{"id":322,"date":"2021-07-23T12:27:47","date_gmt":"2021-07-23T12:27:47","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/the-cpanel-whm-log-files\/"},"modified":"2021-07-23T12:27:47","modified_gmt":"2021-07-23T12:27:47","slug":"the-cpanel-whm-log-files","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/the-cpanel-whm-log-files\/","title":{"rendered":"The cPanel & WHM Log Files"},"content":{"rendered":"<\/p>\n
\n
<\/div>\n
\n

Overview<\/h2>\n

This document describes the location of all of the log files in cPanel & WHM, Webmail, and MySQL\u00ae. This document also provides examples of each log file.<\/p>\n

\n
Note:<\/div>\n
\n
    \n
  • The directories and files in this document reflect unaltered configurations on CentOS, CloudLinux\u2122, AlmaLinux, RedHat Enterprise Linux (RHEL), and Amazon Linux.<\/li>\n
  • You can alter a log file\u2019s location with a configuration file.<\/li>\n<\/ul><\/div>\n<\/div>\n

    General<\/h2>\n

    \/var\/log\/messages<\/code><\/h4>\n

    This file contains the login attempts and general error messages for the following services:<\/p>\n

      \n
    • \n

      FTP<\/p>\n<\/li>\n

    • \n

      The nameserver daemons:<\/p>\n

        \n
      • named<\/code> or bind<\/code><\/li>\n
      • MyDNS\n
        \n
        Warning:<\/div>\n
        \n We deprecated the MyDNS and NSD nameservers in cPanel & WHM version 78 and plan to remove them a future release. We strongly recommend that you migrate to PowerDNS. For more information, read our cPanel Deprecation Plan documentation.\n <\/div>\n<\/div>\n<\/li>\n
      • PowerDNS<\/li>\n
      • NSD<\/li>\n<\/ul>\n<\/li>\n
      • \n

        The SSH daemon (sshd<\/code>).<\/p>\n<\/li>\n

      • \n

        The Courier mail server.<\/p>\n

        \n
        Warning:<\/div>\n
        \n We removed the Courier mail server in cPanel & WHM version 54. The Courier mail server only<\/strong> exists for cPanel & WHM version 11.52 and earlier.\n <\/div>\n<\/div>\n<\/li>\n
      • \n

        The Dovecot mail server.<\/p>\n<\/li>\n<\/ul>\n

        \n
        \n\n\n
        \n
        1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
            Nov  3<\/span> 08<\/span>:41:10 vm5 proftpd[<\/span>684684<\/span>]<\/span>: 10<\/span>.1.100.35 (<\/span>127<\/span>.0.0.1[<\/span>127<\/span>.0.0.1])<\/span> - FTP session opened.\n    Nov  3<\/span> 08<\/span>:41:10 vm5 proftpd[<\/span>684684<\/span>]<\/span>: 10<\/span>.1.100.35 (<\/span>127<\/span>.0.0.1[<\/span>127<\/span>.0.0.1])<\/span> - FTP session closed.\n    Nov  3<\/span> 08<\/span>:46:12 vm5 proftpd[<\/span>684753<\/span>]<\/span>: 10<\/span>.1.100.35 (<\/span>127<\/span>.0.0.1[<\/span>127<\/span>.0.0.1])<\/span> - FTP session opened.\n    Nov  3<\/span> 08<\/span>:46:12 vm5 proftpd[<\/span>684753<\/span>]<\/span>: 10<\/span>.1.100.35 (<\/span>127<\/span>.0.0.1[<\/span>127<\/span>.0.0.1])<\/span> - FTP session closed.<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
        \/var\/log\/secure<\/code><\/h4>\n
        This file contains the login attempts for the SSH daemon (sshd<\/code>).<\/p>\n
        \n
        \n\n\n
        \n
        1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
            Jul  5<\/span> 08<\/span>:50:04 colin sshd[<\/span>29856<\/span>]<\/span>: Accepted password for<\/span> root from 10<\/span>.7.6.162 port 57893<\/span> ssh2\n    Jul  5<\/span> 08<\/span>:50:05 colin sshd[<\/span>29856<\/span>]<\/span>: pam_unix(<\/span>sshd:session)<\/span>: session opened for<\/span> user root by (<\/span>uid=<\/span>0<\/span>)<\/span>\n    Jul  5<\/span> 15<\/span>:00:17 colin sshd[<\/span>29856<\/span>]<\/span>: Received disconnect from 10<\/span>.7.6.162: 11<\/span>: disconnected by user\n    Jul  5<\/span> 15<\/span>:00:17 colin sshd[<\/span>29856<\/span>]<\/span>: pam_unix(<\/span>sshd:session)<\/span>: session closed for<\/span> user root\n    Jul  6<\/span> 07<\/span>:57:10 colin sshd[<\/span>24129<\/span>]<\/span>: Accepted password for<\/span> root from 10<\/span>.7.6.162 port 55983<\/span> ssh2\n    Jul  6<\/span> 07<\/span>:57:10 colin sshd[<\/span>24129<\/span>]<\/span>: pam_unix(<\/span>sshd:session)<\/span>: session opened for<\/span> user root by (<\/span>uid=<\/span>0<\/span>)<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
        cPanel & WHM services<\/h2>\n
        cPanel & WHM services Files<\/h3>\n
        \/home\/username\/.cpanel\/logs<\/code><\/h4>\n
        This directory contains records of errors within a user\u2019s task queue.<\/p>\n
        \n
        \n\n\n
        \n
        1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
        		\n
            Processing \/home\/username\/example...\n    Already had it.<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
        \/usr\/local\/cpanel\/logs\/access_log<\/code><\/h4>\n
        This file contains records of when a cPanel & WHM user accesses their account.<\/p>\n
        The system displays these records in a standardized text format, called the Common Log Format. Each line displays log information in the following syntax:<\/p>\n
        \n
                Click to view…<\/p>\n
        \n
        \n
          \n
        • \n
          IP Address \u2014 The client\u2019s IP address (for example, 192.168.0.20<\/code>).<\/p>\n<\/li>\n
        • \n
          User-identified \u2014 An unused user identification protocol field. cPanel & WHM log files always<\/strong> display one of the following values in this field:<\/p>\n
            \n
          • \n
            proxy<\/code> for a service subdomain\u2019s log files.<\/p>\n<\/li>\n
          • \n
            A dash (-<\/code>) for all other domain types.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n
          • \n
            User \u2014 A valid cPanel & WHM account name or an email address (for example, skipperdan<\/code>).<\/p>\n<\/li>\n
          • \n
            Time \u2014 The date and time when the visitor accessed your website, in MM\/DD\/YYYY:HH:MM:SS -ZZZZ<\/code> format, where:<\/p>\n
              \n
            • MM<\/code> represents the month.<\/li>\n
            • DD<\/code> represents the date.<\/li>\n
            • YYYY<\/code> represents the year.<\/li>\n
            • HH<\/code> represents the hour.<\/li>\n
            • mm<\/code> represents the minute.<\/li>\n
            • SS<\/code> represents the second.<\/li>\n
            • -zzzz<\/code> represents the timezone, in UTC format.
              \nFor example: 10\/21\/1985:16:42:23 -0000<\/code><\/li>\n<\/ul>\n<\/li>\n
            • \n
              Client request \u2014 The web request that the client issued to the server (for example, GET \/.__cpanel__service__check__.\/serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP\/1.0<\/code>).<\/p>\n<\/li>\n
            • \n
              HTTP Status \u2014 The result of the HTTP request (for example, 200<\/code>). For more information, read Wikipedia\u2019s List of HTTP status codes documentation.<\/p>\n<\/li>\n
            • \n
              Response Size \u2014 The size of the object returned to the client, in bytes (for example, 1500<\/code>).<\/p>\n<\/li>\n
            • \n
              Referrer \u2014 The web address from which the visitor navigated to the resource (for example, ftp:\/\/cpanel.com<\/code>).<\/p>\n<\/li>\n
            • \n
              User Agent \u2014 The browser that the visitor used to access cPanel & WHM (for example, Safari<\/code>).<\/p>\n<\/li>\n
            • \n
              Authentication method \u2014 The method that authenticated the request, where:<\/p>\n
                \n
              • a<\/code> represents Access Key\/Hash.<\/li>\n
              • b<\/code> represents HTTP Basic Authentication.<\/li>\n
              • s<\/code> represents Session cookie.<\/li>\n
              • o<\/code> represents OpenID Connect.
                \nFor example: s<\/code><\/li>\n<\/ul>\n<\/li>\n
              • \n
                The X-Forwarded-For<\/code> header \u2014 The IP address of the client when the user makes a connection request via service subdomains (proxy domains) (for example, X-Forwarded: for:192.0.2.60<\/code>).<\/p>\n<\/li>\n
              • \n
                Service port \u2014 The server port number that the client accessed in the request (for example, 2083<\/code>).<\/p>\n<\/li>\n<\/ul><\/div>\n<\/p><\/div>\n<\/div>\n
                \n
                192<\/span>.168.0.20 - example [<\/span>10<\/span>\/08\/2016:13:37:32 -0000]<\/span> \"GET \/cpsess1234567890\/frontend\/paper_lantern\/index.html HTTP\/1.1\"<\/span> 200<\/span> 0<\/span> \"\"<\/span> \"Mozilla\/5.0 (Windows NT 10.0; WOW64; rv:49.0) Gecko\/20100101 Firefox\/49.0\"<\/span> \"s\"<\/span> \"-\"<\/span> 2083<\/span><\/code><\/pre>\n<\/div>\n
                \/usr\/local\/cpanel\/build\/locale_database_log<\/code><\/h4>\n
                This file contains information about when a user edits a locale.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2014<\/span>-09-28 02<\/span>:55:26 -0500]<\/span> info [<\/span>build_locale_databases]<\/span> Finished updating and modifying locales databases\n    [<\/span>2014<\/span>-09-29 02<\/span>:54:16 -0500]<\/span> info [<\/span>build_locale_databases]<\/span> Begin update of locale databases<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/api_tokens_log<\/code><\/h4>\n
                This file contains WHM\u2019s API tokens logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2017<\/span>-02-07 19<\/span>:07:13 -0600]<\/span> info [<\/span>whostmgrd]<\/span> HTTP Status: [<\/span>'200'<\/span>]<\/span>, User: [<\/span>'kingrichard'<\/span>]<\/span>, Token Name: [<\/span>'robin_of_loxley'<\/span>]<\/span>, Request: [<\/span>'GET \/scripts2\/reloadbind_local?dnsuniqid=baa HTTP\/1.0'<\/span>]<\/span>\n    [<\/span>2017<\/span>-02-07 19<\/span>:07:13 -0600]<\/span> info [<\/span>whostmgrd]<\/span> HTTP Status: [<\/span>'200'<\/span>]<\/span>, User: [<\/span>'princejohn'<\/span>]<\/span>, Token Name: [<\/span>'sherrif_of_rottingham'<\/span>]<\/span>, Request: [<\/span>'GET \/scripts2\/reloadbind_local?dnsuniqid=baa HTTP\/1.0'<\/span>]<\/span>\n    [<\/span>2017<\/span>-02-07 19<\/span>:07:13 -0600]<\/span> info [<\/span>whostmgrd]<\/span> HTTP Status: [<\/span>'200'<\/span>]<\/span>, User: [<\/span>'ahsneeze'<\/span>]<\/span>, Token Name: [<\/span>'ahchoo'<\/span>]<\/span>, Request: [<\/span>'GET \/scripts2\/reloadbind_local?dnsuniqid=baa HTTP\/1.0'<\/span>]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cpdavd_error_log<\/code><\/h4>\n
                This file contains the Web Disk feature\u2019s error logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    Starting PID 11197<\/span>: cpdavd - accepting connections on 2077<\/span> and 2078<\/span>\n    Starting PID 11080<\/span>: cpdavd - accepting connections on 2077<\/span> and 2078<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cpdavd_session_log<\/code><\/h4>\n
                This file contains the Web Disk feature\u2019s activity logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-11-18 14<\/span>:38:51 -0600]<\/span> info [<\/span>cpdavd]<\/span> 162<\/span>.158.64.218 NEW _dav_:mUG2YFqewzo7GzVm app=<\/span>cpdavd - accepting connections on 2077<\/span> 2078<\/span> 2079<\/span> and 2080<\/span>,method=<\/span>\/usr\/local\/cpanel\/libexec\/cpdavd:main         \n    [<\/span>2015<\/span>-11-18 14<\/span>:38:51 -0600]<\/span> info [<\/span>cpdavd]<\/span> 162<\/span>.158.64.216 NEW _dav_:m9MlWdxVqpyemmP6 app=<\/span>cpdavd - accepting connections on 2077<\/span> 2078<\/span> 2079<\/span> and 2080<\/span>,method=<\/span>\/usr\/local\/cpanel\/libexec\/cpdavd:main\n    [<\/span>2015<\/span>-11-18 14<\/span>:38:51 -0600]<\/span> info [<\/span>cpdavd]<\/span> 162<\/span>.158.64.218 NEW _dav_:YZEJy7lEsXSxyz3Y app=<\/span>cpdavd - accepting connections on 2077<\/span> 2078<\/span> 2079<\/span> and 2080<\/span>,method=<\/span>\/usr\/local\/cpanel\/libexec\/cpdavd:main<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cpgreylistd.log<\/code><\/h4>\n
                This file contains the Greylisting daemon\u2019s (cpgreylistd<\/code>) activity logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-30 11<\/span>:05:39 -0500]<\/span> info [<\/span>cpgreylistd]<\/span> Purged old records from DB. Record(<\/span>s)<\/span> removed: 0<\/span>\n    [<\/span>2015<\/span>-10-30 12<\/span>:05:39 -0500]<\/span> info [<\/span>cpgreylistd]<\/span> Purged old records from DB. Record(<\/span>s)<\/span> removed: 0<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cphulkd_errors.log<\/code><\/h4>\n
                This file contains the Brute Force Protection daemon\u2019s (cphulkd<\/code>) error logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-08-26 12<\/span>:14:29 -0500]<\/span> info [<\/span>cphulkd]<\/span> 221257<\/span> The system encountered an error while<\/span> processing a request: Broken pipe\n    [<\/span>2015<\/span>-08-26 12<\/span>:14:29 -0500]<\/span> info [<\/span>cphulkd]<\/span> 221262<\/span> The system encountered an error while<\/span> processing a request: Broken pipe<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cphulkd.log<\/code><\/h4>\n
                This file contains the cphulkd<\/code> daemon\u2019s activity logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-20 03<\/span>:27:14 -0500]<\/span> info [<\/span>cphulkd]<\/span> 258355<\/span> processor shutdown via SIGTERM with pid 258355<\/span>\n    [<\/span>2015<\/span>-10-20 03<\/span>:27:44 -0500]<\/span> info [<\/span>cphulkd]<\/span> 131586<\/span> processor startup with pid 131586<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cpwrapd_log<\/code><\/h4>\n
                This file contains the cPanel & WHM service manager daemon\u2019s (cpsrvd<\/code>) activity logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>1985<\/span>-10-21 10<\/span>:18:11 -0500]<\/span> info [<\/span>cpsrvd]<\/span> user - [<\/span>action]=[<\/span>fetch]<\/span> [<\/span>function<\/span>]=[<\/span>SORTEDRESELLERSUSERS]<\/span> [<\/span>module]=[<\/span>reseller]<\/span> [<\/span>namespace]=[<\/span>Cpanel]<\/span> [<\/span>version]=[<\/span>2<\/span>.3]<\/span>\n    [<\/span>2015<\/span>-10-21 10<\/span>:18:11 -0500]<\/span> info [<\/span>cpsrvd]<\/span> user - [<\/span>action]=[<\/span>run]<\/span> [<\/span>function<\/span>]=[<\/span>HASDIGEST]<\/span> [<\/span>module]=[<\/span>security]<\/span> [<\/span>namespace]=[<\/span>Cpanel]<\/span> [<\/span>version]=[<\/span>2<\/span>.3]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/dnsadmin_log<\/code><\/h4>\n
                This file contains dnsadmin<\/code> request logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-21 13<\/span>:33:19 -0500]<\/span> info [<\/span>dnsadmin]<\/span> Reset reseller cache 'domain1'<\/span>.\n    [<\/span>2015<\/span>-10-21 13<\/span>:33:19 -0500]<\/span> info [<\/span>dnsadmin]<\/span> Reset reseller cache 'example'<\/span>.<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/error_log<\/code><\/h4>\n
                This file contains general cPanel & WHM errors (for example, a fatal error or timeout occurred while processing this directive<\/code> error).<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    Cpanel::Exception::new(<\/span>\"Cpanel::Exception::ModSecurity::VendorUpdateUnnecessary\"<\/span>, HASH(<\/span>0x13222cb8))<\/span> called at \/usr\/local\/cpanel\/Cpanel\/Exception.pm line 57<\/span>\n        Cpanel::Exception::create(<\/span>\"ModSecurity::VendorUpdateUnnecessary\"<\/span>, HASH(<\/span>0x13222cb8))<\/span> called at \/usr\/local\/cpanel\/Whostmgr\/ModSecurity\/VendorList.pm line 285<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/incoming_http_requests.log<\/code><\/h4>\n
                This file contains the logs of connection requests to the cPanel account\u2019s server.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span>7\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>headerparser 0<\/span>]<\/span>:Host: 127<\/span>.0.0.1:2087\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>headerparser 0<\/span>]<\/span>:Accept: *\/*\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>headerparser 0<\/span>]<\/span>:Authorization: Basic *censored*\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>headerparser 0<\/span>]<\/span>:Content-Type: application\/x-www-form-urlencoded\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>headerparser 0<\/span>]<\/span>:Content-Length: 34<\/span>\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>killconnection]<\/span>\n    [<\/span>15421<\/span>][<\/span>10<\/span>\/29\/2009:17:14:21 -0000][<\/span>killconnection exit]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/license_log<\/code><\/h4>\n
                This file contains the server\u2019s license update logs and license errors.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    Thu Oct 29<\/span> 19<\/span>:11:05 2015<\/span>: Using full manual DNS resolution\n    Thu Oct 29<\/span> 19<\/span>:11:05 2015<\/span>: Trying server 192<\/span>.168.0.20\n    Thu Oct 29<\/span> 19<\/span>:11:05 2015<\/span>: Server 192<\/span>.168.0.20 on port 2089<\/span> returned:<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/login_log<\/code><\/h4>\n
                This file contains the login attempts to the cpsrvd<\/code> daemon.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    192<\/span>.168.0.20 - user [<\/span>07<\/span>\/10\/2013:18:43:00 -0000]<\/span> \"POST \/login\/?login_only=1 HTTP\/1.1\"<\/span> FAILED LOGIN whostmgrd: user password hash is missing from system (<\/span>user probably does not exist)<\/span>\n    192<\/span>.168.0.21 - user [<\/span>07<\/span>\/10\/2013:18:43:14 -0000]<\/span> \"POST \/login\/?login_only=1 HTTP\/1.1\"<\/span> FAILED LOGIN whostmgrd: user password hash is missing from system (<\/span>user probably does not exist)<\/span>\n    192<\/span>.168.0.22 - user [<\/span>07<\/span>\/15\/2013:16:21:50 -0000]<\/span> \"POST \/login\/?login_only=1 HTTP\/1.1\"<\/span> FAILED LOGIN whostmgrd: user password incorrect<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/queueprocd.log<\/code><\/h4>\n
                This file contains the cPanel TaskQueue Processing daemon\u2019s (queueprocd<\/code>) logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-20 03<\/span>:27:31 -0500]<\/span> info [<\/span>queueprocd]<\/span> cPanel TaskQueue Processing Daemon starting.\n    Starting update of 35<\/span> locales in parallel ...\n    Updating \"aa\"<\/span> locale ...\n     ... \"aa\"<\/span> complete.\n    Updating \"ar\"<\/span> locale ...\n     ... \"ar\"<\/span> complete.<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/safeapacherestart_log<\/code><\/h4>\n
                This file contains information about each time that Apache restarted on the server.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-20 03<\/span>:23:07 -0500]<\/span> info [<\/span>safeapacherestart]<\/span> Restart elapsed seconds: 2<\/span>\n    [<\/span>2015<\/span>-10-30 12<\/span>:57:47 -0500]<\/span> info [<\/span>safeapacherestart]<\/span> Restart elapsed seconds: 5<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/session_log<\/code><\/h4>\n
                This file contains logs of a user\u2019s activities while they are logged in to the cPanel account.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-29 09<\/span>:27:35 -0500]<\/span> info [<\/span>cpsrvd]<\/span> 12<\/span>.3.14.75 NEW root:tvf32S0eomRni4nplg7OMXgj1kS8Jx3jhSeccZPRyHwsMIENmyhcxE17NCBDllTk address=<\/span>12<\/span>.3.14.75,app=<\/span>whostmgrd,creator=<\/span>root,method=<\/span>handle_form_login,path=<\/span>form,possessed=<\/span>0<\/span>\n    [<\/span>2015<\/span>-10-30 12<\/span>:24:06 -0500]<\/span> info [<\/span>cpsrvd]<\/span> 14<\/span>.2.19.78 NEW user:TIg1FiIdR6eTnKtYr7VmYGKpYB9srb0yvjHkkA1PeYOB6Y2naymPktSsjAob3pX0 address=<\/span>14<\/span>.2.19.78,app=<\/span>cpaneld,creator=<\/span>user,method=<\/span>handle_form_login,path=<\/span>form,possessed=<\/span>0<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/setupdbmap_log<\/code><\/h4>\n
                This file contains the cPanel account\u2019s database-related activities.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2014<\/span>-05-06 02<\/span>:57:08 -0500]<\/span> info [<\/span>setupdbmap]<\/span> Begin setupdbmap\n    [<\/span>2014<\/span>-05-06 02<\/span>:57:08 -0500]<\/span> info [<\/span>setupdbmap]<\/span> Updating MySQL users\n    [<\/span>2014<\/span>-05-06 02<\/span>:57:09 -0500]<\/span> info [<\/span>setupdbmap]<\/span> Processing MySQL databases and database users ...\n    [<\/span>2014<\/span>-05-06 02<\/span>:57:09 -0500]<\/span> info [<\/span>setupdbmap]<\/span> Finished with MySQL users<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/stats_log<\/code><\/h4>\n
                This file contains the bandwidth statistics for all of the server\u2019s cPanel accounts.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>2015<\/span>-10-30 12<\/span>:12:30 -0500]<\/span> Process bandwidth for<\/span> domain1\n    [<\/span>2015<\/span>-10-30 12<\/span>:12:30 -0500]<\/span> Process bandwidth for<\/span> domain2\n    [<\/span>2015<\/span>-10-30 12<\/span>:12:30 -0500]<\/span> Process bandwidth for<\/span> domain3<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/tailwatchd_log<\/code><\/h4>\n
                This file contains the Tailwatch Driver\u2019s (tailwatchd<\/code>) logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>131557<\/span>]<\/span> [<\/span>2015<\/span>-10-30 13<\/span>:00:00 -0500]<\/span> [<\/span>Cpanel::TailWatch::Eximstats]<\/span> Resetting email limits to new starttime of 1446228000<\/span>\n    [<\/span>131557<\/span>]<\/span> [<\/span>2015<\/span>-10-30 14<\/span>:00:00 -0500]<\/span> [<\/span>Cpanel::TailWatch::Eximstats]<\/span> Resetting email limits to new starttime of 1446231600<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/panic_log<\/code><\/h4>\n
                This file contains a cPanel account\u2019s severe error logs.<\/p>\n
                \n
                Warning:<\/div>\n
                \n
                This file should not contain any entries. If this file contains entries, thoroughly investigate the entries and contact your hosting provider.<\/p>\n<\/p><\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/php-fpm\/error.log<\/code><\/h4>\n
                This file contains PHP-FPM implementation errors. These errors include errors for the cpsrvd<\/code> and cpdavd<\/code> services.<\/p>\n
                \n
                Note:<\/div>\n
                \n
                This file does not<\/strong> include errors for customer sites.<\/p>\n<\/p><\/div>\n<\/div>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    [<\/span>06<\/span>-Nov-2015 08<\/span>:52:18]<\/span> ERROR: [<\/span>pool no]<\/span> please specify user and group other than root\n    [<\/span>06<\/span>-Nov-2015 08<\/span>:52:18]<\/span> ERROR: FPM initialization failed\n    [<\/span>06<\/span>-Nov-2015 08<\/span>:55:32]<\/span> ERROR: [<\/span>pool no]<\/span> please specify user and group other than root\n    [<\/span>06<\/span>-Nov-2015 08<\/span>:55:32]<\/span> ERROR: FPM initialization failed\n    [<\/span>06<\/span>-Nov-2015 08<\/span>:57:52]<\/span> ERROR: [<\/span>pool no]<\/span> please specify user and group other than root\n    [<\/span>06<\/span>-Nov-2015 08<\/span>:57:52]<\/span> ERROR: FPM initialization failed<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel\/php-fpm\/USER\/logs\/slow.log<\/code><\/h4>\n
                This file contains scripts that run unusually slow for a user.<\/p>\n
                \n
                Note:<\/div>\n
                \n
                USER<\/code> represents the cPanel account name.<\/p>\n<\/p><\/div>\n<\/div>\n
                \/var\/cpanel\/php-fpm\/USER\/logs\/error.log<\/code><\/h4>\n
                This file contains the user\u2019s error logs.<\/p>\n
                \n
                Note:<\/div>\n
                \n
                USER<\/code> represents the cPanel account name.<\/p>\n<\/p><\/div>\n<\/div>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                [<\/span>15<\/span>-Oct-2015 16<\/span>:58:14 America\/Chicago]<\/span> PHP Fatal error: Allowed memory size of 134217728<\/span> bytes exhausted (<\/span>tried to allocate 6689761<\/span> bytes)<\/span> in Unknown on line 0<\/span>\n[<\/span>15<\/span>-Oct-2015 17<\/span>:10:33 America\/Chicago]<\/span> PHP Fatal error: Call to a member function<\/span> write()<\/span> on a non-object in \/usr\/local\/cpanel\/3rdparty\/php\/54\/lib\/php\/Horde\/Imap\/Client\/Socket.php on line 4336<\/span>\n[<\/span>23<\/span>-Oct-2015 16<\/span>:21:19 America\/Chicago]<\/span> PHP Fatal error: Allowed memory size of 134217728<\/span> bytes exhausted (<\/span>tried to allocate 72<\/span> bytes)<\/span> in \/usr\/local\/cpanel\/base\/3rdparty\/squirrelmail\/functions\/imap_messages.php on line 204<\/span>\n[<\/span>25<\/span>-Oct-2015 13<\/span>:01:16 America\/Chicago]<\/span> PHP Fatal error: Call to a member function<\/span> write()<\/span> on a non-object in \/usr\/local\/cpanel\/3rdparty\/php\/54\/lib\/php\/Horde\/Imap\/Client\/Socket.php on line 4336<\/span>\n[<\/span>11<\/span>-Nov-2015 17<\/span>:24:29 America\/Chicago]<\/span> PHP Fatal error: Allowed memory size of 134217728<\/span> bytes exhausted (<\/span>tried to allocate 32<\/span> bytes)<\/span> in \/usr\/local\/cpanel\/base\/3rdparty\/squirrelmail\/functions\/imap_messages.php on line 204<\/span>\n[<\/span>30<\/span>-Nov-2015 14<\/span>:06:07 America\/Chicago]<\/span> PHP Fatal error: Allowed memory size of 134217728<\/span> bytes exhausted (<\/span>tried to allocate 72<\/span> bytes)<\/span> in \/usr\/local\/cpanel\/3rdparty\/php\/54\/lib\/php\/Horde\/Imap\/Client\/Cache\/Backend\/Cache.php on line 493<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel.bandwidth.cache<\/code><\/h4>\n
                This file contains the cached bandwidth history for each cPanel account on your server.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    bucktopia.com\n    xtest1\n    domain1\n    domain4<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel\/accounting.log<\/code><\/h4>\n
                This file contains records of cPanel account actions, such as creation and deletion.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                Thu Jun 11<\/span> 13<\/span>:33:19 2015<\/span>:ADDRESELLER:root:root:example.com:example\nFri Oct 30<\/span> 12<\/span>:57:29 2015<\/span>:CHANGEOWNER:root:root:example.com:example:root:example<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/log\/chkservd.log<\/code><\/h4>\n
                This file contains the service status logs.<\/p>\n
                \n
                [<\/span>2015<\/span>-11-02 13<\/span>:52:20 -0500]<\/span> Service check ....queueprocd [[<\/span>check command:+][<\/span>socket connect:N\/A]]<\/span>...named [[<\/span>check command:+][<\/span>socket connect:N\/A]]<\/span>...mysql [[<\/span>check command:+][<\/span>socket connect:N\/A]]<\/span>...imap [[<\/span>socket_service_auth:1][<\/span>check command:+][<\/span>socket connect:+]]<\/span>...ftpd [[<\/span>check command:+][<\/span>socket connect:+]]<\/span>...entropychat [[<\/span>check command:N\/A][<\/span>socket connect:N\/A]]<\/span>...cpsrvd [[<\/span>http_service_auth:1][<\/span>check command:N\/A][<\/span>socket connect:+]]<\/span>...cpanellogd [[<\/span>check command:+][<\/span>socket connect:N\/A]]<\/span>...clamd [[<\/span>check command:+][<\/span>socket connect:N\/A]]<\/span>...Done<\/code><\/pre>\n<\/div>\n
                \/var\/log\/cpanel-install.log<\/code><\/h4>\n
                This file contains the cPanel & WHM installation logs.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span>7\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                    2013<\/span>-07-09 16<\/span>:39:57  152<\/span> (<\/span>DEBUG)<\/span>:   - ssystem [<\/span>END]<\/span>\n    2013<\/span>-07-09 16<\/span>:39:57  151<\/span> (<\/span> INFO)<\/span>:  - Enabling sshd\n    2013<\/span>-07-09 16<\/span>:39:57  152<\/span> (<\/span>DEBUG)<\/span>:   - ssystem [<\/span>BEGIN]<\/span>: \/sbin\/chkconfig --level 35<\/span> sshd on\n    2013<\/span>-07-09 16<\/span>:39:57  152<\/span> (<\/span>DEBUG)<\/span>:   - ssystem [<\/span>END]<\/span>\n    2013<\/span>-07-09 16<\/span>:39:57  488<\/span> (<\/span> INFO)<\/span>: Enabling cphulkd ...\n    2013<\/span>-07-09 16<\/span>:39:57  495<\/span> (<\/span> INFO)<\/span>: Done\n    2013<\/span>-07-09 16<\/span>:39:57  167<\/span> (<\/span> INFO)<\/span>: cPanel install finished in 69<\/span> minutes and 29<\/span> seconds!<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                cPanel & WHM services Directories<\/h3>\n
                \/usr\/local\/cpanel\/logs\/cpbackup<\/code><\/h4>\n
                This directory contains the cPanel backup log files.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                1445324403<\/span>.log\n1445497204<\/span>.log\n1445925603<\/span>.log\n1446098403<\/span>.log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/cpbackup_transporter<\/code><\/h4>\n
                This directory contains the cPanel Backup Transporter\u2019s log files.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                cpbackup_transporter.1446102630.log\ncpbackup_transporter.1446102672.log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/easy\/apache<\/code><\/h4>\n
                This directory contains the EasyApache build log files.<\/p>\n
                \n
                build.1439814755.env  build.1439820240.env<\/code><\/pre>\n<\/div>\n
                \/usr\/local\/cpanel\/logs\/update_analysis<\/code><\/h4>\n
                This directory contains the update process\u2019s .tar<\/code> files.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                2015<\/span>-08-20T08:15:06Z.tar.gz\n2015<\/span>-09-13T08:15:07Z.tar.gz\n2015<\/span>-10-07T08:15:10Z.tar.gz<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel\/bandwidth\/username<\/code><\/h4>\n
                This directory contains each account\u2019s bandwidth usage logs.<\/p>\n
                \n
                Note:<\/div>\n
                \n
                In this directory, username<\/code> represents your account\u2019s username.<\/p>\n<\/p><\/div>\n<\/div>\n
                \n
                fredfred-smtp-rate.rrd  barney-all-rate.rrd<\/code><\/pre>\n<\/div>\n
                \/var\/cpanel\/logs<\/code><\/h4>\n
                This directory contains account transfer log files and other, miscellaneous log files.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                cpaddonsup.1444377665.txt\ncpaddonsup.1445155265.txt\ncpaddonsup.1445932864.txt<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel\/updatelogs<\/code><\/h4>\n
                This directory contains the system\u2019s update log files.<\/p>\n
                \n
                \n\n\n
                \n
                1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                		\n
                update.1446018721.log\nupdate.1446191521.log\nupdate.1446367921.log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                \/var\/cpanel\/logs\/mysql_upgrade.log<\/code><\/h4>\n
                This directory contains the account\u2019s MySQL upgrade logs.<\/p>\n
                \n
                Note:<\/div>\n
                \n
                In cPanel & WHM version 78 and later, the log files use the mysql.YYYYMMDD-hhmmss<\/code> naming convention with the following designators:<\/p>\n
                  \n
                • YYYY<\/code> \u2014 Four-digit year.<\/li>\n
                • MM<\/code> \u2014 Two-digit month<\/li>\n
                • DD<\/code> \u2014 Two-digit day.<\/li>\n
                • hh<\/code> \u2014 Two-digit hour.<\/li>\n
                • mm<\/code> \u2014 Two-digit minute.<\/li>\n
                • ss<\/code> \u2014 Two-digit second.<\/li>\n<\/ul><\/div>\n<\/div>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  unattended_background_upgrade.error\nunattended_background_upgrade.log\nunattended_background_upgrade.output\nunattended_background_upgrade.result<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/var\/cpanel\/horde\/log<\/code><\/h4>\n
                  This directory contains the log files for Horde.<\/p>\n
                  \n
                  horde_.log  horde_stesares.log<\/code><\/pre>\n<\/div>\n
                  \/var\/cpanel\/squirrelmail<\/code><\/h4>\n
                  This directory contains the log files for SquirrelMail.<\/p>\n
                  \n
                  Note:<\/div>\n
                  \n
                  We deprecated SquirrelMail and its functionality in cPanel & WHM version 76 and removed it in cPanel & WHM version 78.<\/p>\n<\/p><\/div>\n<\/div>\n
                  \n
                  .\/  ..\/  version<\/code><\/pre>\n<\/div>\n
                  \/home\/username\/logs\/roundcube<\/code><\/h4>\n
                  This directory contains the log files for Roundcube Webmail with a SQLite backend.<\/p>\n
                  \n
                  roundcube_.log<\/code><\/pre>\n<\/div>\n
                  \/var\/cpanel\/roundcube\/log<\/code><\/h4>\n
                  This directory contains the log files for Roundcube Webmail with a MySQL backend.<\/p>\n
                  \n
                  roundcube_.log<\/code><\/pre>\n<\/div>\n
                  \/var\/cpanel\/transfer_sessions<\/code><\/h4>\n
                  This directory contains subdirectories for transfer and restore sessions.<\/p>\n
                  Each transfer and restore session\u2019s subdirectory contains the session\u2019s log files in a line-delimited JSON format. Each log file contains the following information:<\/p>\n
                  \n
                          Click to view…<\/p>\n
                  \n
                  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                  Key<\/th>\nType<\/th>\nDescription<\/th>\nPossible values<\/th>\nExample<\/th>\n<\/tr>\n<\/thead>\n
                  pid<\/code><\/td>\ninteger<\/em><\/td>\nThe process ID under which the command in the log entry ran.<\/td>\nAn integer value.<\/td>\n14538<\/code><\/td>\n<\/tr>\n
                  indent<\/code><\/td>\ninteger<\/em><\/td>\nThe level of indentation to display.<\/td>\nA valid positive integer.<\/td>\n1<\/code><\/td>\n<\/tr>\n
                  type<\/code><\/td>\nstring<\/td>\nThe type of log file entry.<\/td>\n\n
                    \n
                  • out<\/li>\n
                  • warn<\/li>\n
                  • success<\/li>\n
                  • failure<\/li>\n
                  • control<\/li>\n<\/ul>\n<\/td>\n
                  		control<\/code><\/td>\n<\/tr>\n
                  partial<\/code><\/td>\nBoolean<\/em><\/td>\nWe do not currently use this key.<\/td>\n0<\/code> is the only<\/strong> possible value.<\/td>\n0<\/code><\/td>\n<\/tr>\n
                  contents<\/code><\/td>\nhash<\/em><\/td>\nA hash of transfer or restore session information.<\/td>\nThis hash contains the action<\/code>, child_number<\/code>, dangerous_items<\/code>, item<\/code>, item_name<\/code>, item_type<\/code>, local_item<\/code>, logfile<\/code>, message<\/code>, msg<\/code>, queue<\/code>, skipped_items<\/code>, and warnings<\/code> keys.<\/td>\n<\/td>\n<\/tr>\n
                  action<\/code><\/td>\nstring<\/em><\/td>\nThe action for the system to execute. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A valid string.<\/td>\nstart-item<\/code><\/td>\n<\/tr>\n
                  child_number<\/code><\/td>\ninteger<\/em><\/td>\nThe number of child processes in the transfer or restore process. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A positive integer.<\/td>\n1<\/code><\/td>\n<\/tr>\n
                  dangerous_items<\/code><\/td>\ninteger<\/em><\/td>\nThe number of items in the transferred or restored account that the system flagged as potentially dangerous. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A positive integer.<\/td>\n1<\/code><\/td>\n<\/tr>\n
                  item<\/code><\/td>\nstring<\/em><\/td>\nThe name of the account to restore or transfer. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\ncptech<\/code><\/td>\n<\/tr>\n
                  item_name<\/code><\/td>\nstring<\/em><\/td>\nThe name of the item to transfer or restore. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\nAccount<\/code><\/td>\n<\/tr>\n
                  item_type<\/code><\/td>\nstring<\/em><\/td>\nThe specific item to transfer or restore. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\ncptech<\/code><\/td>\n<\/tr>\n
                  local_item<\/code><\/td>\nstring<\/em><\/td>\nThe item to restore locally. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\nAccountLocal<\/code><\/td>\n<\/tr>\n
                  logfile<\/code><\/td>\nstring<\/em><\/td>\nThe absolute filepath for the log file. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A valid absolute filepath.<\/td>\nitem-RESTORE_AccountLocal_cptech<\/code><\/td>\n<\/tr>\n
                  message<\/code><\/td>\nstring<\/em><\/td>\nA message about the transfer or restore process. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\nnull<\/code><\/td>\n<\/tr>\n
                  msg<\/code><\/td>\nstring<\/em><\/td>\nAdditional information about the transfer or restore process. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A string value.<\/td>\nnull<\/code><\/td>\n<\/tr>\n
                  queue<\/code><\/td>\nstring<\/em><\/td>\nThe process that the system performed on the account. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		\n
                    \n
                  • TRANSFER<\/code><\/li>\n
                  • RESTORE<\/code><\/li>\n<\/ul>\n<\/td>\n
                  		RESTORE<\/code><\/td>\n<\/tr>\n
                  skipped_items<\/code><\/td>\ninteger<\/em><\/td>\nThe items in the account that the transfer or restore process skipped. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A positive integer.<\/td>\n1<\/code><\/td>\n<\/tr>\n
                  warnings<\/code><\/td>\ninteger<\/em><\/td>\nThe number of warnings that the system returned during the transfer or restore process. 
                   The log file contains this key in the content<\/code> hash.<\/td>\n                  		A positive integer.<\/td>\n2<\/code><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/p><\/div>\n<\/div>\n
                  \n
                          Click to view…<\/p>\n
                  \n
                  \n
                  \n
                  \n\n\n
                  \n
                   1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span>13\n<\/span>14\n<\/span>15\n<\/span>16\n<\/span>17\n<\/span>18\n<\/span>19\n<\/span>20\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  {<\/span>\n  \"data\"<\/span>: {<\/span>\n    \"log\"<\/span>:\n\n\"{\"pid\":\"14358\",\"contents\":{\"action\":\"start\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"msg\":\"copyacct\",\"action\":\"initiator\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"msg\":\"1.6\",\"action\":\"version\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"msg\":\"3\",\"action\":\"queue_count\",\"queue\":\"TRANSFER\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"msg\":\"3\",\"action\":\"queue_count\",\"queue\":\"RESTORE\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"msg\":\"vm5.docs.cpanel.net\",\"action\":\"remotehost\",\"child_number\":0},\"type\":\"control\"}n{\"pid\":\"14360\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"action\":\"start\",\"queue\":\"TRANSFER\",\"item_name\":\"Account\",\"child_number\":1},\"type\":\"control\"}n{\"pid\":\"14360\",\"contents\":{\"msg\":\"item-TRANSFER_AccountRemoteRoot_fredfred\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"TRANSFER\",\"child_number\":1,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_fredfred\"},\"type\":\"control\"}n{\"pid\":\"14361\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"action\":\"start\",\"queue\":\"TRANSFER\",\"item_name\":\"Account\",\"child_number\":2},\"type\":\"control\"}n{\"pid\":\"14361\",\"contents\":{\"msg\":\"item-TRANSFER_AccountRemoteRoot_colin\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"TRANSFER\",\"child_number\":2,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_colin\"},\"type\":\"control\"}n{\"pid\":\"14362\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"action\":\"start\",\"queue\":\"TRANSFER\",\"item_name\":\"Account\",\"child_number\":3},\"type\":\"control\"}n{\"pid\":\"14362\",\"contents\":{\"msg\":\"item-TRANSFER_AccountRemoteRoot_stacy\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"TRANSFER\",\"child_number\":3,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_stacy\"},\"type\":\"control\"}n{\"pid\":\"14362\",\"contents\":{\"msg\":{\"warnings\":0,\"dangerous_items\":0,\"contents\":{\"dangerous_items\":null,\"altered_items\":null},\"skipped_items\":0,\"altered_items\":0,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"TRANSFER\",\"child_number\":3,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_stacy\"},\"type\":\"control\"}n{\"pid\":\"14361\",\"contents\":{\"msg\":{\"warnings\":0,\"dangerous_items\":0,\"contents\":{\"dangerous_items\":null,\"altered_items\":null},\"skipped_items\":0,\"altered_items\":0,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"TRANSFER\",\"child_number\":2,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_colin\"},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"action\":\"start\",\"queue\":\"RESTORE\",\"item_name\":\"Account\",\"child_number\":1},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"msg\":\"item-RESTORE_AccountRemoteRoot_stacy\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"RESTORE\",\"child_number\":1,\"logfile\":\"item-RESTORE_AccountRemoteRoot_stacy\"},\"type\":\"control\"}n{\"pid\":\"14365\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"action\":\"start\",\"queue\":\"RESTORE\",\"item_name\":\"Account\",\"child_number\":2},\"type\":\"control\"}n{\"pid\":\"14365\",\"contents\":{\"msg\":\"item-RESTORE_AccountRemoteRoot_colin\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"RESTORE\",\"child_number\":2,\"logfile\":\"item-RESTORE_AccountRemoteRoot_colin\"},\"type\":\"control\"}n{\"pid\":\"14360\",\"contents\":{\"msg\":{\"warnings\":0,\"dangerous_items\":0,\"contents\":{\"dangerous_items\":null,\"altered_items\":null},\"skipped_items\":0,\"altered_items\":0,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"TRANSFER\",\"child_number\":1,\"logfile\":\"item-TRANSFER_AccountRemoteRoot_fredfred\"},\"type\":\"control\"}n{\"pid\":\"14360\",\"contents\":{\"action\":\"complete\",\"queue\":\"TRANSFER\",\"child_number\":1},\"type\":\"control\"}n{\"pid\":\"14362\",\"contents\":{\"action\":\"complete\",\"queue\":\"TRANSFER\",\"child_number\":3},\"type\":\"control\"}n{\"pid\":\"14361\",\"contents\":{\"action\":\"complete\",\"queue\":\"TRANSFER\",\"child_number\":2},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"msg\":{\"warnings\":2,\"dangerous_items\":0,\"contents\":{\"dangerous_items\":[],\"altered_items\":[]},\"skipped_items\":10,\"altered_items\":0,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"stacy\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"RESTORE\",\"child_number\":1,\"logfile\":\"item-RESTORE_AccountRemoteRoot_stacy\"},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"action\":\"start\",\"queue\":\"RESTORE\",\"item_name\":\"Account\",\"child_number\":1},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"msg\":\"item-RESTORE_AccountRemoteRoot_fredfred\",\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"item_name\":\"Account\",\"action\":\"process-item\",\"queue\":\"RESTORE\",\"child_number\":1,\"logfile\":\"item-RESTORE_AccountRemoteRoot_fredfred\"},\"type\":\"control\"}n{\"pid\":\"14365\",\"contents\":{\"msg\":{\"warnings\":4,\"dangerous_items\":1,\"contents\":{\"dangerous_items\":[[[\"Mysql\",\"_restore_mysql\",104],\"MySQL:\n<\/span> Skipping grants for these MySQL databases: colin_%. These databases\n<\/span>don't exist in the\n<\/span>archive.\",null]],\"altered_items\":[[[\"Mysql\",\"_update_dbname\",437],\"mySQL\n<\/span> database u201ccolin_testdatabaseu201d restored as\n<\/span>u201ctestdatabaseu201d\",[\"Rename\",\"\/scripts5\/rename_mysql_db\",{\"new\":\"testdatabase\",\"orig\":\"colin_testdatabase\"}]],[[\"Mysql\",\"_update_dbuser_name\",348],\"mySQL\n<\/span> user u201ccolinu201d restored as\n<\/span>u201ccolinu201d\",[\"Rename\",\"\/scripts5\/rename_mysql_user\",{\"new\":\"colin\",\"orig\":\"colin\"}]]]},\"skipped_items\":10,\"altered_items\":1,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"colin\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"RESTORE\",\"child_number\":2,\"logfile\":\"item-RESTORE_AccountRemoteRoot_colin\"},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"msg\":{\"warnings\":2,\"dangerous_items\":0,\"contents\":{\"dangerous_items\":[],\"altered_items\":[]},\"skipped_items\":11,\"altered_items\":0,\"message\":null},\"item_type\":\"AccountRemoteRoot\",\"item\":\"fredfred\",\"item_name\":\"Account\",\"action\":\"success-item\",\"queue\":\"RESTORE\",\"child_number\":1,\"logfile\":\"item-RESTORE_AccountRemoteRoot_fredfred\"},\"type\":\"control\"}n{\"pid\":\"14363\",\"contents\":{\"action\":\"complete\",\"queue\":\"RESTORE\",\"child_number\":1},\"type\":\"control\"}n{\"pid\":\"14365\",\"contents\":{\"action\":\"complete\",\"queue\":\"RESTORE\",\"child_number\":2},\"type\":\"control\"}n{\"pid\":\"14358\",\"contents\":{\"action\":\"complete\",\"child_number\":0},\"type\":\"control\"}n\"<\/span>\n  }<\/span>,\n  \"metadata\"<\/span>: {<\/span>\n    \"version\"<\/span>: 1<\/span>,\n    \"reason\"<\/span>: \"OK\"<\/span>,\n    \"result\"<\/span>: \"1\"<\/span>,\n    \"command\"<\/span>: \"fetch_transfer_session_log\"<\/span>\n  }<\/span>\n}<\/span>_<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div><\/div>\n<\/p><\/div>\n<\/div>\n
                  FTP<\/h2>\n
                  FTP Files<\/h3>\n
                  \/usr\/local\/apache\/domlogs\/ftpxferlog<\/code><\/h4>\n
                  This file contains the FTP transfer logs for users on webservers that run EasyApache 3.<\/p>\n
                  \n
                  Note:<\/div>\n
                  \n        We removed EasyApache 3 in cPanel & WHM version 78. For more information, read the cPanel Deprecation Plan.\n    <\/div>\n<\/div>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  user\nuser1\nuser2<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/etc\/apache2\/logs\/domlogs\/ftpxferlog<\/code><\/h4>\n
                  This file contains the FTP transfer logs for users on webservers that run EasyApache 4.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  user\nuser1\nuser2<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  FTP Directories<\/h3>\n
                  \/usr\/local\/apache\/domlogs<\/code><\/h4>\n
                  This directory contains the FTP transaction logs for domains which exist on webservers that run EasyApache 3.<\/p>\n
                  \n
                  Note:<\/div>\n
                  \n        We removed EasyApache 3 in cPanel & WHM version 78. For more information, read the cPanel Deprecation Plan.\n    <\/div>\n<\/div>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  domain1\/\nexample.com\ndomain1.com\ndomain1.com-bytes_log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/etc\/apache2\/logs\/domlogs<\/code><\/h4>\n
                  This directory contains the FTP transaction logs for domains which exist on webservers that run EasyApache 4.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  domain1\/\nexample.com\ndomain1.com\ndomain1.com-bytes_log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  Mail<\/h2>\n
                  Mail Files<\/h3>\n
                  \/home\/username\/.z-push\/log\/z-push.log<\/code><\/h4>\n
                  This file contains the account\u2019s Z-Push – ActiveSync Support logs. The Z-Push – ActiveSync Support plugin allows users to sync cPanel calendars, contacts, and email on Android\u2122 devices.<\/p>\n
                  \n
                  \n\n\n
                  \n
                   1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  01<\/span>\/06\/2021 21<\/span>:08:37 [<\/span> 2274<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> Options request\n01<\/span>\/06\/2021 21<\/span>:08:37 [<\/span> 2274<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> cmd=<\/span>'Options'<\/span> memory=<\/span>'4.20 MiB\/6.00 MiB'<\/span> time=<\/span>'1.00s'<\/span> devType=<\/span>'ExampleDevice'<\/span> devId=<\/span>'exampledevid'<\/span> getUser=<\/span>'user1@example.com'<\/span> from=<\/span>'10.0.0.0'<\/span> idle=<\/span>'0s'<\/span> version=<\/span>'exampleversion'<\/span> method=<\/span>'OPTIONS'<\/span> httpcode=<\/span>'200'<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:37 [<\/span> 2274<\/span>]<\/span> [<\/span>WARN]<\/span> [<\/span>user1@example.com]<\/span> Unknown:0 Unknown: SECURITY PROBLEM: insecure server advertised AUTH=<\/span>PLAIN (<\/span>errflg=<\/span>1<\/span>)<\/span> (<\/span>8<\/span>)<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:38 [<\/span> 2291<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> ExportChangesDiff->InitializeExporter()<\/span>: Found '7'<\/span> changes for<\/span> 'hierarchy'<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:38 [<\/span> 2291<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> cmd=<\/span>'FolderSync'<\/span> memory=<\/span>'5.73 MiB\/6.00 MiB'<\/span> time=<\/span>'0.67s'<\/span> devType=<\/span>'ExampleDevice'<\/span> devId=<\/span>'exampledevid'<\/span> getUser=<\/span>'user1@example.com'<\/span> from=<\/span>'10.0.0.0'<\/span> idle=<\/span>'0s'<\/span> version=<\/span>'exampleversion'<\/span> method=<\/span>'POST'<\/span> httpcode=<\/span>'200'<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:40 [<\/span> 2301<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> cmd=<\/span>'ResolveRecipients'<\/span> memory=<\/span>'5.14 MiB\/6.00 MiB'<\/span> time=<\/span>'0.70s'<\/span> devType=<\/span>'ExampleDevice'<\/span> devId=<\/span>'exampledevid'<\/span> getUser=<\/span>'user1@example.com'<\/span> from=<\/span>'10.0.0.0'<\/span> idle=<\/span>'0s'<\/span> version=<\/span>'exampleversion'<\/span> method=<\/span>'POST'<\/span> httpcode=<\/span>'200'<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:40 [<\/span> 2316<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> cmd=<\/span>'Settings'<\/span> memory=<\/span>'5.14 MiB\/6.00 MiB'<\/span> time=<\/span>'0.37s'<\/span> devType=<\/span>'ExampleDevice'<\/span> devId=<\/span>'exampledevid'<\/span> getUser=<\/span>'user1@example.com'<\/span> from=<\/span>'10.0.0.0'<\/span> idle=<\/span>'0s'<\/span> version=<\/span>'exampleversion'<\/span> method=<\/span>'POST'<\/span> httpcode=<\/span>'200'<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:43 [<\/span> 2334<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> SyncCollections->CheckForChanges()<\/span>: Waiting for<\/span> store changes... (<\/span>lifetime 880<\/span> seconds)<\/span>\n01<\/span>\/06\/2021 21<\/span>:08:47 [<\/span> 2344<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> BackendIMAP->GetMessageList(<\/span>'INBOX'<\/span>,'0000000000'<\/span>)<\/span>: 0<\/span> result for<\/span> the search or error: SECURITY PROBLEM: insecure server advertised AUTH=<\/span>PLAIN\n01<\/span>\/06\/2021 21<\/span>:08:47 [<\/span> 2344<\/span>]<\/span> [<\/span> INFO]<\/span> [<\/span>user1@example.com]<\/span> cmd=<\/span>'Sync'<\/span> memory=<\/span>'5.64 MiB\/6.00 MiB'<\/span> time=<\/span>'0.74s'<\/span> devType=<\/span>'ExampleDevice'<\/span> devId=<\/span>'exampledevid'<\/span> getUser=<\/span>'user1@example.com'<\/span> from=<\/span>'10.0.0.0'<\/span> idle=<\/span>'0s'<\/span> version=<\/span>'exampleversion'<\/span> method=<\/span>'POST'<\/span> httpcode=<\/span>'200'<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/home\/username\/.z-push\/log\/z-push-error.log<\/code><\/h4>\n
                  This file contains the account\u2019s Z-Push – ActiveSync Support error logs.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  01<\/span>\/06\/2021 21<\/span>:08:37 [<\/span> 2274<\/span>]<\/span> [<\/span>WARN]<\/span> [<\/span>user1@example.com]<\/span> Unknown:0 Unknown: SECURITY PROBLEM: insecure server advertised AUTH=<\/span>PLAIN (<\/span>errflg=<\/span>1<\/span>)<\/span> (<\/span>8<\/span>)<\/span>\n01<\/span>\/06\/2021 21<\/span>:09:30 [<\/span> 2498<\/span>]<\/span> [<\/span>WARN]<\/span> [<\/span>user2@example.com]<\/span> Unknown:0 Unknown: SECURITY PROBLEM: insecure server advertised AUTH=<\/span>PLAIN (<\/span>errflg=<\/span>1<\/span>)<\/span> (<\/span>8<\/span>)<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/var\/log\/exim_mainlog<\/code><\/h4>\n
                  This file contains Exim\u2019s mail receipt and delivery logs for the cPanel account\u2019s domains.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  2015<\/span>-12-07 09<\/span>:23:14 [<\/span>3428<\/span>]<\/span> luggage-1234Bz-Rm H=<\/span>mailhost.domain.com\n[<\/span>192<\/span>.168.0.20]<\/span>:58241 I=[<\/span>1<\/span>.0.0.127]<\/span>:25 Warning: \"SpamAssassin as\n<\/span>theuser detected message as NOT spam (0.0)\"<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/var\/log\/exim_rejectlog<\/code><\/h4>\n
                  This file contains a log of messages that the system rejected due to ACLs.<\/p>\n
                  For more information, read our Exim Configuration Manager Basic Editor<\/em>  documentation.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  2015<\/span>-12-4 08<\/span>:27:23 refused relay (<\/span>host)<\/span> to\n<user@example.com> from <example@user.com>\nH=<\/span>113<\/span>-43-173-020.user.example.net (<\/span>smtp.example.com)<\/span>\n[<\/span>192<\/span>.168.0.20]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  \/var\/log\/exim_paniclog<\/code><\/h4>\n
                  This file contains Exim\u2019s severe error logs.<\/p>\n
                  \n
                  Warning:<\/div>\n
                  \n
                  This file should not contain any entries. If this file contains entries, thoroughly investigate the entries and contact your hosting provider.<\/p>\n<\/p><\/div>\n<\/div>\n
                  \/var\/log\/maillog<\/code><\/h4>\n
                  This file contains IMAP and POP3 login attempts, transactions, fatal errors, and Apache SpamAssassin\u2122 scores.<\/p>\n
                  \n
                  \n\n\n
                  \n
                  1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  Nov  3<\/span> 10<\/span>:21:30 vm5 dovecot: imap-login: Login: user=<\/span><__cpanel__service__auth__imap__orpl7flalajte5t7ahgq2joard0s3szcmltatifzmb_iqv...>, method=<\/span>PLAIN, rip=<\/span>127<\/span>.0.0.1, lip=<\/span>127<\/span>.0.0.1, mpid=<\/span>735381<\/span>, secured, session=<\/span><1adZSaUjRwB\/AAAB>\nNov  3<\/span> 10<\/span>:21:30 vm5 dovecot: imap(<\/span>__cpanel__service__auth__imap__orpl7flalajte5t7ahgq2joard0s3szcmltatifzmb_iqvmragspbfcr3dkrhmzd)<\/span>: Disconnected: Logged out in=<\/span>11<\/span>, out=<\/span>434<\/span>, bytes=<\/span>11<\/span>\/434__<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                  Mail Directories<\/h3>\n
                  \/var\/spool\/exim\/input<\/code><\/h4>\n
                  This directory contains a log of queued incoming email messages. The system separates these logs in to subdirectories that correspond to the number or letter with which the sender\u2019s name begins.<\/p>\n
                  \n
                          Click to view…<\/p>\n
                  \n
                  \n
                  \n
                  \n\n\n
                  \n
                   1\n<\/span> 2\n<\/span> 3\n<\/span> 4\n<\/span> 5\n<\/span> 6\n<\/span> 7\n<\/span> 8\n<\/span> 9\n<\/span>10\n<\/span>11\n<\/span>12\n<\/span><\/code><\/pre>\n<\/td>\n
                  		\n
                  1WEayg-0011QH-IC-D\n1XABSg-003GTw-28-D\n1XDGag-001MGL-6R-D\n1XGLEg-0032BQ-6A-D\n1XJn6g-001kuC-5n-D\n1YPpqg-001CeH-Gf-D\n1WEayg-0011QH-IC-H\n1XABSg-003GTw-28-H\n1XDGag-001MGL-6R-H\n1XGLEg-0032BQ-6A-H\n1XJn6g-001kuC-5n-H\n1YPpqg-001CeH-Gf-H<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div><\/div>\n<\/p><\/div>\n<\/div>\n
                  \/usr\/local\/cpanel\/3rdparty\/mailman\/logs<\/code><\/h4>\n
                  This directory contains the account\u2019s Mailman logs.<\/p>\n
                  \n
                  .\/  ..\/  bounce  error  locks  mischief  post  qrunner  smtp  smtp-failure  subscribe  vette<\/code><\/pre>\n<\/div>\n
                  Memory usage<\/h2>\n
                  \/var\/log\/dcpumon\/YYYY\/MMM\/DD<\/code><\/h4>\n
                  This file contains information about the processes that consume the most CPU and memory.<\/p>\n
                    \n
                  • YYYY<\/code> represents a subdirectory that contains a process\u2019s logs by month.<\/li>\n
                  • MMM<\/code> represents a subdirectory within the YYYY<\/code> directory that contains a process\u2019s logs for each day of a month.<\/li>\n
                  • DD<\/code> represents a subdirectory that contains a process\u2019s log for a specific day of the month.<\/li>\n<\/ul>\n
                    \n
                    Note:<\/div>\n
                    \n
                    To interpret the data, use the \/usr\/local\/cpanel\/bin\/dcpumonview<\/code> file.<\/p>\n<\/p><\/div>\n<\/div>\n
                    \n
                    \n\n\n
                    \n
                    1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span>7\n<\/span><\/code><\/pre>\n<\/td>\n
                    		\n
                    ximstats=<\/span>0=<\/span>0=<\/span>0<\/span>.456462908976875=<\/span>0<\/span>.002==<\/span>0<\/span>.001==<\/span>0=<\/span>\nmailman=<\/span>0<\/span>.0664235356972792=<\/span>5<\/span>.17983251838002=<\/span>0=<\/span>12<\/span>.0=<\/span>\/usr\/local\/cpanel\/3rdparty\/bin\/python -S \/usr\/local\/cpanel\/3rdparty\/mailman\/cron\/checkdbs=<\/span>6<\/span>.5=[<\/span>python]=<\/span>0<\/span>.5=<\/span>crond\nmailnull=<\/span>0=<\/span>0<\/span>.0561016968838195=<\/span>0=<\/span>0<\/span>.002==<\/span>0<\/span>.001==<\/span>0=<\/span>\nmysql=<\/span>0=<\/span>8<\/span>.99548891392477=<\/span>0=<\/span>0<\/span>.002==<\/span>0<\/span>.001==<\/span>0=<\/span>\nnamed=<\/span>0=<\/span>0<\/span>.311152278191386=<\/span>0=<\/span>0<\/span>.002==<\/span>0<\/span>.001==<\/span>0=<\/span>\nnobody=<\/span>0=<\/span>2<\/span>.77735281478296=<\/span>0=<\/span>0<\/span>.002==<\/span>0<\/span>.001==<\/span>0=<\/span>\nroot=<\/span>5<\/span>.87086377309829=<\/span>24<\/span>.591731611285=<\/span>2=<\/span>90<\/span>.5=<\/span>\/usr\/lib\/rpm\/rpmd --rebuilddb --verbose --verbose --verbose=<\/span>43<\/span>.0=<\/span>cpanellogd - waiting for<\/span> child to process logs=<\/span>41<\/span>.0=<\/span>\/usr\/bin\/python \/usr\/sbin\/statsnotifer check-admin<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                    \/var\/log\/munin<\/code><\/h4>\n
                    This file contains the account\u2019s Munin logs. Munin is a plugin that displays information about CPU, Exim, Apache, MySQL usage, and other information with the rrdtool<\/code> utility.<\/p>\n
                    \n
                    \n\n\n
                    \n
                    1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
                    		\n
                    munin-html.log\nmunin-limits.log\nmunin-update.log<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                    MySQL<\/h2>\n
                    \/var\/log\/mysqld.log<\/code><\/h4>\n
                    This file contains information about the cPanel account\u2019s MySQL databases and errors in MySQL 5.7 and later and MariaDB 10.3 and later.<\/p>\n
                    \n
                    Note:<\/div>\n
                    \n
                    HOSTNAME<\/code> represents the server\u2019s hostname.<\/p>\n<\/p><\/div>\n<\/div>\n
                    \n
                    \n\n\n
                    \n
                    1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
                    		\n
                    151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> InnoDB: Waiting for<\/span> purge to start\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> InnoDB:  Percona XtraDB (<\/span>http:\/\/www.percona.com)<\/span> 5<\/span>.6.26-74.0 started; log sequence number 145713856<\/span>\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> Plugin 'FEEDBACK'<\/span> is disabled.\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> Server socket created on IP: '::'<\/span>.\n151030<\/span>  2<\/span>:57:11 [<\/span>Note]<\/span> \/usr\/sbin\/mysqld: ready for<\/span> connections.\nVersion: '10.0.22-MariaDB'<\/span>  socket: '\/var\/lib\/mysql\/mysql.sock'<\/span>  port: 3306<\/span>  MariaDB Server<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                    \/var\/lib\/mysql\/HOSTNAME.err<\/code><\/h4>\n
                    This file contains information about the cPanel account\u2019s MySQL databases and errors in MySQL 5.6 and earlier and MariaDB 10.2 and earlier.<\/p>\n
                    \n
                    Note:<\/div>\n
                    \n
                    HOSTNAME<\/code> represents the server\u2019s hostname.<\/p>\n<\/p><\/div>\n<\/div>\n
                    \n
                    \n\n\n
                    \n
                    1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span><\/code><\/pre>\n<\/td>\n
                    		\n
                    151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> InnoDB: Waiting for<\/span> purge to start\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> InnoDB:  Percona XtraDB (<\/span>http:\/\/www.percona.com)<\/span> 5<\/span>.6.26-74.0 started; log sequence number 145713856<\/span>\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> Plugin 'FEEDBACK'<\/span> is disabled.\n151030<\/span>  2<\/span>:57:10 [<\/span>Note]<\/span> Server socket created on IP: '::'<\/span>.\n151030<\/span>  2<\/span>:57:11 [<\/span>Note]<\/span> \/usr\/sbin\/mysqld: ready for<\/span> connections.\nVersion: '10.0.22-MariaDB'<\/span>  socket: '\/var\/lib\/mysql\/mysql.sock'<\/span>  port: 3306<\/span>  MariaDB Server<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                    Webservers<\/h2>\n
                    Apache<\/h3>\n
                    \n
                    Note:<\/div>\n
                    \n
                    If your system manages many domains, we recommend that you enable piped logging to reduce the number of log files that Apache manages. Piped logging allows you to pipe Apache access logs to a separate process so that Apache does not need to restart every time that it processes the logs.<\/p>\n
                      \n
                    • You can enable piped logging in the Piped Log Configuration<\/em> section of WHM\u2019s Apache Configuration<\/em> interface (WHM >> Home  >> Service Configuration >> Apache Configuration<\/em>).<\/li>\n
                    • As of cPanel & WHM version 74, we enable piped logging by default on new installations of cPanel & WHM.<\/li>\n<\/ul><\/div>\n<\/div>\n
                      \/usr\/local\/apache\/domlogs\/username<\/code><\/h4>\n
                      This directory contains the log data for the user\u2019s account, which exists on a webserver that runs EasyApache 3.<\/p>\n
                      \n
                      Note:<\/div>\n
                      \n        We removed EasyApache 3 in cPanel & WHM version 78. For more information, read the cPanel Deprecation Plan.\n    <\/div>\n<\/div>\n
                      The system creates this directory when the cPanel Log Rotation Configuration (cpanellogd<\/code>) daemon compresses and archives the data that resides in the \/usr\/local\/apache\/domlogs\/domain-ssl_log<\/code> and the \/usr\/local\/apache\/domlogs\/domain<\/code> files. This process begins when the \/usr\/local\/cpanel\/scripts\/upcp<\/code> script runs and the system analyzes the log data.<\/p>\n
                      \n
                      Note:<\/div>\n
                      \n
                      You can also perform this process for individual users with the \/usr\/local\/cpanel\/scripts\/runweblogs<\/code> command.<\/p>\n<\/p><\/div>\n<\/div>\n
                      The system also performs the following actions:<\/p>\n
                        \n
                      • Adds a link to the \/usr\/local\/apache\/domlogs\/username<\/code> directory in the \/home\/username\/access_logs<\/code> directory.<\/li>\n
                      • Adds a symlink to the log data backup file in the user\u2019s \/home\/username\/logs<\/code> directory during the archive process.\n
                          \n
                        • This symlink allows you to access this file while the system archives the file.<\/li>\n
                        • The symlink\u2019s name reflects the log file\u2019s name, and may contain a .bkup<\/code> file extension.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
                          \n
                          Note:<\/div>\n
                          \n
                            \n
                          • domain<\/code> represents a domain on the cPanel account.<\/li>\n
                          • username<\/code> represents the cPanel account\u2019s username.<\/li>\n<\/ul><\/div>\n<\/div>\n
                            \n
                            \n\n\n
                            \n
                            1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span><\/code><\/pre>\n<\/td>\n
                            		\n
                            94<\/span>.228.34.208 - - [<\/span>19<\/span>\/Nov\/2015:08:45:09 -0600]<\/span> \"GET \/robots.txt HTTP\/1.1\"<\/span> 302<\/span> 235<\/span> \"-\"<\/span> \"robots\"<\/span>\n94<\/span>.228.34.208 - - [<\/span>19<\/span>\/Nov\/2015:08:45:09 -0600]<\/span> \"GET \/cgi-sys\/suspendedpage.cgi HTTP\/1.1\"<\/span> 200<\/span> 7314<\/span> \"-\"<\/span> \"robots\"<\/span>\n94<\/span>.228.34.208 - - [<\/span>19<\/span>\/Nov\/2015:08:45:10 -0600]<\/span> \"GET \/forums\/forumdisplay.php?f=5 HTTP\/1.1\"<\/span> 302<\/span> 239<\/span> \"-\"<\/span> \"magpie-crawler\/1.1 (U; Linux amd64; en-GB; +\"<\/span>      \n94<\/span>.228.34.208 - - [<\/span>19<\/span>\/Nov\/2015:08:45:10 -0600]<\/span> \"GET \/cgi-sys\/suspendedpage.cgi?f=5 HTTP\/1.1\"<\/span> 200<\/span> 7314<\/span> \"-\"<\/span> \"magpie-crawler\/1.1 (U; Linux amd64; en-GB; +\"<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                            \/var\/log\/apache2\/modsec_audit.log<\/code><\/h4>\n
                            This file contains the log information for ModSecurity\u00ae.<\/p>\n
                            \n
                            Important:<\/div>\n
                            \n
                            If the Apache MPM_ITK module or Mod_Ruid2 is enabled, you can access the logs in the \/usr\/local\/apache\/modsec_audit\/user<\/code> directory.<\/p>\n<\/p><\/div>\n<\/div>\n
                            \n
                            \n\n\n
                            \n
                            1\n<\/span><\/code><\/pre>\n<\/td>\n
                            		\n
                            ModSecurity: Audit log: Failed to lock global mutex: Identifier removed [<\/span>hostname \"www.somedomain.co.uk\"<\/span>]<\/span> [<\/span>uri \"\/index.<a href=\"<\/span>http:\/\/endlessgeek.com\/glossary\/php\/\" title=\"<\/span>Glossary: PHP\"  data-tooltip=\"<\/span>PHP Hypertext Processor - originally Personal Home Page\"  class=\"<\/span>glossaryLink \">php<\/a>\"<\/span>]<\/span> [<\/span>unique_id \"U61fRE1KBCIADWZddE8AAAAP\"<\/span>]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                            \/var\/log\/apache2\/suexec_log<\/code><\/h4>\n
                            This file contains information about suEXEC audit logs. This is useful, for example, to diagnose internal server errors that do not produce relevant information in the error log.<\/p>\n
                            \n
                            Note:<\/div>\n
                            \n
                            You can also view Apache\u2019s error logs in cPanel\u2019s Errors<\/em> interface (cPanel >> Home >> Metrics >> Errors<\/em>).<\/p>\n<\/p><\/div>\n<\/div>\n
                            \n
                            \n\n\n
                            \n
                            1\n<\/span><\/code><\/pre>\n<\/td>\n
                            		\n
                            [<\/span>Wed Nov 04<\/span> 09<\/span>:55:01 2015<\/span>]<\/span> [<\/span>error]<\/span> [<\/span>client 127<\/span>.0.0.1]<\/span> ModSecurity: Warning. Operator GE matched 5<\/span> at TX:inbound_anomaly_score. [<\/span>file \"\/usr\/local\/apache\/conf\/modsec_vendor_configs\/OWASP\/rules\/RESPONSE-80-CORRELATION.conf\"<\/span>]<\/span> [<\/span>line \"35\"<\/span>]<\/span> [<\/span>id \"981204\"<\/span>]<\/span> [<\/span>msg \"Inbound Anomaly Score Exceeded (Total Inbound Score: 5): Request Missing a User Agent Header\"<\/span>]<\/span> [<\/span>tag \"Host: \"<\/span>]<\/span> [<\/span>hostname \"example.com\"<\/span>]<\/span> [<\/span>uri \"\/whm-server-status\"<\/span>]<\/span> [<\/span>unique_id \"VjoqVQoBZCMAA7qYOM4AAAAF\"<\/span>]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                            \/var\/log\/apache2\/suphp_log<\/code><\/h4>\n
                            This file contains information about the suPHP Apache module audit logs. This is useful, for example, to diagnose internal server errors that do not produce relevant information in the error log.<\/p>\n
                            \n
                            \n\n\n
                            \n
                            1\n<\/span>2\n<\/span>3\n<\/span>4\n<\/span>5\n<\/span>6\n<\/span>7\n<\/span><\/code><\/pre>\n<\/td>\n
                            		\n
                            [<\/span>Sat Sep 12<\/span> 22<\/span>:16:39 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/member.php\"<\/span> as UID 563<\/span>, GID 563<\/span>    \n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:39 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/member.php\"<\/span> as UID 563<\/span>, GID 563<\/span>\n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:42 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/forums\/index.php\"<\/span> as UID 554<\/span>, GID 554<\/span>  \n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:43 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/member.php\"<\/span> as UID 563<\/span>, GID 563<\/span>    \n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:43 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/forums\/index.php\"<\/span> as UID 554<\/span>, GID 554<\/span>  \n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:43 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/forums\/index.php\"<\/span> as UID 554<\/span>, GID 554<\/span>      \n[<\/span>Sat Sep 12<\/span> 22<\/span>:16:43 2015<\/span>]<\/span> [<\/span>info]<\/span> Executing \"\/home\/test\/public_html\/forums\/index.php\"<\/span> as UID 554<\/span>, GID 554<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                            \/var\/log\/apache2\/mod_jk.log<\/code><\/h4>\n
                            This file contains the Tomcat connection logs.<\/p>\n
                            \n
                            \n\n\n
                            \n
                            1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
                            		\n
                            [<\/span>Mon Dec 07<\/span> 12<\/span>:49:33 2015<\/span>][<\/span>1234<\/span>:274957687980737]<\/span> [<\/span>info]<\/span> ajp_handle_cping_cpong::jk_ajp_common.c (<\/span>913<\/span>)<\/span>: timeout in reply\n[<\/span>Mon Dec 07<\/span> 12<\/span>:49:33 2015<\/span>][<\/span>8534<\/span>:1058674928674576]<\/span> [<\/span>info]<\/span> ajp_handle_cping_cpong::jk_ajp_common.c (<\/span>913<\/span>)<\/span>: timeout in reply<\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
                            \/var\/log\/apache2\/error_log<\/code><\/h4>\n
                            This file contains the error logs for webservers and CGI Applications.<\/p>\n
                            \n
                            [<\/span>Wed Nov 04<\/span> 09<\/span>:55:01 2015<\/span>]<\/span> [<\/span>error]<\/span> [<\/span>client 127<\/span>.0.0.1]<\/span> ModSecurity: Warning. Operator GE matched 5<\/span> at TX:inbound_anomaly_score. [<\/span>file \"\/usr\/local\/apache\/conf\/modsec_vendor_configs\/OWASP\/rules\/RESPONSE-80-CORRELATION.conf\"<\/span>]<\/span> [<\/span>line \"35\"<\/span>]<\/span> [<\/span>id \"981204\"<\/span>]<\/span> [<\/span>msg \"Inbound Anomaly Score Exceeded (Total Inbound Score: 5): Request Missing a User Agent Header\"<\/span>]<\/span> [<\/span>tag \"Host: \"<\/span>]<\/span> [<\/span>hostname \"example.com\"<\/span>]<\/span> [<\/span>uri \"\/whm-server-status\"<\/span>]<\/span> [<\/span>unique_id \"VjoqVQoBZCMAA7qYOM4AAAAF\"<\/span>]<\/span><\/code><\/pre>\n<\/div>\n
                            Tomcat<\/h3>\n
                            EasyApache 4 supports Tomcat 8.5. For more information, read our Introduction to Tomcat documentation.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
                            Overview This document describes the location of all of the log files in cPanel & WHM, Webmail, and MySQL\u00ae. This document also provides examples of each log file. Note: The directories and files in this document reflect unaltered configurations on CentOS, CloudLinux\u2122, AlmaLinux, RedHat Enterprise Linux (RHEL), and Amazon Linux. You can alter a log …<\/p>\n","protected":false},"author":1,"featured_media":323,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/322"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=322"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/322\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/323"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}