Dec 20 12:19:52 bastion LinuxCommandsWazuh: User rihan [614368]:   483  psql -U dbuser -d nitrox_v2 
Dec 20 13:36:14 bastion LinuxCommandsWazuh: User ubuntu [616050]:  1508  sudo su rihan
Dec 20 13:36:16 bastion LinuxCommandsWazuh: User ubuntu [616050]:  1509  ls
Dec 20 13:36:28 bastion LinuxCommandsWazuh: User ubuntu [616050]:  1510  vim Makefile 
Dec 20 17:18:36 bastion LinuxCommandsWazuh: User devesh [619039]:   363  byobu
Dec 20 17:18:45 bastion LinuxCommandsWazuh: User devesh [619039]:   364  mongosh --host 10.190.0.117
Dec 20 18:57:33 bastion LinuxCommandsWazuh: User devesh [621415]:   365  mongosh --host 10.190.0.29
Dec 20 18:57:40 bastion LinuxCommandsWazuh: User devesh [621415]:   366  redis
Dec 20 18:57:45 bastion LinuxCommandsWazuh: User devesh [621415]:   366  redis
Dec 20 18:57:51 bastion LinuxCommandsWazuh: User devesh [621415]:   366  redis
Dec 20 18:57:57 bastion devesh: root@ [621494]: exit [0]
Dec 20 18:58:00 bastion LinuxCommandsWazuh: User devesh [621415]:   367  sudo su
Dec 20 18:58:03 bastion LinuxCommandsWazuh: User ubuntu [621525]:  1511  psql -h 10.94.16.3 -U dbuser -d nitrox_v2
Dec 20 18:58:08 bastion LinuxCommandsWazuh: User ubuntu [621525]:  1512  ls
Dec 20 18:58:17 bastion LinuxCommandsWazuh: User ubuntu [621525]:  1512  ls
Dec 20 18:58:17 bastion LinuxCommandsWazuh: User devesh [621415]:   368  sudo su - ubuntu
Dec 20 18:58:23 bastion LinuxCommandsWazuh: User devesh [621415]:   368  sudo su - ubuntu
Dec 20 18:58:31 bastion LinuxCommandsWazuh: User devesh [621415]:   369  internal
Dec 20 18:58:37 bastion LinuxCommandsWazuh: User devesh [621679]:   369  internal
Dec 20 18:58:43 bastion LinuxCommandsWazuh: User devesh [621679]:   369  internal
Dec 20 18:58:52 bastion LinuxCommandsWazuh: User rihan [621791]:   483  psql -U dbuser -d nitrox_v2 
Dec 20 18:58:52 bastion LinuxCommandsWazuh: User devesh [621679]:   370  sudo su - riham
Dec 20 18:58:55 bastion LinuxCommandsWazuh: User rihan [621821]:   483  psql -U dbuser -d nitrox_v2 
Dec 20 19:00:20 bastion LinuxCommandsWazuh: User rihan [621821]:   484  internal 
Dec 20 19:01:38 bastion LinuxCommandsWazuh: User rihan [621821]:   484  internal 
Dec 20 19:01:50 bastion LinuxCommandsWazuh: User rihan [621821]:   485  kubectl get pods
Dec 20 19:02:28 bastion LinuxCommandsWazuh: User rihan [621821]:   486  kubectl exec -it cookie-cutter-779b59779f-ltck5 bash
Dec 20 19:02:59 bastion LinuxCommandsWazuh: User rihan [621821]:   487  printenv
Dec 20 19:03:38 bastion LinuxCommandsWazuh: User rihan [621821]:   488  kubectl exec -it cookie-cutter-779b59779f-ltck5 bash
Dec 20 19:04:41 bastion LinuxCommandsWazuh: User rihan [621821]:   489  ssh ubuntu@10.190.0.7
Dec 20 19:04:43 bastion LinuxCommandsWazuh: User devesh [621679]:   371  sudo su - rihan
Dec 20 19:09:17 bastion LinuxCommandsWazuh: User devesh [621679]:   371  sudo su - rihan
Dec 20 19:09:18 bastion LinuxCommandsWazuh: message repeated 2 times: [ User devesh [621679]:   371  sudo su - rihan]
Dec 20 19:13:29 bastion LinuxCommandsWazuh: User devesh [622294]:   371  sudo su - rihan
Dec 20 19:13:38 bastion LinuxCommandsWazuh: User devesh [622294]:   372  mongosh --host 10.190.0.117
Dec 20 19:18:02 bastion LinuxCommandsWazuh: User devesh [622294]:   373  mongosh --host 10.190.0.29
Dec 20 19:18:07 bastion LinuxCommandsWazuh: User devesh [622294]:   374  htop
Dec 20 19:18:22 bastion LinuxCommandsWazuh: User rihan [622392]:   489  ssh ubuntu@10.190.0.7
Dec 20 19:18:41 bastion LinuxCommandsWazuh: User rihan [622392]:   490  internal 
Dec 20 19:22:26 bastion LinuxCommandsWazuh: User rihan [622638]:   489  ssh ubuntu@10.190.0.7
Dec 20 19:22:31 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [622638]:   489  ssh ubuntu@10.190.0.7]
Dec 20 19:23:26 bastion LinuxCommandsWazuh: User rihan [622638]:   489  ssh ubuntu@10.190.0.7
Dec 20 19:23:35 bastion LinuxCommandsWazuh: User rihan [622638]:   490  kubectl get pods