How to find system and cPanel log file’s locations

Should you run into issues with your VPS server and wish to investigate, you’ll be reassured to know that a comprehensive suite of log files are available to review.

Log in to your server using SSH and navigate to the location in which the relevant log file is stored.

General

Path Description
/var/log/secure Login attempts for the SSH daemon (sshd).
/var/log/messages General error messages and server login attempts for the following services: The nameserver daemons namedorbind; MyDNS; PowerDNS; NSD; The SSH daemon (sshd); The Dovecotmail server; FTP

cPanel & WHM services

File services

Path Description
/usr/local/cpanel/logs/access_log Records of cPanel & WHM user access.
/usr/local/cpanel/build/locale_database_log Information about when a user edits a locale.
/usr/local/cpanel/logs/api_tokens_log WHM'sAPI tokenslogs.
/usr/local/cpanel/logs/cpdavd_error_log Web Disk's error logs.
/usr/local/cpanel/logs/cpdavd_session_log Web Disk's activity logs.
/usr/local/cpanel/logs/cpgreylistd.log Greylistingdaemon's (cpgreylistd) activity logs.
/usr/local/cpanel/logs/cphulkd_errors.log Brute Force Protection daemon's (cphulkd) error logs.
/usr/local/cpanel/logs/cphulkd.log cphulkddaemon's activity logs.
/usr/local/cpanel/logs/cpwrapd_log cPanel & WHM service manager daemon's (cpsrvd) activity logs.
/usr/local/cpanel/logs/dnsadmin.log dnsadminrequest logs.
/usr/local/cpanel/logs/error_log cPanel account's error logs.
/usr/local/cpanel/logs/incoming_http_requests.log Logs of connection requests to the cPanel account's server.
/usr/local/cpanel/logs/license_log cPanel account's license update logs and license errors.
/usr/local/cpanel/logs/login_log Login attempts to thecpsrvddaemon.
/usr/local/cpanel/logs/queueprocd.log cPanel TaskQueue Processingdaemon's (queueprocd) logs.
/usr/local/cpanel/logs/safeapacherestart_log Information about each time that Apache restarted on the server.
/usr/local/cpanel/logs/session_log Logs of a user's activities while they are logged into the cPanel account.
/usr/local/cpanel/logs/setupdbmap_log cPanel account's database-related activities.
/usr/local/cpanel/logs/stats_log Bandwidth statistics for all of the server's cPanel accounts.
/usr/local/cpanel/logs/tailwatchd_log Tailwatch Driver's (tailwatchd) logs.
/usr/local/cpanel/logs/panic_log A cPanel account's severe error logs.
/usr/local/cpanel/logs/php-fpm/error.log PHP-FPM implementation's errors. These errors include errors for thecpsrvdandcpdavd services.
/var/cpanel/php-fpm/USER/logs/slow.log Details of scripts that run unusually slow for a user.
/var/cpanel/php-fpm/USER/logs/error.log User's error logs.
/var/cpanel.bandwidth.cache Cached bandwidth history for each cPanel account on your server.
/var/cpanel/accounting.log Records of cPanel account actions such as creation and deletion.
/var/log/chkservd.log Service status logs.
/var/log/cpanel-install.log cPanel & WHM installation logs.

Directories

Path Description
/usr/local/cpanel/logs/cpbackup cPanel backuplog files.
/usr/local/cpanel/logs/cpbackup_transporter cPanel Backup Transporter's log files.
/usr/local/cpanel/logs/easy/apache EasyApachebuild log files.
/usr/local/cpanel/logs/update_analysis Update process's.tarfiles.
/var/cpanel/bandwidth/username Account's bandwidth usage logs.
/var/cpanel/logs Account transfer log files and other miscellaneous log files.
/var/cpanel/updatelogs System's update log files.
/var/cpanel/logs/mysql_upgrade.log Account'sMySQL upgradelogs.
/var/cpanel/horde/log Log files for Horde.
/var/cpanel/squirrelmail Log files forSquirrelMail.
/var/cpanel/roundcube/log Log files forRoundCube.
/var/cpanel/transfer_session Subdirectories for transfer and restore sessions.

FTP

Files

Path Description
/usr/local/apache/domlogs/ftpxferlog FTP transaction logs for all of the cPanel account's users who run EasyApache 3.
/etc/apache2/logs/domlogs/ftpxferlog FTP transaction logs for all of the cPanel account's users who run EasyApache 4.

Directories

Path Description
/etc/apache2/logs/domlogs FTP transaction logs for all of the cPanel account's domains which exist on webservers that run Easy Apache 4.
/usr/local/apache/domlogs FTP transaction logs for all of the cPanel account's domains which exist on webservers that run Easy Apache 3.

Mail

Files

Path Description
/var/log/exim_mainlog Exim's mail receipt and delivery logs for the cPanel account's domains.
/var/log/exim_rejectlog A log of messages that the system rejected due to ACLs.
/var/log/exim_paniclog Exim's severe error logs.
/var/log/maillog IMAP and POP3 login attempts; transactions; fatal errors andApache SpamAssassin™scores.

Directories

Path Description
/var/spool/exim/input Log of queued incoming email messages.
/usr/local/cpanel/3rdparty/mailman/logs Account'sMailmanlogs.

Memory Usage

Path Description
/var/log/dcpumon/YYYY/MMM/DD Information about the processes that consume the most CPU and memory.
/var/log/munin The account's Munin logs. Munin is a cPanel plugin that displays information about CPU; Exim; Apache; MySQL usage and other information with therrdtoolutility.

MySQL

Path Description
/var/lib/mysql/HOSTNAME.err cPanel account's MySQL databases and errors.

Webservers

Path Description
/usr/local/apache/domlogs/DOMAIN Information about when a visitor accessed a domain which exists on a webserver that runs EasyApache 3.
/etc/apache2/logs/domlogs/DOMAIN Information about when a visitor accessed a domain which exists on a webserver that runs EasyApache 4.
/var/log/apache2/modsec_audit.log Log information forModSecurity.
/var/log/apache2/suexec_log Information aboutsuExecaudit logs.
/var/log/apache2/suphp_log Information about the suPHP Apache module audit logs.
/var/log/apache2/error_log Error logs for webservers and CGI Applications.

If you notice any problems or if you need any help, please open a new support ticket from your HostPapa Dashboard. More details on how to open a support ticket can be found here.

Related Articles