Survey results, statistical sampling, and operational data inform our assessments.
Such a log will include the detected anomaly, and buffered operational data.
