What’s the Best Way to Get Error Logs from Remote Devices?

It depends on whether the device is remote over the internet or just on the same network. If it's on the same network, try writing the logs to a UNC path or access them via network later. For internet-connected devices, I've used SMTP services to email logs as attachments or even include log info in the email body.

Most logging daemons, like syslog, already have features for sending logs to a remote syslog server. Check the documentation for the daemon you're using for setup instructions, and you should be good to go.

Using SCP is a solid option if you're comfortable with it. If you're working in a larger organization, consider setting up a centralized syslog server. It can still collect local logs while forwarding everything to a single repository. You might even use a GUI tool on top of that, like Kibana, for easier access.

I send all my logs to AWS CloudWatch using fluent-bit. I’ve disabled local file logging and redirected everything to the systemd journal. Fluent-bit picks it up from there and sends it to CloudWatch, keeping my logs organized and accessible.

For ease, you can simply SCP the log files you need. Alternatively, a more comprehensive solution would be to set up a centralized log collection using a syslog server or tools like Splunk or the ELK stack.

You can use tools like filebeat or fluent-bit, which are log shippers that monitor and send logs to another location. Just run them as a background service on the device and point them to where you want to store the logs. There are plenty of options out there too!