The log volume isn't too bad, but it doesn't seem particularly useful. And, perhaps more importantly, it seems worrying that possibly one of the most common ways to start a session (visiting the login page) is precieved by the code as an "unknown reason", which suggets there may be a bug in the code of unknown severity.
https://logstash.wikimedia.org/goto/029a81c3dbd7410c10a3ea3aad87da8d
Reproducible by visiting https://meta.wikimedia.org/wiki/Special:UserLogin in private browsing, including with any other wiki hostname.