End of script output before headers - how to find the account that generate these errors ?

[ntk]

Hello
On one of my servers I run Apache/2.4.6 + php 5.4.19 and host about 200 accounts.
In the /usr/local/apache/logs/error_log I see entries like these :
--------
[Fri Aug 30 20:43:00.749816 2013] [core:error] [pid 19968] [client xxx.xxx.xxx.xxx:52509] End of script output before headers: browse
[Fri Aug 30 20:43:25.932615 2013] [core:error] [pid 19984] [client yyy.yyy.yyy.yyy:33207] End of script output before headers: index.php
--------
What is the easiest way to find the account/site and the file that caused this type of error ?

Regards
ntk

 

[simonas]

Easiest way to check access_log(s) same time records.

 

[cPanelMichael]

Hello

You could try searching the domain access logs in /usr/local/apache/domlogs for the same IP address.

Thank you.

 

[ntk]

I have already done that - but part of these IP addresses are from google bots that have also accessed half of my sites.
The server has 5 IP addressed and sites are separated to these IP addresses, so I have tried to use netstat to catch the TCP session information and to find the IP to which these external clients are connected but this did not give me a luck. I have done this netstat check few seconds after new log entry - it seems that other side closes connection immediately after my server returns the error.
Is there away to add something in httpd.conf in order to log for me the account in the error log file of the apache ?