[POLICY] Observability of Third Parties logs

[StevenMalaihollo]

Context

When looking at logs we see a need for handeling logs generated by third parties.

Decision

When logs don't show evidence of:

• security risk
• impact on quality of a service
• high costs

Then we can exclude the logs from our monitoring.

Consequences

For example, we exclude logs defined in https://github.com/bcc-code/bcc-membership/issues/2030