Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 131,
syslogtag 'app[postgres.4014893]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.4014893', MSGID: '-',
TIMESTAMP: 'Dec  5 13:53:07', STRUCTURED-DATA: '[DATABASE]',
msg: '[11-1]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="2" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" FATAL:  password authentication failed for user "refactorian"'
escaped msg: '[11-1]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="2" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" FATAL:  password authentication failed for user "refactorian"'
inputname: drain rawmsg: '<131>1 2025-12-05T13:53:07+00:00 host app postgres.4014893 - [DATABASE] [11-1]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="2" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" FATAL:  password authentication failed for user "refactorian"'
$!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "1109", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "logplex-frame-id": "aceb5f33-f03c-46b5-99c0-8fcb28dcca00", "logplex-msg-count": "3", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.70.150.1", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "6995acf3-f84d-432b-fdc2-182237bd1cbf", "x-request-start": "1764942787697" }, "queryparams": { "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "[11-1]  sql_error_code = 28P01 time_ms = \"2025-12-05 13:53:07.169 UTC\" pid=\"328001\" proc_start_time=\"2025-12-05 13:53:06 UTC\" session_id=\"6932e3c2.50141\" vtid=\"283\/5149\" tid=\"0\" log_line=\"2\" database=\"refactorian\" connection_source=\"85.11.167.3(43266)\" user=\"refactorian\" application_name=\"[unknown]\" FATAL:  password authentication failed for user \"refactorian\"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "agent_timestamp": "2025-12-05T13:53:07+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "severity": "err", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } }
$.:{ "app_id": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "source": "app", "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 131,
syslogtag 'app[postgres.4014893]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.4014893', MSGID: '-',
TIMESTAMP: 'Dec  5 13:53:07', STRUCTURED-DATA: '[DATABASE]',
msg: '[11-2]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="3" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" DETAIL:  Role "refactorian" does not exist.'
escaped msg: '[11-2]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="3" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" DETAIL:  Role "refactorian" does not exist.'
inputname: drain rawmsg: '<131>1 2025-12-05T13:53:07+00:00 host app postgres.4014893 - [DATABASE] [11-2]  sql_error_code = 28P01 time_ms = "2025-12-05 13:53:07.169 UTC" pid="328001" proc_start_time="2025-12-05 13:53:06 UTC" session_id="6932e3c2.50141" vtid="283/5149" tid="0" log_line="3" database="refactorian" connection_source="85.11.167.3(43266)" user="refactorian" application_name="[unknown]" DETAIL:  Role "refactorian" does not exist.'
$!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "1109", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "logplex-frame-id": "aceb5f33-f03c-46b5-99c0-8fcb28dcca00", "logplex-msg-count": "3", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.70.150.1", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "6995acf3-f84d-432b-fdc2-182237bd1cbf", "x-request-start": "1764942787697" }, "queryparams": { "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "[11-2]  sql_error_code = 28P01 time_ms = \"2025-12-05 13:53:07.169 UTC\" pid=\"328001\" proc_start_time=\"2025-12-05 13:53:06 UTC\" session_id=\"6932e3c2.50141\" vtid=\"283\/5149\" tid=\"0\" log_line=\"3\" database=\"refactorian\" connection_source=\"85.11.167.3(43266)\" user=\"refactorian\" application_name=\"[unknown]\" DETAIL:  Role \"refactorian\" does not exist.", "source": "heroku.app", "sourcetype": "-", "hostname": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "agent_timestamp": "2025-12-05T13:53:07+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "severity": "err", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } }
$.:{ "app_id": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "source": "app", "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 131,
syslogtag 'app[postgres.4014893]', programname: 'app', APP-NAME: 'app', PROCID: 'postgres.4014893', MSGID: '-',
TIMESTAMP: 'Dec  5 13:53:07', STRUCTURED-DATA: '[DATABASE]',
msg: '[11-3] #011Connection matched file "/etc/postgresql/pg_hba.conf" line 7: "hostssl             all                 all                 0.0.0.0/0           md5                 "'
escaped msg: '[11-3] #011Connection matched file "/etc/postgresql/pg_hba.conf" line 7: "hostssl             all                 all                 0.0.0.0/0           md5                 "'
inputname: drain rawmsg: '<131>1 2025-12-05T13:53:07+00:00 host app postgres.4014893 - [DATABASE] [11-3] #011Connection matched file "/etc/postgresql/pg_hba.conf" line 7: "hostssl             all                 all                 0.0.0.0/0           md5                 "'
$!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "1109", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "logplex-frame-id": "aceb5f33-f03c-46b5-99c0-8fcb28dcca00", "logplex-msg-count": "3", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "52.70.150.1", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "6995acf3-f84d-432b-fdc2-182237bd1cbf", "x-request-start": "1764942787697" }, "queryparams": { "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "[11-3] #011Connection matched file \"\/etc\/postgresql\/pg_hba.conf\" line 7: \"hostssl             all                 all                 0.0.0.0\/0           md5                 \"", "source": "heroku.app", "sourcetype": "-", "hostname": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "agent_timestamp": "2025-12-05T13:53:07+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "severity": "err", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } }
$.:{ "app_id": "d.8fbf43ce-c860-448e-badd-3052c0f84a1b", "source": "app", "dyno": "postgres.4014893", "app": "pink-ducks-service-staging", "space": "appexchange-intelligence", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" }
$/: