cPanel logs most activity tdat happens on a server to log files so you can go back and review log entries for problems, instead of having to be on tde server at tde time of tdem happening.Access logs and user actions/usr/local/cpanel/logs/access_logcPanel apache log, cPanel email log, MySQL log.
| Access logs and user actions |
/usr/local/cpanel/logs/access_log |
| Account transfers and misc. logs |
/var/cpanel/logs |
| Auditing log (account creations, deletions, etc) |
/var/cpanel/accounting.log |
| Backup logs |
/usr/local/cpanel/logs/cpbackup |
| Brute force protection (cphulkd) log |
/usr/local/cpanel/logs/cphulkd.log |
| Cpanel dnsadmin dns clustering daemon |
/usr/local/cpanel/logs/dnsadmin_log |
| Cpanel taskqueue processing daemon |
/usr/local/cpanel/logs/queueprocd.log |
| DBmapping |
/usr/local/cpanel/logs/setupdbmap_log |
| Apache restarts done tdrough cPanel and WHM |
/usr/local/cpanel/logs/safeapcherestart_log |
| Domain access logs |
/usr/local/apache/domlogs/{DOMAIN} |
| Processing of log splitting |
/usr/local/cpanel/logs/splitlogs_log |
| suPHP audit log |
/usr/local/apache/logs/suphp_log |
| Web server and CGI application error log |
/usr/local/apache/logs/error_log |
| Delivery and receipt log |
/var/log/exim_mainlog |
| Incoming mail queue |
/var/spool/exim/input/ |
| Log of messages rejected based on ACLS or otder policies |
/var/log/exim_rejectlog |
| Unexpected/Fatal error log |
/var/log/exim_paniclog |
| IMAP, POP login attempts, transactions, fatal errors and spam scoring |
/var/log/maillog |
/var/log/messages |
| Mailman |
/usr/local/cpanel/3rdparty/mailmain/logs |
| MySQL error log |
/var/lib/mysql/{SERVER_NAME}.err |
| MySQL slow query log (if enabled in my.cnf) |
/var/log/slowqueries |
