiedBy_gusUserId", "Incident__pages__modifiedBy"."slackUserId" AS "Incident__pages__modifiedBy_slackUserId", "Incident__pages__modifiedBy"."createdBy" AS "Incident__pages__modifiedBy_createdBy", "Incident__pages__modifiedBy"."modifiedBy" AS "Incident__pages__modifiedBy_modifiedBy", "Incident__pages__modifiedBy"."createdAt" AS "Incident__pages__modifiedBy_createdAt", "Incident__pages__modifiedBy"."modifiedAt" AS "Incident__pages__modifiedBy_modifiedAt", "Incident__roles"."createdAt" AS "Incident__roles_createdAt", "Incident__roles"."modifiedAt" AS "Incident__roles_modifiedAt", "Incident__roles"."id" AS "Incident__roles_id", "Incident__roles"."name" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-27] "Incident__pages__modifiedBy"."lastName" AS "Incident__pages__modifiedBy_lastName", "Incident__pages__modifiedBy"."profile" AS "Incident__pages__modifiedBy_profile", "Incident__pages__modifiedBy"."gusUserId" AS "Incident__pages__modifiedBy_gusUserId", "Incident__pages__modifiedBy"."slackUserId" AS "Incident__pages__modifiedBy_slackUserId", "Incident__pages__modifiedBy"."createdBy" AS "Incident__pages__modifiedBy_createdBy", "Incident__pages__modifiedBy"."modifiedBy" AS "Incident__pages__modifiedBy_modifiedBy", "Incident__pages__modifiedBy"."createdAt" AS "Incident__pages__modifiedBy_createdAt", "Incident__pages__modifiedBy"."modifiedAt" AS "Incident__pages__modifiedBy_modifiedAt", "Incident__roles"."createdAt" AS "Incident__roles_createdAt", "Incident__roles"."modifiedAt" AS "Incident__roles_modifiedAt", "Incident__roles"."id" AS "Incident__roles_id", "Incident__roles"."name" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-27] \"Incident__pages__modifiedBy\".\"lastName\" AS \"Incident__pages__modifiedBy_lastName\", \"Incident__pages__modifiedBy\".\"profile\" AS \"Incident__pages__modifiedBy_profile\", \"Incident__pages__modifiedBy\".\"gusUserId\" AS \"Incident__pages__modifiedBy_gusUserId\", \"Incident__pages__modifiedBy\".\"slackUserId\" AS \"Incident__pages__modifiedBy_slackUserId\", \"Incident__pages__modifiedBy\".\"createdBy\" AS \"Incident__pages__modifiedBy_createdBy\", \"Incident__pages__modifiedBy\".\"modifiedBy\" AS \"Incident__pages__modifiedBy_modifiedBy\", \"Incident__pages__modifiedBy\".\"createdAt\" AS \"Incident__pages__modifiedBy_createdAt\", \"Incident__pages__modifiedBy\".\"modifiedAt\" AS \"Incident__pages__modifiedBy_modifiedAt\", \"Incident__roles\".\"createdAt\" AS \"Incident__roles_createdAt\", \"Incident__roles\".\"modifiedAt\" AS \"Incident__roles_modifiedAt\", \"Incident__roles\".\"id\" AS \"Incident__roles_id\", \"Incident__roles\".\"name\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-28] "Incident__roles_name", "Incident__roles"."displayName" AS "Incident__roles_displayName", "Incident__roles"."externalGusId" AS "Incident__roles_externalGusId", "Incident__roles"."createdBy" AS "Incident__roles_createdBy", "Incident__roles"."modifiedBy" AS "Incident__roles_modifiedBy", "Incident__roles"."incident_id" AS "Incident__roles_incident_id", "Incident__roles"."user_id" AS "Incident__roles_user_id", "Incident__roles__createdBy"."id" AS "Incident__roles__createdBy_id", "Incident__roles__createdBy"."email" AS "Incident__roles__createdBy_email", "Incident__roles__createdBy"."active" AS "Incident__roles__createdBy_active", "Incident__roles__createdBy"."name" AS "Incident__roles__createdBy_name", "Incident__roles__createdBy"."firstName" AS "Incident__roles__createdBy_firstName", "Incident__roles__createdBy"."lastName" AS "Incident__roles__createdBy_lastName",' escaped msg: '[DATABASE] [12-28] "Incident__roles_name", "Incident__roles"."displayName" AS "Incident__roles_displayName", "Incident__roles"."externalGusId" AS "Incident__roles_externalGusId", "Incident__roles"."createdBy" AS "Incident__roles_createdBy", "Incident__roles"."modifiedBy" AS "Incident__roles_modifiedBy", "Incident__roles"."incident_id" AS "Incident__roles_incident_id", "Incident__roles"."user_id" AS "Incident__roles_user_id", "Incident__roles__createdBy"."id" AS "Incident__roles__createdBy_id", "Incident__roles__createdBy"."email" AS "Incident__roles__createdBy_email", "Incident__roles__createdBy"."active" AS "Incident__roles__createdBy_active", "Incident__roles__createdBy"."name" AS "Incident__roles__createdBy_name", "Incident__roles__createdBy"."firstName" AS "Incident__roles__createdBy_firstName", "Incident__roles__createdBy"."lastName" AS "Incident__roles__createdBy_lastName",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-28] "Incident__roles_name", "Incident__roles"."displayName" AS "Incident__roles_displayName", "Incident__roles"."externalGusId" AS "Incident__roles_externalGusId", "Incident__roles"."createdBy" AS "Incident__roles_createdBy", "Incident__roles"."modifiedBy" AS "Incident__roles_modifiedBy", "Incident__roles"."incident_id" AS "Incident__roles_incident_id", "Incident__roles"."user_id" AS "Incident__roles_user_id", "Incident__roles__createdBy"."id" AS "Incident__roles__createdBy_id", "Incident__roles__createdBy"."email" AS "Incident__roles__createdBy_email", "Incident__roles__createdBy"."active" AS "Incident__roles__createdBy_active", "Incident__roles__createdBy"."name" AS "Incident__roles__createdBy_name", "Incident__roles__createdBy"."firstName" AS "Incident__roles__createdBy_firstName", "Incident__roles__createdBy"."lastName" AS "Incident__roles__createdBy_lastName",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-28] \"Incident__roles_name\", \"Incident__roles\".\"displayName\" AS \"Incident__roles_displayName\", \"Incident__roles\".\"externalGusId\" AS \"Incident__roles_externalGusId\", \"Incident__roles\".\"createdBy\" AS \"Incident__roles_createdBy\", \"Incident__roles\".\"modifiedBy\" AS \"Incident__roles_modifiedBy\", \"Incident__roles\".\"incident_id\" AS \"Incident__roles_incident_id\", \"Incident__roles\".\"user_id\" AS \"Incident__roles_user_id\", \"Incident__roles__createdBy\".\"id\" AS \"Incident__roles__createdBy_id\", \"Incident__roles__createdBy\".\"email\" AS \"Incident__roles__createdBy_email\", \"Incident__roles__createdBy\".\"active\" AS \"Incident__roles__createdBy_active\", \"Incident__roles__createdBy\".\"name\" AS \"Incident__roles__createdBy_name\", \"Incident__roles__createdBy\".\"firstName\" AS \"Incident__roles__createdBy_firstName\", \"Incident__roles__createdBy\".\"lastName\" AS \"Incident__roles__createdBy_lastName\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-29] "Incident__roles__createdBy"."profile" AS "Incident__roles__createdBy_profile", "Incident__roles__createdBy"."gusUserId" AS "Incident__roles__createdBy_gusUserId", "Incident__roles__createdBy"."slackUserId" AS "Incident__roles__createdBy_slackUserId", "Incident__roles__createdBy"."createdBy" AS "Incident__roles__createdBy_createdBy", "Incident__roles__createdBy"."modifiedBy" AS "Incident__roles__createdBy_modifiedBy", "Incident__roles__createdBy"."createdAt" AS "Incident__roles__createdBy_createdAt", "Incident__roles__createdBy"."modifiedAt" AS "Incident__roles__createdBy_modifiedAt", "Incident__roles__modifiedBy"."id" AS "Incident__roles__modifiedBy_id", "Incident__roles__modifiedBy"."email" AS "Incident__roles__modifiedBy_email", "Incident__roles__modifiedBy"."active" AS "Incident__roles__modifiedBy_active", "Incident__roles__modifiedBy"."name" AS "Incident__roles__modifiedBy_name",' escaped msg: '[DATABASE] [12-29] "Incident__roles__createdBy"."profile" AS "Incident__roles__createdBy_profile", "Incident__roles__createdBy"."gusUserId" AS "Incident__roles__createdBy_gusUserId", "Incident__roles__createdBy"."slackUserId" AS "Incident__roles__createdBy_slackUserId", "Incident__roles__createdBy"."createdBy" AS "Incident__roles__createdBy_createdBy", "Incident__roles__createdBy"."modifiedBy" AS "Incident__roles__createdBy_modifiedBy", "Incident__roles__createdBy"."createdAt" AS "Incident__roles__createdBy_createdAt", "Incident__roles__createdBy"."modifiedAt" AS "Incident__roles__createdBy_modifiedAt", "Incident__roles__modifiedBy"."id" AS "Incident__roles__modifiedBy_id", "Incident__roles__modifiedBy"."email" AS "Incident__roles__modifiedBy_email", "Incident__roles__modifiedBy"."active" AS "Incident__roles__modifiedBy_active", "Incident__roles__modifiedBy"."name" AS "Incident__roles__modifiedBy_name",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-29] "Incident__roles__createdBy"."profile" AS "Incident__roles__createdBy_profile", "Incident__roles__createdBy"."gusUserId" AS "Incident__roles__createdBy_gusUserId", "Incident__roles__createdBy"."slackUserId" AS "Incident__roles__createdBy_slackUserId", "Incident__roles__createdBy"."createdBy" AS "Incident__roles__createdBy_createdBy", "Incident__roles__createdBy"."modifiedBy" AS "Incident__roles__createdBy_modifiedBy", "Incident__roles__createdBy"."createdAt" AS "Incident__roles__createdBy_createdAt", "Incident__roles__createdBy"."modifiedAt" AS "Incident__roles__createdBy_modifiedAt", "Incident__roles__modifiedBy"."id" AS "Incident__roles__modifiedBy_id", "Incident__roles__modifiedBy"."email" AS "Incident__roles__modifiedBy_email", "Incident__roles__modifiedBy"."active" AS "Incident__roles__modifiedBy_active", "Incident__roles__modifiedBy"."name" AS "Incident__roles__modifiedBy_name",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-29] \"Incident__roles__createdBy\".\"profile\" AS \"Incident__roles__createdBy_profile\", \"Incident__roles__createdBy\".\"gusUserId\" AS \"Incident__roles__createdBy_gusUserId\", \"Incident__roles__createdBy\".\"slackUserId\" AS \"Incident__roles__createdBy_slackUserId\", \"Incident__roles__createdBy\".\"createdBy\" AS \"Incident__roles__createdBy_createdBy\", \"Incident__roles__createdBy\".\"modifiedBy\" AS \"Incident__roles__createdBy_modifiedBy\", \"Incident__roles__createdBy\".\"createdAt\" AS \"Incident__roles__createdBy_createdAt\", \"Incident__roles__createdBy\".\"modifiedAt\" AS \"Incident__roles__createdBy_modifiedAt\", \"Incident__roles__modifiedBy\".\"id\" AS \"Incident__roles__modifiedBy_id\", \"Incident__roles__modifiedBy\".\"email\" AS \"Incident__roles__modifiedBy_email\", \"Incident__roles__modifiedBy\".\"active\" AS \"Incident__roles__modifiedBy_active\", \"Incident__roles__modifiedBy\".\"name\" AS \"Incident__roles__modifiedBy_name\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-30] "Incident__roles__modifiedBy"."firstName" AS "Incident__roles__modifiedBy_firstName", "Incident__roles__modifiedBy"."lastName" AS "Incident__roles__modifiedBy_lastName", "Incident__roles__modifiedBy"."profile" AS "Incident__roles__modifiedBy_profile", "Incident__roles__modifiedBy"."gusUserId" AS "Incident__roles__modifiedBy_gusUserId", "Incident__roles__modifiedBy"."slackUserId" AS "Incident__roles__modifiedBy_slackUserId", "Incident__roles__modifiedBy"."createdBy" AS "Incident__roles__modifiedBy_createdBy", "Incident__roles__modifiedBy"."modifiedBy" AS "Incident__roles__modifiedBy_modifiedBy", "Incident__roles__modifiedBy"."createdAt" AS "Incident__roles__modifiedBy_createdAt", "Incident__roles__modifiedBy"."modifiedAt" AS "Incident__roles__modifiedBy_modifiedAt", "Incident__roles__user"."id" AS "Incident__roles__user_id", "Incident__roles__user"."email" AS' escaped msg: '[DATABASE] [12-30] "Incident__roles__modifiedBy"."firstName" AS "Incident__roles__modifiedBy_firstName", "Incident__roles__modifiedBy"."lastName" AS "Incident__roles__modifiedBy_lastName", "Incident__roles__modifiedBy"."profile" AS "Incident__roles__modifiedBy_profile", "Incident__roles__modifiedBy"."gusUserId" AS "Incident__roles__modifiedBy_gusUserId", "Incident__roles__modifiedBy"."slackUserId" AS "Incident__roles__modifiedBy_slackUserId", "Incident__roles__modifiedBy"."createdBy" AS "Incident__roles__modifiedBy_createdBy", "Incident__roles__modifiedBy"."modifiedBy" AS "Incident__roles__modifiedBy_modifiedBy", "Incident__roles__modifiedBy"."createdAt" AS "Incident__roles__modifiedBy_createdAt", "Incident__roles__modifiedBy"."modifiedAt" AS "Incident__roles__modifiedBy_modifiedAt", "Incident__roles__user"."id" AS "Incident__roles__user_id", "Incident__roles__user"."email" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-30] "Incident__roles__modifiedBy"."firstName" AS "Incident__roles__modifiedBy_firstName", "Incident__roles__modifiedBy"."lastName" AS "Incident__roles__modifiedBy_lastName", "Incident__roles__modifiedBy"."profile" AS "Incident__roles__modifiedBy_profile", "Incident__roles__modifiedBy"."gusUserId" AS "Incident__roles__modifiedBy_gusUserId", "Incident__roles__modifiedBy"."slackUserId" AS "Incident__roles__modifiedBy_slackUserId", "Incident__roles__modifiedBy"."createdBy" AS "Incident__roles__modifiedBy_createdBy", "Incident__roles__modifiedBy"."modifiedBy" AS "Incident__roles__modifiedBy_modifiedBy", "Incident__roles__modifiedBy"."createdAt" AS "Incident__roles__modifiedBy_createdAt", "Incident__roles__modifiedBy"."modifiedAt" AS "Incident__roles__modifiedBy_modifiedAt", "Incident__roles__user"."id" AS "Incident__roles__user_id", "Incident__roles__user"."email" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-30] \"Incident__roles__modifiedBy\".\"firstName\" AS \"Incident__roles__modifiedBy_firstName\", \"Incident__roles__modifiedBy\".\"lastName\" AS \"Incident__roles__modifiedBy_lastName\", \"Incident__roles__modifiedBy\".\"profile\" AS \"Incident__roles__modifiedBy_profile\", \"Incident__roles__modifiedBy\".\"gusUserId\" AS \"Incident__roles__modifiedBy_gusUserId\", \"Incident__roles__modifiedBy\".\"slackUserId\" AS \"Incident__roles__modifiedBy_slackUserId\", \"Incident__roles__modifiedBy\".\"createdBy\" AS \"Incident__roles__modifiedBy_createdBy\", \"Incident__roles__modifiedBy\".\"modifiedBy\" AS \"Incident__roles__modifiedBy_modifiedBy\", \"Incident__roles__modifiedBy\".\"createdAt\" AS \"Incident__roles__modifiedBy_createdAt\", \"Incident__roles__modifiedBy\".\"modifiedAt\" AS \"Incident__roles__modifiedBy_modifiedAt\", \"Incident__roles__user\".\"id\" AS \"Incident__roles__user_id\", \"Incident__roles__user\".\"email\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-31] "Incident__roles__user_email", "Incident__roles__user"."active" AS "Incident__roles__user_active", "Incident__roles__user"."name" AS "Incident__roles__user_name", "Incident__roles__user"."firstName" AS "Incident__roles__user_firstName", "Incident__roles__user"."lastName" AS "Incident__roles__user_lastName", "Incident__roles__user"."profile" AS "Incident__roles__user_profile", "Incident__roles__user"."gusUserId" AS "Incident__roles__user_gusUserId", "Incident__roles__user"."slackUserId" AS "Incident__roles__user_slackUserId", "Incident__roles__user"."createdBy" AS "Incident__roles__user_createdBy", "Incident__roles__user"."modifiedBy" AS "Incident__roles__user_modifiedBy", "Incident__roles__user"."createdAt" AS "Incident__roles__user_createdAt", "Incident__roles__user"."modifiedAt" AS "Incident__roles__user_modifiedAt", "Incident__internalComms"."createdAt" AS' escaped msg: '[DATABASE] [12-31] "Incident__roles__user_email", "Incident__roles__user"."active" AS "Incident__roles__user_active", "Incident__roles__user"."name" AS "Incident__roles__user_name", "Incident__roles__user"."firstName" AS "Incident__roles__user_firstName", "Incident__roles__user"."lastName" AS "Incident__roles__user_lastName", "Incident__roles__user"."profile" AS "Incident__roles__user_profile", "Incident__roles__user"."gusUserId" AS "Incident__roles__user_gusUserId", "Incident__roles__user"."slackUserId" AS "Incident__roles__user_slackUserId", "Incident__roles__user"."createdBy" AS "Incident__roles__user_createdBy", "Incident__roles__user"."modifiedBy" AS "Incident__roles__user_modifiedBy", "Incident__roles__user"."createdAt" AS "Incident__roles__user_createdAt", "Incident__roles__user"."modifiedAt" AS "Incident__roles__user_modifiedAt", "Incident__internalComms"."createdAt" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-31] "Incident__roles__user_email", "Incident__roles__user"."active" AS "Incident__roles__user_active", "Incident__roles__user"."name" AS "Incident__roles__user_name", "Incident__roles__user"."firstName" AS "Incident__roles__user_firstName", "Incident__roles__user"."lastName" AS "Incident__roles__user_lastName", "Incident__roles__user"."profile" AS "Incident__roles__user_profile", "Incident__roles__user"."gusUserId" AS "Incident__roles__user_gusUserId", "Incident__roles__user"."slackUserId" AS "Incident__roles__user_slackUserId", "Incident__roles__user"."createdBy" AS "Incident__roles__user_createdBy", "Incident__roles__user"."modifiedBy" AS "Incident__roles__user_modifiedBy", "Incident__roles__user"."createdAt" AS "Incident__roles__user_createdAt", "Incident__roles__user"."modifiedAt" AS "Incident__roles__user_modifiedAt", "Incident__internalComms"."createdAt" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-31] \"Incident__roles__user_email\", \"Incident__roles__user\".\"active\" AS \"Incident__roles__user_active\", \"Incident__roles__user\".\"name\" AS \"Incident__roles__user_name\", \"Incident__roles__user\".\"firstName\" AS \"Incident__roles__user_firstName\", \"Incident__roles__user\".\"lastName\" AS \"Incident__roles__user_lastName\", \"Incident__roles__user\".\"profile\" AS \"Incident__roles__user_profile\", \"Incident__roles__user\".\"gusUserId\" AS \"Incident__roles__user_gusUserId\", \"Incident__roles__user\".\"slackUserId\" AS \"Incident__roles__user_slackUserId\", \"Incident__roles__user\".\"createdBy\" AS \"Incident__roles__user_createdBy\", \"Incident__roles__user\".\"modifiedBy\" AS \"Incident__roles__user_modifiedBy\", \"Incident__roles__user\".\"createdAt\" AS \"Incident__roles__user_createdAt\", \"Incident__roles__user\".\"modifiedAt\" AS \"Incident__roles__user_modifiedAt\", \"Incident__internalComms\".\"createdAt\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-32] "Incident__internalComms_createdAt", "Incident__internalComms"."modifiedAt" AS "Incident__internalComms_modifiedAt", "Incident__internalComms"."id" AS "Incident__internalComms_id", "Incident__internalComms"."sequenceNumber" AS "Incident__internalComms_sequenceNumber", "Incident__internalComms"."type" AS "Incident__internalComms_type", "Incident__internalComms"."incidentDetails" AS "Incident__internalComms_incidentDetails", "Incident__internalComms"."sentBySlackUserId" AS "Incident__internalComms_sentBySlackUserId", "Incident__internalComms"."sentBy" AS "Incident__internalComms_sentBy", "Incident__internalComms"."content" AS "Incident__internalComms_content", "Incident__internalComms"."createdBy" AS "Incident__internalComms_createdBy", "Incident__internalComms"."modifiedBy" AS "Incident__internalComms_modifiedBy", "Incident__internalComms"."incident_id" AS' escaped msg: '[DATABASE] [12-32] "Incident__internalComms_createdAt", "Incident__internalComms"."modifiedAt" AS "Incident__internalComms_modifiedAt", "Incident__internalComms"."id" AS "Incident__internalComms_id", "Incident__internalComms"."sequenceNumber" AS "Incident__internalComms_sequenceNumber", "Incident__internalComms"."type" AS "Incident__internalComms_type", "Incident__internalComms"."incidentDetails" AS "Incident__internalComms_incidentDetails", "Incident__internalComms"."sentBySlackUserId" AS "Incident__internalComms_sentBySlackUserId", "Incident__internalComms"."sentBy" AS "Incident__internalComms_sentBy", "Incident__internalComms"."content" AS "Incident__internalComms_content", "Incident__internalComms"."createdBy" AS "Incident__internalComms_createdBy", "Incident__internalComms"."modifiedBy" AS "Incident__internalComms_modifiedBy", "Incident__internalComms"."incident_id" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-32] "Incident__internalComms_createdAt", "Incident__internalComms"."modifiedAt" AS "Incident__internalComms_modifiedAt", "Incident__internalComms"."id" AS "Incident__internalComms_id", "Incident__internalComms"."sequenceNumber" AS "Incident__internalComms_sequenceNumber", "Incident__internalComms"."type" AS "Incident__internalComms_type", "Incident__internalComms"."incidentDetails" AS "Incident__internalComms_incidentDetails", "Incident__internalComms"."sentBySlackUserId" AS "Incident__internalComms_sentBySlackUserId", "Incident__internalComms"."sentBy" AS "Incident__internalComms_sentBy", "Incident__internalComms"."content" AS "Incident__internalComms_content", "Incident__internalComms"."createdBy" AS "Incident__internalComms_createdBy", "Incident__internalComms"."modifiedBy" AS "Incident__internalComms_modifiedBy", "Incident__internalComms"."incident_id" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-32] \"Incident__internalComms_createdAt\", \"Incident__internalComms\".\"modifiedAt\" AS \"Incident__internalComms_modifiedAt\", \"Incident__internalComms\".\"id\" AS \"Incident__internalComms_id\", \"Incident__internalComms\".\"sequenceNumber\" AS \"Incident__internalComms_sequenceNumber\", \"Incident__internalComms\".\"type\" AS \"Incident__internalComms_type\", \"Incident__internalComms\".\"incidentDetails\" AS \"Incident__internalComms_incidentDetails\", \"Incident__internalComms\".\"sentBySlackUserId\" AS \"Incident__internalComms_sentBySlackUserId\", \"Incident__internalComms\".\"sentBy\" AS \"Incident__internalComms_sentBy\", \"Incident__internalComms\".\"content\" AS \"Incident__internalComms_content\", \"Incident__internalComms\".\"createdBy\" AS \"Incident__internalComms_createdBy\", \"Incident__internalComms\".\"modifiedBy\" AS \"Incident__internalComms_modifiedBy\", \"Incident__internalComms\".\"incident_id\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-33] "Incident__internalComms_incident_id", "Incident__internalComms__createdBy"."id" AS "Incident__internalComms__createdBy_id", "Incident__internalComms__createdBy"."email" AS "Incident__internalComms__createdBy_email", "Incident__internalComms__createdBy"."active" AS "Incident__internalComms__createdBy_active", "Incident__internalComms__createdBy"."name" AS "Incident__internalComms__createdBy_name", "Incident__internalComms__createdBy"."firstName" AS "Incident__internalComms__createdBy_firstName", "Incident__internalComms__createdBy"."lastName" AS "Incident__internalComms__createdBy_lastName", "Incident__internalComms__createdBy"."profile" AS "Incident__internalComms__createdBy_profile", "Incident__internalComms__createdBy"."gusUserId" AS "Incident__internalComms__createdBy_gusUserId", "Incident__internalComms__createdBy"."slackUserId" AS "Incident__internalComms__createdBy_slackUserId",' escaped msg: '[DATABASE] [12-33] "Incident__internalComms_incident_id", "Incident__internalComms__createdBy"."id" AS "Incident__internalComms__createdBy_id", "Incident__internalComms__createdBy"."email" AS "Incident__internalComms__createdBy_email", "Incident__internalComms__createdBy"."active" AS "Incident__internalComms__createdBy_active", "Incident__internalComms__createdBy"."name" AS "Incident__internalComms__createdBy_name", "Incident__internalComms__createdBy"."firstName" AS "Incident__internalComms__createdBy_firstName", "Incident__internalComms__createdBy"."lastName" AS "Incident__internalComms__createdBy_lastName", "Incident__internalComms__createdBy"."profile" AS "Incident__internalComms__createdBy_profile", "Incident__internalComms__createdBy"."gusUserId" AS "Incident__internalComms__createdBy_gusUserId", "Incident__internalComms__createdBy"."slackUserId" AS "Incident__internalComms__createdBy_slackUserId",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-33] "Incident__internalComms_incident_id", "Incident__internalComms__createdBy"."id" AS "Incident__internalComms__createdBy_id", "Incident__internalComms__createdBy"."email" AS "Incident__internalComms__createdBy_email", "Incident__internalComms__createdBy"."active" AS "Incident__internalComms__createdBy_active", "Incident__internalComms__createdBy"."name" AS "Incident__internalComms__createdBy_name", "Incident__internalComms__createdBy"."firstName" AS "Incident__internalComms__createdBy_firstName", "Incident__internalComms__createdBy"."lastName" AS "Incident__internalComms__createdBy_lastName", "Incident__internalComms__createdBy"."profile" AS "Incident__internalComms__createdBy_profile", "Incident__internalComms__createdBy"."gusUserId" AS "Incident__internalComms__createdBy_gusUserId", "Incident__internalComms__createdBy"."slackUserId" AS "Incident__internalComms__createdBy_slackUserId",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-33] \"Incident__internalComms_incident_id\", \"Incident__internalComms__createdBy\".\"id\" AS \"Incident__internalComms__createdBy_id\", \"Incident__internalComms__createdBy\".\"email\" AS \"Incident__internalComms__createdBy_email\", \"Incident__internalComms__createdBy\".\"active\" AS \"Incident__internalComms__createdBy_active\", \"Incident__internalComms__createdBy\".\"name\" AS \"Incident__internalComms__createdBy_name\", \"Incident__internalComms__createdBy\".\"firstName\" AS \"Incident__internalComms__createdBy_firstName\", \"Incident__internalComms__createdBy\".\"lastName\" AS \"Incident__internalComms__createdBy_lastName\", \"Incident__internalComms__createdBy\".\"profile\" AS \"Incident__internalComms__createdBy_profile\", \"Incident__internalComms__createdBy\".\"gusUserId\" AS \"Incident__internalComms__createdBy_gusUserId\", \"Incident__internalComms__createdBy\".\"slackUserId\" AS \"Incident__internalComms__createdBy_slackUserId\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-34] "Incident__internalComms__createdBy"."createdBy" AS "Incident__internalComms__createdBy_createdBy", "Incident__internalComms__createdBy"."modifiedBy" AS "Incident__internalComms__createdBy_modifiedBy", "Incident__internalComms__createdBy"."createdAt" AS "Incident__internalComms__createdBy_createdAt", "Incident__internalComms__createdBy"."modifiedAt" AS "Incident__internalComms__createdBy_modifiedAt", "Incident__internalComms__modifiedBy"."id" AS "Incident__internalComms__modifiedBy_id", "Incident__internalComms__modifiedBy"."email" AS "Incident__internalComms__modifiedBy_email", "Incident__internalComms__modifiedBy"."active" AS "Incident__internalComms__modifiedBy_active", "Incident__internalComms__modifiedBy"."name" AS "Incident__internalComms__modifiedBy_name", "Incident__internalComms__modifiedBy"."firstName" AS "Incident__internalComms__modifiedBy_firstName",' escaped msg: '[DATABASE] [12-34] "Incident__internalComms__createdBy"."createdBy" AS "Incident__internalComms__createdBy_createdBy", "Incident__internalComms__createdBy"."modifiedBy" AS "Incident__internalComms__createdBy_modifiedBy", "Incident__internalComms__createdBy"."createdAt" AS "Incident__internalComms__createdBy_createdAt", "Incident__internalComms__createdBy"."modifiedAt" AS "Incident__internalComms__createdBy_modifiedAt", "Incident__internalComms__modifiedBy"."id" AS "Incident__internalComms__modifiedBy_id", "Incident__internalComms__modifiedBy"."email" AS "Incident__internalComms__modifiedBy_email", "Incident__internalComms__modifiedBy"."active" AS "Incident__internalComms__modifiedBy_active", "Incident__internalComms__modifiedBy"."name" AS "Incident__internalComms__modifiedBy_name", "Incident__internalComms__modifiedBy"."firstName" AS "Incident__internalComms__modifiedBy_firstName",' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-34] "Incident__internalComms__createdBy"."createdBy" AS "Incident__internalComms__createdBy_createdBy", "Incident__internalComms__createdBy"."modifiedBy" AS "Incident__internalComms__createdBy_modifiedBy", "Incident__internalComms__createdBy"."createdAt" AS "Incident__internalComms__createdBy_createdAt", "Incident__internalComms__createdBy"."modifiedAt" AS "Incident__internalComms__createdBy_modifiedAt", "Incident__internalComms__modifiedBy"."id" AS "Incident__internalComms__modifiedBy_id", "Incident__internalComms__modifiedBy"."email" AS "Incident__internalComms__modifiedBy_email", "Incident__internalComms__modifiedBy"."active" AS "Incident__internalComms__modifiedBy_active", "Incident__internalComms__modifiedBy"."name" AS "Incident__internalComms__modifiedBy_name", "Incident__internalComms__modifiedBy"."firstName" AS "Incident__internalComms__modifiedBy_firstName",' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-34] \"Incident__internalComms__createdBy\".\"createdBy\" AS \"Incident__internalComms__createdBy_createdBy\", \"Incident__internalComms__createdBy\".\"modifiedBy\" AS \"Incident__internalComms__createdBy_modifiedBy\", \"Incident__internalComms__createdBy\".\"createdAt\" AS \"Incident__internalComms__createdBy_createdAt\", \"Incident__internalComms__createdBy\".\"modifiedAt\" AS \"Incident__internalComms__createdBy_modifiedAt\", \"Incident__internalComms__modifiedBy\".\"id\" AS \"Incident__internalComms__modifiedBy_id\", \"Incident__internalComms__modifiedBy\".\"email\" AS \"Incident__internalComms__modifiedBy_email\", \"Incident__internalComms__modifiedBy\".\"active\" AS \"Incident__internalComms__modifiedBy_active\", \"Incident__internalComms__modifiedBy\".\"name\" AS \"Incident__internalComms__modifiedBy_name\", \"Incident__internalComms__modifiedBy\".\"firstName\" AS \"Incident__internalComms__modifiedBy_firstName\",", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-35] "Incident__internalComms__modifiedBy"."lastName" AS "Incident__internalComms__modifiedBy_lastName", "Incident__internalComms__modifiedBy"."profile" AS "Incident__internalComms__modifiedBy_profile", "Incident__internalComms__modifiedBy"."gusUserId" AS "Incident__internalComms__modifiedBy_gusUserId", "Incident__internalComms__modifiedBy"."slackUserId" AS "Incident__internalComms__modifiedBy_slackUserId", "Incident__internalComms__modifiedBy"."createdBy" AS "Incident__internalComms__modifiedBy_createdBy", "Incident__internalComms__modifiedBy"."modifiedBy" AS "Incident__internalComms__modifiedBy_modifiedBy", "Incident__internalComms__modifiedBy"."createdAt" AS "Incident__internalComms__modifiedBy_createdAt", "Incident__internalComms__modifiedBy"."modifiedAt" AS "Incident__internalComms__modifiedBy_modifiedAt", "Incident__internalComms__notifications"."id" AS' escaped msg: '[DATABASE] [12-35] "Incident__internalComms__modifiedBy"."lastName" AS "Incident__internalComms__modifiedBy_lastName", "Incident__internalComms__modifiedBy"."profile" AS "Incident__internalComms__modifiedBy_profile", "Incident__internalComms__modifiedBy"."gusUserId" AS "Incident__internalComms__modifiedBy_gusUserId", "Incident__internalComms__modifiedBy"."slackUserId" AS "Incident__internalComms__modifiedBy_slackUserId", "Incident__internalComms__modifiedBy"."createdBy" AS "Incident__internalComms__modifiedBy_createdBy", "Incident__internalComms__modifiedBy"."modifiedBy" AS "Incident__internalComms__modifiedBy_modifiedBy", "Incident__internalComms__modifiedBy"."createdAt" AS "Incident__internalComms__modifiedBy_createdAt", "Incident__internalComms__modifiedBy"."modifiedAt" AS "Incident__internalComms__modifiedBy_modifiedAt", "Incident__internalComms__notifications"."id" AS' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-35] "Incident__internalComms__modifiedBy"."lastName" AS "Incident__internalComms__modifiedBy_lastName", "Incident__internalComms__modifiedBy"."profile" AS "Incident__internalComms__modifiedBy_profile", "Incident__internalComms__modifiedBy"."gusUserId" AS "Incident__internalComms__modifiedBy_gusUserId", "Incident__internalComms__modifiedBy"."slackUserId" AS "Incident__internalComms__modifiedBy_slackUserId", "Incident__internalComms__modifiedBy"."createdBy" AS "Incident__internalComms__modifiedBy_createdBy", "Incident__internalComms__modifiedBy"."modifiedBy" AS "Incident__internalComms__modifiedBy_modifiedBy", "Incident__internalComms__modifiedBy"."createdAt" AS "Incident__internalComms__modifiedBy_createdAt", "Incident__internalComms__modifiedBy"."modifiedAt" AS "Incident__internalComms__modifiedBy_modifiedAt", "Incident__internalComms__notifications"."id" AS' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-35] \"Incident__internalComms__modifiedBy\".\"lastName\" AS \"Incident__internalComms__modifiedBy_lastName\", \"Incident__internalComms__modifiedBy\".\"profile\" AS \"Incident__internalComms__modifiedBy_profile\", \"Incident__internalComms__modifiedBy\".\"gusUserId\" AS \"Incident__internalComms__modifiedBy_gusUserId\", \"Incident__internalComms__modifiedBy\".\"slackUserId\" AS \"Incident__internalComms__modifiedBy_slackUserId\", \"Incident__internalComms__modifiedBy\".\"createdBy\" AS \"Incident__internalComms__modifiedBy_createdBy\", \"Incident__internalComms__modifiedBy\".\"modifiedBy\" AS \"Incident__internalComms__modifiedBy_modifiedBy\", \"Incident__internalComms__modifiedBy\".\"createdAt\" AS \"Incident__internalComms__modifiedBy_createdAt\", \"Incident__internalComms__modifiedBy\".\"modifiedAt\" AS \"Incident__internalComms__modifiedBy_modifiedAt\", \"Incident__internalComms__notifications\".\"id\" AS", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-36] "Incident__internalComms__notifications_id", "Incident__internalComms__notifications"."type" AS "Incident__internalComms__notifications_type", "Incident__internalComms__notifications"."notification" AS "Incident__internalComms__notifications_notification", "Incident__internalComms__notifications"."slackChannelName" AS "Incident__internalComms__notifications_slackChannelName", "Incident__internalComms__notifications"."deliveryStatus" AS "Incident__internalComms__notifications_deliveryStatus", "Incident__internalComms__notifications"."internal_comms_report_id" AS "Incident__internalComms__notifications_internal_comms_report_id" FROM "incident" "Incident" LEFT JOIN "user" "Incident__createdBy" ON "Incident__createdBy"."id"="Incident"."createdBy" LEFT JOIN "user" "Incident__modifiedBy" ON "Incident__modifiedBy"."id"="Incident"."modifiedBy" LEFT JOIN "team" "Incident__team" ON' escaped msg: '[DATABASE] [12-36] "Incident__internalComms__notifications_id", "Incident__internalComms__notifications"."type" AS "Incident__internalComms__notifications_type", "Incident__internalComms__notifications"."notification" AS "Incident__internalComms__notifications_notification", "Incident__internalComms__notifications"."slackChannelName" AS "Incident__internalComms__notifications_slackChannelName", "Incident__internalComms__notifications"."deliveryStatus" AS "Incident__internalComms__notifications_deliveryStatus", "Incident__internalComms__notifications"."internal_comms_report_id" AS "Incident__internalComms__notifications_internal_comms_report_id" FROM "incident" "Incident" LEFT JOIN "user" "Incident__createdBy" ON "Incident__createdBy"."id"="Incident"."createdBy" LEFT JOIN "user" "Incident__modifiedBy" ON "Incident__modifiedBy"."id"="Incident"."modifiedBy" LEFT JOIN "team" "Incident__team" ON' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-36] "Incident__internalComms__notifications_id", "Incident__internalComms__notifications"."type" AS "Incident__internalComms__notifications_type", "Incident__internalComms__notifications"."notification" AS "Incident__internalComms__notifications_notification", "Incident__internalComms__notifications"."slackChannelName" AS "Incident__internalComms__notifications_slackChannelName", "Incident__internalComms__notifications"."deliveryStatus" AS "Incident__internalComms__notifications_deliveryStatus", "Incident__internalComms__notifications"."internal_comms_report_id" AS "Incident__internalComms__notifications_internal_comms_report_id" FROM "incident" "Incident" LEFT JOIN "user" "Incident__createdBy" ON "Incident__createdBy"."id"="Incident"."createdBy" LEFT JOIN "user" "Incident__modifiedBy" ON "Incident__modifiedBy"."id"="Incident"."modifiedBy" LEFT JOIN "team" "Incident__team" ON' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-36] \"Incident__internalComms__notifications_id\", \"Incident__internalComms__notifications\".\"type\" AS \"Incident__internalComms__notifications_type\", \"Incident__internalComms__notifications\".\"notification\" AS \"Incident__internalComms__notifications_notification\", \"Incident__internalComms__notifications\".\"slackChannelName\" AS \"Incident__internalComms__notifications_slackChannelName\", \"Incident__internalComms__notifications\".\"deliveryStatus\" AS \"Incident__internalComms__notifications_deliveryStatus\", \"Incident__internalComms__notifications\".\"internal_comms_report_id\" AS \"Incident__internalComms__notifications_internal_comms_report_id\" FROM \"incident\" \"Incident\" LEFT JOIN \"user\" \"Incident__createdBy\" ON \"Incident__createdBy\".\"id\"=\"Incident\".\"createdBy\" LEFT JOIN \"user\" \"Incident__modifiedBy\" ON \"Incident__modifiedBy\".\"id\"=\"Incident\".\"modifiedBy\" LEFT JOIN \"team\" \"Incident__team\" ON", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-37] "Incident__team"."id"="Incident"."teamId" LEFT JOIN "user" "Incident__team__createdBy" ON "Incident__team__createdBy"."id"="Incident__team"."createdBy" LEFT JOIN "user" "Incident__team__modifiedBy" ON "Incident__team__modifiedBy"."id"="Incident__team"."modifiedBy" LEFT JOIN "team_collaborators_user" "Incident__team_Incident__team__collaborators" ON "Incident__team_Incident__team__collaborators"."teamId"="Incident__team"."id" LEFT JOIN "user" "Incident__team__collaborators" ON "Incident__team__collaborators"."id"="Incident__team_Incident__team__collaborators"."userId" LEFT JOIN "base_config" "Incident__team__config" ON "Incident__team__config"."id"="Incident__team"."configId" LEFT JOIN "user" "Incident__team__config__createdBy" ON "Incident__team__config__createdBy"."id"="Incident__team__config"."createdBy" LEFT JOIN "user" "Incident__team__config__modifiedBy" ON' escaped msg: '[DATABASE] [12-37] "Incident__team"."id"="Incident"."teamId" LEFT JOIN "user" "Incident__team__createdBy" ON "Incident__team__createdBy"."id"="Incident__team"."createdBy" LEFT JOIN "user" "Incident__team__modifiedBy" ON "Incident__team__modifiedBy"."id"="Incident__team"."modifiedBy" LEFT JOIN "team_collaborators_user" "Incident__team_Incident__team__collaborators" ON "Incident__team_Incident__team__collaborators"."teamId"="Incident__team"."id" LEFT JOIN "user" "Incident__team__collaborators" ON "Incident__team__collaborators"."id"="Incident__team_Incident__team__collaborators"."userId" LEFT JOIN "base_config" "Incident__team__config" ON "Incident__team__config"."id"="Incident__team"."configId" LEFT JOIN "user" "Incident__team__config__createdBy" ON "Incident__team__config__createdBy"."id"="Incident__team__config"."createdBy" LEFT JOIN "user" "Incident__team__config__modifiedBy" ON' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-37] "Incident__team"."id"="Incident"."teamId" LEFT JOIN "user" "Incident__team__createdBy" ON "Incident__team__createdBy"."id"="Incident__team"."createdBy" LEFT JOIN "user" "Incident__team__modifiedBy" ON "Incident__team__modifiedBy"."id"="Incident__team"."modifiedBy" LEFT JOIN "team_collaborators_user" "Incident__team_Incident__team__collaborators" ON "Incident__team_Incident__team__collaborators"."teamId"="Incident__team"."id" LEFT JOIN "user" "Incident__team__collaborators" ON "Incident__team__collaborators"."id"="Incident__team_Incident__team__collaborators"."userId" LEFT JOIN "base_config" "Incident__team__config" ON "Incident__team__config"."id"="Incident__team"."configId" LEFT JOIN "user" "Incident__team__config__createdBy" ON "Incident__team__config__createdBy"."id"="Incident__team__config"."createdBy" LEFT JOIN "user" "Incident__team__config__modifiedBy" ON' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-37] \"Incident__team\".\"id\"=\"Incident\".\"teamId\" LEFT JOIN \"user\" \"Incident__team__createdBy\" ON \"Incident__team__createdBy\".\"id\"=\"Incident__team\".\"createdBy\" LEFT JOIN \"user\" \"Incident__team__modifiedBy\" ON \"Incident__team__modifiedBy\".\"id\"=\"Incident__team\".\"modifiedBy\" LEFT JOIN \"team_collaborators_user\" \"Incident__team_Incident__team__collaborators\" ON \"Incident__team_Incident__team__collaborators\".\"teamId\"=\"Incident__team\".\"id\" LEFT JOIN \"user\" \"Incident__team__collaborators\" ON \"Incident__team__collaborators\".\"id\"=\"Incident__team_Incident__team__collaborators\".\"userId\" LEFT JOIN \"base_config\" \"Incident__team__config\" ON \"Incident__team__config\".\"id\"=\"Incident__team\".\"configId\" LEFT JOIN \"user\" \"Incident__team__config__createdBy\" ON \"Incident__team__config__createdBy\".\"id\"=\"Incident__team__config\".\"createdBy\" LEFT JOIN \"user\" \"Incident__team__config__modifiedBy\" ON", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-38] "Incident__team__config__modifiedBy"."id"="Incident__team__config"."modifiedBy" LEFT JOIN "comms_config" "Incident__team__config__comms" ON "Incident__team__config__comms"."id"="Incident__team__config"."commId" LEFT JOIN "comms_config" "Incident__team__config__tce" ON "Incident__team__config__tce"."id"="Incident__team__config"."tceId" LEFT JOIN "comms_config" "Incident__team__config__can" ON "Incident__team__config__can"."id"="Incident__team__config"."canId" LEFT JOIN "page_config" "Incident__team__config__page" ON "Incident__team__config__page"."id"="Incident__team__config"."pageId" LEFT JOIN "salesforce"."adm_scrum_team__c" "Incident__team__scrumTeam" ON "Incident__team__scrumTeam"."sfid"="Incident__team"."externalId" LEFT JOIN "rule" "Incident__team__rules" ON "Incident__team__rules"."team_id"="Incident__team"."id" LEFT JOIN "user" "Incident__team__rules__createdBy" ON' escaped msg: '[DATABASE] [12-38] "Incident__team__config__modifiedBy"."id"="Incident__team__config"."modifiedBy" LEFT JOIN "comms_config" "Incident__team__config__comms" ON "Incident__team__config__comms"."id"="Incident__team__config"."commId" LEFT JOIN "comms_config" "Incident__team__config__tce" ON "Incident__team__config__tce"."id"="Incident__team__config"."tceId" LEFT JOIN "comms_config" "Incident__team__config__can" ON "Incident__team__config__can"."id"="Incident__team__config"."canId" LEFT JOIN "page_config" "Incident__team__config__page" ON "Incident__team__config__page"."id"="Incident__team__config"."pageId" LEFT JOIN "salesforce"."adm_scrum_team__c" "Incident__team__scrumTeam" ON "Incident__team__scrumTeam"."sfid"="Incident__team"."externalId" LEFT JOIN "rule" "Incident__team__rules" ON "Incident__team__rules"."team_id"="Incident__team"."id" LEFT JOIN "user" "Incident__team__rules__createdBy" ON' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-38] "Incident__team__config__modifiedBy"."id"="Incident__team__config"."modifiedBy" LEFT JOIN "comms_config" "Incident__team__config__comms" ON "Incident__team__config__comms"."id"="Incident__team__config"."commId" LEFT JOIN "comms_config" "Incident__team__config__tce" ON "Incident__team__config__tce"."id"="Incident__team__config"."tceId" LEFT JOIN "comms_config" "Incident__team__config__can" ON "Incident__team__config__can"."id"="Incident__team__config"."canId" LEFT JOIN "page_config" "Incident__team__config__page" ON "Incident__team__config__page"."id"="Incident__team__config"."pageId" LEFT JOIN "salesforce"."adm_scrum_team__c" "Incident__team__scrumTeam" ON "Incident__team__scrumTeam"."sfid"="Incident__team"."externalId" LEFT JOIN "rule" "Incident__team__rules" ON "Incident__team__rules"."team_id"="Incident__team"."id" LEFT JOIN "user" "Incident__team__rules__createdBy" ON' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-38] \"Incident__team__config__modifiedBy\".\"id\"=\"Incident__team__config\".\"modifiedBy\" LEFT JOIN \"comms_config\" \"Incident__team__config__comms\" ON \"Incident__team__config__comms\".\"id\"=\"Incident__team__config\".\"commId\" LEFT JOIN \"comms_config\" \"Incident__team__config__tce\" ON \"Incident__team__config__tce\".\"id\"=\"Incident__team__config\".\"tceId\" LEFT JOIN \"comms_config\" \"Incident__team__config__can\" ON \"Incident__team__config__can\".\"id\"=\"Incident__team__config\".\"canId\" LEFT JOIN \"page_config\" \"Incident__team__config__page\" ON \"Incident__team__config__page\".\"id\"=\"Incident__team__config\".\"pageId\" LEFT JOIN \"salesforce\".\"adm_scrum_team__c\" \"Incident__team__scrumTeam\" ON \"Incident__team__scrumTeam\".\"sfid\"=\"Incident__team\".\"externalId\" LEFT JOIN \"rule\" \"Incident__team__rules\" ON \"Incident__team__rules\".\"team_id\"=\"Incident__team\".\"id\" LEFT JOIN \"user\" \"Incident__team__rules__createdBy\" ON", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-39] "Incident__team__rules__createdBy"."id"="Incident__team__rules"."createdBy" LEFT JOIN "user" "Incident__team__rules__modifiedBy" ON "Incident__team__rules__modifiedBy"."id"="Incident__team__rules"."modifiedBy" LEFT JOIN "slack_channel" "Incident__slackChannel" ON "Incident__slackChannel"."id"="Incident"."slackChannelId" LEFT JOIN "user" "Incident__slackChannel__createdBy" ON "Incident__slackChannel__createdBy"."id"="Incident__slackChannel"."createdBy" LEFT JOIN "user" "Incident__slackChannel__modifiedBy" ON "Incident__slackChannel__modifiedBy"."id"="Incident__slackChannel"."modifiedBy" LEFT JOIN "page" "Incident__pages" ON "Incident__pages"."incidentId"="Incident"."id" LEFT JOIN "user" "Incident__pages__createdBy" ON "Incident__pages__createdBy"."id"="Incident__pages"."createdBy" LEFT JOIN "user" "Incident__pages__modifiedBy" ON' escaped msg: '[DATABASE] [12-39] "Incident__team__rules__createdBy"."id"="Incident__team__rules"."createdBy" LEFT JOIN "user" "Incident__team__rules__modifiedBy" ON "Incident__team__rules__modifiedBy"."id"="Incident__team__rules"."modifiedBy" LEFT JOIN "slack_channel" "Incident__slackChannel" ON "Incident__slackChannel"."id"="Incident"."slackChannelId" LEFT JOIN "user" "Incident__slackChannel__createdBy" ON "Incident__slackChannel__createdBy"."id"="Incident__slackChannel"."createdBy" LEFT JOIN "user" "Incident__slackChannel__modifiedBy" ON "Incident__slackChannel__modifiedBy"."id"="Incident__slackChannel"."modifiedBy" LEFT JOIN "page" "Incident__pages" ON "Incident__pages"."incidentId"="Incident"."id" LEFT JOIN "user" "Incident__pages__createdBy" ON "Incident__pages__createdBy"."id"="Incident__pages"."createdBy" LEFT JOIN "user" "Incident__pages__modifiedBy" ON' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-39] "Incident__team__rules__createdBy"."id"="Incident__team__rules"."createdBy" LEFT JOIN "user" "Incident__team__rules__modifiedBy" ON "Incident__team__rules__modifiedBy"."id"="Incident__team__rules"."modifiedBy" LEFT JOIN "slack_channel" "Incident__slackChannel" ON "Incident__slackChannel"."id"="Incident"."slackChannelId" LEFT JOIN "user" "Incident__slackChannel__createdBy" ON "Incident__slackChannel__createdBy"."id"="Incident__slackChannel"."createdBy" LEFT JOIN "user" "Incident__slackChannel__modifiedBy" ON "Incident__slackChannel__modifiedBy"."id"="Incident__slackChannel"."modifiedBy" LEFT JOIN "page" "Incident__pages" ON "Incident__pages"."incidentId"="Incident"."id" LEFT JOIN "user" "Incident__pages__createdBy" ON "Incident__pages__createdBy"."id"="Incident__pages"."createdBy" LEFT JOIN "user" "Incident__pages__modifiedBy" ON' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-39] \"Incident__team__rules__createdBy\".\"id\"=\"Incident__team__rules\".\"createdBy\" LEFT JOIN \"user\" \"Incident__team__rules__modifiedBy\" ON \"Incident__team__rules__modifiedBy\".\"id\"=\"Incident__team__rules\".\"modifiedBy\" LEFT JOIN \"slack_channel\" \"Incident__slackChannel\" ON \"Incident__slackChannel\".\"id\"=\"Incident\".\"slackChannelId\" LEFT JOIN \"user\" \"Incident__slackChannel__createdBy\" ON \"Incident__slackChannel__createdBy\".\"id\"=\"Incident__slackChannel\".\"createdBy\" LEFT JOIN \"user\" \"Incident__slackChannel__modifiedBy\" ON \"Incident__slackChannel__modifiedBy\".\"id\"=\"Incident__slackChannel\".\"modifiedBy\" LEFT JOIN \"page\" \"Incident__pages\" ON \"Incident__pages\".\"incidentId\"=\"Incident\".\"id\" LEFT JOIN \"user\" \"Incident__pages__createdBy\" ON \"Incident__pages__createdBy\".\"id\"=\"Incident__pages\".\"createdBy\" LEFT JOIN \"user\" \"Incident__pages__modifiedBy\" ON", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-40] "Incident__pages__modifiedBy"."id"="Incident__pages"."modifiedBy" LEFT JOIN "role" "Incident__roles" ON "Incident__roles"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__roles__createdBy" ON "Incident__roles__createdBy"."id"="Incident__roles"."createdBy" LEFT JOIN "user" "Incident__roles__modifiedBy" ON "Incident__roles__modifiedBy"."id"="Incident__roles"."modifiedBy" LEFT JOIN "user" "Incident__roles__user" ON "Incident__roles__user"."id"="Incident__roles"."user_id" LEFT JOIN "internal_comms_report" "Incident__internalComms" ON "Incident__internalComms"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__internalComms__createdBy" ON "Incident__internalComms__createdBy"."id"="Incident__internalComms"."createdBy" LEFT JOIN "user" "Incident__internalComms__modifiedBy" ON "Incident__internalComms__modifiedBy"."id"="Incident__internalComms"."modifiedBy" LEFT JOIN' escaped msg: '[DATABASE] [12-40] "Incident__pages__modifiedBy"."id"="Incident__pages"."modifiedBy" LEFT JOIN "role" "Incident__roles" ON "Incident__roles"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__roles__createdBy" ON "Incident__roles__createdBy"."id"="Incident__roles"."createdBy" LEFT JOIN "user" "Incident__roles__modifiedBy" ON "Incident__roles__modifiedBy"."id"="Incident__roles"."modifiedBy" LEFT JOIN "user" "Incident__roles__user" ON "Incident__roles__user"."id"="Incident__roles"."user_id" LEFT JOIN "internal_comms_report" "Incident__internalComms" ON "Incident__internalComms"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__internalComms__createdBy" ON "Incident__internalComms__createdBy"."id"="Incident__internalComms"."createdBy" LEFT JOIN "user" "Incident__internalComms__modifiedBy" ON "Incident__internalComms__modifiedBy"."id"="Incident__internalComms"."modifiedBy" LEFT JOIN' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-40] "Incident__pages__modifiedBy"."id"="Incident__pages"."modifiedBy" LEFT JOIN "role" "Incident__roles" ON "Incident__roles"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__roles__createdBy" ON "Incident__roles__createdBy"."id"="Incident__roles"."createdBy" LEFT JOIN "user" "Incident__roles__modifiedBy" ON "Incident__roles__modifiedBy"."id"="Incident__roles"."modifiedBy" LEFT JOIN "user" "Incident__roles__user" ON "Incident__roles__user"."id"="Incident__roles"."user_id" LEFT JOIN "internal_comms_report" "Incident__internalComms" ON "Incident__internalComms"."incident_id"="Incident"."id" LEFT JOIN "user" "Incident__internalComms__createdBy" ON "Incident__internalComms__createdBy"."id"="Incident__internalComms"."createdBy" LEFT JOIN "user" "Incident__internalComms__modifiedBy" ON "Incident__internalComms__modifiedBy"."id"="Incident__internalComms"."modifiedBy" LEFT JOIN' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-40] \"Incident__pages__modifiedBy\".\"id\"=\"Incident__pages\".\"modifiedBy\" LEFT JOIN \"role\" \"Incident__roles\" ON \"Incident__roles\".\"incident_id\"=\"Incident\".\"id\" LEFT JOIN \"user\" \"Incident__roles__createdBy\" ON \"Incident__roles__createdBy\".\"id\"=\"Incident__roles\".\"createdBy\" LEFT JOIN \"user\" \"Incident__roles__modifiedBy\" ON \"Incident__roles__modifiedBy\".\"id\"=\"Incident__roles\".\"modifiedBy\" LEFT JOIN \"user\" \"Incident__roles__user\" ON \"Incident__roles__user\".\"id\"=\"Incident__roles\".\"user_id\" LEFT JOIN \"internal_comms_report\" \"Incident__internalComms\" ON \"Incident__internalComms\".\"incident_id\"=\"Incident\".\"id\" LEFT JOIN \"user\" \"Incident__internalComms__createdBy\" ON \"Incident__internalComms__createdBy\".\"id\"=\"Incident__internalComms\".\"createdBy\" LEFT JOIN \"user\" \"Incident__internalComms__modifiedBy\" ON \"Incident__internalComms__modifiedBy\".\"id\"=\"Incident__internalComms\".\"modifiedBy\" LEFT JOIN", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-41] "internal_comms_notification" "Incident__internalComms__notifications" ON "Incident__internalComms__notifications"."internal_comms_report_id"="Incident__internalComms"."id" WHERE ( ("Incident"."id" = $1) ) AND ( "Incident"."id" IN ($2) )' escaped msg: '[DATABASE] [12-41] "internal_comms_notification" "Incident__internalComms__notifications" ON "Incident__internalComms__notifications"."internal_comms_report_id"="Incident__internalComms"."id" WHERE ( ("Incident"."id" = $1) ) AND ( "Incident"."id" IN ($2) )' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-41] "internal_comms_notification" "Incident__internalComms__notifications" ON "Incident__internalComms__notifications"."internal_comms_report_id"="Incident__internalComms"."id" WHERE ( ("Incident"."id" = $1) ) AND ( "Incident"."id" IN ($2) )' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-41] \"internal_comms_notification\" \"Incident__internalComms__notifications\" ON \"Incident__internalComms__notifications\".\"internal_comms_report_id\"=\"Incident__internalComms\".\"id\" WHERE ( (\"Incident\".\"id\" = $1) ) AND ( \"Incident\".\"id\" IN ($2) )", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-102-204', PRI: 134, syslogtag 'app[postgres.3790945]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.3790945', MSGID: '-', TIMESTAMP: 'Mar 17 10:22:32', STRUCTURED-DATA: '-', msg: '[DATABASE] [12-42] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="5" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" DETAIL: parameters: $1 = '8314687c-abb3-4165-bbbf-414b12112a6b', $2 = '8314687c-abb3-4165-bbbf-414b12112a6b'' escaped msg: '[DATABASE] [12-42] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="5" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" DETAIL: parameters: $1 = '8314687c-abb3-4165-bbbf-414b12112a6b', $2 = '8314687c-abb3-4165-bbbf-414b12112a6b'' inputname: drain rawmsg: '<134>1 2025-03-17T10:22:32+00:00 ip-10-1-102-204 app postgres.3790945 - - [DATABASE] [12-42] sql_error_code = 00000 time_ms = "2025-03-17 10:22:32.368 UTC" pid="1454206" proc_start_time="2025-03-17 10:22:10 UTC" session_id="67d7f7d2.16307e" vtid="6/5995011" tid="2273998" log_line="5" database="dbgdbhuaqbckn5" connection_source="10.0.169.213(39930)" user="ue3280ufn31cpn" application_name="icc" DETAIL: parameters: $1 = '8314687c-abb3-4165-bbbf-414b12112a6b', $2 = '8314687c-abb3-4165-bbbf-414b12112a6b'' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "42", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "52.11.247.42", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "8e0934d7-33c5-4901-b7d8-0aa6999923f4", "x-request-start": "1742206953301" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-production-shield-oregon" } }, "data": { "event": "[DATABASE] [12-42] sql_error_code = 00000 time_ms = \"2025-03-17 10:22:32.368 UTC\" pid=\"1454206\" proc_start_time=\"2025-03-17 10:22:10 UTC\" session_id=\"67d7f7d2.16307e\" vtid=\"6\/5995011\" tid=\"2273998\" log_line=\"5\" database=\"dbgdbhuaqbckn5\" connection_source=\"10.0.169.213(39930)\" user=\"ue3280ufn31cpn\" application_name=\"icc\" DETAIL: parameters: $1 = '8314687c-abb3-4165-bbbf-414b12112a6b', $2 = '8314687c-abb3-4165-bbbf-414b12112a6b'", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-102-204", "agent_timestamp": "2025-03-17T10:22:32+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "severity": "info", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-102-204", "source": "app", "dyno": "postgres.3790945", "app": "-", "space": "icc-production-shield-oregon", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: