Log connection from remote server during account transfers

At the start of an account transfer, the destination server connects to the source server and performs some actions to set up the source in anticipation of transferring accounts. The root authentication is logged in /var/log/secure but there is no indication of what this connection is for.

As a server administrator and tech support, I'd like to see a record of this connection and why it occurred in a cPanel related location (or /var/log/messages via syslog) on the *source* server (since there is already a record in /var/cpanel/logs on the destination server).

Thank you for considering this.