Extract UTM event logs

You  might want to look at  diag log show cmds from the cli.

FWIW: Messages written to disk can be queried by filters  but in your case, I would look at   remote-syslogd and  something like sawmill/splunk/logentries/etc.... and export the logs in some  readable format { CEF SYSLOG CSV } and get it off the platform into the collector.

Here you only need to export the logs and start using the services. Once you get the log data  into your collection, your tools and platform is all on you ;)