The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Where can I see account access logs?

Discussion in 'Security' started by cascer1, Mar 26, 2014.

  1. cascer1

    cascer1 Registered

    Joined:
    Mar 26, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hey there,

    When I was a reseller from another host, I would be able to ask them for a log for a certain account. This log would then show me which IP address accessed which cPanel resource (for example to find out who created a sub-domain) and at what time. However, the only thing I can find is /usr/local/cpanel/logs/access_log, which is not quite what I'm looking for.

    Where can I find these logs? Or should I install something extra to keep these logs?

    Thanks!
     
  2. cPanelJared

    cPanelJared Technical Analyst
    Staff Member

    Joined:
    Feb 25, 2010
    Messages:
    1,842
    Likes Received:
    18
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    /usr/local/cpanel/logs/access_log is where all access to cPanel, the WebHost Manager, and Webmail is logged. It is an Apache-style log, so the IP address, timestamp, browser, and exact link requested are logged. However, interpreting it requires correlating the links called with specific features in the control panel, and that is not always easy.

    What are you looking for, that is not in that log? I may be able to point you in a better direction if I know that.
     
  3. cascer1

    cascer1 Registered

    Joined:
    Mar 26, 2014
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hey there,

    What I'm looking for is in those logs, but it has entries for all accounts, what I'm looking for is a per-account log that I can easily access and send to customers.
     
  4. cPanelJared

    cPanelJared Technical Analyst
    Staff Member

    Joined:
    Feb 25, 2010
    Messages:
    1,842
    Likes Received:
    18
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Access to Web sites is broken down per domain in /usr/loc/apalache/domlogs, with one log file per domain or subdomain, but access to the cPanel/WHM/Webmail interfaces is not broken down in a similar fashion. All you can do is use grep to search the cPanel access_log for a username or IP address, and pipe the results to a file.

    /var/cpanel/accounting.log logs some additional information about creation and termination of (and other modifications to) accounts, but it also is a single file, not broken down on a per-domain basis.
     
Loading...

Share This Page