Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'ip-10-1-58-156', PRI: 133, syslogtag 'app[postgres.523306]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.523306', MSGID: '-', TIMESTAMP: 'Mar 17 05:01:58', STRUCTURED-DATA: '-', msg: '[DATABASE] [17-1] sql_error_code = 00000 time_ms = "2025-03-17 05:01:58.273 UTC" pid="1544774" proc_start_time="2025-03-17 05:01:30 UTC" session_id="67d7acaa.179246" vtid="5/1294594" tid="0" log_line="4" database="postgres" connection_source="[local]" user="postgres" application_name="[unknown]" NOTICE: all required WAL segments have been archived' escaped msg: '[DATABASE] [17-1] sql_error_code = 00000 time_ms = "2025-03-17 05:01:58.273 UTC" pid="1544774" proc_start_time="2025-03-17 05:01:30 UTC" session_id="67d7acaa.179246" vtid="5/1294594" tid="0" log_line="4" database="postgres" connection_source="[local]" user="postgres" application_name="[unknown]" NOTICE: all required WAL segments have been archived' inputname: drain rawmsg: '<133>1 2025-03-17T05:01:58+00:00 ip-10-1-58-156 app postgres.523306 - - [DATABASE] [17-1] sql_error_code = 00000 time_ms = "2025-03-17 05:01:58.273 UTC" pid="1544774" proc_start_time="2025-03-17 05:01:30 UTC" session_id="67d7acaa.179246" vtid="5/1294594" tid="0" log_line="4" database="postgres" connection_source="[local]" user="postgres" application_name="[unknown]" NOTICE: all required WAL segments have been archived' $!:{ "metadata": { "httpheaders": { "host": "icc-log-drain.herokuapp.com", "user-agent": "log-shuttle\/v0.16.5 (go1.14.2; linux; amd64; gc)", "transfer-encoding": "chunked", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "54.156.16.153", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "fcf0e0d9-a17c-4231-9548-3329c458600a", "x-request-start": "1742187718540" }, "queryparams": { "cloud": "ACE", "team": "ICC", "service": "icc", "space": "icc-sandbox-shield-virginia" } }, "data": { "event": "[DATABASE] [17-1] sql_error_code = 00000 time_ms = \"2025-03-17 05:01:58.273 UTC\" pid=\"1544774\" proc_start_time=\"2025-03-17 05:01:30 UTC\" session_id=\"67d7acaa.179246\" vtid=\"5\/1294594\" tid=\"0\" log_line=\"4\" database=\"postgres\" connection_source=\"[local]\" user=\"postgres\" application_name=\"[unknown]\" NOTICE: all required WAL segments have been archived", "source": "heroku.app", "sourcetype": "-", "hostname": "ip-10-1-58-156", "agent_timestamp": "2025-03-17T05:01:58+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.523306", "app": "-", "space": "icc-sandbox-shield-virginia", "region": "-", "severity": "notice", "uuid": "cd1b58c7-ffaf-4ef7-a8f4-72c5e2f70810" }, "owner": { "service": "icc", "team": "ICC", "environment": "-", "cloud": "ACE" } } } $.:{ "app_id": "ip-10-1-58-156", "source": "app", "dyno": "postgres.523306", "app": "-", "space": "icc-sandbox-shield-virginia", "region": "-", "team": "ICC", "service": "icc", "sourcetype": "-", "environment": "-", "cloud": "ACE", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "false", "dynadir": "debug" } $/: