Aug 29 00:28:48 bastion LinuxCommandsWazuh: User devesh [691851]:    79  cookie
Aug 29 02:07:44 bastion LinuxCommandsWazuh: User devesh [691851]:    80  cookie 
Aug 29 02:08:39 bastion LinuxCommandsWazuh: User ubuntu [693165]:   554  sudo su rihan
Aug 29 02:09:29 bastion LinuxCommandsWazuh: User ubuntu [693165]:   555  scp ubuntu@34.131.119.204:/home/ubuntu/cookie-temp/scripts/populate_revenue_data.py .
Aug 29 02:09:55 bastion LinuxCommandsWazuh: User devesh [691851]:    81  sudo su ubuntu
Aug 29 02:10:01 bastion LinuxCommandsWazuh: User devesh [691851]:    82  scp ubuntu@34.131.119.204:/home/ubuntu/cookie-temp/scripts/populate_revenue_data.py .
Aug 29 02:37:04 bastion LinuxCommandsWazuh: User devesh [693468]:    83  cookie
Aug 29 02:52:02 bastion LinuxCommandsWazuh: User devesh [693662]:    83  cookie
Aug 29 07:56:23 bastion LinuxCommandsWazuh: User shamailtayyab [696439]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 08:33:42 bastion LinuxCommandsWazuh: User shamailtayyab [696792]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 09:23:56 bastion LinuxCommandsWazuh: User shamailtayyab [697231]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 11:05:02 bastion LinuxCommandsWazuh: User shadab [697968]:    22  psql -d tasdeeq -U postgres
Aug 29 11:28:46 bastion LinuxCommandsWazuh: User ubuntu [698290]:   555  scp ubuntu@34.131.119.204:/home/ubuntu/cookie-temp/scripts/populate_revenue_data.py .
Aug 29 11:28:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   556  sudo apt-get install apt-transport-https ca-certificates gnupg curl
Aug 29 11:29:02 bastion LinuxCommandsWazuh: User ubuntu [698290]:   557  curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo gpg --dearmor -o /usr/share/keyrings/cloud.google.gpg
Aug 29 11:29:09 bastion LinuxCommandsWazuh: User ubuntu [698290]:   558  echo "deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main" | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list
Aug 29 11:36:40 bastion LinuxCommandsWazuh: User ubuntu [698290]:   559  sudo apt-get update && sudo apt-get install google-cloud-cli
Aug 29 11:54:36 bastion LinuxCommandsWazuh: User ubuntu [698290]:   560  gcloud init
Aug 29 11:54:57 bastion LinuxCommandsWazuh: User ubuntu [698290]:   561  kubectl get all
Aug 29 11:56:00 bastion LinuxCommandsWazuh: User ubuntu [698290]:   562  gcloud components install kubectl
Aug 29 11:56:23 bastion LinuxCommandsWazuh: User ubuntu [698290]:   563  sudo apt-get install kubectl
Aug 29 11:56:41 bastion LinuxCommandsWazuh: User ubuntu [698290]:   564  kubectl get all
Aug 29 11:56:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   565  gke-gcloud-auth-plugin --version
Aug 29 11:57:13 bastion LinuxCommandsWazuh: User ubuntu [698290]:   565  gke-gcloud-auth-plugin --version
Aug 29 11:57:22 bastion LinuxCommandsWazuh: User ubuntu [698290]:   566  sudo apt-get install google-cloud-cli-gke-gcloud-auth-plugin
Aug 29 11:57:34 bastion LinuxCommandsWazuh: User ubuntu [698290]:   567  gke-gcloud-auth-plugin --version
Aug 29 11:58:23 bastion LinuxCommandsWazuh: User ubuntu [698290]:   568  gcloud container clusters get-credentials github-runner     --region=asia-south2-a
Aug 29 11:58:45 bastion LinuxCommandsWazuh: User ubuntu [698290]:   569  ls
Aug 29 12:01:00 bastion LinuxCommandsWazuh: User ubuntu [698290]:   570  sudo vi service.json
Aug 29 12:01:14 bastion LinuxCommandsWazuh: User ubuntu [698290]:   571  gcloud auth activate-service-account --key-file=/home/ubuntu/service.json
Aug 29 12:01:25 bastion LinuxCommandsWazuh: User ubuntu [698290]:   572  gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207
Aug 29 12:01:33 bastion LinuxCommandsWazuh: User ubuntu [698290]:   573  kubectl get all
Aug 29 12:01:46 bastion LinuxCommandsWazuh: User ubuntu [698290]:   574  kubectl get pods
Aug 29 12:03:26 bastion LinuxCommandsWazuh: User ubuntu [698290]:   574  kubectl get pods
Aug 29 12:03:27 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [698290]:   574  kubectl get pods]
Aug 29 12:04:27 bastion LinuxCommandsWazuh: User shamailtayyab [759071]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 12:04:48 bastion LinuxCommandsWazuh: User shamailtayyab [759071]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 12:15:44 bastion LinuxCommandsWazuh: User ubuntu [698290]:   575  cd ..
Aug 29 12:15:46 bastion LinuxCommandsWazuh: User ubuntu [698290]:   576  ls
Aug 29 12:16:04 bastion LinuxCommandsWazuh: User ubuntu [698290]:   577  sudo vi service.json
Aug 29 12:16:06 bastion LinuxCommandsWazuh: User ubuntu [698290]:   578  pwd
Aug 29 12:16:11 bastion LinuxCommandsWazuh: User aarzoo [759192]:    19  exit
Aug 29 12:16:21 bastion LinuxCommandsWazuh: User aarzoo [759192]:    20  gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207
Aug 29 12:16:35 bastion LinuxCommandsWazuh: User aarzoo [759192]:    21  gcloud auth activate-service-account --key-file=/home/.json
Aug 29 12:16:42 bastion LinuxCommandsWazuh: User aarzoo [759192]:    22  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:16:45 bastion LinuxCommandsWazuh: User aarzoo [759192]:    23  gcloud container clusters get-credentials github-runner --zone asia-south2-a --project nitrox-415207
Aug 29 12:16:51 bastion LinuxCommandsWazuh: User aarzoo [759192]:    24  kubectl get pods
Aug 29 12:17:04 bastion LinuxCommandsWazuh: User aarzoo [759192]:    24  kubectl get pods
Aug 29 12:17:15 bastion LinuxCommandsWazuh: User ubuntu [698290]:   579  sudo su aarzoo
Aug 29 12:17:17 bastion LinuxCommandsWazuh: User ubuntu [698290]:   580  ls
Aug 29 12:17:21 bastion LinuxCommandsWazuh: User anshika [759320]:    51  exit
Aug 29 12:17:26 bastion LinuxCommandsWazuh: User anshika [759320]:    52  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:17:30 bastion LinuxCommandsWazuh: User anshika [759320]:    52  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:17:32 bastion LinuxCommandsWazuh: User ubuntu [698290]:   581  sudo su anshika
Aug 29 12:17:34 bastion LinuxCommandsWazuh: User ubuntu [698290]:   582  ls
Aug 29 12:17:39 bastion LinuxCommandsWazuh: User devesh [759379]:    84  mongo pixel_v1
Aug 29 12:17:43 bastion LinuxCommandsWazuh: User devesh [759379]:    85  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:17:46 bastion LinuxCommandsWazuh: User devesh [759379]:    85  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:17:51 bastion LinuxCommandsWazuh: User devesh [759379]:    86  kubectl get pods
Aug 29 12:17:53 bastion LinuxCommandsWazuh: User devesh [759379]:    87  exir
Aug 29 12:17:55 bastion LinuxCommandsWazuh: User ubuntu [698290]:   583  sudo su devesh
Aug 29 12:17:56 bastion LinuxCommandsWazuh: User ubuntu [698290]:   584  ls
Aug 29 12:18:00 bastion LinuxCommandsWazuh: User rihan [759484]: 4  psql
Aug 29 12:18:01 bastion LinuxCommandsWazuh: User rihan [759484]: 5  ls
Aug 29 12:18:06 bastion LinuxCommandsWazuh: User rihan [759484]: 6  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:09 bastion LinuxCommandsWazuh: User rihan [759484]: 6  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:10 bastion LinuxCommandsWazuh: User ubuntu [698290]:   585  sudo su rihan
Aug 29 12:18:12 bastion LinuxCommandsWazuh: User ubuntu [698290]:   586  ls
Aug 29 12:18:18 bastion LinuxCommandsWazuh: User ubuntu [698290]:   587  sudo su shadab/
Aug 29 12:18:21 bastion LinuxCommandsWazuh: User shadab [759560]:    22  psql -d tasdeeq -U postgres
Aug 29 12:18:25 bastion LinuxCommandsWazuh: User shadab [759560]:    23  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:27 bastion LinuxCommandsWazuh: User shadab [759560]:    23  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:29 bastion LinuxCommandsWazuh: User shadab [759560]:    24  ls
Aug 29 12:18:33 bastion LinuxCommandsWazuh: User shadab [759560]:    25  sudo su shobhit/
Aug 29 12:18:36 bastion LinuxCommandsWazuh: User shadab [759560]:    25  sudo su shobhit/
Aug 29 12:18:37 bastion LinuxCommandsWazuh: User ubuntu [698290]:   588  sudo su shadab
Aug 29 12:18:42 bastion LinuxCommandsWazuh: User shobhit [759637]:    28  mongo datalake
Aug 29 12:18:46 bastion LinuxCommandsWazuh: User shobhit [759637]:    29  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:48 bastion LinuxCommandsWazuh: User shobhit [759637]:    29  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:18:49 bastion LinuxCommandsWazuh: User ubuntu [698290]:   589  sudo su shobhit
Aug 29 12:18:50 bastion LinuxCommandsWazuh: User ubuntu [698290]:   590  ls
Aug 29 12:18:54 bastion LinuxCommandsWazuh: User ubuntu [698290]:   591  sido su ak
Aug 29 12:18:58 bastion LinuxCommandsWazuh: User ubuntu [698290]:   592  sdo su ak
Aug 29 12:19:01 bastion LinuxCommandsWazuh: User ak [759731]:   100  exit
Aug 29 12:19:01 bastion LinuxCommandsWazuh: User ak [759731]:   101  ls
Aug 29 12:19:06 bastion LinuxCommandsWazuh: User ak [759731]:   102  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:08 bastion LinuxCommandsWazuh: User ak [759731]:   102  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:09 bastion LinuxCommandsWazuh: User ubuntu [698290]:   593  sudo su ak
Aug 29 12:19:10 bastion LinuxCommandsWazuh: User ubuntu [698290]:   594  ls
Aug 29 12:19:18 bastion LinuxCommandsWazuh: User devyanshu [759798]: 5  internal 
Aug 29 12:19:23 bastion LinuxCommandsWazuh: User devyanshu [759798]: 6  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:27 bastion LinuxCommandsWazuh: User devyanshu [759798]: 6  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:29 bastion LinuxCommandsWazuh: User devyanshu [759798]: 7  ls
Aug 29 12:19:32 bastion LinuxCommandsWazuh: User ubuntu [698290]:   595  sudo su devyanshu
Aug 29 12:19:44 bastion LinuxCommandsWazuh: User shamailtayyab [759866]:    61  ssh shamailtayyab@34.131.11.11
Aug 29 12:19:48 bastion LinuxCommandsWazuh: User shamailtayyab [759866]:    62  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:51 bastion LinuxCommandsWazuh: User shamailtayyab [759866]:    62  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:19:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   596  sudo su shamailtayyab
Aug 29 12:20:00 bastion LinuxCommandsWazuh: User venky [759925]:    58  stage
Aug 29 12:20:05 bastion LinuxCommandsWazuh: User venky [759925]:    59  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:20:08 bastion LinuxCommandsWazuh: User venky [759925]:    59  gcloud auth activate-service-account --key-file=/home/service.json
Aug 29 12:20:13 bastion LinuxCommandsWazuh: User venky [759925]:    60  kubectl get all
Aug 29 12:24:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [759925]:    60  kubectl get all]
Aug 29 12:24:45 bastion LinuxCommandsWazuh: User ubuntu [698290]:   597  sudo su venky
Aug 29 12:24:46 bastion LinuxCommandsWazuh: User ubuntu [698290]:   598  ls
Aug 29 12:24:52 bastion LinuxCommandsWazuh: User ubuntu [698290]:   599  cd
Aug 29 12:24:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   600  s
Aug 29 12:24:56 bastion LinuxCommandsWazuh: User ubuntu [698290]:   601  kubectl get all
Aug 29 12:27:41 bastion LinuxCommandsWazuh: User ubuntu [698290]:   602  kubectl get nitrox-dj
Aug 29 12:27:49 bastion LinuxCommandsWazuh: User ubuntu [698290]:   603  kubectl get svc nitrox-dj
Aug 29 12:27:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   603  kubectl get svc nitrox-dj
Aug 29 12:31:42 bastion LinuxCommandsWazuh: User ubuntu [698290]:   603  kubectl get svc nitrox-dj
Aug 29 12:31:43 bastion LinuxCommandsWazuh: User ubuntu [698290]:   603  kubectl get svc nitrox-dj
Aug 29 13:02:15 bastion LinuxCommandsWazuh: User ubuntu [698290]:   604  internal
Aug 29 13:02:17 bastion LinuxCommandsWazuh: User ubuntu [698290]:   605  docker ps
Aug 29 13:02:31 bastion LinuxCommandsWazuh: User ubuntu [698290]:   606  kubectl get all
Aug 29 13:07:40 bastion LinuxCommandsWazuh: User ubuntu [698290]:   607  ls
Aug 29 13:07:48 bastion LinuxCommandsWazuh: User ubuntu [698290]:   608  rm service.json 
Aug 29 13:07:50 bastion LinuxCommandsWazuh: User ubuntu [698290]:   609  ls
Aug 29 13:10:53 bastion LinuxCommandsWazuh: User ubuntu [698290]:   609  ls
