Providing the flexibility to install its own log aggregator, for example Vector or FluentBit, in a service would be a great workaround to the constraints of the current log stream feature (TLS-syslog or only a few supported providers like Datadog). That implies to remove the requirement of TLS for the syslog endpoint when the target URL is internal to the Render project network.

See https://community.render.com/t/fluentbit-on-render-for-pushing-to-cloudwatch/1555