Cpanel log locations

cPanel logs provide a goldmine of information to quickly resolve various customer issues and server errors. Following list of the cPanel logs most commonly used by our remote cPanel administrators.

 

cPanel logs

 

1) Access logs and user actions

/usr/local/cpanel/logs/access_log

2) Account transfers and misc. logs

/var/cpanel/logs

3) Auditing log (account creations, deletions, etc)

/var/cpanel/accounting.log

4) Backup logs

/usr/local/cpanel/logs/cpbackup

5) Brute force protection (cphulkd) log

/usr/local/cpanel/logs/cphulkd.log

6) Cpanel dnsadmin dns clustering daemon

/usr/local/cpanel/logs/dnsadmin_log

7) Cpanel taskqueue processing daemon

/usr/local/cpanel/logs/queueprocd.log

8) DBmapping

/usr/local/cpanel/logs/setupdbmap_log

9) EasyApache build logs

/usr/local/cpanel/logs/easy/apache/

10) Error log

/usr/local/cpanel/logs/error_log

11) Installation log

/var/log/cpanel

12) License updates and errors

/usr/local/cpanel/logs/license_log

13) Locale database modifications

/usr/local/cpanel/logs/build_locale_database_log

14) Login errors (CPSRVD)

/usr/local/cpanel/logs/login_log

15) Horde

/var/cpanel/horde/log/

16) RoundCube

/var/cpanel/roundcube/log/

17) SquirrelMail

/var/cpanel/squirrelmail/

18) Panic log

/usr/local/cpanel/logs/panic_log

19) Per account bandwidth history (Cached)

/var/cpanel/bandwidth.cache/{USERNAME}

20) Per account bandwidth history (Human Readable)

/var/cpanel/bandwidth/{USERNAME}

21) Service status logs

/var/log/chkservd.log

22) Tailwatch driver tailwatchd log

/usr/local/cpanel/logs/tailwatch_log

23) Update analysis reporting

/usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log

24) Update (UPCP) log

/var/cpanel/updatelogs/updated.{TIMESTAMP}.log

25) WebDisk (CPDAVD)

/usr/local/cpanel/logs/cpdavd_error_log

26) Website statistics log

/usr/local/cpanel/logs/stats_log

 

cPanel access log

 

Access logs and user actions

/usr/local/cpanel/logs/access_log

 

cPanel apache log

 

1) Apache restarts done through cPanel and WHM

/usr/local/cpanel/logs/safeapcherestart_log

2) Domain access logs

/usr/local/apache/domlogs/{DOMAIN}

3) Processing of log splitting

/usr/local/cpanel/logs/splitlogs_log

4) suPHP audit log

/usr/local/apache/logs/suphp_log

5) Web server and CGI application error log

/usr/local/apache/logs/error_log

 

cPanel email log

 

1) Delivery and receipt log

/var/log/exim_mainlog

2) Incoming mail queue

/var/spool/exim/input/

3) Log of messages rejected based on ACLS or other policies

/var/log/exim_rejectlog

4) Unexpected/Fatal error log

/var/log/exim_paniclog

5) IMAP, POP login attempts, transactions, fatal errors and spam scoring

/var/log/maillog /var/log/messages

6) Mailman

/usr/local/cpanel/3rdparty/mailmain/logs

 

MySQL log

 

1) MySQL error log

/var/lib/mysql/{SERVER_NAME}.err

2) MySQL slow query log (if enabled in my.cnf)

/var/log/slowqueries