How to find system and cPanel log file’s locations

Should you run into issues with your VPS server and wish to investigate, you’ll be reassured to know that a comprehensive suite of log files are available to review.

Log in to your server using SSH and navigate to the location in which the relevant log file is stored.

General

PathDescription
/var/log/secureLogin attempts for the SSH daemon (sshd).
/var/log/messagesGeneral error messages and server login attempts for the following services: The nameserver daemons named or bind; MyDNS; PowerDNS; NSD; The SSH daemon (sshd); The Dovecot mail server; FTP

cPanel & WHM services

File services

PathDescription
/usr/local/cpanel/logs/access_logRecords of cPanel & WHM user access.
/usr/local/cpanel/build/locale_database_logInformation about when a user edits a locale.
/usr/local/cpanel/logs/api_tokens_logWHM’s API tokens logs.
/usr/local/cpanel/logs/cpdavd_error_logWeb Disk’s error logs.
/usr/local/cpanel/logs/cpdavd_session_logWeb Disk’s activity logs.
/usr/local/cpanel/logs/cpgreylistd.logGreylisting daemon’s (cpgreylistd) activity logs.
/usr/local/cpanel/logs/cphulkd_errors.logBrute Force Protection daemon’s (cphulkd) error logs.
/usr/local/cpanel/logs/cphulkd.logcphulkd daemon’s activity logs.
/usr/local/cpanel/logs/cpwrapd_logcPanel & WHM service manager daemon’s (cpsrvd) activity logs.
/usr/local/cpanel/logs/dnsadmin.logdnsadmin request logs.
/usr/local/cpanel/logs/error_logcPanel account’s error logs.
/usr/local/cpanel/logs/incoming_http_requests.logLogs of connection requests to the cPanel account’s server.
/usr/local/cpanel/logs/license_logcPanel account’s license update logs and license errors.
/usr/local/cpanel/logs/login_logLogin attempts to the cpsrvd daemon.
/usr/local/cpanel/logs/queueprocd.logcPanel TaskQueue Processing daemon’s (queueprocd) logs.
/usr/local/cpanel/logs/safeapacherestart_logInformation about each time that Apache restarted on the server.
/usr/local/cpanel/logs/session_logLogs of a user’s activities while they are logged into the cPanel account.
/usr/local/cpanel/logs/setupdbmap_logcPanel account’s database-related activities.
/usr/local/cpanel/logs/stats_logBandwidth statistics for all of the server’s cPanel accounts.
/usr/local/cpanel/logs/tailwatchd_logTailwatch Driver’s (tailwatchd) logs.
/usr/local/cpanel/logs/panic_logA cPanel account’s severe error logs.
/usr/local/cpanel/logs/php-fpm/error.logPHP-FPM implementation’s errors. These errors include errors for the cpsrvd and cpdavd services.
/var/cpanel/php-fpm/USER/logs/slow.logDetails of scripts that run unusually slow for a user.
/var/cpanel/php-fpm/USER/logs/error.logUser’s error logs.
/var/cpanel.bandwidth.cacheCached bandwidth history for each cPanel account on your server.
/var/cpanel/accounting.logRecords of cPanel account actions such as creation and deletion.
/var/log/chkservd.logService status logs.
/var/log/cpanel-install.logcPanel & WHM installation logs.

Directories

PathDescription
/usr/local/cpanel/logs/cpbackupcPanel backup log files.
/usr/local/cpanel/logs/cpbackup_transportercPanel Backup Transporter’s log files.
/usr/local/cpanel/logs/easy/apacheEasyApache build log files.
/usr/local/cpanel/logs/update_analysisUpdate process’s .tar files.
/var/cpanel/bandwidth/usernameAccount’s bandwidth usage logs.
/var/cpanel/logsAccount transfer log files and other miscellaneous log files.
/var/cpanel/updatelogsSystem’s update log files.
/var/cpanel/logs/mysql_upgrade.logAccount’s MySQL upgrade logs.
/var/cpanel/horde/logLog files for Horde.
/var/cpanel/squirrelmailLog files for SquirrelMail.
/var/cpanel/roundcube/logLog files for RoundCube.
/var/cpanel/transfer_sessionSubdirectories for transfer and restore sessions.

FTP

Files

PathDescription
/usr/local/apache/domlogs/ftpxferlogFTP transaction logs for all of the cPanel account’s users who run EasyApache 3.
/etc/apache2/logs/domlogs/ftpxferlogFTP transaction logs for all of the cPanel account’s users who run EasyApache 4.

Directories

PathDescription
/etc/apache2/logs/domlogsFTP transaction logs for all of the cPanel account’s domains which exist on webservers that run Easy Apache 4.
/usr/local/apache/domlogsFTP transaction logs for all of the cPanel account’s domains which exist on webservers that run Easy Apache 3.

Mail

Files

PathDescription
/var/log/exim_mainlogExim’s mail receipt and delivery logs for the cPanel account’s domains.
/var/log/exim_rejectlogA log of messages that the system rejected due to ACLs.
/var/log/exim_paniclogExim’s severe error logs.
/var/log/maillogIMAP and POP3 login attempts; transactions; fatal errors and Apache SpamAssassin™ scores.

Directories

PathDescription
/var/spool/exim/inputLog of queued incoming email messages.
/usr/local/cpanel/3rdparty/mailman/logsAccount’s Mailman logs.

Memory Usage

PathDescription
/var/log/dcpumon/YYYY/MMM/DDInformation about the processes that consume the most CPU and memory.
/var/log/muninThe account’s Munin logs. Munin is a cPanel plugin that displays information about CPU; Exim; Apache; MySQL usage and other information with the rrdtool utility.

MySQL

PathDescription
/var/lib/mysql/HOSTNAME.errcPanel account’s MySQL databases and errors.

Webservers

PathDescription
/usr/local/apache/domlogs/DOMAINInformation about when a visitor accessed a domain which exists on a webserver that runs EasyApache 3.
/etc/apache2/logs/domlogs/DOMAINInformation about when a visitor accessed a domain which exists on a webserver that runs EasyApache 4.
/var/log/apache2/modsec_audit.logLog information for ModSecurity.
/var/log/apache2/suexec_logInformation about suExec audit logs.
/var/log/apache2/suphp_logInformation about the suPHP Apache module audit logs.
/var/log/apache2/error_logError logs for webservers and CGI Applications.

If you need help with your HostPapa account, please open a support ticket from your dashboard.

Related Articles

Get online with our affordable web hosting

Get online with our affordable web hosting

Learn more now
HostPapa Mustache