How to View Server logs on WHM Server using CSF firewall

 
For checking server logs SSH access is not required, you can view the server logs via WHM. From WHM you can watch various system log files if CSF firewall is installed on your cPanel server. There is an option in CSF firewall to tail last few lines of server log files.

1. Log in to WHM as root

Enter username and server root password to access WHM. Type https://YourServer:2087 in the browser to access WHM.

2. Click on “ConfigServer Security & Firewall” Under “Plugins”

Log in to WHM and search for ‘ConfigServer Security & Firewall’ in WHM search window.
 

3. Click on ‘Watch system Logs’ under ‘Server information’

Watch system Logs will tail various system log files (listed in csf.syslogs).

4. Select the ‘Server log’ you want to view

Select the server log you want to view in the dropdown and enter the number of lines to view.

You can view SSH, cPanel, LFD, cron, exim, rkhunter, FTP, modsecurity, chkservd and all log files through CSF.

root@server [/etc/csf]# cat csf.syslogs
# All:
/var/log/cron
/var/log/cxswatch.log
/var/log/lfd.log
/var/log/maillog
/var/log/messages
/var/log/rkhunter.log
/var/log/secure

# Apache:
/usr/local/apache/logs/apache_log
/usr/local/apache/logs/error_log
/usr/local/apache/logs/suexec
/usr/local/apache/logs/suphp_log
/usr/local/apache/logs/modsec_audit.log
/var/log/httpd/access_log
/var/log/httpd/error_log
/var/log/httpd/suexec
/var/log/httpd/suphp_log
/var/log/httpd/modsec_audit.log

# Nginx:
/var/log/nginx/error_log

# Webmin:
/var/webmin/miniserv.error
/var/webmin/miniserv.log
/var/webmin/webmin.log

# Exim:
/var/log/exim/mainlog
/var/log/exim/paniclog
/var/log/exim/rejectlog
/var/log/exim4/mainlog
/var/log/exim4/paniclog
/var/log/exim4/rejectlog
/var/log/exim_mainlog
/var/log/exim_paniclog
/var/log/exim_rejectlog

# Debian/Ubuntu:
/var/log/auth.log
/var/log/daemon.log
/var/log/debug
/var/log/kern.log
/var/log/mysql.err
/var/log/mysql.log
/var/log/syslog
/var/log/user.log

# cPanel:
/usr/local/cpanel/logs/access_log
/usr/local/cpanel/logs/error_log
/usr/local/cpanel/logs/stats_log
/var/log/chkservd.log

# DirectAdmin:
/var/log/directadmin/error.log
/var/log/directadmin/errortaskq.log
/var/log/directadmin/security.log
/var/log/directadmin/system.log