AppId extracts from logMessage or logEnvelope

[#59349950]

Signed-off-by: Matthew McNew <mmcnew@pivotallabs.com>