All the user facing logs are accessible via FTP to the appliance from Log Subscriptions or from CLI of the appliance by issuing command 'grep'
However to find the cause of the unexpected reboot, would recommend to open a case to TAC for them to get in to the root/service level of the appliance via tunnel access since it will give more information on root level for the state or past logs of the appliance (software/hardware)