What do you use when logs aren't enough?

When something breaks in production, the logs usually tell you what failed — but figuring out why can mean jumping between logs, deployments, databases, queues, and metrics.

Curious how other engineering teams handle this today.

What’s your workflow when you need to understand what actually happened during a production issue?