Sure.
First you access the systemshell of the node where the logs live.
This requires unlocking the diag user:
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_unlock_the_diag_user_account
::> set diag
::*> systemshell -local nodename
diag@127.0.0.1's password: {password you set}
Warning: The system shell provides access to low-level
diagnostic tools that can cause irreparable damage to
the system if not used properly. Use this environment
only when directed to do so by support personnel.
%
From here, you cd to the log dir:
% cd /mroot/etc/log
Find the file you want to move out and use scp to copy it. "log" has packet traces, node logs, etc. mlog has management logs (like secd, mgwd).
Windows uses WinSCP:
https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_use_WinSCP_with_Clustered_Data_ONTAP
Linux uses basic scp.
This is scp from the ONTAP systemshell:
% scp
usage: scp [-346BCpqrTv] [-c cipher] [-F ssh_config] [-i identity_file]
[-J destination] [-l limit] [-o ssh_option] [-P port]
[-S program] source ... target
This is an example of using it:
% cd /mroot/etc/mlog
% scp secd.log root@x.x.x.x:/node1.secd.log
root@x.x.x.x's password:
secd.log
[root@centos7 /]# ls -la | grep secd
-rw-r--r-- 1 root root 403636 Apr 5 09:48 node1.secd.log