The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

how to find who deleted database from cpanel

Discussion in 'General Discussion' started by ankush k, Jul 26, 2011.

  1. ankush k

    ankush k Registered

    Joined:
    Jul 26, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    Is it possible to find out who deleted (client or me) database from the cpanel ?

    Thanks
     
  2. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    165
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    Take a look at /usr/local/cpanel/logs/access_log.
     
  3. ankush k

    ankush k Registered

    Joined:
    Jul 26, 2011
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Hi,

    Thanks for updating us but when i go through as per your command it's coming all information.

    I want to find out particular domain database then how to find out ?

    Please guide us.

    Thanks
     
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    If you are using session cookies for cPanel logins, then deletions probably won't show up in the access_log file for cPanel. You can see people visiting MySQL databases area itself in the log, but not when they remove something there typically due to the cpsess entries obfuscating the action taken.
     
  5. astopy

    astopy Well-Known Member

    Joined:
    Apr 3, 2003
    Messages:
    165
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    Try "grep cpuser /usr/local/cpanel/logs/access_log" where cpuser is the username of the relevant cPanel account. As Tristan said, you might not necessarily be able to see the actual delete command but it should give you an idea of who was looking at the databases page at the time.
     
Loading...

Share This Page