Logs carry sensitive fields into every tool in the stack.
Observability tools, support workflows, incident records, and developer dashboards all receive log data. If a log contains a sensitive field, every one of those destinations receives it.
Application Insights
Receives full structured log payload
Datadog
Indexes all fields - including sensitive ones
Jira / support tickets
Developers paste log output when filing bugs
Incident records
Ops teams copy log lines into post-mortems