That sounds useful Colin - I'll give that a shot. Yes, my bad.. my function node had a horrible name because I didn't actually give it a name. I should know better. Node-Red is on a headless PI in my case and I'm working on my PC, so maybe WinSCP to the log wherever that is might be worth looking at if it saves having to interact with the output.
No, actually with a function node called "my thing" outputting "this\nthat\nother" I just looked at the log exactly as your suggestion.
Mar 10 10:11:36 raspberry-two Node-RED[388]: 10 Mar 10:11:36 - [warn] [function:my thing] t his
No sign of "that or "other"
pi@raspberry-two:~:10:13[130]> tail -f /var/log/syslog | grep "my thing"
Mar 10 10:11:36 raspberry-two Node-RED[388]: 10 Mar 10:11:36 - [warn] [function:my thing] this
Mar 10 10:14:26 raspberry-two Node-RED[388]: 10 Mar 10:14:26 - [warn] [function:my thing] this
Mar 10 10:14:46 raspberry-two Node-RED[388]: 10 Mar 10:14:46 - [warn] [function:my thing] this
Mar 10 10:14:47 raspberry-two Node-RED[388]: 10 Mar 10:14:47 - [warn] [function:my thing] this
Mar 10 10:14:48 raspberry-two Node-RED[388]: 10 Mar 10:14:48 - [warn] [function:my thing] this
Mar 10 10:14:51 raspberry-two Node-RED[388]: 10 Mar 10:14:51 - [warn] [function:my thing] this
I can see the whole message in the degug window - but only the first word in the log output.