I was wrong about run logs for about a year, and the mistake is a common one.

I was wrong about run logs for about a year, and the mistake is a common one. I wrote mine for after the incident. Something breaks, go read what happened. Forensics. Wrong job. A log you only open after a failure is a log you never tested. Mine was full of fields that looked informative and answered nothing. Now I read it on a normal week, when nothing is broken. That's the only way I find out it can't answer the question.