The value comes from detecting a decorating issue or loss of resilience before it becomes service impacting. It can also alert about malicious activity and other anomalous behaviour.