cPanel & WHM Log Locations
This document describes the location of all of the log files in cPanel & WHM and MySQL. The document also provides Examples of each log file.
General
| Filepath |
Description |
| /var/log/messages |
This file contains the login attempts and general error messages for the following services:
Warning: We deprecated the MyDNS and NSD nameservers in cPanel & WHM version 78 and plan to remove them a future release. We strongly recommend that you migrate to PowerDNS. For more information, read our cPanel Deprecation Plan.
|
| /var/log/secure | This file contains the login attempts for the SSH daemon (sshd). |
cPanel & WHM Services
The following table lists the log files for cPanel & WHM:
| Filepath | Description |
| /home/username/.cpanel/logs | This directory contains records of errors within a user's task queue. |
| /usr/local/cpanel/logs/access_log |
This file contains records of when a cPanel & WHM user accesses their account. The system displays these records in a standardized text format, called the Common Log Format |
| /usr/local/cpanel/build/locale_database_log | This file contains information about when a user edits a locale. |
| /usr/local/cpanel/logs/api_tokens_log | This file contains WHM's API tokens logs. |
| /usr/local/cpanel/logs/cpdavd_error_log | This file contains WebDisk's error logs. |
| /usr/local/cpanel/logs/cpdavd_session_log | This file contains Web Disk's activity logs. |
| /usr/local/cpanel/logs/cpgreylistd.log | This file contains the Greylisting daemon's (cpgreylistd) activity logs. |
| /usr/local/cpanel/logs/cphulkd_errors.log | This file contains the Brute Force Protection daemon's (cphulkd) error logs. |
| /usr/local/cpanel/logs/cphulkd.log | This file contains the cphulkd daemon's activity logs. |
| /usr/local/cpanel/logs/cpwrapd_log |
This file contains the cPanel & WHM service manager daemon's (cpsrvd) activity logs. |
| /usr/local/cpanel/logs/dnsadmin_log |
This file contains dnsadmin request logs. |
| /usr/local/cpanel/logs/error_log |
This file contains general cPanel & WHM errors (for example, a fatal error or timeout occurred while processing this directive error). |
| /usr/local/cpanel/logs/incoming_http_requests.log |
This file contains the logs of connection requests to the cPanel account's server. |
| /usr/local/cpanel/logs/license_log |
This file contains the server's license update logs and license errors. |
| /usr/local/cpanel/logs/login_log |
This file contains the login attempts to the cpsrvd daemon. |
| /usr/local/cpanel/logs/queueprocd.log |
This file contains the cPanel TaskQueue Processing daemon's (queueprocd) logs. |
| /usr/local/cpanel/logs/safeapacherestart_log |
This file contains information about each time that Apache restarted on the server. |
| /usr/local/cpanel/logs/session_log |
This file contains logs of a user's activities while they are logged into the cPanel account. |
| /usr/local/cpanel/logs/setupdbmap_log |
This file contains the cPanel account's database-related activities. |
| /usr/local/cpanel/logs/stats_log |
This file contains the bandwidth statistics for all of the server's cPanel accounts. |
| /usr/local/cpanel/logs/tailwatchd_log |
This file contains the Tailwatch Driver's (tailwatchd) logs. |
| /usr/local/cpanel/logs/panic_log |
This file contains a cPanel account's severe error logs. |
| /usr/local/cpanel/logs/php-fpm/error.log |
This file contains PHP-FPM implementation errors. These errors include errors for the Note: This file does not include errors for customer sites. |
| /var/cpanel/php-fpm/USER/logs/slow.log |
This file contains scripts that run unusually slow for a user. Note:
|
| /var/cpanel/php-fpm/USER/logs/error.log |
This file contains the user's error logs. Note:
|
| /var/cpanel.bandwidth.cache |
This file contains the cached bandwidth history for each cPanel account on your server. |
| /var/cpanel/accounting.log |
This file contains records of cPanel account actions, such as creation and deletion. |
| /var/log/chkservd.log |
This file contains the service status logs. |
| /var/log/cpanel-install.log |
This file contains the cPanel & WHM installation logs. |
Directories
The following table lists the log directories for cPanel & WHM
| Directory Path | Description | ||||||||||||||
| /usr/local/cpanel/logs/cpbackup | This directory contains the cPanel backup log files. | ||||||||||||||
| /usr/local/cpanel/logs/cpbackup_transporter | This directory contains the cPanel Backup Transporter's log files. | ||||||||||||||
| /usr/local/cpanel/logs/easy/apache | This directory contains the EasyApache build log files. | ||||||||||||||
| /usr/local/cpanel/logs/update_analysis | This directory contains the update process's .tar files. |
||||||||||||||
| /var/cpanel/bandwidth/username |
This directory contains each account's bandwidth usage logs. Note: In this directory, |
||||||||||||||
| /var/cpanel/logs | This directory contains account transfer log files and other, miscellaneous log files. | ||||||||||||||
| /var/cpanel/updatelogs |
This directory contains the system's update log files. |
||||||||||||||
| /var/cpanel/logs/mysql_upgrade.log |
This directory contains the account's MySQL upgrade logs. In cPanel & WHM version 78 and later, the log files use the
|
||||||||||||||
| /var/cpanel/horde/log | This directory contains the log files for Horde. | ||||||||||||||
| /var/cpanel/squirrelmail |
This directory contains the log files for SquirrelMail. Warning: We deprecated SquirrelMail and its functionality in cPanel & WHM version 76 and removed it in cPanel & WHM version 78. |
||||||||||||||
| /home/username/logs/roundcube | This directory contains the log files for Roundcube Webmail with a SQLite backend. | ||||||||||||||
| /var/cpanel/roundcube/log | This directory contains the log files for Roundcube Webmail with a MySQL backend. | ||||||||||||||
| /var/cpanel/transfer_session |
This directory contains subdirectories for transfer and restore sessions. Each transfer and restore session's subdirectory contains the session's log files in a line-delimited JSON format. Each log file contains the following information: |
FTP
Files
| Filepath | Description |
| /etc/apache2/logs/domlogs/ftpxferlog | This file contains the FTP transfer logs for users on webservers that run EasyApache 4 |
| /usr/local/apache/domlogs/ftpxferlog | This file contains the FTP transfer logs for users on webservers that run EasyApache 3. |
Directories
| Directory Path | Description |
| /etc/apache2/logs/domlogs | This directory contains the FTP transaction logs for domains which exist on webservers that run Easy Apache 4. |
| /usr/local/apache/domlogs | This directory contains the FTP transaction logs for domains which exist on webservers that run Easy Apache 3. |
Files
| Filepath | Description |
| /var/log/exim_mainlog | This file contains Exim's mail receipt and delivery logs for the cPanel account's domains. |
| /var/log/exim_rejectlog |
This file contains a log of messages that the system rejected due to ACLs. For more information, read our Exim Configuration Manager - Basic Editor documentation. |
| /var/log/exim_paniclog | This file contains Exim's severe error logs. |
| /var/log/maillog | This file contains IMAP and POP3 login attempts, transactions, fatal errors, and Apache SpamAssassin™ scores. |
Directories
| Directory Path | Description |
| /var/spool/exim/input |
This directory contains a log of queued incoming email messages. For more information, read our Mail Queue Manager documentation. The system separates these logs in to subdirectories that correspond to the number or letter with which the sender's name begins. |
| /usr/local/cpanel/3rdparty/mailman/logs | This directory contains the account's Mailman logs. |
Memory Usage
| Filepath | Description |
| /var/log/dcpumon/YYYY/MMM/DD |
This file contains information about the processes that consume the most CPU and memory.
Note: To interpret the data, use the |
| /var/log/munin |
Was this answer helpful?Related Articles
Support Plans
cPanel Backup Settings
Every Host is a responsible host and provide native cPanel backups for all its clients. Unless...
Setup cpanel tmp to auto clean using tmpwatch
my /tmp is full, how do i delete the content?a) open SSH to your server, if SSH will not connect...
Increase /tmp Partition Size
Resize /tmp partition size in cPanel and secure it
This is only applicable to our dedicated...
How To Move and Copy Files using SSH.
How to move and copy files using SSH
Very often you will need to move one or more...
For over 7 years our team have migrated 100’s of customers to our fast, secure hosting environment and provided exceptional marketing and SEO results. 
Everyhost Hosting Ltd
124 City Road London EC1V 2NX
We accept the following:
 EveryHost is a trading name of UKprepare ltd Web Hosting
Company
|