Debug line with all properties: FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134, syslogtag 'app[postgres.1755029]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.1755029', MSGID: '-', TIMESTAMP: 'Jul 16 03:00:09', STRUCTURED-DATA: '[DATABASE]', msg: '[36-1] sql_error_code = 00000 time_ms = "2026-07-16 03:00:09.581 UTC" pid="1798775" proc_start_time="2026-07-16 03:00:05 UTC" session_id="6a584935.1b7277" vtid="50/28640" tid="0" log_line="4" database="ddvvgu681gm35p" connection_source="10.0.153.100(45896)" user="uc0g389cnbt72e" application_name="[unknown]" LOG: duration: 2869.619 ms execute : select "streams"."id", "streams"."external_id", "streams"."owner_id", "streams"."head_delta_id", "projections"."projection", "secReviewOpsProjection"."projection" as "securityReviewFeedback" from "streams" inner join "projections" on "projections"."stream_id" = "streams"."id" left join "streams" as "securityReview" on "securityReview"."owner_id" = "streams"."id" left join "projections" as "securityReview:projections" on "securityReview:projections"."stream_id" = "securityReview"."id" left join "streams" as "secReviewOps" on' escaped msg: '[36-1] sql_error_code = 00000 time_ms = "2026-07-16 03:00:09.581 UTC" pid="1798775" proc_start_time="2026-07-16 03:00:05 UTC" session_id="6a584935.1b7277" vtid="50/28640" tid="0" log_line="4" database="ddvvgu681gm35p" connection_source="10.0.153.100(45896)" user="uc0g389cnbt72e" application_name="[unknown]" LOG: duration: 2869.619 ms execute : select "streams"."id", "streams"."external_id", "streams"."owner_id", "streams"."head_delta_id", "projections"."projection", "secReviewOpsProjection"."projection" as "securityReviewFeedback" from "streams" inner join "projections" on "projections"."stream_id" = "streams"."id" left join "streams" as "securityReview" on "securityReview"."owner_id" = "streams"."id" left join "projections" as "securityReview:projections" on "securityReview:projections"."stream_id" = "securityReview"."id" left join "streams" as "secReviewOps" on' inputname: drain rawmsg: '<134>1 2026-07-16T03:00:09+00:00 host app postgres.1755029 - [DATABASE] [36-1] sql_error_code = 00000 time_ms = "2026-07-16 03:00:09.581 UTC" pid="1798775" proc_start_time="2026-07-16 03:00:05 UTC" session_id="6a584935.1b7277" vtid="50/28640" tid="0" log_line="4" database="ddvvgu681gm35p" connection_source="10.0.153.100(45896)" user="uc0g389cnbt72e" application_name="[unknown]" LOG: duration: 2869.619 ms execute : select "streams"."id", "streams"."external_id", "streams"."owner_id", "streams"."head_delta_id", "projections"."projection", "secReviewOpsProjection"."projection" as "securityReviewFeedback" from "streams" inner join "projections" on "projections"."stream_id" = "streams"."id" left join "streams" as "securityReview" on "securityReview"."owner_id" = "streams"."id" left join "projections" as "securityReview:projections" on "securityReview:projections"."stream_id" = "securityReview"."id" left join "streams" as "secReviewOps" on' $!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "7371", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.2257363d-e289-4fca-980f-d26509782992", "logplex-frame-id": "4e2dc1e0-583a-4242-a041-2a6021301194", "logplex-msg-count": "12", "server": "Heroku", "via": "1.1 spaces-router (205a6c14d3af)", "x-forwarded-for": "34.199.71.125", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "28ae038f-4028-36f2-a9b8-1128808b1794", "x-request-start": "1784170809971" }, "queryparams": { "app": "appx-oaf-staging", "space": "appexchange-primary", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "[36-1] sql_error_code = 00000 time_ms = \"2026-07-16 03:00:09.581 UTC\" pid=\"1798775\" proc_start_time=\"2026-07-16 03:00:05 UTC\" session_id=\"6a584935.1b7277\" vtid=\"50\/28640\" tid=\"0\" log_line=\"4\" database=\"ddvvgu681gm35p\" connection_source=\"10.0.153.100(45896)\" user=\"uc0g389cnbt72e\" application_name=\"[unknown]\" LOG: duration: 2869.619 ms execute : select \"streams\".\"id\", \"streams\".\"external_id\", \"streams\".\"owner_id\", \"streams\".\"head_delta_id\", \"projections\".\"projection\", \"secReviewOpsProjection\".\"projection\" as \"securityReviewFeedback\" from \"streams\" inner join \"projections\" on \"projections\".\"stream_id\" = \"streams\".\"id\" left join \"streams\" as \"securityReview\" on \"securityReview\".\"owner_id\" = \"streams\".\"id\" left join \"projections\" as \"securityReview:projections\" on \"securityReview:projections\".\"stream_id\" = \"securityReview\".\"id\" left join \"streams\" as \"secReviewOps\" on", "source": "heroku.app", "sourcetype": "-", "hostname": "d.2257363d-e289-4fca-980f-d26509782992", "agent_timestamp": "2026-07-16T03:00:09+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.1755029", "app": "appx-oaf-staging", "space": "appexchange-primary", "region": "-", "severity": "info", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } } $.:{ "app_id": "d.2257363d-e289-4fca-980f-d26509782992", "source": "app", "dyno": "postgres.1755029", "app": "appx-oaf-staging", "space": "appexchange-primary", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" } $/: