Log File Locations ================== .. note:: While most of the logs listed below can be viewed on the respective :doc:`NodeWorx ` or :doc:`SiteWorx ` log pages, when troubleshooting, it is recommended to use a CLI text editor, or command line search tools, instead. .. contents:: InterWorx-Specific Logs ----------------------- Most InterWorx-specific log files are located in the ``/home/interworx/var/log`` or ``~iworx/var/log`` directory. Commonly used logs are: - **InterWorx Task and Error Log**: ``/home/interworx/var/log/iworx.log`` or ``~iworx/var/log/iworx.log`` - This log should be used when troubleshooting any errors that may arise when completing tasks in InterWorx - **InterWorx Internal Apache Error Log**: ``/home/interworx/var/log/error.log`` or ``~iworx/var/log/error.log`` - InterWorx includes its own, internal Apache instance, separate from the system-level Apache instance - This log should be used for troubleshooting Apache errors in the GUI (port 2443). For example, a 403 error when accessing InterWorx (not to be confused with a 403 error appearing for a domain) - **InterWorx API Log**: ``/home/interworx/var/log/api.log`` or ``~iworx/var/log/api.log`` - **InterWorx Internal Apache Access Log**: ``/home/interworx/var/log/access.log`` or ``~iworx/var/log/access.log`` - InterWorx includes its own, internal Apache instance, separate from the system-level Apache instance - This log is used for logging access to the GUI (port 2443). If there is a DDOS attack on the server over port 2443, IP information for access attempts are located in this log - **InterWorx Cron Log**: ``/home/interworx/var/log/cron.log`` or ``~iworx/var/log/cron.log`` - This log is used for logging InterWorx cron jobs (not to be confused with user cron jobs) - **InterWorx Internal MySQL Error Log**: ``/home/interworx/mysql/error.log`` or ``~iworx/mysql/error.log`` - InterWorx includes its own, internal MariaDB instance, separate from the system-level MySQL or MariaDB instance - This log is use for logging errors related to the internal InterWorx database (not to be confused with the system-level MySQL/MariaDB instance or user databases) - **InterWorx Internal PHP Error Log**: ``/var/opt/iworx/iworxphp72/log/php-fpm/error.log`` - InterWorx includes its own, internal PHP version, separate from the system-level PHP version - This log is use for logging errors related to the internal InterWorx PHP version (not to be confused with the system-level PHP version) Mail Logs --------- - **SMTP Log**: ``/var/log/smtp/`` - The logs in this directory are used for logging SMTP connections. If the Dovecot MSA is not enabled, it logs connections over port 25 and 587. If the Dovecot MSA is enabled, these log only logs connections over port 25 - ``/var/log/smtp/current`` is where the most recent logging is located - These log files use TAI64N timestamps. Information on how to convert these timestamps to a human-readable format can be found :doc:`here ` - **Dovecot Log**: ``/var/log/dovecot/dovecot.log`` - This log is used for IMAP and POP3 connections. If the Dovecot MSA is enabled, it also logs connections over port 587 and 465 - **Mail Traffic Log**: ``/var/log/send/`` - The logs in this directory are where detailed errors and information related to sending and receiving messages will be found. It is also the first place that should be checked when experiencing mail queue issues - ``/var/log/send/current`` is where the most recent logging is located - These log files use TAI64N timestamps. Information on how to convert these timestamps to a human-readable format can be found :doc:`here ` - **SpamAssassin Log**: ``/var/log/maillog`` - **ClamAV Log**: ``/var/log/clamav/clamd.log`` - **Freshclam Log**: ``/var/log/clamav/freshclam.log`` - **Horde Log**: ``/home/interworx/var/log/horde.log`` or ``~iworx/var/log/horde.log`` - **Roundcube Error Log**: ``/usr/local/interworx/lib/roundcube/logs/error`` - **Mailman Logs**: ``/var/log/mailman/`` Other Service Log Locations --------------------------- - **FTP/SFTP Logs**: ``/var/log/proftpd/`` - **System-Level PHP-FPM Logs**: ``/var/log/php-fpm/`` - **Multiple PHP Version PHP-FPM Logs**: - **PHP 5.x Versions**: ``/opt/remi/php{version}/root/var/log/php-fpm/``, replacing ``{version}`` with the PHP version. For example, the error log for version 5.6 is located at ``/opt/remi/php56/var/log/php-fpm/error.log`` - **PHP 7.x Versions**: ``/var/opt/remi/php{version}/log/php-fpm/``, replacing ``{version}`` with the PHP version. For example, the error log for version 7.4 is located at ``/var/opt/remi/php74/log/php-fpm/error.log`` - **PHP 8.x Versions**: ``/var/opt/remi/php{version}/log/php-fpm/``, replacing ``{version}`` with the PHP version. For example, the error log for version 8.1 is located at ``/var/opt/remi/php81/log/php-fpm/error.log`` - **System-Level MySQL/MariaDB logs**: ``/var/log/mysql/`` or ``/var/log/mariadb/`` - **System-level Apache logs**: ``/var/log/httpd/`` - **User Cron Log**: ``/var/log/cron`` - **Yum Log**: ``/var/log/yum.log`` - **APF Firewall Log**: ``/var/log/apf_log`` Let's Encrypt Logs ------------------ Most Let's Encrypt log files are located in the ``/var/log/letsencrypt/`` directory. - **Last Certificate Attempt Log**: ``/var/log/letsencrypt/letsencrypt.log`` - **Let's Encrypt Renewal Log**: ``/var/log/letsencrypt/letsencrypt-renew.log`` - **Domain-level Let's Encrypt Logs**: ``/home/{unixuser}/var/{domain.com}/logs/`` - Replace ``{unixuser}`` and ``{domain.com}`` with the corresponding information - **AutoSSL Logging**: ``/home/interworx/var/log/cron.log`` or ``~iworx/var/log/cron.log`` as part of the InterWorx Daily cron Domain-Level Apache Logging --------------------------- .. note:: Domain-level error logging does not appear in the default location of ``/home/{unixuser}/var/{domain.com}/logs`` on LiteSpeed servers. The LiteSpeed logs should be referenced, instead. These can be found at ``/usr/local/lsws/logs/``. - **Domain-Level Traffic Logs**: - Over port 80: ``/home/{unixuser}/var/{domain.com}/logs/transfer.log`` - Over port 443: ``/home/{unixuser}/var/{domain.com}/logs/transfer-ssl.log`` - Replace ``{unixuser}`` and ``{domain.com}`` with the corresponding information - **Domain-Level Error Log**: - Over port 80: ``/home/{unixuser}/var/{domain.com}/logs/error.log`` - Over port 443: ``/home/{unixuser}/var/{domain.com}/logs/error-ssl.log`` - Replace ``{unixuser}`` and ``{domain.com}`` with the corresponding information