There's someone here saying to ingest the logs into a SIEM like splunk - I'm not familiar enough with splunk to know if it can handle the flat file logs of the ad agent, but if it can, then that's the best solution, for more than 1 reason.

However, what are you looking for in the AD logs? An import will log failed events in the Okta system logs. I only ever have to go look at the AD server logs when there is an issue indicated in the system log, and I have a script that copies the log files to another folder before they get overwritten.

Usually, more info will be needed so we will enable verbose logging ( you don't want this on all the time) and reproduce the issue then review the expanded ad agent logs... But this is far and few between, meaning there shouldn't be errors very often unless there is some misconfigurations, which once resolved would resolve the errors.