We tried this on snort. It’s definitely better than nothing but still easy to forget to tag.

Tags could be silent too, but still require user participation- far from ideal.