email accounts creation/deletion logging?

[Remitur]

Hello.

Is anywhere logged the activity of the user who creates or deletes email accounts in cPanel?
And, if yes, where?

(The issue: a user wrongly deleted an account, and now he's crying "Where are my emails?!?! I did not deleted anything!!!!! It's your fault!!!!" and so on... :D )

 

[Shood]

Try this
grep "delete_pop" /usr/local/cpanel/logs/access_log
Will returns all deleted email accounts with user name and IP

 

[cPanelLauren]

Hello @Remitur

@Shood is correct the full POST request is something like:

"POST /cpsess0000000000/execute/Email/delete_pop HTTP/1.1"

though the cpsess number will differ for each user session. a grep for delete_pop would be more than sufficient.

Thanks!

 

[shanjie]

Try this
grep "delete_pop" /usr/local/cpanel/logs/access_log
Will returns all deleted email accounts with user name and IP

Hi, it only return with the IP and the cPanel user name. It wont show the exact full email address been deleted.

 

[Shood]

Hi @shanjie
Exactly it doesn't show deleted email address.
For me I don't know if there's a command show that, it's good if it's already exists.