> I often find I missed the one crucial piece of information needed to make using the logs possible during an investigation. This may be a bit of confirmation

> I often find I missed the one crucial piece of information needed to make using the logs possible during an investigation. This may be a bit of confirmation bias, or ... I'm not sure what the right term is. The times you didn't have the necessary information stick out in your memory, because they were serious problems. The times you did have the right information logged you solved the problem quickly and it never became a fire.