The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cpanel logins log file

Discussion in 'General Discussion' started by MaRiOsGR66, Oct 27, 2014.

  1. MaRiOsGR66

    MaRiOsGR66 Well-Known Member

    Joined:
    Feb 18, 2011
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Hello,

    I have a customer claiming that some one logged in in his cpanel account and deleted all the email accounts.
    Is there some kind of log file for all succesfull logins for his username to cpanel ?
     
  2. postcd

    postcd Well-Known Member

    Joined:
    Oct 22, 2010
    Messages:
    619
    Likes Received:
    6
    Trophy Points:
    18
    on server are two related files:
    cat /usr/local/cpanel/logs/login_log
    cat /usr/local/cpanel/logs/access_log

    i think login_log is better for this:

    last 100 entries:
    cat /usr/local/cpanel/logs/login_log | grep hisusername | tail -n100

    add all user entries to a file
    cat /usr/local/cpanel/logs/login_log | grep hisusername > user_loginlog
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Yes, the cPanel access log and login log are likely the best log files to check in order to verify if this happened:

    /usr/local/cpanel/logs/access_log
    /usr/local/cpanel/logs/login_log

    Thank you.
     
  4. MaRiOsGR66

    MaRiOsGR66 Well-Known Member

    Joined:
    Feb 18, 2011
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Thank you both for the replies!!!

    Is there any kind of log or function inside cpanel to show what actions were done by the client?
    for example on date
    -30/10/2014 username example created an email
    -29/10/2014 username example deleted a mysql database
    etc etc, is there something like that ?
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    648
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    There are no such features within cPanel or WHM. You would have to review the log files through the command line. You are welcome to submit a feature request for that type of functionality:

    Submit A Feature Request

    Thank you.
     
Loading...

Share This Page