{"id":18376,"date":"2026-09-29T21:16:37","date_gmt":"2026-09-29T18:16:37","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/cpanel-log-file-locations\/"},"modified":"2026-09-29T21:16:37","modified_gmt":"2026-09-29T18:16:37","password":"","slug":"cpanel-log-file-locations","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/cpanel-log-file-locations\/","title":{"rendered":"Where to Find Log Files on a cPanel Server"},"content":{"rendered":"<div class=\"hy-tldr\" style=\"background:#f6f7fb;border-left:4px solid #d83954;border-radius:10px;padding:14px 18px;margin:0 0 20px;line-height:1.8\"><strong>In short:<\/strong> Key log files on a cPanel server: Apache errors in \/usr\/local\/apache\/logs\/error_log (or \/etc\/apache2\/logs on newer versions), per-site traffic in the domlogs folder, email in \/var\/log\/exim_mainlog, cPanel and WHM in \/usr\/local\/cpanel\/logs, SSH in \/var\/log\/secure and FTP in \/var\/log\/messages.<\/div>\n<p><img decoding=\"async\" src=\"https:\/\/www.hyyat.com\/zasogooh\/2019\/05\/cpanel-server-logs_nuhdge.png\" alt=\"cPanel server log files\" \/><\/p>\n<p>cPanel keeps its main files in the same place across versions, so you always know where to look for each service&#8217;s logs. On newer cPanel versions with EasyApache 4, the Apache paths under \/usr\/local\/apache are links to \/etc\/apache2.<\/p>\n<h2>Apache<\/h2>\n<p>Apache is the web server cPanel normally uses.<\/p>\n<ul>\n<li><strong>\/usr\/local\/apache\/logs\/access_log<\/strong>: requests to the server hostname or IP, or to sites that point to the server but are no longer hosted on it.<\/li>\n<li><strong>\/usr\/local\/apache\/logs\/error_log<\/strong>: all Apache errors, for every site.<\/li>\n<li><strong>\/usr\/local\/apache\/domlogs\/<\/strong>: one log per website (named after the domain), with all HTTP traffic to that site.<\/li>\n<\/ul>\n<h2>Exim (email)<\/h2>\n<p>Exim is the mail transfer agent cPanel uses.<\/p>\n<ul>\n<li><strong>\/var\/log\/exim_mainlog<\/strong>: all incoming and outgoing mail transactions.<\/li>\n<li><strong>\/var\/log\/exim_rejectlog<\/strong>: rejected connection attempts (also logged in exim_mainlog).<\/li>\n<\/ul>\n<h2>cPanel and WHM<\/h2>\n<p>All cPanel logs are in <strong>\/usr\/local\/cpanel\/logs<\/strong>.<\/p>\n<ul>\n<li><strong>access_log<\/strong>: all access to WHM, cPanel and Webmail.<\/li>\n<li><strong>error_log<\/strong>: errors that happen when using cPanel services.<\/li>\n<\/ul>\n<h2>FTP<\/h2>\n<p>cPanel logs FTP connections, uploads and downloads to the system log <strong>\/var\/log\/messages<\/strong>, mixed with other system messages.<\/p>\n<h2>SSH<\/h2>\n<p>SSH logins and authentication are logged in <strong>\/var\/log\/secure<\/strong> and <strong>\/var\/log\/messages<\/strong>. See <a href=\"https:\/\/www.hyyat.com\/en\/knowledgebase\/how-to-connect-to-a-server-via-ssh\/\">how to connect to a server via SSH<\/a>.<\/p>\n<p class=\"hy-svc-link\" style=\"background:#fff5f7;border-left:4px solid #d83954;border-radius:10px;padding:14px 18px;margin:20px 0;line-height:1.8\"><strong>Related service:<\/strong> <a href=\"https:\/\/www.hyyat.com\/en\/server-management\/\">Hyyat Host server management<\/a> monitors your server logs and fixes problems for you, with 24\/7 support.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In short: Key log files on a cPanel server: Apache errors in \/usr\/local\/apache\/logs\/error_log (or \/etc\/apache2\/logs on newer versions), per-site traffic in the domlogs folder, email in \/var\/log\/exim_mainlog, cPanel and WHM in \/usr\/local\/cpanel\/logs, SSH in \/var\/log\/secure and FTP in \/var\/log\/messages. cPanel keeps its main files in the same place across versions, so you always know where [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"doc_category":[2237],"doc_tag":[],"class_list":["post-18376","docs","type-docs","status-publish","hentry","doc_category---whm-cpanel"],"year_month":"2026-10","word_count":283,"total_views":0,"reactions":{"happy":0,"normal":0,"sad":0},"author_info":{"name":"ahmed fathy","author_nicename":"ahmed-fathy","author_url":"https:\/\/www.hyyat.com\/en\/author\/ahmed-fathy\/"},"doc_category_info":[{"term_name":"\u0644\u0648\u062d\u0627\u062a \u062a\u062d\u0643\u0645 whm\/cpanel","term_url":"https:\/\/www.hyyat.com\/kb\/%d9%84%d9%88%d8%ad%d8%a7%d8%aa-%d8%aa%d8%ad%d9%83%d9%85-whm-cpanel\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=18376"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18376\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=18376"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=18376"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=18376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}