How should centralized logging be designed for production?

For production, use consistent structured fields, include trace or correlation IDs, define retention, protect sensitive data, control log volume, and make timestamps and service identity consistent. Add automated tests and observability around the critical behavior, document ownership and failure handling, and review the design when traffic, dependencies, or security requirements change.