My assumption since the start of this is that it's telemetry / server log data. Honestly, I came really close to doing this exact thing. My engineer: "Should w

My assumption since the start of this is that it's telemetry / server log data. Honestly, I came really close to doing this exact thing. My engineer: "Should we log the body of api requests?" Me: "Yes, of course!....... waaaait a second. No." The result was manually white listing fields that SHOULD be logged on each end point. It's a pain compared to "just log everything" or even a black list, but it's far safer.