cPanel Server Log File Locations
If you are managing a cPanel server, you need to keep a close eye on the various log files. When something goes wrong, it is good to know the locations of the cPanel server log files for quick troubleshooting.
These are some of the logs which I look at daily. It is not a complete list of all log files on the server, just the ones which you will need to check frequently.
Email Related Logs
Exim Main Log - /var/log/exim_mainlog
This is probably one of the most important logs for email troubleshooting.
Exim Reject Log - /var/log/exim_rejectlog
See what mail is getting rejected and why.
Dovecot Mail Log - /var/log/maillog
Check this log to see successful / failed email login attempts. Useful if a client is complaining that that are unable to connect to the server to collect mail.
Apache Webserver Logs
Apache Error Log - /usr/local/apache/logs/error_log
Check this log for Apache errors i.e. file does not exist, client denied etc.
Apache Access Log - /usr/local/apache/domlogs/yourdomain.com
Check a specific domain's access log.
MySQL Database Logs
MySQL Error Log - /var/lib/mysql/hostname.com.err
Check this file for MySQL database errors.
cPanel Login Log - /usr/local/cpanel/logs/login_log
View failed cPanel login attempts.
cPanel Access Log - /usr/local/cpanel/logs/access_log
See who accessed cPanel and when.
cPanel Error Log - /usr/local/cpanel/logs/error_log
cPanel related error messages
cPanel Security Logs
CPHulk Brute Force Protection Log - /usr/local/cpanel/logs/cphulkd.log
Check this log to find out who is getting blocked by brute force protection. Also useful to find false positives.
Configserver Firewall Log - /var/log/lfd.log
Check which IP's are getting blocked by CSF.
Other Important Log Files
Server Messages - /var/log/messages
This is a general server log which you can check for things like kernel messages, suhosin etc.
Cron Log - /var/log/cron
View this log for all cron related messages.
Secure Log - /var/log/secure
View server login information i.e. login times for root etc.