How to log site traffic to access.log (Apache)?
I checked the Apache Man page and all users with access to Apache should have access to the logs.
I try and locate one of these folders:
You can create your own custom logs with the mod_log_config file following this guide. Using this file you can specify what is logged and where it goes.
According to Apache you should verify the who has access to the log files. If you are hacked the log files cannot be edited. Which is common practice to delete the IP address of the attacker.
This can be found along with other tips in the Apache Security Tips page