cPanel / WHM Service Log and Configuration File Locations

Mail - SMTP (Exim), POP/IMAP (Courier/Dovecot) and Webmail (Horde/RoundCube/Squirrelmail)

• Logs
  • Incoming and outgoing mail log: /var/log/exim_mainlog
  • POP or IMAP login/transaction records: /var/log/maillog
  • Anti-spam logs (eg. SpamAssassin): /var/log/maillog
  • Mails rejected by Exim SMTP sever: /var/log/exim_rejectlog
  • SMTP/POP/IMAP server crash logs: /var/log/messages, /var/log/maillog, /var/log/exim_paniclog
  • Mailman logs: /usr/local/cpanel/3rdparty/mailmain/logs/*
  • RoundCube delivery and error logs: /var/cpanel/roundcube/log/*
  • Horde error logs: /var/cpanel/horde/log/*
  • SquirrelMail logs: /var/cpanel/squirrelmail/*
• Configuration
  • /etc/exim.conf

Apache

• Logs
  • Web site access logs: /usr/local/apache/domlogs/[DOMAIN_NAME]
  • Web site and server error log: /usr/local/apache/logs/error_log
  • Mod Security error log: /usr/local/apache/logs/modsec_audit.log
  • SuPHP audit log: /usr/local/apache/logs/suphp_log
  • Apache restarts through cPanel/WHM: /usr/local/cpanel/logs/safeapacherestart_log
• Configuration
  • /etc/httpd/conf/httpd.conf OR /usr/local/apache/conf/httpd.conf

FTP - ProFTPd/PureFTPd

• Logs
  • /var/log/proftpd
  • /var/log/pureftpd.log
• Service Control
  • /etc/init.d/proftpd start
  • /etc/init.d/pure-ftpd start
• Configuration
  • /etc/proftpd.conf
  • /etc/pure-ftpd.conf

cPanel/WHM Services

• Logs
  • Brute force protection log: /usr/local/cpanel/logs/cphulkd.log
  • Login failures on all cPanel/Webmail services: /usr/local/cpanel/logs/login_log
  • User logins and activity log: /usr/local/cpanel/logs/access_log
  • Accounts audit log: /var/cpanel/accounting.log
  • Backup logs: /usr/local/cpanel/logs/cpbackup
  • Web statistics update log: /usr/local/cpanel/logs/stats_log
  • cPanel license update logs: /usr/local/cpanel/logs/license_log
  • Service status logs: /var/log/chkservd.log
  • Tailwatch daemon log: /usr/local/cpanel/logs/tailwatchd_log
  • WebDisk logs: /usr/local/cpanel/logs/cpdavd_error_log
  • Account bandwidth usage: /var/cpanel/bandwidth/[DOMAIN_NAME]
  • cPanel error log: /usr/local/cpanel/logs/error_log
  • cPanel fatal error log: /usr/local/cpanel/logs/panic_log
  • cPanel update log: /var/cpanel/updatelogs/*
  • EasyApache installation logs: /usr/local/cpanel/logs/easy/apache/*
  • cPanel installation log: /var/log/cpanel
• Configuration
  • /var/cpanel/cpanel.config

MySQL

• Logs
  • /var/log/mysqld.log
  • Slow query log (if enabled): /var/log/slowqueries
    
• Service Control

  • Stop: /etc/init.d/mysqld stop
  • Start: /etc/init.d/mysqld start
  • Restart: /etc/init.d/mysqld restart
• Configuration
  • /etc/my.cnf

Important System and 3rd Party Tools

• Logs
  • Cron server log: /var/log/cron
  • Default system log file: /var/log/messages
  • LFD firewall log (if CSF/LFD is installed): /var/log/lfd.log
  • Maldetect logs (if LMD is installed): /usr/local/maldetect/event_log
  • Server authentication logs: /var/log/secure
  • Server update log: /var/log/yum.log