The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Investigate about delete file

Discussion in 'General Discussion' started by webstyler, Feb 24, 2009.

  1. webstyler

    webstyler Well-Known Member

    Joined:
    Nov 20, 2003
    Messages:
    432
    Likes Received:
    0
    Trophy Points:
    16
    Hi

    What's the best way to investigate about "delete" of file..

    How to check what user have deleted and how (cpanel/ftp/..) ?

    Thanks
     
  2. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Log files are a good place to start.

    For FTP: /var/log/xferlog and /var/log/messages

    For cPanel: /usr/local/cpanel/logs/access_log (see what pages they viewed such as File Manager) and /usr/local/cpanel/logs/login_log (see if they logged into cPanel)
     
  3. webstyler

    webstyler Well-Known Member

    Joined:
    Nov 20, 2003
    Messages:
    432
    Likes Received:
    0
    Trophy Points:
    16
    /var/log/xferlog is empty
    /var/log/messages start from 22 feb. ..

    /usr/local/cpanel/logs/login_log is empty

    :/

    tx
     
Loading...

Share This Page