How can i check user's logs

Mail in the box user got empty inbox folder recently. How can i check his logs so i can understand what happened with his inbox mail and solve the problem. Certainly i have back up and i can restore user’s mail. But it s more important to understand why all inbox mail have gone. I have checked file /var/log/syslog and searched his mail. But theres too many information. What should i look for besides his mail address.

There’s lots of logging available for reading or parsing in the /var/log directory. mail.log seems like a good place to start.

Dollars to donuts it’s a PEBKAC error.

/var/log/syslog
/var/log/mail.log
/var/log/insert_application_name_here/*

etc
etc

/var/log is a good place to start. For some applications check /opt/application_name or see the applications help documentation.