Hello,
Apologies for the slight delay in getting back to you on this.
1)
/var/log/cron around the time we found the issue appears ok:
All (many) Cron entries all appear like this.
2)
The command "plesk db "select date, ip_address, user, action_name, component, old_value, new_value from...