Log Locations

Common Log Locations:

Apache

EA3

Apache Access Logs:
  /usr/local/apache/logs/access_log

Domain access logs:
  /usr/local/apache/domlogs/<DOMAIN>

Site and service error logs:
  /usr/local/apache/logs/error_log

SuExec audit log:
  /usr/local/apache/logs/suexec_log

SuPHP audit log:
  /usr/local/apache/logs/suphp_log

EA4

Domlogs:
/var/log/apache2/domlogs/

Error log:
/var/log/apache2/error_log

suPHP Error log:
/etc/apache2/logs/suphp_log

cPanel

Service status:
  /var/log/chkservd.log

Access and user actions:
  /usr/local/cpanel/logs/access_log

Cpanel Error Logs:
  /usr/local/cpanel/logs/error_log

CSF and LFG Logs

LFD logs:
  /var/log/lfd.log

Database Logs

MySQL database logs:
/var/log/mysqld.log
/var/lib/mysql/$(HOSTNAME).err

PostgreSQL database logs:
  /var/log/pgsql

Exim

(see exim )

Fatal errors:
  /var/log/exim_paniclog

Incoming mail queue:
  /var/spool/exim/input

Exim Messages rejected based on ACLs or other policies:
  /var/log/exim_rejectlog

Exim Delivery and receipt:
  /var/log/exim_mainlog

IMAP, POP login attempts, transactions, fatal errors and spam scoring:
  /var/log/maillog
  /var/log/messages

Mailman Logs:
  /usr/local/cpanel/3rdparty/mailmain/logs

Plesk

Apache

Global Access and Error logs:
/var/log/httpd/

Domain logs:
/var/www/vhosts/<domain>/logs

nginx

Error log:
/var/log/nginx/error.log

Access log:
/var/log/nginx/access.log

Domain logs:
/var/www/vhosts/<domain>/logs/proxy_access*_log

Mail

Mail log:
/usr/local/psa/var/log/maillog

Plesk

Error log:
/var/log/sw-cp-server/error_log
and
/var/log/sw-cp-server/sw-engine.log

Access log:
/usr/local/psa/admin/logs/httpsd_access_log

Panel log:
/usr/local/psa/admin/logs/panel.log

PHP-FPM

/opt/cpanel/ea-php$VERSION/root/usr/var/log/php-fpm/error.log - Logs for the Master Process/daemon

/home/$cpuser/logs/domain_tld.php.error.log - Logs for the pool/php code. What logs here? Errors specifically related to the PHP code, so PHP fatal errors, notices, deprecation warnings are all logged here, but it is reliant on PHP's error_reporting configuration, which is E_ALL & ~E_NOTICE by default.

System

Cron:
  /var/log/cron

Ftp Logs:
  /var/log/messages
  /var/log/xferlog (symlinked to /usr/local/apache/domlogs/ftpxferlog)

Most other logs:
  /var/log/messages

MySQL:
/var/lib/mysql/<hostname>.err
/var/log/mysqld.log

SSH Logs:
  /var/log/secure

Additional cPanel Logs

Log file location          Description
Cpanel installation logs     /var/log/cpanel-install.log
Cpanel License Logs          /usr/local/cpanel/logs/license_log
Cpanel Login Logs            /usr/local/cpanel/logs/login_log
cPHulk Brute Force Logs      /usr/local/cpanel/logs/cphulkd.log
Cpanel/WHM Accounting (account creations, deletions, etc) Logs     /var/cpanel/accounting.log
Cpanel Bandwidth Logs        /var/cpanel/bandwidth/(account user name)
Cpanel/WHM Service monitor Logs     /var/log/chkservd.log
Cpanel Stats Daemon Logs     /usr/local/cpanel/logs/stats_log
Cpanel backup Logs     /usr/local/cpanel/logs/cpbackup
Update (UPCP) Log     /var/cpanel/updatelogs/update-(TIMESTAMP).log
cPanel/WHM webalizer/awstats logs     /usr/local/cpanel/logs/stats_log
cPanel/WHM version checking     /usr/local/cpanel/version

SquirrelMail     /var/cpanel/squirrelmail
RoundCube        /var/cpanel/roundcube/log
Horde            /var/cpanel/horde/log

tailwatchd log     /usr/local/cpanel/logs/tailwatch_log
EasyApache Build Logs     /usr/local/cpanel/logs/easy/apache/

Tomcat Logs         /usr/local/jakarta/tomcat/logs/catalina.err /usr/local/jakarta/tomcat/logs/catalina.out

ModSecurity Logs    /usr/local/apache/logs/modsec_audit.log /usr/local/apache/logs/modsec_debug_log

Named/Bind (DNS) logs     /var/log/messages

References

cPanel Log Locations Poster:

cPanel Log Locations Poster