- add WHO to log: CEF, Common Event Format, When Where Who What (only done for Monit controller) - Is the log persisted?
