Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

email accounts creation/deletion logging?

Discussion in 'E-mail Discussion' started by Remitur, Jul 2, 2018.

  1. Remitur

    Remitur Member

    Joined:
    Jan 17, 2018
    Messages:
    15
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Ljubljana
    cPanel Access Level:
    Root Administrator
    Hello.

    Is anywhere logged the activity of the user who creates or deletes email accounts in cPanel?
    And, if yes, where?

    (The issue: a user wrongly deleted an account, and now he's crying "Where are my emails?!?! I did not deleted anything!!!!! It's your fault!!!!" and so on... :D )
     
  2. Shood

    Shood Well-Known Member

    Joined:
    Aug 12, 2015
    Messages:
    49
    Likes Received:
    8
    Trophy Points:
    83
    Location:
    Middle East
    cPanel Access Level:
    Root Administrator
    Try this
    grep "delete_pop" /usr/local/cpanel/logs/access_log
    Will returns all deleted email accounts with user name and IP
     
    Remitur and cPanelLauren like this.
  3. cPanelLauren

    cPanelLauren Forums Analyst
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    2,721
    Likes Received:
    186
    Trophy Points:
    143
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hello @Remitur

    @Shood is correct the full POST request is something like:

    Code:
    "POST /cpsess0000000000/execute/Email/delete_pop HTTP/1.1"
    though the cpsess number will differ for each user session. a grep for delete_pop would be more than sufficient.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    Remitur and Shood like this.
  4. shanjie

    shanjie Member

    Joined:
    Apr 23, 2015
    Messages:
    6
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Malaysia
    cPanel Access Level:
    Root Administrator
    Hi, it only return with the IP and the cPanel user name. It wont show the exact full email address been deleted.
     
  5. Shood

    Shood Well-Known Member

    Joined:
    Aug 12, 2015
    Messages:
    49
    Likes Received:
    8
    Trophy Points:
    83
    Location:
    Middle East
    cPanel Access Level:
    Root Administrator
    Hi @shanjie
    Exactly it doesn't show deleted email address.
    For me I don't know if there's a command show that, it's good if it's already exists.
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice