{"id":14903,"date":"2025-10-28T23:24:28","date_gmt":"2025-10-29T05:24:28","guid":{"rendered":"https:\/\/www.supportpro.com\/blog\/?p=14903"},"modified":"2025-10-28T23:38:06","modified_gmt":"2025-10-29T05:38:06","slug":"from-logs-to-reports-everything-you-need-to-know-about-monitoring-cpguard-activity","status":"publish","type":"post","link":"https:\/\/www.supportpro.com\/blog\/from-logs-to-reports-everything-you-need-to-know-about-monitoring-cpguard-activity\/","title":{"rendered":"From Logs to Reports: Everything You Need to Know About Monitoring CPGuard Activity"},"content":{"rendered":"\n<p>When you\u2019re managing a server, CPGuard is one of those tools you install once and forget about. It runs quietly in the background by scanning files, blocking malware, and keeping your hosting setup safe. But now and then, something acts up, or you just want to check what\u2019s been going on under the hood.<br><br>This guide helps you at this point. ll walk you through how to read and understand CPGuard\u2019s logs from the command line on a Linux server. You\u2019ll see where the log files are stored, how to spot malware detection, and how to pull quick reports to make sure your server\u2019s security is still in good shape.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>When you\u2019re digging through server issues, you end up staring at the CLI logs and reports. At first, yeah, they look like a wall of numbers and messages. It\u2019s easy to feel lost if you\u2019re not used to it. But once you get how CPGuard sorts everything, these logs turn into lifesavers. They\u2019re where you figure out what\u2019s going on or just keep an eye on your server\u2019s health.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>So, what exactly do you get in these CPGuard CLI logs?<\/strong><\/h2>\n\n\n\n<p>Honestly, they\u2019re like CPGuard\u2019s own running journal. Every scan, every bit of malware it catches, every move it makes\u2014it logs everything. Got a question about what happened, or why something broke? The answer\u2019s probably in there.<\/p>\n\n\n\n<p><strong>Here\u2019s where you\u2019ll find the main log files:<\/strong><\/p>\n\n\n\n<p>\/usr\/local\/cpguard\/logs\/<\/p>\n\n\n\n<p>Inside that folder, you\u2019ll see a bunch of files, each tracking something different:<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<ul class=\"wp-block-list\">\n<li>cpguard.log: This is the big one. It has almost everything\u2014scans, updates, actions\u2014the whole play-by-play.<\/li>\n\n\n\n<li>malware.log: All about malware. Whenever CPGuard finds, quarantines, or deletes something suspicious, it shows up here.<\/li>\n\n\n\n<li>scan.log: Logs every scan. Manual, scheduled, progress, results\u2014if it\u2019s a scan, it lands here.<\/li>\n\n\n\n<li>license.log: This one\u2019s for license checks. If you ever run into a license issue, start with this file.<\/li>\n\n\n\n<li>update.log: Tracks updates, both for malware signatures and the software itself. If an update fails or goes through, you\u2019ll see it here.<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<p>Once you know where to look, you\u2019ll stop dreading the logs. They\u2019re the best way to see what CPGuard\u2019s been up to.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Running CPGuard from the Command Line<\/strong><\/h2>\n\n\n\n<p>You don\u2019t have to stick with the GUI. The <a href=\"https:\/\/www.supportpro.com\/blog\/how-to-use-cpguard-cli-for-powerful-server-protection\/\" title=\"\">CLI <\/a>commands are perfect when you\u2019re on SSH or managing a headless server. Here are some handy ones:<\/p>\n\n\n\n<p>cpguard &#8211;status<\/p>\n\n\n\n<p>Shows you if CPGuard is running smoothly.<\/p>\n\n\n\n<p>cpguard &#8211;scan \/path\/to\/directory<\/p>\n\n\n\n<p>Runs a manual scan on whatever directory you point it at. Results show up right in your terminal.<\/p>\n\n\n\n<p>cpguard &#8211;report <\/p>\n\n\n\n<p>Gives you a summary report of recent detections.<\/p>\n\n\n\n<p>cpguard &#8211;update<\/p>\n\n\n\n<p>Manually updates malware signatures or rules.<\/p>\n\n\n\n<p>Every time you run one of these, CPGuard leaves a record in the logs. So you\u2019re never in the dark about what\u2019s been done.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How to Read the Logs<\/strong><\/h2>\n\n\n\n<p>Open a log, and you\u2019ll see lines packed with timestamps, file paths, and messages. For example:<\/p>\n\n\n\n<p>[2025-10-28 03:12:17] [SCAN] File \/home\/user\/public_html\/index.php infected with PHP.Shell<\/p>\n\n\n\n<p>[2025-10-28 03:12:17] [ACTION] Quarantined file to \/usr\/local\/cpguard\/quarantine\/<\/p>\n\n\n\n<p>Here\u2019s what\u2019s what:<\/p>\n\n\n\n<p><strong>Timestamp: When it happened.<\/strong><\/p>\n\n\n\n<p>Type: What kind of event\u2014scan, action, update, info.<\/p>\n\n\n\n<p>Details: Which file or process it involved, and what was done.<\/p>\n\n\n\n<p>If you\u2019re troubleshooting, search for keywords like ERROR, FAILED, or INFECTED. They jump right out and point you to the problem.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Reports: The Big Picture<\/strong><\/h2>\n\n\n\n<p>Logs are great for detail, but sometimes you just want a summary. That\u2019s what reports are for. Generate one with:<\/p>\n\n\n\n<p>cpguard &#8211;report<\/p>\n\n\n\n<p>A typical report shows:<\/p>\n\n\n\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<ul class=\"wp-block-list\">\n<li>How many files got scanned<\/li>\n\n\n\n<li>Number of infected files found<\/li>\n\n\n\n<li>Actions taken\u2014quarantine, delete, etc.<\/li>\n\n\n\n<li>When the last update ran<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<p><strong>Signature version<\/strong><\/p>\n\n\n\n<p>It\u2019s a quick way to check if everything\u2019s working and nothing slipped through. If you\u2019ve set up automated reporting, CPGuard can even email these to you on a schedule. Makes life easier for admins who don\u2019t want to dig through logs every day.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Troubleshooting with Logs<\/strong><\/h2>\n\n\n\n<p>When something\u2019s off, the logs are your best friend. For example:<\/p>\n\n\n\n<p>Update not working? Check update.log for network or permission errors.<\/p>\n\n\n\n<p>License problems? License.log will show if the server can\u2019t reach CPGuard\u2019s API.<\/p>\n\n\n\n<p>Missing <a href=\"https:\/\/www.supportpro.com\/freecheckup.php\" title=\"\">malware <\/a>detections? Scan.log might reveal a skipped directory or file.<\/p>\n\n\n\n<p>You can speed things up with grep. For example:<\/p>\n\n\n\n<p>grep &#8220;INFECTED&#8221; \/usr\/local\/cpguard\/logs\/malware.log<\/p>\n\n\n\n<p>That\u2019ll pull up every infected file detection, instantly.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Wrapping Up<\/strong><\/h2>\n\n\n\n<p>You don\u2019t have to remember every single log file or command. What really matters is knowing where to look when something comes up. Maybe you\u2019re chasing down a scan problem, checking if cleanup worked, or just making sure your server\u2019s behaving\u2014CPGuard\u2019s logs and reports lay it all out. Above all <a href=\"https:\/\/www.supportpro.com\/dedicatedstaff.php\" title=\"\">SupportPRO <\/a>can help you out with any requirements, which will make things better for you, so that none of the technical hurdles are cleared through us. <\/p>\n\n\n\n<p>So if things feel weird, dive to <a href=\"https:\/\/www.supportpro.com\/softwareinstallation.php\" title=\"\">SupportPRO<\/a>. Odds are, you\u2019ll get your answer way faster than you expect.<\/p>\n\n\n\n<div class=\"wp-block-media-text alignwide has-media-on-the-right is-stacked-on-mobile is-vertically-aligned-center has-white-background-color has-background\"><div class=\"wp-block-media-text__content\">\n<p class=\"has-large-font-size\">Facing issues? <\/p>\n\n\n\n<p class=\"has-large-font-size\">Our technical support<br>engineers can solve it. <\/p>\n\n\n\n<!--HubSpot Call-to-Action Code --><span class=\"hs-cta-wrapper\" id=\"hs-cta-wrapper-3350a795-db50-482f-9911-301930d1b1be\"><span class=\"hs-cta-node hs-cta-3350a795-db50-482f-9911-301930d1b1be\" id=\"hs-cta-3350a795-db50-482f-9911-301930d1b1be\"><!--[if lte IE 8]><div id=\"hs-cta-ie-element\"><\/div><![endif]--><a href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/2725694\/3350a795-db50-482f-9911-301930d1b1be\" ><img decoding=\"async\" class=\"hs-cta-img\" id=\"hs-cta-img-3350a795-db50-482f-9911-301930d1b1be\" style=\"border-width:0px;\" src=\"https:\/\/no-cache.hubspot.com\/cta\/default\/2725694\/3350a795-db50-482f-9911-301930d1b1be.png\"  alt=\"Contact Us today!\"\/><\/a><\/span><script charset=\"utf-8\" src=\"https:\/\/js.hscta.net\/cta\/current.js\"><\/script><script type=\"text\/javascript\"> hbspt.cta.load(2725694, '3350a795-db50-482f-9911-301930d1b1be', {\"useNewLoader\":\"true\",\"region\":\"na1\"}); <\/script><\/span><!-- end HubSpot Call-to-Action Code -->\n<\/div><figure class=\"wp-block-media-text__media\"><img fetchpriority=\"high\" decoding=\"async\" width=\"904\" height=\"931\" src=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png\" alt=\"guy server checkup\" class=\"wp-image-12943 size-full\" srcset=\"https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup.png 904w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-291x300.png 291w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-768x791.png 768w, https:\/\/www.supportpro.com\/blog\/wp-content\/uploads\/2022\/09\/Free-server-checkup-585x602.png 585w\" sizes=\"(max-width: 904px) 100vw, 904px\" \/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>When you\u2019re managing a server, CPGuard is one of those tools you install once and forget about. It runs quietly in the background by scanning files, blocking malware, and keeping&hellip;<\/p>\n","protected":false},"author":4,"featured_media":14904,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[194,195,4],"tags":[],"class_list":["post-14903","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dedicated-server-support","category-server-management","category-server-security"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/14903","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/comments?post=14903"}],"version-history":[{"count":2,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/14903\/revisions"}],"predecessor-version":[{"id":14907,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/posts\/14903\/revisions\/14907"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media\/14904"}],"wp:attachment":[{"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/media?parent=14903"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/categories?post=14903"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.supportpro.com\/blog\/wp-json\/wp\/v2\/tags?post=14903"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}