Feb 11 12:40:41 bastion LinuxCommandsWazuh: User ankur [3195482]: 51 byobu Feb 11 12:40:52 bastion LinuxCommandsWazuh: User ankur [3195482]: 52 ls Feb 11 12:41:04 bastion LinuxCommandsWazuh: User ankur [1568273]: 40 psql -U postgres Feb 11 12:45:47 bastion LinuxCommandsWazuh: User ankur [1568273]: 41 psql Feb 11 12:45:52 bastion LinuxCommandsWazuh: User ankur [468594]: 899 redis Feb 11 12:46:07 bastion LinuxCommandsWazuh: User ankur [3200423]: 1017 exit Feb 11 12:46:14 bastion LinuxCommandsWazuh: User ankur [3200561]: 1017 exit Feb 11 12:47:17 bastion LinuxCommandsWazuh: User ankur [3200561]: 1018 mongo Feb 11 12:47:20 bastion LinuxCommandsWazuh: User ankur [3201598]: 1019 exit Feb 11 13:23:48 bastion LinuxCommandsWazuh: User ankur [3235358]: 1019 exit Feb 11 13:23:50 bastion LinuxCommandsWazuh: User ankur [3235358]: 1020 ls Feb 11 13:23:58 bastion LinuxCommandsWazuh: User ankur [3235358]: 1021 clickhouse-ssh Feb 11 13:24:13 bastion LinuxCommandsWazuh: User ankur [3235358]: 1022 kubectl get pods Feb 11 13:24:43 bastion LinuxCommandsWazuh: User ankur [3235358]: 1023 kubectl logs -f house-of-click-5d477db4f-6zm4k Feb 11 13:24:44 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3235358]: 1023 kubectl logs -f house-of-click-5d477db4f-6zm4k] Feb 11 13:26:30 bastion LinuxCommandsWazuh: User ankur [3235358]: 1024 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i ALERT Feb 11 13:31:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3235358]: 1024 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i ALERT] Feb 11 13:54:45 bastion LinuxCommandsWazuh: User devesh [3264213]: 790 byobu Feb 11 13:54:55 bastion LinuxCommandsWazuh: User devesh [3830625]: 831 kubectl logs -f house-of-click-59c4655794-9qsf6 | grep "DEBUG_ORDER==" Feb 11 13:55:03 bastion LinuxCommandsWazuh: User devesh [3830625]: 832 kubectl get pods Feb 11 13:56:43 bastion LinuxCommandsWazuh: User ankur [3268015]: 1025 exit Feb 11 13:56:49 bastion LinuxCommandsWazuh: User ankur [3268015]: 1026 psql Feb 11 13:59:38 bastion LinuxCommandsWazuh: User devesh [3830625]: 833 kubectl logs -f dramatiq-vortex-5b76b57cb6-wvlpt Feb 11 15:51:24 bastion LinuxCommandsWazuh: User devesh [3378381]: 790 byobu Feb 11 16:15:49 bastion LinuxCommandsWazuh: User ankur [3401211]: 1027 byobu Feb 11 16:15:56 bastion LinuxCommandsWazuh: User ankur [3401518]: 1027 byobu Feb 11 16:16:12 bastion LinuxCommandsWazuh: User ankur [3401518]: 1028 kubectl get pods Feb 11 16:17:24 bastion LinuxCommandsWazuh: User ankur [3401518]: 1029 kubectl logs -f house-of-click-5d477db4f-6zm4k Feb 11 16:17:36 bastion LinuxCommandsWazuh: User ankur [3401518]: 1030 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i ALERT Feb 11 16:17:54 bastion LinuxCommandsWazuh: User ankur [3401518]: 1031 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i ALERT: Feb 11 16:17:59 bastion LinuxCommandsWazuh: User ankur [3401518]: 1031 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i ALERT: Feb 11 16:28:28 bastion LinuxCommandsWazuh: User ankur [3401518]: 1032 kubectl get pods | grep -i nitrox Feb 11 16:41:30 bastion LinuxCommandsWazuh: User rihan [3448949]: 692 kubectl exec -it vortex-75b548ff7-dck4t -- bash Feb 11 17:00:37 bastion LinuxCommandsWazuh: User ankur [3478164]: 1027 byobu Feb 11 17:00:38 bastion LinuxCommandsWazuh: User ankur [3478164]: 1028 l Feb 11 17:00:39 bastion LinuxCommandsWazuh: User ankur [3478164]: 1029 ls Feb 11 17:00:42 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [3478164]: 1029 ls] Feb 11 17:13:19 bastion LinuxCommandsWazuh: User rihan [3448949]: 693 psql Feb 11 17:13:20 bastion LinuxCommandsWazuh: User rihan [3448949]: 693 psql Feb 11 17:20:43 bastion LinuxCommandsWazuh: User ankur [3201598]: 1020 mongo Feb 11 17:20:48 bastion LinuxCommandsWazuh: User ankur [3497652]: 1029 exit Feb 11 17:20:49 bastion LinuxCommandsWazuh: User ankur [3497688]: 1029 exit Feb 11 17:21:26 bastion LinuxCommandsWazuh: User devesh [3498341]: 790 byobu Feb 11 17:47:08 bastion LinuxCommandsWazuh: User rihan [3448949]: 694 mongo Feb 11 17:59:44 bastion LinuxCommandsWazuh: User devesh [3830625]: 833 kubectl logs -f dramatiq-vortex-5b76b57cb6-wvlpt Feb 11 17:59:45 bastion LinuxCommandsWazuh: message repeated 7 times: [ User devesh [3830625]: 833 kubectl logs -f dramatiq-vortex-5b76b57cb6-wvlpt] Feb 11 18:04:23 bastion LinuxCommandsWazuh: User ankur [3577673]: 1029 exit Feb 11 18:04:39 bastion LinuxCommandsWazuh: User ankur [3577673]: 1030 kubectl get configmaps Feb 11 18:05:01 bastion LinuxCommandsWazuh: User ankur [3577673]: 1031 kubectl edit configmaps house-of-click-config Feb 11 18:07:08 bastion LinuxCommandsWazuh: User ankur [3582766]: 1032 exit Feb 11 18:07:16 bastion LinuxCommandsWazuh: User ankur [3582766]: 1033 kubectl get pods | grep -i house Feb 11 18:07:54 bastion LinuxCommandsWazuh: User ankur [3582766]: 1034 kubectl logs -f house-of-click-5d477db4f-6zm4k Feb 11 18:07:59 bastion LinuxCommandsWazuh: User ankur [3582766]: 1035 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i Processing table Feb 11 18:08:11 bastion LinuxCommandsWazuh: User ankur [3582766]: 1036 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Processing table" Feb 11 18:08:40 bastion LinuxCommandsWazuh: User ankur [3582766]: 1037 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Query in current job" Feb 11 18:09:07 bastion LinuxCommandsWazuh: User ankur [3582766]: 1038 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Query" Feb 11 18:09:25 bastion LinuxCommandsWazuh: User ankur [3582766]: 1039 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Last entry for" Feb 11 18:09:41 bastion LinuxCommandsWazuh: User ankur [3582766]: 1040 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "ALERT" Feb 11 18:10:01 bastion LinuxCommandsWazuh: User ankur [3582766]: 1041 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Scheduler health" Feb 11 18:10:05 bastion LinuxCommandsWazuh: User ankur [3582766]: 1041 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Scheduler health" Feb 11 18:31:00 bastion LinuxCommandsWazuh: User ubuntu [3627407]: 1648 sudo su shamailtayyab Feb 11 18:39:01 bastion LinuxCommandsWazuh: User ankur [3582766]: 1042 kubectl logs -f house-of-click-5d477db4f-6zm4k Feb 11 18:39:29 bastion LinuxCommandsWazuh: User ankur [3582766]: 1043 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Query" Feb 11 18:39:46 bastion LinuxCommandsWazuh: User ankur [3582766]: 1044 kubectl logs -f house-of-click-5d477db4f-6zm4k | grep -i "Query in " Feb 11 19:06:53 bastion LinuxCommandsWazuh: User devesh [3673826]: 790 byobu Feb 11 19:26:56 bastion LinuxCommandsWazuh: User rihan [3683500]: 695 psql -d vortex_v2 -U postgres Feb 11 19:52:06 bastion LinuxCommandsWazuh: User rihan [3683500]: 695 psql -d vortex_v2 -U postgres Feb 11 19:53:48 bastion LinuxCommandsWazuh: User rihan [3683500]: 696 psql -d datapulse_v1 -U postgres Feb 11 20:03:34 bastion LinuxCommandsWazuh: User venky [3684205]: 243 byobu Feb 11 20:03:43 bastion LinuxCommandsWazuh: User venky [3684205]: 244 kubectl get po Feb 11 20:06:48 bastion LinuxCommandsWazuh: User venky [3684205]: 245 kubectl exec -it cookie-cutter-queues-86df4f7b85-kd68v -- bash Feb 11 20:06:49 bastion LinuxCommandsWazuh: User venky [3684205]: 246 kubectl top nodes Feb 11 20:07:08 bastion LinuxCommandsWazuh: User venky [3684205]: 247 kubectl top pods --sort-by=cpu -n Feb 11 20:07:27 bastion LinuxCommandsWazuh: User venky [3684205]: 248 kubectl top pods --sort-by=cpu -n nitrox-production