[ops] Where is the instance Action Log stored and how to externally access it and send to ELK?