When the NSv virtual machine is in SafeMode, extra logging information is kept that can be downloaded. The logs are available from the SafeMode web management interface that can be accessed through the URL provided at the public IP address of an NSv.
To download logs from SafeMode
Access the SafeMode Web Interface. For more information, refer to Accessing the SafeMode Web Interface
On the SafeMode web management interface, select Diagnostics.
On the Diagnostics page, click Download Safe Mode Logs.
A compressed file is downloaded that contains a number of files, including a console_logs file that contains detailed logging information.