cPanel logs for access, Apache, email, error, ftp, mysql, and WHM
cPanel logs
------------
Access logs and user actions :/usr/local/cpanel/logs/access_log
Account transfers and misc. logs :/var/cpanel/logs
Backup logs :/usr/local/cpanel/logs/cpbackup
Brute force protection (cphulkd) log :/usr/local/cpanel/logs/cphulkd.log
Cpanel taskqueue processing daemon :/usr/local/cpanel/logs/queueprocd.log
DBmapping :/usr/local/cpanel/logs/setupdbmap_log
Error log :/usr/local/cpanel/logs/error_log
EasyApache build logs :/usr/local/cpanel/logs/easy/apache/
Installation log :/var/log/cpanel
Login errors (CPSRVD) :/usr/local/cpanel/logs/login_log
Locale database modifications :/usr/local/cpanel
License updates and errors :/usr/local/cpanel/logs/license_log
Per account bandwidth history (Human Readable) :/var/cpanel/bandwidth/{USERNAME}
Service status logs :/var/log/chkservd.log
Update analysis reporting :/usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log
Update (UPCP) log :/var/cpanel/updatelogs/updated.{TIMESTAMP}.log
WebDisk (CPDAVD) :/usr/local/cpanel/logs/cpdavd_error_log
Website statistics log :/usr/local/cpanel/logs/stats_log
cPanel access log
-----------------
Access logs and user actions :/usr/local/cpanel/logs/access_log
MySQL log
---------
MySQL error log :/var/lib/mysql/{SERVER_NAME}.err
MySQL slow query log (if enabled in my.cnf) :/var/log/slowqueries
cPanel email log
----------------
Delivery and receipt log :/var/log/exim_mainlog
Incoming mail queue :/var/spool/exim/input/
Log of messages rejected based on ACLS or other policies :/var/log/exim_rejectlog
Unexpected/Fatal error log :/var/log/exim_paniclog
IMAP, POP login attempts, transactions, fatal errors and spam scoring :/var/log/maillog or /var/log/messages
Mailman :/usr/local/cpanel/3rdparty/mailmain/logs
cPanel apache log
------------------
Apache restarts done through cPanel and WHM : /usr/local/cpanel/logs/safeapcherestart_log
Domain access logs : /usr/local/apache/domlogs/{DOMAIN}
Processing of log splitting : /usr/local/cpanel/logs/splitlogs_log
suPHP audit log : /usr/local/apache/logs/suphp_log
Web server and CGI application error log : /usr/local/apache/logs/error_log
