Jul  1 07:14:36 bastion LinuxCommandsWazuh: User ak [52720]:    86  sudo su ubuntu
Jul  1 10:33:47 bastion LinuxCommandsWazuh: User ubuntu [55809]:   563  exit 
Jul  1 10:33:48 bastion LinuxCommandsWazuh: User ubuntu [55809]:   564  ls
Jul  1 10:33:54 bastion LinuxCommandsWazuh: User rihan [55833]:     6  exit
Jul  1 10:33:55 bastion LinuxCommandsWazuh: User rihan [55833]:     7  ls
Jul  1 10:33:56 bastion LinuxCommandsWazuh: User rihan [55833]:     8  cd 
Jul  1 10:33:57 bastion LinuxCommandsWazuh: User rihan [55833]: cd .ssh/
Jul  1 10:33:58 bastion LinuxCommandsWazuh: User rihan [55833]:    10  ls
Jul  1 10:34:00 bastion LinuxCommandsWazuh: User rihan [55833]:    11  cat authorized_keys 
Jul  1 10:34:26 bastion LinuxCommandsWazuh: User rihan [55833]:    12  sudo vi authorized_keys 
Jul  1 10:34:33 bastion LinuxCommandsWazuh: User rihan [55833]:    12  sudo vi authorized_keys 
Jul  1 10:34:34 bastion LinuxCommandsWazuh: User rihan [55833]:    13  cd
Jul  1 10:34:37 bastion LinuxCommandsWazuh: User rihan [55833]:    14  psql
Jul  1 10:34:43 bastion LinuxCommandsWazuh: User rihan [55833]:    15  mongo
Jul  1 10:37:46 bastion LinuxCommandsWazuh: User rihan [56058]:     6  exit
Jul  1 10:39:15 bastion LinuxCommandsWazuh: User rihan [56058]:     7  psql
Jul  1 10:39:24 bastion LinuxCommandsWazuh: User rihan [55833]:    15  mongo
Jul  1 10:39:25 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [55833]:    15  mongo]
Jul  1 10:39:28 bastion LinuxCommandsWazuh: User rihan [56209]:     7  psql
Jul  1 10:39:33 bastion LinuxCommandsWazuh: User rihan [56209]:     7  psql
Jul  1 11:06:36 bastion LinuxCommandsWazuh: User rihan [56209]:     7  psql