When something breaks, the logs say what happened. This is faster than guessing.
ERROR LOG
cPanel > Errors under Metrics shows the most recent web server errors for your account, including PHP fatal errors, permission problems and missing files. Each entry names the file and line. That is usually enough to identify which plugin or script is at fault.
RAW ACCESS LOGS
cPanel > Raw Access under Metrics lets you download the complete access log for a domain, showing every request with its IP, timestamp, URL and response code. Use it to identify bot traffic, trace when a problem started, or confirm whether an attack is under way.
Tick "Archive Logs" on that page if you want logs kept beyond the daily rotation, but remember archived logs consume disk space.
PER-FOLDER ERROR LOGS
You may also find error_log files scattered through your account, written by PHP into the folder where the error occurred. These are often the most specific source of information. Delete them once you are done, as they can grow large.
WHEN OPENING A TICKET
Include the exact timestamp of the problem and a copy of the relevant log lines. It shortens diagnosis considerably.