Two critical slices are collected here: the behavior of processes on the host and an operational picture of web traffic from access.log. Together, they provide a quick path from the symptom to the source.
This group is especially useful during incidents: you can simultaneously see who is consuming resources, how RPS is changing, and whether the 4xx/5xx share is increasing.