I find it useful to have the kernel logs available for searching, for example that's the only place you can see processes killed when they hit memory limits.