In the case you want to extract the logs generated by the HEIMDAL Agent on an endpoint, just log in to the HEIMDAL Dashboard, go to Unified Endpoint Management -> Device Info, click on the desired Hostname, click on the General tab -> Logs sub-tab -> Heimdal Endpoint Logs, and press the Request Heimdal Endpoint Logs button.
In case you are looking to extract the Event Viewer logs, once you have accessed the specific device, navigate to General -> Logs -> Windows Event Viewer Logs, and extract them by pressing the Request Event Viewer Logs button.