SOLVED accounting.log structure

[omgitsira]

Good day, cPanel experts!

Haven't found anything in cPanel documentation, but I am very curious about a piece of accounting log:

Mon Jul 26 05:27:12 2021:REMOVE:reseller:root:domain.com:username

"Mon Jul 26 05:27:12 2021" here is the date, "REMOVE" - action, "reseller" - who performed the action, "domain.com" and "username" are the primary domain and cPanel username the action was performed on.
But, what does "root" stand for?

 

[cPRex]

Hey there! I did some testing with this and found that the second "user" portion will always be "root" for account creation and removal since that is the user that code runs under, so what you're seeing is normal.

 

[omgitsira]

That makes sense. Thanks a lot for testing this!

 

[cPRex]

Sure thing!