On each AM Prime server the STANDARD locations are:

Windows

AMIS:  C:\rsa\amis\logs .. or. D:\rsa\amis\logs .. sometimes e:\rsa\amis\logs   (am8.log, auth.log, workflow.log, others..)

SSP:  c:\rsa\ssp\logs.. or d: or e:  etc. (ssp_daily.log)

HDAP:  c:\rsa\hdap\logs .. or d: or e: etc.. (hdap.log, claimfilter.log)

Linux

AMIS:  /opt/rsa/amis/logs ? or sometimes /app/rsa/amis/logs .. same files as above typically

SSP:  /opt/rsa/ssp/logs .. or sometimes /app/rsa/ssp/logs

HDAP:  /opt/rsa/hdap/logs .. or sometimes /app/rsa/hdap/logs