It seems that command monitoring logs the commands being executed as it was given by the user rather than how it actually gets sent on the wire. As a result parameters like write concern seemingly sometimes are not logged in command monitoring.