[+] cPanel/WHM Log Files [+]

Login Attempts to cpsrvd: /usr/local/cpanel/logs/login_log
Account Transfers and Misc. Logs: /var/cpanel/logs
Per-Account Bandwidth History Human Readable: /var/cpanel/bandwidth/(USERNAME)
Per-Account Bandwidth History – Cached: /var/cpanel/bandwidth.cache/(USERNAME)
Service Status Logs: /var/log/chkservd.log
Error Log for cpsrvd: /usr/local/cpanel/logs/error_log
Panic Log for cpsrvd: /usr/local/cpanel/logs/panic_log
Backup Logs: /usr/local/cpanel/logs/cpbackup
Update (UPCP) Log: /var/cpanel/updatelogs/update-(TIMESTAMP).log
Mailman Logs: /usr/local/cpanel/3rdparty/mailman/logs
Auditing Log (Account Creations, Deletions, etc.): /var/cpanel/accounting.log
Access Log and User Actions in cpsrvd: /usr/local/cpanel/logs/access_log
Website Statistics Logs: /usr/local/cpanel/logs/stats_log
Logs for Specific Webmail Applications
- SquirrelMail: /var/cpanel/squirrelmail
- RoundCube: /var/cpanel/roundcube/log
- Horde: /var/cpanel/horde/log
License Updates and Errors: /usr/local/cpanel/logs/license_log
Brute Force Protection (cPHulkD) Log: /usr/local/cpanel/logs/cphulkd.log
WebDisk (cpdavd) Log: /usr/local/cpanel/logs/cpdavd_error_log
Tailwatch Driver (tailwatchd) Log: /usr/local/cpanel/logs/tailwatch_log
EasyApache Build Logs: /usr/local/cpanel/logs/easy/apache/
Installation Log: /var/log/cpanel*install* MySQL
General Information and Errors: /var/lib/mysql/(HOSTNAME).err @ /val/log/mysqld.log
FTP (Pure-FTPD, Pro-FTPD) Login Attempts and General Info: /var/log/messages
FTP Transfer Log: /var/log/xferlog is a symbolic link to: /usr/local/apache/domlogs/
Mail Retrieval and Spam Protection (Courier, Dovecot, SpamAssassin) IMAP, POP Login Attempts, Transactions, Fatal Errors and Spam Scoring: /var/log/maillog and /var/log/messages
Mail Delivery (Exim) Unexpected/Fatal Error Log: /var/log/exim_paniclog
Incoming Mail Queue: /var/spool/exim/input
Log of Messages Rejected Based on ACLs or Other Policies: /var/log/exim_rejectlog
Delivery and Receipt Log: /var/log/exim_mainlog
Named (BIND) Log: /var/log/messages
NSD Log: /var/log/messages
SSHD SSH Log: /var/log/messages
Web Server (Apache/httpd) Domain Access Logs: /usr/local/apache/domlogs/(DOMAIN)
Web Server and CGI Application Error Log: /usr/local/apache/logs/error_log
SuExec Audit Log: /usr/local/apache/logs/suexec_log
SuPHP Audit Log: /usr/local/apache/logs/suphp_log
Top Memory and CPU Consumers (dcpumon) Top Processes Consuming CPU and Memory: /var/log/dcpumon/(YEAR)/(MONTH)/(DAY)