cPanel logs for access, Apache, email, error, ftp, mysql, and WHM

cPanel logs

• Access logs and user actions    /usr/local/cpanel/logs/access_log
• Account transfers and misc. logs    /var/cpanel/logs
• Auditing log (account creations, deletions, etc)    /var/cpanel/accounting.log
• Backup logs    /usr/local/cpanel/logs/cpbackup
• Brute force protection (cphulkd) log    /usr/local/cpanel/logs/cphulkd.log
• Cpanel dnsadmin dns clustering daemon    /usr/local/cpanel/logs/dnsadmin_log
• Cpanel taskqueue processing daemon    /usr/local/cpanel/logs/queueprocd.log
• DBmapping    /usr/local/cpanel/logs/setupdbmap_log
• EasyApache build logs    /usr/local/cpanel/logs/easy/apache/
• Error log    /usr/local/cpanel/logs/error_log
• Installation log    /var/log/cpanel
• License updates and errors    /usr/local/cpanel/logs/license_log
• Locale database modifications    /usr/local/cpanel/logs/build_locale_database_log
• Login errors (CPSRVD)    /usr/local/cpanel/logs/login_log
• Horde    /var/cpanel/horde/log/
• RoundCube    /var/cpanel/roundcube/log/
• SquirrelMail    /var/cpanel/squirrelmail/
• Panic log    /usr/local/cpanel/logs/panic_log
• Per account bandwidth history (Cached)    /var/cpanel/bandwidth.cache/{USERNAME}
• Per account bandwidth history (Human Readable)    /var/cpanel/bandwidth/{USERNAME}
• Service status logs    /var/log/chkservd.log
• Tailwatch driver tailwatchd log    /usr/local/cpanel/logs/tailwatch_log
• Update analysis reporting    /usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log
• Update (UPCP) log    /var/cpanel/updatelogs/updated.{TIMESTAMP}.log
• WebDisk (CPDAVD)    /usr/local/cpanel/logs/cpdavd_error_log
• Website statistics log    /usr/local/cpanel/logs/stats_log

cPanel access log

• Access logs and user actions    /usr/local/cpanel/logs/access_log

cPanel apache log

• Apache restarts done through cPanel and WHM    /usr/local/cpanel/logs/safeapcherestart_log
• Domain access logs    /usr/local/apache/domlogs/{DOMAIN}
• Processing of log splitting    /usr/local/cpanel/logs/splitlogs_log
• suPHP audit log    /usr/local/apache/logs/suphp_log
• Web server and CGI application error log    /usr/local/apache/logs/error_log

cPanel email log

• Delivery and receipt log    /var/log/exim_mainlog
• Incoming mail queue    /var/spool/exim/input/
• Log of messages rejected based on ACLS or other policies    /var/log/exim_rejectlog
• Unexpected/Fatal error log    /var/log/exim_paniclog
• IMAP, POP login attempts, transactions, fatal errors and spam scoring    /var/log/maillog    /var/log/messages
• Mailman    /usr/local/cpanel/3rdparty/mailmain/logs

MySQL log

• MySQL error log    /var/lib/mysql/{SERVER_NAME}.err
• MySQL slow query log (if enabled in my.cnf)    /var/log/slowqueries