Download logs with your data range on IED, and you can define type by syslog or applog. If you don't assign any specific type, you can get all system and app logs on IED. Besides this, you require the device ID of the IED as unique identifier, and you can define the date range for your requirements:
curl -i -X GET \
-H "Authorization:<your-authorization-token>" \
'https://<your-iem-url>/portal/api/v1/devices/filtered-logs?start=<your-start-date>&stop=<your-stop-date>&type=<your-type>&deviceid=<your-device-id>'
A successful response looks like this:
you may get a file named like this: device-data-202301160338.csv