3.Some admins (typically sys admins) want to collect only infrastructure logs, while other admins (security admins) prefer to grab everything. What are the pros and cons for the two collection preferences? What would the overall goals for each be? Why are they different? Which side would you fall on, why?