If you want to monitor the incoming traffic for your sites, you can simply tail the access logs for each domain name. You can also tail the domlogs to monitor the whole incoming traffic on your server.
The directory is: /usr/local/apache/domlogs/username
This directory contains the log data for the user’s account, which exists on a webserver that runs EasyApache 3.
The system creates this directory when the cPanel Log Rotation Configuration (cpanellogd) daemon compresses and archives the data that resides in the /usr/local/apache/domlogs/domain-ssl_log and the /usr/local/apache/domlogs/domain files. This process begins when the /usr/local/cpanel/scripts/upcp script runs and the system analyzes the log data.
You can also perform this process for individual users with the /usr/local/cpanel/scripts/runweblogs command.
The system also performs the following actions:
Adds a link to the /usr/local/apache/domlogs/username directory in the /home/username/access_logs directory.
Adds a symlink to the log data backup file in the user’s /home/username/logs directory during the archive process. This symlink allows you to access this file while the system archives the file.
The symlink’s name reflects the log file’s name, and may contain a .bkup file extension.
domain represents a domain on the cPanel account.
username represents the cPanel account's username.
Let me know if you have any questions.