Need to find out when an account was deleted and by whom

[FS_Greg]

I had a account on one of my servers deleted yesterday, and need to find out who was logged in when this happened, and approximately what time they did this.

Does cpanel keep record of this? I checked out /usr/local/cpanel/logs, but did not find anything.

 

[chirpy]

If there's nothing in /usr/local/cpanel/logs/access_log you're SOL. You might be able to get stunnel connection information from /var/log/messages but it's not going to be a great deal of help except to list IP addresses.

 

[FS_Greg]

Thanks chirpy,

I was actually able to track down this issue in access_logs. I was not searching the logs for the username (like i should have) but instead searching by domain name.