Sep 12 06:50:41 bastion LinuxCommandsWazuh: User devesh [2568958]:   152  psql -U postgres
Sep 12 06:54:15 bastion LinuxCommandsWazuh: User devesh [2569075]:   152  psql -U postgres
Sep 12 10:48:15 bastion LinuxCommandsWazuh: User ubuntu [2570257]:   891  byobu
Sep 12 10:48:17 bastion LinuxCommandsWazuh: User ubuntu [2570257]:   892  k
Sep 12 10:48:23 bastion LinuxCommandsWazuh: User ubuntu [2570257]:   893  kubectl get pods
Sep 12 10:48:45 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   129  exit
Sep 12 10:48:48 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   891  byobu
Sep 12 10:48:51 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   130  kubectl get pods
Sep 12 10:48:52 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   891  byobu
Sep 12 10:48:53 bastion LinuxCommandsWazuh: message repeated 32 times: [ User ubuntu [2570422]:   891  byobu]
Sep 12 10:49:37 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   131  kubetail aishopper-67f87f8fd8-xnd26 
Sep 12 10:49:39 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   891  byobu
Sep 12 10:49:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2570422]:   891  byobu]
Sep 12 10:49:40 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   892  ls
Sep 12 10:49:41 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   892  ls
Sep 12 10:49:54 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   132  kubectl get pods
Sep 12 10:50:13 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   133  kubetail cookie-cutter
Sep 12 10:50:22 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   134  kubectl get pods
Sep 12 10:50:24 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   134  kubectl get pods
Sep 12 10:52:25 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   134  kubectl get pods
Sep 12 10:52:32 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   135  kubectl get logs aishopper-67f87f8fd8-xnd26
Sep 12 10:52:36 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   136  kubectl logs aishopper-67f87f8fd8-xnd26
Sep 12 10:53:44 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   136  kubectl logs aishopper-67f87f8fd8-xnd26
Sep 12 10:53:46 bastion LinuxCommandsWazuh: message repeated 7 times: [ User devyanshu [2570338]:   136  kubectl logs aishopper-67f87f8fd8-xnd26]
Sep 12 11:02:14 bastion LinuxCommandsWazuh: User rihan [2588425]:   205  psql
Sep 12 11:02:21 bastion LinuxCommandsWazuh: User rihan [2588425]:   206  redis-server 
Sep 12 11:02:54 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   892  ls
Sep 12 11:02:55 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [2570422]:   892  ls]
Sep 12 11:02:58 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   893  sudi su rihan
Sep 12 11:02:58 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   894  ls
Sep 12 11:02:58 bastion LinuxCommandsWazuh: User ubuntu [2570422]:   895  cd
Sep 12 11:03:02 bastion LinuxCommandsWazuh: User rihan [2588501]:   205  psql
Sep 12 11:03:02 bastion LinuxCommandsWazuh: User rihan [2588501]:   206  ls
Sep 12 11:03:03 bastion LinuxCommandsWazuh: User rihan [2588501]:   207  cd
Sep 12 11:03:03 bastion LinuxCommandsWazuh: User rihan [2588501]:   208  ls
Sep 12 11:03:04 bastion LinuxCommandsWazuh: User rihan [2588501]:   209  cd .ssh/
Sep 12 11:03:13 bastion LinuxCommandsWazuh: User rihan [2588501]:   210  ls
Sep 12 11:03:16 bastion LinuxCommandsWazuh: User rihan [2588501]:   211  cat id_rsa.pub 
Sep 12 11:03:44 bastion LinuxCommandsWazuh: User rihan [2588501]:   211  cat id_rsa.pub 
Sep 12 11:03:44 bastion LinuxCommandsWazuh: User rihan [2588501]:   211  cat id_rsa.pub 
Sep 12 11:03:46 bastion LinuxCommandsWazuh: User rihan [2588501]:   212  cd
Sep 12 11:18:36 bastion LinuxCommandsWazuh: User rihan [2589057]:   205  psql
Sep 12 11:24:18 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   137  kubectl logs -f  aishopper-67f87f8fd8-xnd26
Sep 12 11:24:21 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   138  kubectl get logs 
Sep 12 11:24:26 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   139  kubectl get log
Sep 12 11:24:29 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   139  kubectl get log
Sep 12 11:24:38 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   140  kubectl get logs
Sep 12 11:24:43 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   141  kubectl get pods
Sep 12 11:24:46 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   141  kubectl get pods
Sep 12 11:26:42 bastion LinuxCommandsWazuh: User rihan [2588425]:   206  redis-server 
Sep 12 11:26:46 bastion LinuxCommandsWazuh: User rihan [2589057]:   206  mongo pixel_v1
Sep 12 11:34:24 bastion LinuxCommandsWazuh: User ubuntu [2589492]:   891  byobu
Sep 12 11:34:29 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   129  exit
Sep 12 11:34:30 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   130  ls
Sep 12 11:34:44 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   131  vim README.md 
Sep 12 11:36:35 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   132  psql
Sep 12 11:36:36 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   133  ls
Sep 12 11:36:54 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   134  kubectl edit configmap aishopper
Sep 12 11:37:29 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   135  kubectl edit configmap aishopper-config
Sep 12 11:37:47 bastion LinuxCommandsWazuh: User devyanshu [2589514]:   136  psql -u postgres -d aishopper_v1 
Sep 12 12:13:33 bastion LinuxCommandsWazuh: User devyanshu [2570338]:   142  kubectl logs -f aishopper-5f6dc6d8c6-4spmm
Sep 12 12:13:33 bastion LinuxCommandsWazuh: message repeated 19 times: [ User devyanshu [2570338]:   142  kubectl logs -f aishopper-5f6dc6d8c6-4spmm]
Sep 12 13:04:00 bastion LinuxCommandsWazuh: User rihan [2589057]:   207  psql
Sep 12 13:05:18 bastion LinuxCommandsWazuh: User rihan [2589057]:   207  psql
Sep 12 13:05:31 bastion LinuxCommandsWazuh: User rihan [2589057]:   208  psql -c "select changeset from core_audittrail where id=7248;"
Sep 12 13:05:40 bastion LinuxCommandsWazuh: User rihan [2589057]:   209  psql -c "\x select changeset from core_audittrail where id=7248;"
Sep 12 13:06:01 bastion LinuxCommandsWazuh: User rihan [2589057]:   210  psql -c "\x on; select changeset from core_audittrail where id=7248;"
Sep 12 13:06:22 bastion LinuxCommandsWazuh: User rihan [2589057]:   211  psql -c "select changeset from core_audittrail where id=7248;" > /tmp/query_dum_audit
Sep 12 13:07:21 bastion LinuxCommandsWazuh: User rihan [2589057]:   212  vim /tmp/query_dum_audit 
Sep 12 13:07:27 bastion LinuxCommandsWazuh: User rihan [2589057]:   213  cat /tmp/query_dum_audit  less
Sep 12 14:06:50 bastion LinuxCommandsWazuh: User rihan [2589057]:   214  psql
Sep 12 14:10:58 bastion LinuxCommandsWazuh: User shadab [2592025]:    35  exit
Sep 12 14:11:29 bastion LinuxCommandsWazuh: User shadab [2592025]:    36  psql -d cookie-cutter -U postgres
Sep 12 14:12:13 bastion LinuxCommandsWazuh: User shadab [2592025]:    37  psql -d wizkee -U postgres
Sep 12 14:12:28 bastion LinuxCommandsWazuh: User shadab [2592025]:    38  psql -d nitrox -U postgres
Sep 12 14:14:35 bastion LinuxCommandsWazuh: User shadab [2592025]:    39  psql -d nitrox_v2 -U postgres
Sep 12 14:41:14 bastion LinuxCommandsWazuh: User rihan [2588501]:   213  redis-server 
Sep 12 19:06:04 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    59  cat Makefile 
Sep 12 19:06:08 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    60  ls
Sep 12 19:07:16 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    61  vim Makefile 
Sep 12 19:07:59 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    62  vim README.md 
Sep 12 20:01:10 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    63  internal
Sep 12 20:01:14 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    64  docker ps
Sep 12 20:01:18 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    65  ls
Sep 12 20:01:25 bastion LinuxCommandsWazuh: User aarzoo [2595694]:    66  cat README.md 
