Log locations on a cPanel server
The following matrix shows where services log to on a cPanel-based server.
| /var/log/messages | /var/log/maillog | /var/log/secure | /var/log/exim_mainlog | var/log/cpanel/logs | /usr/local/apache/logs | /usr/local/apache/domlogs | /var/lib/mysql/${hostname}.err | |
|---|---|---|---|---|---|---|---|---|
| Apache – main | X | |||||||
| Apache – weblogs | X | |||||||
| FTP | X | |||||||
| Exim (SMTP) | X | |||||||
| Dovecot/Courier (POP3, SMTP & IMAP) | X | |||||||
| SSH | X | |||||||
| MySQL | X | |||||||
| cPanel/WHM | X | |||||||
| System/other | X | |||||||
| Bind/named | X | |||||||
| SpamAssassin/spamd | X |
MODSEC LOG:
less /usr/local/apache/logs/modsec_audit.log
DBGOVENOR:
/var/log/dbgovernor-restrict.log
/var/log/dbgovernor-error.log
CPUMON (Top snapshots)
/var/log/cpumon/snapshot/var/log/dcpumon/