Where to start when tracking down crash cause?

I'm a linux novice, but I'm generally able to understand and follow what I find online when performing various tasks. I've never had to do much log analysis though, and that's what's got me stumped today after a crash.

All the logs in WebAdmin that I've checked are telling me what I already know - that not much was happening between 1243-1338.

What are best practices for post-crash analysis? Specific logs I should start with?