An operator needs application error details alongside infrastructure metrics. Which approach is appropriate?

1. Make every production log public for convenience.
2. Use only average CPU as a complete application error trace.
3. Log all passwords to simplify reproducing failed requests.
4. Collect the relevant application logs with suitable access, retention, and correlation identifiers.