We tried this on snort. It’s definitely better than nothing but still easy to forget to tag. 

Tags could be silent too, but still require user participation- far from ideal.