Comment by rp36

Anything that includes PII should be redacted or ignored. Most log libraries not support it or able to extend them. Once the logs goes to external platforms or archives, its will require additional effort to maintain the data/privacy. Also, logging should be minimal required and continually should be re-evaluated, so old/unnecessary logging can be eliminated.