We need runbooks for common on-call queries. 1. Using logs to piece together the chain of events that caused an incident. 2. Restoring content from an existing backup. 3. etc.