The problem

On the VM web-1, orders.service crashed three times last night. At 06:12 this morning a colleague rebooted the VM, and the service has been running since. You want the crash messages, which are in the journal of the boot before the current one.

You are root, and root can read the system journal. Every rep reads the logs of the unit orders; -u orders and -u orders.service select the same unit. journalctl pages its output through less by default.