Log of all bash commands run by a user
.bash_history (root of user's directory)
Access_log records all requests processed by the server
/usr/local/apache/logs/access_log
Error_log Apache errors and CGI debug info
/usr/local/apache/logs/error_log
Exim_mainlog Anytime message received or delivered
/var/log/exim_mainlog
Exim_rejectlog message rejected based on ACLs or other
/var/log/exim_rejectlog
Exim_paniclog all “other” entries (should be empty)
/var/log/exim_paniclog
Cron all cron processes that get run on the server
/var/log/cron
Messages ftp and other system logs
/var/log/messages
Ddomain logs Access logs for individual domains
/usr/local/apache/domlogs/
Maillog all pop/imap login/out and spamassassin
/var/log/maillog
Ftpxferlog history of transactions made by FTP
/usr/local/apache/domlogs/
(rotates out to /var/log/)
cPanel Logs also can be found in local folders for each user's account. Some other root-level cPanel logs are:
access_log /usr/local/cpanel/logs/ request URI information
login_log /usr/local/cpanel/logs/ shows failed login messages
error_log /usr/local/cpanel/logs/ general cpanel errors
license_log /usr/local/cpanel/logs/ shows license updates/authentication
stats_log /usr/local/cpanel/logs/ shows when stats completed for the user
(Awstats, Webalizer, Analog)
chkservd.log /var/log/ failed services show [-] complete [+]
TAILING ERROR LOGS
tail -f /usr/local/apache/logs/error_log | grep [[IP Address of Account]]