Where can I find the log file when a user delete mailbox account

[Itman255]

Hello,
Where to find the activity of the user who creates or deletes email accounts in cPanel?

 

[VVU]

Hi, you can try to grep in the cPanel access_log, something like this:
grep "delete_pop" /usr/local/cpanel/logs/access_log
grep "create" /usr/local/cpanel/logs/access_log

 

[cPanelLauren]

As suggested by @VVU all of these changes are present in the cPanel access logs and the commands provided should get you information on the removal. Please let us know if you have any questions.

 

[Itman255]

Hi, you can try to grep in the cPanel access_log, something like this:
grep "delete_pop" /usr/local/cpanel/logs/access_log
grep "create" /usr/local/cpanel/logs/access_log

Thank you. When user delete one mail account, "delete_pop" appears, but when user check two or more accounts then shows "
execute/Batch/strict HTTP" same as click "manage".

 

[cPanelLauren]

Ahh, I see, in that case, there wouldn't be any place it is logged otherwise.