To Survive Server Crashes, IT Needs a 'Black Box'