server log extraction guidance