cPanel/WHM Plugins

Omni-ServerLog

AI-powered log intelligence for cPanel/WHM — collect, correlate, investigate and get alerted across every service.

WHM & cPanel
Encrypted code
Signed packages
English & Arabic

Price

$30 / year

One server, one year of updates and support. Renew whenever you like.

Buy the license

Protected, signed package — verified before install
Move the license to a new server yourself
Full uninstall from the plugin or the command line

Install

One command, as root

The installer checks your server, asks for your license key, verifies the signed package and installs it. The same command upgrades later.

Install / upgrade

# wget -O install.sh https://www.infinityinstaller.com/plugins/Omni-ServerLog/install.sh && bash install.sh

Remove completely

# bash install.sh --uninstall

Screenshots

Omni-ServerLog in action

About

What Omni-ServerLog does

OmniLogs AI turns the dozens of scattered log files on a cPanel/WHM server into one intelligent, searchable stream. It continuously collects from Exim, Dovecot, Apache/LiteSpeed, ModSecurity, MariaDB, PHP-FPM, SSH, CSF, Imunify, cPanel and the kernel, normalises everything, and shows a live, severity-coloured tail you can filter instantly.

Instead of grepping logs by hand, you investigate: full-text search with facets and a timeline, and an AI layer that correlates related events into incidents — a credential-stuffing attack, a database-connection failure, an outbound mail burst — each with scope, confidence and a suggested response.

A pattern engine recognises recurring signatures (login attacks, error bursts, SSL expiry, malware matches and more), a rolling anomaly score warns before an outage, and alerts reach you by email or webhook — quiet by default, loud when it matters. Mail Forensics traces message flow and authentication end to end.

Everything is self-contained in a local SQLite store — your logs never leave the server. Installs as a root-only WHM plugin; and licensed through InfinityInstaller.

Requirements

cPanel & WHM server with root access.
EA-PHP 8.4 (ea-php84) CLI with the ionCube Loader 15 — installed automatically.
PHP extensions: pdo_sqlite, curl, mbstring, openssl; SQLite 3.27+.
Outbound HTTPS for licensing and update checks; modest disk for the local log store.

Features

Collects logs from every service — Exim, Dovecot, Apache/LiteSpeed, ModSecurity, MariaDB, PHP-FPM, SSH/auth, CSF/LFD, Imunify, cPanel and the kernel — normalised into one searchable stream.
Live Stream — real-time tail across all sources with severity colouring (info/warning/error/critical) and instant filters.
Investigation — fast full-text search over normalised logs with facets (severity, source, account), time range and an event timeline.
AI incident correlation — groups related events into a single incident with severity, scope, confidence and a suggested response.
Pattern detection — recognises recurring signatures (login attack, database failure, error burst, mail burst, ModSecurity surge, SSL expiry, malware match…) and lets you tune thresholds per pattern.
Mail Forensics — trace message flow, authentication (SPF/DKIM/DMARC) and delivery across Exim and Dovecot.
Anomaly scoring — a rolling score highlights when the server is behaving unusually, before it becomes an outage.
Alerting — notify by email and webhook per pattern/incident; quiet by default, loud when it matters.
Self-contained — a local SQLite store, no external database or cloud service; your logs never leave the server.
WHM-native and root-only — installs as a WHM plugin behind cPanel authentication; and licensed through InfinityInstaller.

More plugins