Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134,
syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Mar 15 08:21:55', STRUCTURED-DATA: '-',
msg: 'State changed from up to stopping'
escaped msg: 'State changed from up to stopping'
inputname: drain rawmsg: '<134>1 2025-03-15T08:21:55.212512+00:00 host heroku web.1 - State changed from up to stopping'
$!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "97", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "logplex-frame-id": "2adb4e65-185a-475c-b263-0d466f50e372", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "44.196.251.161", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "b8c15658-f037-3fde-8e74-193ddd408814", "x-request-start": "1742026915481" }, "queryparams": { "app": "analytics-collector-staging", "space": "appexchange-intelligence", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "State changed from up to stopping", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "agent_timestamp": "2025-03-15T08:21:55.212512+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "analytics-collector-staging", "space": "appexchange-intelligence", "region": "-", "severity": "info", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } }
$.:{ "app_id": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "source": "heroku", "dyno": "web.1", "app": "analytics-collector-staging", "space": "appexchange-intelligence", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134,
syslogtag 'heroku[web.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'web.1', MSGID: '-',
TIMESTAMP: 'Mar 15 08:21:59', STRUCTURED-DATA: '-',
msg: 'State changed from provisioning to starting'
escaped msg: 'State changed from provisioning to starting'
inputname: drain rawmsg: '<134>1 2025-03-15T08:21:59.751577+00:00 host heroku web.1 - State changed from provisioning to starting'
$!:{ "metadata": { "httpheaders": { "host": "appx-staging-drain-4bd9f585e48c.herokuapp.com", "user-agent": "logfwd", "content-length": "108", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "logplex-frame-id": "238e14f0-bc29-4680-a3eb-397c07a7eb98", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (bc46c658aac4)", "x-forwarded-for": "44.196.251.161", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "0bebd217-9d5b-3781-ddf8-99ef3c331991", "x-request-start": "1742026919884" }, "queryparams": { "app": "analytics-collector-staging", "space": "appexchange-intelligence", "service": "appexchange", "team": "sfdc-platform-ecosystem" } }, "data": { "event": "State changed from provisioning to starting", "source": "heroku.heroku", "sourcetype": "-", "hostname": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "agent_timestamp": "2025-03-15T08:21:59.751577+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "web.1", "app": "analytics-collector-staging", "space": "appexchange-intelligence", "region": "-", "severity": "info", "uuid": "d2b5b31d-2db1-4389-940d-0e73e0f64b0b" }, "owner": { "service": "appexchange", "team": "sfdc-platform-ecosystem", "environment": "-", "cloud": "-" } } }
$.:{ "app_id": "d.b3c5e61d-a32c-4af1-a12f-75bf2ef1361c", "source": "heroku", "dyno": "web.1", "app": "analytics-collector-staging", "space": "appexchange-intelligence", "region": "-", "team": "sfdc-platform-ecosystem", "service": "appexchange", "sourcetype": "-", "environment": "-", "cloud": "-", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dynadir": "debug" }
$/: