Try using: log collect --device --start [starting time] --output [your subsystem] where starting time can be of the format '2020-06-22 9:41:00' for example

--