Log Locations

cPanel Log Locations

Access logs and user actions=

/usr/local/cpanel/logs/access_log

Auditing log (account creations, deletions, etc)

/var/cpanel/accounting.log

Backup log

/usr/local/cpanel/logs/cpbackup

Brute force protection (cphulkd) log

/usr/local/cpanel/logs/cphulkd.log

EasyApache build logs

/usr/local/cpanel/logs/easy/apache/

cPanel error logs

/usr/local/cpanel/logs/error_log

Login errors (CPSRVD)

/usr/local/cpanel/logs/login_log

RoundCube

/var/cpanel/roundcube/log/

Panic log

/usr/local/cpanel/logs/panic_log

cPanel access logs

/usr/local/cpanel/logs/access_log

cPanel apache log

Apache restarts done through cPanel and WHM

/usr/local/cpanel/logs/safeapcherestart_log

Domain access logs

/usr/local/apache/domlogs/{DOMAIN}

Processing of log splitting

/usr/local/cpanel/logs/splitlogs_log

suPHP audit log

/usr/local/apache/logs/suphp_log

Mail Logs

Delivery and receipt log

/var/log/exim_mainlog

Log of messages rejected based on ACLS or other policies

/var/log/exim_rejectlog

Unexpected/Fatal error log

/var/log/exim_paniclog

IMAP, POP login attempts

/var/log/maillog

Mailman

/usr/local/cpanel/3rdparty/mailmain/logs

FTP log

FTP Files log

/usr/local/apache/domlogs/ftpxferlog

/var/log/messages

MySQL log

MySQL error log

/var/log/mysqld.log

SSH Log Files

/var/log/secure

Cron Log

/var/log/cron