How to View Webmail Access Logs in cPanel Make it Rain Paper

This article provides a step-by-step guide on how to access and review Webmail logs in cPanel. This can be useful for monitoring user activity and troubleshooting issues.

Prerequisites

• Access to WHM or cPanel with appropriate permissions.
• Basic understanding of command line operations.
• SFTP or SSH access to the server.

Steps to View Webmail Access Logs

1. Log in to your server:

   Use an SSH client to connect to your server with the appropriate credentials.

2. Navigate to the access log:

   The Webmail access logs are located at:

   /usr/local/cpanel/logs/access_log

3. Filter Webmail traffic:

   Webmail traffic is transmitted over port 2096. You can filter Webmail activity by using the following command:

   grep ":2096/" /usr/local/cpanel/logs/access_log

   This command returns entries in the access log that are specifically related to Webmail.

4. Search for specific user activity:

   If you want to check Webmail activity for a specific email account, you need to URL encode the "@" symbol as "%40". Use the following command:

   grep "user%40domain.com" /usr/local/cpanel/logs/access_log

   Replace user@domain.com with the actual email address you wish to check.

Conclusion

By following these steps, you can easily access and filter Webmail access logs in cPanel to track user activity and troubleshoot any issues that may arise.