Where can I see account access logs?

[cascer1]

Hey there,

When I was a reseller from another host, I would be able to ask them for a log for a certain account. This log would then show me which IP address accessed which cPanel resource (for example to find out who created a sub-domain) and at what time. However, the only thing I can find is /usr/local/cpanel/logs/access_log, which is not quite what I'm looking for.

Where can I find these logs? Or should I install something extra to keep these logs?

Thanks!

 

[JaredR.]

/usr/local/cpanel/logs/access_log is where all access to cPanel, the WebHost Manager, and Webmail is logged. It is an Apache-style log, so the IP address, timestamp, browser, and exact link requested are logged. However, interpreting it requires correlating the links called with specific features in the control panel, and that is not always easy.

What are you looking for, that is not in that log? I may be able to point you in a better direction if I know that.

 

[cascer1]

Hey there,

What I'm looking for is in those logs, but it has entries for all accounts, what I'm looking for is a per-account log that I can easily access and send to customers.

 

[JaredR.]

Access to Web sites is broken down per domain in /usr/loc/apalache/domlogs, with one log file per domain or subdomain, but access to the cPanel/WHM/Webmail interfaces is not broken down in a similar fashion. All you can do is use grep to search the cPanel access_log for a username or IP address, and pipe the results to a file.

/var/cpanel/accounting.log logs some additional information about creation and termination of (and other modifications to) accounts, but it also is a single file, not broken down on a per-domain basis.