ACCESS LOGS AND USER ACTIONS
/usr/local/cpanel/logs/access_log

ACCOUNT TRANSFERS AND MISC. LOGS
/var/cpanel/logs

AUDITING LOG (ACCOUNT CREATIONS, DELETIONS, ETC)
/var/cpanel/accounting.log

BACKUP LOGS
/usr/local/cpanel/logs/cpbackup

BRUTE FORCE PROTECTION (CPHULKD) LOG
/usr/local/cpanel/logs/cphulkd.log

CPANEL DNSADMIN DNS CLUSTERING DAEMON
/usr/local/cpanel/logs/dnsadmin_log

CPANEL TASKQUEUE PROCESSING DAEMON
/usr/local/cpanel/logs/queueprocd.log

DBMAPPING
/usr/local/cpanel/logs/setupdbmap_log

EASYAPACHE BUILD LOGS
/usr/local/cpanel/logs/easy/apache/

ERROR LOG
/usr/local/cpanel/logs/error_log

INSTALLATION LOG
/var/log/cpanel

LICENSE UPDATES AND ERRORS
/usr/local/cpanel/logs/license_log

LOCALE DATABASE MODIFICATIONS
/usr/local/cpanel/logs/build_locale_database_log

LOGIN ERRORS (CPSRVD)
/usr/local/cpanel/logs/login_log

HORDE
/var/cpanel/horde/log/

ROUNDCUBE
/var/cpanel/roundcube/log/

SQUIRRELMAIL
/var/cpanel/squirrelmail/

PANIC LOG
/usr/local/cpanel/logs/panic_log

PER ACCOUNT BANDWIDTH HISTORY (CACHED)
/var/cpanel/bandwidth.cache/{USERNAME}

PER ACCOUNT BANDWIDTH HISTORY (HUMAN READABLE)
/var/cpanel/bandwidth/{USERNAME}

SERVICE STATUS LOGS
/var/log/chkservd.log

TAILWATCH DRIVER TAILWATCHD LOG
/usr/local/cpanel/logs/tailwatch_log

UPDATE ANALYSIS REPORTING
/usr/local/cpanel/logs/updated_analysis/{TIMESTAMP}.log

UPDATE (UPCP) LOG
/var/cpanel/updatelogs/updated.{TIMESTAMP}.log

WEBDISK (CPDAVD)
/usr/local/cpanel/logs/cpdavd_error_log

WEBSITE STATISTICS LOG
/usr/local/cpanel/logs/stats_log

cPanel access log

ACCESS LOGS AND USER ACTIONS
/usr/local/cpanel/logs/access_log

cPanel apache log

APACHE RESTARTS DONE THROUGH CPANEL AND WHM
/usr/local/cpanel/logs/safeapcherestart_log

DOMAIN ACCESS LOGS
/usr/local/apache/domlogs/{DOMAIN}

PROCESSING OF LOG SPLITTING
/usr/local/cpanel/logs/splitlogs_log

SUPHP AUDIT LOG
/usr/local/apache/logs/suphp_log

WEB SERVER AND CGI APPLICATION ERROR LOG
/usr/local/apache/logs/error_log

cPanel email log

DELIVERY AND RECEIPT LOG
/var/log/exim_mainlog

INCOMING MAIL QUEUE
/var/spool/exim/input/

LOG OF MESSAGES REJECTED BASED ON ACLS OR OTHER POLICIES
/var/log/exim_rejectlog

UNEXPECTED/FATAL ERROR LOG
/var/log/exim_paniclog

IMAP, POP LOGIN ATTEMPTS, TRANSACTIONS, FATAL ERRORS AND SPAM SCORING
/var/log/maillog
/var/log/messages

MAILMAN
/usr/local/cpanel/3rdparty/mailmain/logs

MySQL log

MYSQL ERROR LOG
/var/lib/mysql/{SERVER_NAME}.err

MYSQL SLOW QUERY LOG (IF ENABLED IN MY.CNF)
/var/log/slowqueries