Logs

Open a site's Logs tab. Choose a source, the number of lines (100–1000) and switch on Live to refresh every 5 seconds.

Source	Location
Nginx access	/var/log/nginx/xaxa/<domain>-access.log
Nginx error	/var/log/nginx/xaxa/<domain>-error.log
App	journalctl -u 'xaxa-<user>@*' (Node.js and Python sites; one unit per instance port)
Slow PHP	/var/log/nginx/xaxa/php-<user>-slow.log (PHP sites)

Slow PHP lists every PHP request that was still running after 5 seconds: the script that handled it and the call stack at that moment, innermost call first. The function names point to the slow part (a query, an external API call, a large loop) without enabling a profiler. The list is empty until the first slow request.

Logs are rotated daily by logrotate and kept for 14 days. The access log is written in 32 KB batches, so a request can take up to 5 seconds to appear.

Each access log line ends with two timings in seconds: rt= is the whole request as nginx saw it, urt= the time PHP-FPM or the app took (- for static files). A high urt= means the application itself is slow (queries, views); a low urt= with a slow page in the browser points to the network or the CDN in between. Vhosts edited by hand keep their own log format.

On the server

tail -f /var/log/nginx/xaxa/example.com-error.log
journalctl -u 'xaxa-example@*' -f

Panel errors are written to /opt/xaxa/storage/logs/laravel-YYYY-MM-DD.log (one file per day).