A server running cPanel/WHM uses custom modifications in Apache which enable features for the multiple virtual hosts to work properly. WHM uses /etc/httpd/conf for the config files and /etc/httpd/logs for the log files.

Unfortunately, WHM doesn't update the default logrotate installation. As a result, the default /etc/logrotate.d/httpd isn't working and chances are, nobody noticed!

By default the /etc/logrotate.d/httpd configuration file tells logrotate to rotate logs in /var/log/httpd/*log, which is completely wrong. In addition, it tries to send a SIGHUP signal by using the apache PID file /var/run/httpd.pid, which again is also wrong!

As a result, my /etc/httpd/logs/suexec_log is 48megs in just a few weeks time!