How to find System and cPanel log file’s locations

Should you run into issues with your VPS server and wish to investigate, you’ll be reassured to know that a comprehensive suite of log files are available to review.

Log in to your server using SSH and navigate to the location in which the relevant log file is stored.

General

Path Description
/var/log/secure Login attempts for the SSH daemon (sshd).
/var/log/messages General error messages and server login attempts for the following services: The nameserver daemons named or bind; MyDNS; PowerDNS; NSD; The SSH daemon (sshd); The Dovecot mail server; FTP

cPanel & WHM services

File services

Path Description
/usr/local/cpanel/logs/access_log Records of cPanel & WHM user access.
/usr/local/cpanel/build/locale_database_log Information about when a user edits a locale.
/usr/local/cpanel/logs/api_tokens_log WHM's API tokens logs.
/usr/local/cpanel/logs/cpdavd_error_log Web Disk's error logs.
/usr/local/cpanel/logs/cpdavd_session_log Web Disk's activity logs.
/usr/local/cpanel/logs/cpgreylistd.log Greylisting daemon's (cpgreylistd) activity logs.
/usr/local/cpanel/logs/cphulkd_errors.log Brute Force Protection daemon's (cphulkd) error logs.
/usr/local/cpanel/logs/cphulkd.log cphulkd daemon's activity logs.
/usr/local/cpanel/logs/cpwrapd_log cPanel & WHM service manager daemon's (cpsrvd) activity logs.
/usr/local/cpanel/logs/dnsadmin.log dnsadmin request logs.
/usr/local/cpanel/logs/error_log cPanel account's error logs.
/usr/local/cpanel/logs/incoming_http_requests.log Logs of connection requests to the cPanel account's server.
/usr/local/cpanel/logs/license_log cPanel account's license update logs and license errors.
/usr/local/cpanel/logs/login_log Login attempts to the cpsrvd daemon.
/usr/local/cpanel/logs/queueprocd.log cPanel TaskQueue Processing daemon's (queueprocd) logs.
/usr/local/cpanel/logs/safeapacherestart_log Information about each time that Apache restarted on the server.
/usr/local/cpanel/logs/session_log Logs of a user's activities while they are logged into the cPanel account.
/usr/local/cpanel/logs/setupdbmap_log cPanel account's database-related activities.
/usr/local/cpanel/logs/stats_log Bandwidth statistics for all of the server's cPanel accounts.
/usr/local/cpanel/logs/tailwatchd_log Tailwatch Driver's (tailwatchd) logs.
/usr/local/cpanel/logs/panic_log A cPanel account's severe error logs.
/usr/local/cpanel/logs/php-fpm/error.log PHP-FPM implementation's errors. These errors include errors for the cpsrvd and cpdavd services.
/var/cpanel/php-fpm/USER/logs/slow.log Details of scripts that run unusually slow for a user.
/var/cpanel/php-fpm/USER/logs/error.log User's error logs.
/var/cpanel.bandwidth.cache Cached bandwidth history for each cPanel account on your server.
/var/cpanel/accounting.log Records of cPanel account actions such as creation and deletion.
/var/log/chkservd.log Service status logs.
/var/log/cpanel-install.log cPanel & WHM installation logs.

Directories

Path Description
/usr/local/cpanel/logs/cpbackup cPanel backup log files.
/usr/local/cpanel/logs/cpbackup_transporter cPanel Backup Transporter's log files.
/usr/local/cpanel/logs/easy/apache EasyApache build log files.
/usr/local/cpanel/logs/update_analysis Update process's .tar files.
/var/cpanel/bandwidth/username Account's bandwidth usage logs.
/var/cpanel/logs Account transfer log files and other miscellaneous log files.
/var/cpanel/updatelogs System's update log files.
/var/cpanel/logs/mysql_upgrade.log Account's MySQL upgrade logs.
/var/cpanel/horde/log Log files for Horde.
/var/cpanel/squirrelmail Log files for SquirrelMail.
/var/cpanel/roundcube/log Log files for RoundCube.
/var/cpanel/transfer_session Subdirectories for transfer and restore sessions.

FTP

Files

Path Description
/usr/local/apache/domlogs/ftpxferlog FTP transaction logs for all of the cPanel account's users who run EasyApache 3.
/etc/apache2/logs/domlogs/ftpxferlog FTP transaction logs for all of the cPanel account's users who run EasyApache 4.

Directories

Path Description
/etc/apache2/logs/domlogs FTP transaction logs for all of the cPanel account's domains which exist on webservers that run Easy Apache 4.
/usr/local/apache/domlogs FTP transaction logs for all of the cPanel account's domains which exist on webservers that run Easy Apache 3.

Mail

Files

Path Description
/var/log/exim_mainlog Exim's mail receipt and delivery logs for the cPanel account's domains.
/var/log/exim_rejectlog A log of messages that the system rejected due to ACLs.
/var/log/exim_paniclog Exim's severe error logs.
/var/log/maillog IMAP and POP3 login attempts; transactions; fatal errors and Apache SpamAssassin™ scores.

Directories

Path Description
/var/spool/exim/input Log of queued incoming email messages.
/usr/local/cpanel/3rdparty/mailman/logs Account's Mailman logs.

Memory Usage

Path Description
/var/log/dcpumon/YYYY/MMM/DD Information about the processes that consume the most CPU and memory.
/var/log/munin The account's Munin logs. Munin is a cPanel plugin that displays information about CPU; Exim; Apache; MySQL usage and other information with the rrdtool utility.

MySQL

Path Description
/var/lib/mysql/HOSTNAME.err cPanel account's MySQL databases and errors.

Webservers

Path Description
/usr/local/apache/domlogs/DOMAIN Information about when a visitor accessed a domain which exists on a webserver that runs EasyApache 3.
/etc/apache2/logs/domlogs/DOMAIN Information about when a visitor accessed a domain which exists on a webserver that runs EasyApache 4.
/var/log/apache2/modsec_audit.log Log information for ModSecurity.
/var/log/apache2/suexec_log Information about suExec audit logs.
/var/log/apache2/suphp_log Information about the suPHP Apache module audit logs.
/var/log/apache2/error_log Error logs for webservers and CGI Applications.

If you notice any problems or if you need any help, please open a new support ticket from your HostPapa Dashboard. More details on how to open a support ticket can be found here.

Was this article helpful?

  • Was this article helpful ?

  • yes   no

Related Articles

Leave A Comment?