huge number of emails being sent

A particular user is sending many emails as per mailserver stats.

This is not a regular emails. The actual emails hardly send few emails every week.

I see user@server email id sending many many emails.

How to identify the compromised program? Where can I see the logs

The logs for the mails can be found here:

File Management -> CWP Log Viewer -> choose maillog

there you can see if the mails are sending from internal or if someone is connecting from external to send mails.

You should also check here: https://mxtoolbox.com/SuperTool.aspx -> select test Email Server to see if you are an open mail relay

you should first check the maillog to see if you have hacked email account password or malware files
http://wiki.centos-webpanel.com/tracking-php-script-spam

A particular user is sending many emails as per mailserver stats.

This is not a regular emails. The actual emails hardly send few emails every week.

I see user@server email id sending many many emails.

How to identify the compromised program? Where can I see the logs

I'm getting the same thing in my email queue.  Messages from CSF LFD and cronjobs