jmginer

Well-Known Member
Jul 26, 2006
151
4
168
Alicante
cPanel Access Level
Root Administrator
Hello, a client informs us that a dns zone has disappeared. We have created it again, but what log file do we have to investigate to find out what happened?

Thanks!
 

SS-Maddy

Well-Known Member
Mar 28, 2009
130
18
68
cPanel Access Level
Root Administrator
Hello,

You may check the DNS related log files,

/usr/local/cpanel/logs/dnsadmin.log
/var/log/messages

but I believe in this case, more helpful ones would be,

/usr/local/cpanel/logs/access_log (What did the user do after logging to the server, may be you should grep for the domain name and/or the user in this log for more details.)
/usr/local/cpanel/logs/error_log (Unlikely)
/usr/local/cpanel/logs/session_log (If the user deleted the DNS)

My 2c. It will be difficult if someone deleted the zone file from the shell.