1. If a device can get connected to the MobiControl server via any possible connection (SIM, Wifi, Bluetooth, Ethernet, etc.), various device information , data to be collected with data-collection rule or files to be synced according to file-sync rules can be passed to the MobiControl server for subsequent post-processing or report generation

2. If you meant device factory reeset when you said "close formatting the devices from users", then the usual approach is to use related feature control profile option(s) to disable device factory reset operation.  Depending on the device platforms/brands, the folllowing mechanisms can be used to enforce automatic re-enrollment of company-owned devices back to your MobiControl server in case a factory reset is performed:

a. Device Enrollment Program (DEP) for Apple devices

b. Zero-Touch Enrollment (ZTE) for non Samsung Android-Enterprise devices

c. Knox Mobile Enrollment (KME) or Knox Configure (KC) for Samsung devices

3. If the log files are located in directories which the device agent has access right, it should be possible to use scirpt and file-sync rules to get the files sent back to the server at scheduled time. If a device is configured to use only Soti Surf secure browser and all other browser disabled/blacklisted, then there is option to have the internet log for Soti Surf to be output and sync'ed back to the MobiControl server.