Enable log forwarding on service runs to capture logs (including audit)