A team plans to send production logs to an external SIEM. What should be reviewed before enabling the export?

1. Whether every production secret can be included for easier troubleshooting.
2. Whether disabling OCI Audit avoids duplicate records.
3. Only whether the SIEM logo matches the organization's brand.
4. Sensitive fields, destination access, retention, data location, and transport protection.