Log File Locations

Note

While most of the logs listed below can be viewed on the respective NodeWorx or SiteWorx log pages, when troubleshooting, it is recommended to use a CLI text editor, or command line search tools, instead.

InterWorx-Specific Logs

Most InterWorx-specific log files are located in the /home/interworx/var/log or ~iworx/var/log directory. Commonly used logs are:

  • InterWorx Task and Error Log: /home/interworx/var/log/iworx.log or ~iworx/var/log/iworx.log

    • This log should be used when troubleshooting any errors that may arise when completing tasks in InterWorx

  • InterWorx Internal Apache Error Log: /home/interworx/var/log/error.log or ~iworx/var/log/error.log

    • InterWorx includes its own, internal Apache instance, separate from the system-level Apache instance

    • This log should be used for troubleshooting Apache errors in the GUI (port 2443). For example, a 403 error when accessing InterWorx (not to be confused with a 403 error appearing for a domain)

  • InterWorx API Log: /home/interworx/var/log/api.log or ~iworx/var/log/api.log

  • InterWorx Internal Apache Access Log: /home/interworx/var/log/access.log or ~iworx/var/log/access.log

    • InterWorx includes its own, internal Apache instance, separate from the system-level Apache instance

    • This log is used for logging access to the GUI (port 2443). If there is a DDOS attack on the server over port 2443, IP information for access attempts are located in this log

  • InterWorx Cron Log: /home/interworx/var/log/cron.log or ~iworx/var/log/cron.log

    • This log is used for logging InterWorx cron jobs (not to be confused with user cron jobs)

  • InterWorx Internal MySQL Error Log: /home/interworx/mysql/error.log or ~iworx/mysql/error.log

    • InterWorx includes its own, internal MariaDB instance, separate from the system-level MySQL or MariaDB instance

    • This log is use for logging errors related to the internal InterWorx database (not to be confused with the system-level MySQL/MariaDB instance or user databases)

  • InterWorx Internal PHP Error Log: /var/opt/iworx/iworxphp72/log/php-fpm/error.log

    • InterWorx includes its own, internal PHP version, separate from the system-level PHP version

    • This log is use for logging errors related to the internal InterWorx PHP version (not to be confused with the system-level PHP version)

Mail Logs

  • SMTP Log: /var/log/smtp/

    • The logs in this directory are used for logging SMTP connections. If the Dovecot MSA is not enabled, it logs connections over port 25 and 587. If the Dovecot MSA is enabled, these log only logs connections over port 25

    • /var/log/smtp/current is where the most recent logging is located

    • These log files use TAI64N timestamps. Information on how to convert these timestamps to a human-readable format can be found here

  • Dovecot Log: /var/log/dovecot/dovecot.log

    • This log is used for IMAP and POP3 connections. If the Dovecot MSA is enabled, it also logs connections over port 587 and 465

  • Mail Traffic Log: /var/log/send/

    • The logs in this directory are where detailed errors and information related to sending and receiving messages will be found. It is also the first place that should be checked when experiencing mail queue issues

    • /var/log/send/current is where the most recent logging is located

    • These log files use TAI64N timestamps. Information on how to convert these timestamps to a human-readable format can be found here

  • SpamAssassin Log: /var/log/maillog

  • ClamAV Log: /var/log/clamav/clamd.log

  • Freshclam Log: /var/log/clamav/freshclam.log

  • Horde Log: /home/interworx/var/log/horde.log or ~iworx/var/log/horde.log

  • Roundcube Error Log: /usr/local/interworx/lib/roundcube/logs/error

  • Mailman Logs: /var/log/mailman/

Other Service Log Locations

  • FTP/SFTP Logs: /var/log/proftpd/

  • System-Level PHP-FPM Logs: /var/log/php-fpm/

  • Multiple PHP Version PHP-FPM Logs:

    • PHP 5.x Versions: /opt/remi/php{version}/root/var/log/php-fpm/, replacing {version} with the PHP version. For example, the error log for version 5.6 is located at /opt/remi/php56/var/log/php-fpm/error.log

    • PHP 7.x Versions: /var/opt/remi/php{version}/log/php-fpm/, replacing {version} with the PHP version. For example, the error log for version 7.4 is located at /var/opt/remi/php74/log/php-fpm/error.log

    • PHP 8.x Versions: /var/opt/remi/php{version}/log/php-fpm/, replacing {version} with the PHP version. For example, the error log for version 8.1 is located at /var/opt/remi/php81/log/php-fpm/error.log

  • System-Level MySQL/MariaDB logs: /var/log/mysql/ or /var/log/mariadb/

  • System-level Apache logs: /var/log/httpd/

  • User Cron Log: /var/log/cron

  • Yum Log: /var/log/yum.log

  • APF Firewall Log: /var/log/apf_log

Let’s Encrypt Logs

Most Let’s Encrypt log files are located in the /var/log/letsencrypt/ directory.

  • Last Certificate Attempt Log: /var/log/letsencrypt/letsencrypt.log

  • Let’s Encrypt Renewal Log: /var/log/letsencrypt/letsencrypt-renew.log

  • Domain-level Let’s Encrypt Logs: /home/{unixuser}/var/{domain.com}/logs/

    • Replace {unixuser} and {domain.com} with the corresponding information

  • AutoSSL Logging: /home/interworx/var/log/cron.log or ~iworx/var/log/cron.log as part of the InterWorx Daily cron

Domain-Level Apache Logging

Note

Domain-level error logging does not appear in the default location of /home/{unixuser}/var/{domain.com}/logs on LiteSpeed servers. The LiteSpeed logs should be referenced, instead. These can be found at /usr/local/lsws/logs/.

  • Domain-Level Traffic Logs:

    • Over port 80: /home/{unixuser}/var/{domain.com}/logs/transfer.log

    • Over port 443: /home/{unixuser}/var/{domain.com}/logs/transfer-ssl.log

      • Replace {unixuser} and {domain.com} with the corresponding information

  • Domain-Level Error Log:

    • Over port 80: /home/{unixuser}/var/{domain.com}/logs/error.log

    • Over port 443: /home/{unixuser}/var/{domain.com}/logs/error-ssl.log

      • Replace {unixuser} and {domain.com} with the corresponding information