docs: rewrite cluster finding

"The reason to use _the_ log as the only source"...