You’re off to a solid first step. Strip it all down to the core.
Hell, even reflash the latest stable firmware is recommendable; nuke it all. Then you can SSH in & get at the logs.