Example implementations relate to method and management system for collecting contextual log files to an issue in a computing system. The method includes analyzing alert data to identify a current symptom associated with the issue in the computing system, and determining whether the current symptom exists in a first lookup table including a plurality of first symptoms and a plurality of first log categories. Each first symptom is mapped to one or more first log categories in the first lookup table. In response to determining that the current symptom exists in the first lookup table, the method includes collecting one or more log files from a plurality of log files corresponding to the one or more first log categories mapped to the current symptom, from the computing system. Further, the method includes transferring the one or more log files to an external computing system for performing diagnostics on the issue.