Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134,
syslogtag 'heroku[normalizer.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'normalizer.1', MSGID: '-',
TIMESTAMP: 'Dec 10 11:17:28', STRUCTURED-DATA: '-',
msg: 'State changed from up to stopping'
escaped msg: 'State changed from up to stopping'
inputname: drain rawmsg: '<134>1 2025-12-10T11:17:28.307347+00:00 host heroku normalizer.1 - State changed from up to stopping'
$!:{ "metadata": { "httpheaders": { "host": "sfdc-lm-test-vir-00-sh-drain.herokuapp.com", "user-agent": "logfwd", "content-length": "105", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.ec1669d3-42c7-456a-974b-83789362e11e", "logplex-frame-id": "25a1e620-0db2-488e-acfc-286eb443d9c3", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "3.229.31.35", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "32f44fb3-dc9b-a18e-dbe5-cf6a713fdf78", "x-request-start": "1765365448422" }, "queryparams": { "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "service": "lmp", "team": "lmp", "sourcetype": "lmp" } }, "data": { "event": "State changed from up to stopping", "source": "heroku.heroku", "sourcetype": "lmp", "hostname": "d.ec1669d3-42c7-456a-974b-83789362e11e", "agent_timestamp": "2025-12-10T11:17:28.307347+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "severity": "info", "uuid": "41579b26-d76b-4f3f-bcf8-e51ba6942879" }, "owner": { "service": "lmp", "team": "lmp", "environment": "testing", "cloud": "digitalengagement" }, "facility": "local0", "priority": "info", "uuid": "422941B9B076408CAC61A6DB76977ED6", "dnr": { "environment": "Heroku" } } }
$.:{ "app_id": "d.ec1669d3-42c7-456a-974b-83789362e11e", "source": "heroku", "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "team": "lmp", "service": "lmp", "sourcetype": "lmp", "environment": "testing", "cloud": "digitalengagement", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134,
syslogtag 'heroku[normalizer.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'normalizer.1', MSGID: '-',
TIMESTAMP: 'Dec 10 11:17:43', STRUCTURED-DATA: '-',
msg: 'State changed from provisioning to starting'
escaped msg: 'State changed from provisioning to starting'
inputname: drain rawmsg: '<134>1 2025-12-10T11:17:43.67213+00:00 host heroku normalizer.1 - State changed from provisioning to starting'
$!:{ "metadata": { "httpheaders": { "host": "sfdc-lm-test-vir-00-sh-drain.herokuapp.com", "user-agent": "logfwd", "content-length": "114", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.ec1669d3-42c7-456a-974b-83789362e11e", "logplex-frame-id": "a5a0af45-1ce6-45b6-9487-cf85d81a0cf0", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "34.236.130.236", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "3ca54f84-c8f3-4ae6-36ea-5a3e3fbdd749", "x-request-start": "1765365463783" }, "queryparams": { "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "service": "lmp", "team": "lmp", "sourcetype": "lmp" } }, "data": { "event": "State changed from provisioning to starting", "source": "heroku.heroku", "sourcetype": "lmp", "hostname": "d.ec1669d3-42c7-456a-974b-83789362e11e", "agent_timestamp": "2025-12-10T11:17:43.67213+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "severity": "info", "uuid": "41579b26-d76b-4f3f-bcf8-e51ba6942879" }, "owner": { "service": "lmp", "team": "lmp", "environment": "testing", "cloud": "digitalengagement" }, "facility": "local0", "priority": "info", "uuid": "DCCAC1C29FD94D36B2BF6C8353431B22", "dnr": { "environment": "Heroku" } } }
$.:{ "app_id": "d.ec1669d3-42c7-456a-974b-83789362e11e", "source": "heroku", "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "team": "lmp", "service": "lmp", "sourcetype": "lmp", "environment": "testing", "cloud": "digitalengagement", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" }
$/:

Debug line with all properties:
FROMHOST: '', fromhost-ip: '172.17.128.1', HOSTNAME: 'host', PRI: 134,
syslogtag 'heroku[normalizer.1]', programname: 'heroku', APP-NAME: 'heroku', PROCID: 'normalizer.1', MSGID: '-',
TIMESTAMP: 'Dec 10 11:17:52', STRUCTURED-DATA: '-',
msg: 'State changed from starting to up'
escaped msg: 'State changed from starting to up'
inputname: drain rawmsg: '<134>1 2025-12-10T11:17:52.416595+00:00 host heroku normalizer.1 - State changed from starting to up'
$!:{ "metadata": { "httpheaders": { "host": "sfdc-lm-test-vir-00-sh-drain.herokuapp.com", "user-agent": "logfwd", "content-length": "105", "accept-encoding": "gzip", "content-type": "application\/logplex-1", "logplex-drain-token": "d.ec1669d3-42c7-456a-974b-83789362e11e", "logplex-frame-id": "8222a26f-a8ab-448e-be32-92bd79dfdc60", "logplex-msg-count": "1", "server": "Heroku", "via": "1.1 spaces-router (878c4b46ede4)", "x-forwarded-for": "3.229.31.35", "x-forwarded-port": "443", "x-forwarded-proto": "https", "x-request-id": "5117996f-9a92-025a-6613-3af5fda5c9c3", "x-request-start": "1765365472529" }, "queryparams": { "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "service": "lmp", "team": "lmp", "sourcetype": "lmp" } }, "data": { "event": "State changed from starting to up", "source": "heroku.heroku", "sourcetype": "lmp", "hostname": "d.ec1669d3-42c7-456a-974b-83789362e11e", "agent_timestamp": "2025-12-10T11:17:52.416595+00:00", "tags_schema_id": "any6:1", "tags": { "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "severity": "info", "uuid": "41579b26-d76b-4f3f-bcf8-e51ba6942879" }, "owner": { "service": "lmp", "team": "lmp", "environment": "testing", "cloud": "digitalengagement" }, "facility": "local0", "priority": "info", "uuid": "AB661AD9137240878643068679F5C06F", "dnr": { "environment": "Heroku" } } }
$.:{ "app_id": "d.ec1669d3-42c7-456a-974b-83789362e11e", "source": "heroku", "dyno": "normalizer.1", "app": "sfdc-lm-test-vir-00-ap-chan", "space": "sfdc-lm-test-vir", "region": "virginia", "team": "lmp", "service": "lmp", "sourcetype": "lmp", "environment": "testing", "cloud": "digitalengagement", "business_unit": "Heroku", "type": "log", "inc": 0, "format": "text", "dnr": "true", "dynadir": "debug" }
$/: