cPanel and Plesk Log file locations

cPanel/WHM Initial Installation Errors:

»» /var/log/cpanel*install*

These log files contain verbose logs of the cPanel installation, and should be the first point of reference for any issues which might occur ‘out of the box’ with new cPanel installations.

cPanel/WHM Requests and Errors:

»» /usr/local/cpanel/logs/error_log

cPanel logs any error it incurs here. This should always be the first place you look when you encounter errors or strange behavior in cPanel/WHM.

»» /usr/local/cpanel/logs/license_log

All license update attempts are logged here. If you run into any license errors when logging in, check here.

»» /usr/local/cpanel/logs/stats_log

The stats daemon (cpanellogd) logs the output from all stats generators (Awstats, Webalizer, Analog) here.

»» /usr/local/cpanel/logs/access_log

General information pertaining to cPanel requests is logged here(Client Information, Request URI)

cPanel/WHM Update Logs

»» /var/cpanel/updatelogs/update-[TIMESTAMP].log

Contains all output from each upcp. Named with the timestamp from which the upcp process was

executed.

Service Status Logs

»» /var/log/chkservd.log

The service monitoring daemon (chkservd) logs all service checks here. Failed services are

represented with a [-] and active are represented with [+].

Apache

»» /usr/local/apache/logs/error_log

All exceptions caught by httpd, standard error output from CGI are logged here. The first place

look when httpd crashes, or you when accessing a website.

»» /usr/local/apache/logs/suexec_log

Contains auditing information reported by suexec each time a CGI application is executed. If you receive an internal server error, with no relevant information being reported to the Apache error_log, check here for potential suexec policy violations.

Domain Access Logs

»» /usr/local/apache/domlogs/domain.com

The general access log for each domain configured with cPanel.

Exim

Message Reception and Delivery

»» /var/log/exim_mainlog

Receives an entry every time a message is received or delivered

Rejections based on ACLs/Policies

»» /var/log/exim_rejectlog

Receives an entry every time a message is rejected based on either ACLs or other policies

Unexpected or Fatal Errors

»» /var/log/exim_paniclog

Receives all entries exim doesn’t know how to handle.

IMAP/POP/SpamAssassin

General Logging and Errors

»» /var/log/maillog »» /var/log/messages

The IMAP, POP, and SpamAssassin services all log here. This includes all general logging information (login attempts, transactions, spam scoring), along with fatal errors.

FTP

Logins and General Errors

»» /var/log/messages

General information and login attempts are logged here

FTP Transactions

»» /var/log/xferlog

Is a symbolic link in most cases to /usr/local/apache/domlogs/ftpxferlog, which contains a history of the transactions made by FTP users.

MySQL

General Information and Errors

»» /var/lib/mysql/$(hostname).err

This path could vary, but is generally located in /var/lib/mysql. Could also be located at /var/log/

mysqld.log

Plesk Logs

Control Panel Error log:

/var/log/sw-cp-server/error_log

Access log:

/usr/local/psa/admin/logs/httpsd_access_log

Panel log:

/usr/local/psa/admin/logs/panel.log

config files:

php:

/usr/local/psa/admin/conf/php.ini

www:

/etc/sw-cp-server/applications.d/plesk.conf

phpMyAdmin

Error log:

/var/log/sw-cp-server/error_log

config files:

usr/local/psa/admin/htdocs/domains/databases/phpMyAdmin/libraries/config.default.php

Courier-IMAP

Access and Error log:

/usr/local/psa/var/log/maillog

config files:

/etc/courier-imap/imapd

/etc/courier-imap/imapd-ssl

/etc/courier-imap/pop3d

/etc/courier-imap/pop3d-ssl

SMTP server (QMail)

Access and Error log:

/usr/local/psa/var/log/maillog

config files:

/etc/xinetd.d/smtp_psa

/etc/xinetd.d/smtps_psa

/etc/xinetd.d/submission_psa

/etc/inetd.conf (Debians)

/var/qmail/control/

Named (BIND, DNS)

Access and Error log:

/var/log/messages

config files:

/etc/named.conf

Tomcat

Access and Error logs:

/var/log/tomcat5/

config files:

/usr/share/tomcat5/conf/

MySQL

config files:

/etc/my.cnf

Plesk SpamAssassin

Access and Error log:

/usr/local/psa/var/log/maillog

config files:

/etc/mail/spamassassin/

/etc/mail/spamassassin/local.cf

/var/qmail/mailnames/%d/%l/.spamassassin

Drweb antivirus

Access and Error log:

/usr/local/psa/var/log/maillog

config files:

/etc/drweb/

FTP(proftpd)

Access and Error log:

/usr/local/psa/var/log/xferlog

config files:

/etc/xinetd.d/ftp_psa

/etc/proftpd.conf

/etc/proftpd.include