Sep 27 07:00:41 bastion LinuxCommandsWazuh: User rihan [2933866]:   283  redis
Sep 27 07:00:46 bastion LinuxCommandsWazuh: User rihan [2933866]:   284  internal
Sep 27 07:01:13 bastion LinuxCommandsWazuh: User ubuntu [2933957]:  1000  byobu
Sep 27 07:01:17 bastion LinuxCommandsWazuh: User rihan [2933970]:   283  redis
Sep 27 07:01:18 bastion LinuxCommandsWazuh: User rihan [2933970]:   284  cd
Sep 27 07:01:18 bastion LinuxCommandsWazuh: User rihan [2933970]:   285  ls
Sep 27 07:01:21 bastion LinuxCommandsWazuh: User rihan [2933970]:   286  cd .ssh/
Sep 27 07:01:21 bastion LinuxCommandsWazuh: User rihan [2933970]:   287  ls
Sep 27 07:01:27 bastion LinuxCommandsWazuh: User rihan [2933970]:   288  cat id_rsa.pub 
Sep 27 07:02:30 bastion LinuxCommandsWazuh: User rihan [2933970]:   289  internal
Sep 27 07:03:10 bastion LinuxCommandsWazuh: User rihan [2933866]:   284  internal
Sep 27 07:05:17 bastion LinuxCommandsWazuh: User rihan [2933866]:   284  internal
Sep 27 07:25:42 bastion LinuxCommandsWazuh: User devesh [2934297]:   205  cookie
Sep 27 07:25:56 bastion LinuxCommandsWazuh: User devesh [2934297]:   206  kubectl logs -f cookie-cutter-queues
Sep 27 07:26:04 bastion LinuxCommandsWazuh: User devesh [2934297]:   207  kubectl get pods
Sep 27 10:14:20 bastion LinuxCommandsWazuh: User ubuntu [2935481]:  1001  sudo su rihan
Sep 27 10:14:29 bastion LinuxCommandsWazuh: User ubuntu [2935481]:  1002  internal
Sep 27 10:14:46 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [2935481]:  1002  internal]
Sep 27 10:20:24 bastion LinuxCommandsWazuh: User ubuntu [2935481]:  1003  wsl
Sep 27 10:25:11 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   294  make queues-logs  | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c'
Sep 27 10:26:03 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   294  make queues-logs  | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c'
Sep 27 10:26:16 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   295  make queues-logs
Sep 27 10:26:16 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   295  make queues-logs
Sep 27 10:26:24 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   296  make queues-logs > /dev/null
Sep 27 10:26:56 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   297  kubetail cookie-cutter-queues 
Sep 27 10:26:56 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   297  kubetail cookie-cutter-queues 
Sep 27 10:26:57 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   298  kubetail cookie-cutter-queues  
Sep 27 10:27:03 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   298  kubetail cookie-cutter-queues  
Sep 27 10:36:26 bastion LinuxCommandsWazuh: User ubuntu [773799]:  1004  exit
Sep 27 10:48:22 bastion LinuxCommandsWazuh: User shamailtayyab [2935716]:   299  kubetail cookie-cutter-queues | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c'
Sep 27 10:48:22 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [2935716]:   299  kubetail cookie-cutter-queues | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c']
Sep 27 10:48:25 bastion LinuxCommandsWazuh: User shamailtayyab [3387077]:   299  kubetail cookie-cutter-queues | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c'
Sep 27 10:48:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3387077]:   299  kubetail cookie-cutter-queues | grep 'Check visitor SADD' | grep '6cb1d4a0-e5ed-4719-bb35-cd7f6e80942c']
Sep 27 12:11:57 bastion LinuxCommandsWazuh: User devesh [3388330]:   207  kubectl get pods
Sep 27 12:12:00 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1004  exit
Sep 27 12:12:04 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1005  cd /
Sep 27 12:12:04 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1006  cd 
Sep 27 12:12:18 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1007  ls
Sep 27 12:12:22 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1008  cd
Sep 27 12:12:27 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1009  cookie
Sep 27 12:12:30 bastion LinuxCommandsWazuh: User ubuntu [3388344]:  1009  cookie
Sep 27 12:12:31 bastion LinuxCommandsWazuh: User devesh [3388330]:   208  sudo su ubuntu
Sep 27 12:12:34 bastion LinuxCommandsWazuh: User devesh [3388512]:   208  sudo su ubuntu
Sep 27 12:43:04 bastion LinuxCommandsWazuh: User devesh [3388512]:   209  cookie
Sep 27 13:55:26 bastion LinuxCommandsWazuh: User aarzoo [3389730]: internal 
Sep 27 13:55:45 bastion LinuxCommandsWazuh: User rihan [3389856]:   290  internal
Sep 27 13:56:05 bastion LinuxCommandsWazuh: User rihan [3389856]:   291  make cookie-cutter-logs 
Sep 27 13:58:40 bastion LinuxCommandsWazuh: User rihan [3389856]:   292  make queues-logs 
Sep 27 13:58:45 bastion LinuxCommandsWazuh: User rihan [3389856]:   292  make queues-logs 
Sep 27 14:01:39 bastion LinuxCommandsWazuh: User rihan [3389856]:   292  make queues-logs