Description

Ensure production services stream their logs to a central logging system, such as Datadog, Better Stack, Papertrail, or another syslog-compatible provider, using a Render log stream. A default log stream for the workspace sends logs from all supported services.

Rationale

Render keeps logs only for a limited time based on the workspace plan, after which they expire. Streaming logs to a central system keeps them available for investigations, alerting, and compliance, and lets you search across all services in one place.

Impact

  • Logs are kept beyond Render's retention

  • Supports alerting and investigations

  • The logging provider may charge for storage

Default Value

By default, no log stream is configured.

Pre-Requisites

  • Workspace Admin role

  • A logging provider with a TLS-enabled syslog endpoint (and token if required)

Remediation

Test Plan

  1. Sign in to the Render Dashboard at https://dashboard.render.com.

  2. From your workspace home, click Integrations > Observability in the left pane and scroll to the Log Streams section.

  3. Check that a default log stream is set, and that no production service overrides it with no stream.

  4. If no log stream is configured, follow the implementation steps.

Implementation Steps

  1. Sign in to the Render Dashboard at https://dashboard.render.com.

  2. From your workspace home, click Integrations > Observability in the left pane and scroll to the Log Streams section.

  3. Click Add Log Stream (or set the default destination).

  4. Enter your provider's endpoint in the Log Endpoint field (for syslog, append the port, for example :6514) and the token if required.

  5. Save the changes and confirm logs arrive in your provider.

Backout Plan

  1. Sign in to the Render Dashboard at https://dashboard.render.com.

  2. From Integrations > Observability, remove or change the log stream.

Reference