The /var/log directory contains the traditional log files: syslog or messages for the system, auth.log for logins, and service-specific logs such as nginx. You read them with less, tail -f or grep to diagnose an incident.
Example
tail -f /var/log/nginx/error.log