WHM and cPanel Log Locations
Below is a list of all log files generated on your server along with the location to find each of the logs. You can find these while you’re logged into Putty (Windows) or Terminal (Mac) using an SSH connection.
Access logs and users actions
Account transfers and misc logs
Auditing log (account creations, deletions, etc)
Backup Logs
Brute force protection (cphulkd) log
Cpanel dnsadmin dns clustering daemon
Cpanel taskqueue processing daemon
DBmapping
EasyApache build logs
Error log
Installation log
License updates and errors
Locale database modifications
Login errors (CPSRVD)
Horde
Roundcube
Panic Log
Per account bandwidth history (Cached)
Per account bandwidth history (Human Readable)
Service status logs
Tailwatch driver tailwatchd log
Update analysis reporting
Update (UPCP) log
WebDisk (CPDAVD)
Website statistics log
PHP-FPM implementation’s errors
WHM’s API tokens logs
The users PHP-FPM error logs
Greylisting daemon’s logs
/usr/local/cpanel/logs/access_log
/var/cpanel/logs
/var/cpanel/accounting.log
/usr/local/cpanel/logs/cpbackup
/usr/local/cpanel/logs/cphulkd.log
/usr/local/cpanel/logs/dnsadmin_log
/usr/local/cpanel/logs/queueprocd.log
/usr/local/cpanel/logs/setupdbmap_log
/usr/local/cpanel/logs/easy/apache/
/usr/local/cpanel/logs/error_log
/var/log/cpanel
/usr/local/cpanel/logs/license_log
/usr/local/cpanel/logs/build_locale_database_log
/usr/local/cpanel/logs/login_log
/var/cpanel/horde/log/
/var/cpanel/roundcube/log/
/usr/local/cpanel/logs/panic_log
/var/cpanel/bandwidth.cache/{USERNAME}
/var/cpanel/bandwidth/{USERNAME}
/var/log/chkservd.log
/usr/local/cpanel/logs/tailwatch_log
/usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log
/var/cpanel/updatelogs/updated.{TIMESTAMP}.log
/usr/local/cpanel/logs/cpdavd_error_log
/usr/local/cpanel/logs/stats_log
/var/cpanel/php-fpm/USER/logs/error.log
/usr/local/cpanel/logs/api_tokens_log
/var/cpanel/php-fpm/USER/logs/error.log
/usr/local/cpanel/logs/cpgreylistd.log
Apache restarts done through cPanel and WHM
Domain access logs
Domain access logs for Easy Apache 4
Processing of log splitting
suPHP audit log
Web server and CGI application error log
Delivery and receipt log
Incoming mail queue
Log of messages rejected based on ACLS or other policies
Unexpected/Fatal error log
IMAP, POP login attempts, transactions, fatal errors and spam scoring