A guide to make a logging qube that can keep the logs (including that of disposables) is here:
Your other option for one AppVM is to use “bind-dir” for /var/log