Cloud logs arrive from several accounts with inconsistent clocks. Which improvement most directly supports incident correlation?

1. Use trusted time synchronization and consistent timestamp handling
2. Remove timestamps from every log source
3. Store each log stream under the same filename
4. Increase password length for the billing account