Too complex for just a log table (also for legal) that usually chugs along fine, because it's write-only, until the logs archiver deletes a few million rows from time to time (rate-limited).
The actionable logs for the frontend are in other tables, which are much smaller
Adding a Kafka is too complex, too. In the past I had them in text files, but analyzing the data was too complicated. Nowadays, considering how I can ask ChatGPT to write me a custom Python-based log analyzer software in 30 seconds, it might be worth rethinking this.
Edit: now that I have Kubernetes and spinning up stuff is so easy, even in some random DC where resources are cheap, moving all this logs stuff off the main boxes could be worth it