The best way to check the logs, I have found out, is to log into the Sever Manager Panel. View the log "messages". Then in a new tab, open your moodle or any problem application, recreate the problem, and then immediately refresh the log from your other tab.
I had an issue before where the log I was looking for got lost in DHCP leases and PPTP connections.