Log of all bash commands run by a user

.bash_history (root of user's directory)

Access_log records all requests processed by server

/usr/local/apache/logs/access_log

Error_log Apache errors and CGI debug info

/usr/local/apache/logs/error_log

Exim_mainlog Anytime message received or delivered

/var/log/exim_mainlog

Exim_rejectlog message rejected based on ACLs or other

/var/log/exim_rejectlog

Exim_paniclog all “other” entries (should be empty)

/var/log/exim_paniclog

Cron all cron processes that get run on the server

/var/log/cron

Messages ftp and other system logs

/var/log/messages

Ddomain logs Access logs for individual domains

/usr/local/apache/domlogs/

Maillog all pop/imap login/out and spamassassin

/var/log/maillog

Ftpxferlog history of transactions made by FTP

/usr/local/apache/domlogs/
(rotates out to /var/log/)

cPanel Logs also can be found in local folders for each user's account. Some other root-level cPanel logs are:

access_log /usr/local/cpanel/logs/ request URI information
login_log /usr/local/cpanel/logs/ shows failed login messages
error_log /usr/local/cpanel/logs/ general cpanel errors
license_log /usr/local/cpanel/logs/ shows license updates/authentication
stats_log /usr/local/cpanel/logs/ shows when stats completed for user
(Awstats, Webalizer, Analog)
chkservd.log /var/log/ failed services show [-] complete [+]

TAILING ERROR LOGS

tail -f /usr/local/apache/logs/error_log | grep [[IP Address of Account]]