# Ensure service logs are streamed to a central logging system

- Source: https://support.icompaas.com/support/solutions/articles/a_1793876671147801-ensure-service-logs-are-streamed-to-a-central-logging-system
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Render Cloud](https://support.icompaas.com/support/solutions/c_1793875953948152) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1793875960840493)
- Last updated: 2026-11-05
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure production services stream their logs to a central logging system, such as Datadog, Better Stack, Papertrail, or another syslog-compatible provider, using a Render log stream. A default log stream for the workspace sends logs from all supported services.

**Rationale**

Render keeps logs only for a limited time based on the workspace plan, after which they expire. Streaming logs to a central system keeps them available for investigations, alerting, and compliance, and lets you search across all services in one place.

**Impact**

-   Logs are kept beyond Render's retention
    
-   Supports alerting and investigations
    
-   The logging provider may charge for storage
    

**Default Value**

By default, no log stream is configured.

**Pre-Requisites**

-   Workspace Admin role
    
-   A logging provider with a TLS-enabled syslog endpoint (and token if required)
    

**Remediation**

**Test Plan**

1.  Sign in to the Render Dashboard at [https://dashboard.render.com](https://dashboard.render.com/).
    
2.  From your workspace home, click Integrations > Observability in the left pane and scroll to the Log Streams section.
    
3.  Check that a default log stream is set, and that no production service overrides it with no stream.
    
4.  If no log stream is configured, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the Render Dashboard at [https://dashboard.render.com](https://dashboard.render.com/).
    
2.  From your workspace home, click Integrations > Observability in the left pane and scroll to the Log Streams section.
    
3.  Click Add Log Stream (or set the default destination).
    
4.  Enter your provider's endpoint in the Log Endpoint field (for syslog, append the port, for example :6514) and the token if required.
    
5.  Save the changes and confirm logs arrive in your provider.
    

**Backout Plan**

1.  Sign in to the Render Dashboard at [https://dashboard.render.com](https://dashboard.render.com/).
    
2.  From Integrations > Observability, remove or change the log stream.
    

**Reference**

-   [https://render.com/docs/log-streams](https://render.com/docs/log-streams)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.