Go to Settings – Logs – and Enable the Verbose Logging and Lock Log Levels.
Once that is enabled, you can SSH into the unit and try tail -f /tmp/log/cmh/LuaUPnP.log and grep for the device ID, hour of the event, etc. That can help you find raw logs and then you will need to interpret what happened at the time of the event.
