Logs tell you what happened, and alerts tell a person while it is still happening. OWASP lists the failure to do this as Security Logging & Alerting Failures, number 9 in 2025. The art is to record enough to investigate, and nothing that becomes a leak itself.