Feb 18 11:41:33 bastion LinuxCommandsWazuh: User rihan [545569]: 745 byobu Feb 18 11:43:24 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 11:43:28 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 11:51:53 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 12:06:15 bastion LinuxCommandsWazuh: User rihan [657460]: 745 byobu Feb 18 12:14:10 bastion LinuxCommandsWazuh: User devesh [732403]: 806 mongosh --host 10.190.0.29 Feb 18 12:14:13 bastion LinuxCommandsWazuh: User devesh [732403]: 806 mongosh --host 10.190.0.29 Feb 18 12:14:53 bastion LinuxCommandsWazuh: User devesh [734248]: 806 mongosh --host 10.190.0.29 Feb 18 12:20:14 bastion LinuxCommandsWazuh: User ankur [1002642]: 1074 byobu Feb 18 12:20:15 bastion LinuxCommandsWazuh: User ankur [1002642]: 1075 ls Feb 18 12:20:31 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1002642]: 1075 ls] Feb 18 12:24:18 bastion LinuxCommandsWazuh: User ankur [1215820]: 1076 exit Feb 18 12:24:19 bastion LinuxCommandsWazuh: User ankur [1215820]: 1077 ls Feb 18 12:24:42 bastion LinuxCommandsWazuh: User ankur [1215820]: 1078 psql Feb 18 12:24:49 bastion LinuxCommandsWazuh: User ankur [1215820]: 1079 psql -U postgres Feb 18 12:27:25 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 12:29:13 bastion LinuxCommandsWazuh: User rihan [3612563]: 739 psql -d tasdeeq -U postgres Feb 18 12:29:19 bastion LinuxCommandsWazuh: User rihan [3612563]: 740 cd /mnt/ Feb 18 12:29:20 bastion LinuxCommandsWazuh: User rihan [3612563]: 741 ll Feb 18 12:29:22 bastion LinuxCommandsWazuh: User rihan [3612563]: 742 cd Feb 18 12:29:25 bastion LinuxCommandsWazuh: User rihan [3612563]: 743 cd /media/ Feb 18 12:29:26 bastion LinuxCommandsWazuh: User rihan [3612563]: 744 ll Feb 18 12:29:28 bastion LinuxCommandsWazuh: User rihan [3612563]: 745 cd Feb 18 12:29:43 bastion LinuxCommandsWazuh: User rihan [3612563]: 746 internal Feb 18 12:31:05 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 12:31:14 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 12:31:58 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 12:46:54 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 12:47:01 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 12:49:37 bastion LinuxCommandsWazuh: User rihan [545569]: 745 byobu Feb 18 12:51:17 bastion LinuxCommandsWazuh: User rihan [2444075]: 746 python3 Feb 18 13:01:41 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 13:06:24 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 13:06:26 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 13:09:04 bastion LinuxCommandsWazuh: User ankur [1215820]: 1079 psql -U postgres Feb 18 13:40:17 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 13:40:20 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 13:56:55 bastion LinuxCommandsWazuh: User devesh [2289687]: 795 psql -U postgres Feb 18 14:16:06 bastion LinuxCommandsWazuh: User devesh [2289687]: 796 psql Feb 18 14:16:30 bastion LinuxCommandsWazuh: User devesh [2289687]: 797 psql -U postgres Feb 18 15:06:33 bastion LinuxCommandsWazuh: User rihan [4100782]: 746 python3 Feb 18 15:50:36 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 862 kubectl logs -f ray-patched-7d4d5687df-qlc52 Feb 18 15:50:39 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 862 kubectl logs -f ray-patched-7d4d5687df-qlc52 Feb 18 15:50:48 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 863 kubectl get pods | grep ray Feb 18 15:50:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [124464]: 863 kubectl get pods | grep ray] Feb 18 15:51:56 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 864 kubectl logs -f ray-patched-5cb4c7c997-mhz6w Feb 18 15:52:23 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:52:30 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:53:05 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:53:34 bastion LinuxCommandsWazuh: message repeated 4 times: [ User shamailtayyab [124464]: 865 kubectl get pods | grep ray] Feb 18 15:53:44 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:53:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [124464]: 865 kubectl get pods | grep ray] Feb 18 15:53:49 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:54:08 bastion LinuxCommandsWazuh: message repeated 7 times: [ User shamailtayyab [124464]: 865 kubectl get pods | grep ray] Feb 18 15:54:30 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:54:36 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:55:07 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:55:09 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:55:33 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:56:11 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:56:17 bastion LinuxCommandsWazuh: message repeated 4 times: [ User shamailtayyab [124464]: 865 kubectl get pods | grep ray] Feb 18 15:56:28 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 865 kubectl get pods | grep ray Feb 18 15:57:08 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 866 kubectl logs -f ray-patched-5548b49fc9-q2bgj Feb 18 15:58:10 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 866 kubectl logs -f ray-patched-5548b49fc9-q2bgj Feb 18 16:00:49 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 867 git status Feb 18 16:02:42 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 867 git status Feb 18 16:02:44 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 868 kubectl get pods | grep ray Feb 18 16:02:51 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 868 kubectl get pods | grep ray Feb 18 16:02:56 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 869 kubectl logs -f ray-patched-57449969f6-zx4th Feb 18 16:23:24 bastion LinuxCommandsWazuh: User shamailtayyab [124464]: 869 kubectl logs -f ray-patched-57449969f6-zx4th Feb 18 16:54:15 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 16:55:22 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1672 exit Feb 18 16:55:23 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1673 ls Feb 18 16:55:25 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1674 cd bin/ Feb 18 16:55:25 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1675 ls Feb 18 16:55:30 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1676 cat start_slack.sh Feb 18 17:02:16 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1677 sudo vi start_slack.sh Feb 18 17:02:19 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1678 ./start_slack.sh Feb 18 17:02:48 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1679 cat start_slack.sh Feb 18 17:04:35 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1680 sudo vi start_slack.sh Feb 18 17:04:37 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1681 ./start_slack.sh Feb 18 17:17:38 bastion LinuxCommandsWazuh: User devesh [870439]: 806 mongosh --host 10.190.0.29 Feb 18 17:17:47 bastion LinuxCommandsWazuh: User devesh [870439]: 807 kubectl get pods Feb 18 17:19:44 bastion LinuxCommandsWazuh: User devesh [870439]: 807 kubectl get pods Feb 18 17:19:52 bastion LinuxCommandsWazuh: User devesh [870439]: 808 kubectl logs -f vortex-6f54cbb478-jm77w Feb 18 17:19:53 bastion LinuxCommandsWazuh: User devesh [877409]: 806 mongosh --host 10.190.0.29 Feb 18 17:19:57 bastion LinuxCommandsWazuh: User devesh [877409]: 807 kubectl get pods Feb 18 17:20:35 bastion LinuxCommandsWazuh: User devesh [870439]: 808 kubectl logs -f vortex-6f54cbb478-jm77w Feb 18 17:20:38 bastion LinuxCommandsWazuh: User devesh [870439]: 809 kubectl get pods Feb 18 17:20:43 bastion LinuxCommandsWazuh: User devesh [870439]: 809 kubectl get pods Feb 18 17:20:45 bastion LinuxCommandsWazuh: User devesh [870439]: 809 kubectl get pods Feb 18 17:20:52 bastion LinuxCommandsWazuh: message repeated 2 times: [ User devesh [870439]: 809 kubectl get pods] Feb 18 17:20:59 bastion LinuxCommandsWazuh: User devesh [870439]: 810 kubectl logs -f ~vortex-68996cc9c6-t7z6h Feb 18 17:21:05 bastion LinuxCommandsWazuh: User devesh [870439]: 811 kubectl logs -f vortex-68996cc9c6-t7z6h Feb 18 17:26:53 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 17:26:56 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 18 17:27:58 bastion LinuxCommandsWazuh: User devesh [870439]: 812 kubectl logs -f vortex-6f54cbb478-jm77w Feb 18 17:28:02 bastion LinuxCommandsWazuh: User devesh [870439]: 813 kubectl get pods Feb 18 17:28:14 bastion LinuxCommandsWazuh: User devesh [877409]: 808 kubectl exec -it vortex-6f54cbb478-jm77w bash Feb 18 17:28:18 bastion LinuxCommandsWazuh: User devesh [877409]: 809 kubectl get pods Feb 18 17:30:31 bastion LinuxCommandsWazuh: User devesh [870439]: 814 kubectl logs -f vortex-66c6897d94-pr9k5 Feb 18 17:30:38 bastion LinuxCommandsWazuh: User devesh [956464]: 814 kubectl logs -f vortex-66c6897d94-pr9k5 Feb 18 17:30:43 bastion LinuxCommandsWazuh: User devesh [956464]: 815 kubectl get pods Feb 18 17:36:15 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1681 ./start_slack.sh Feb 18 17:36:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [576999]: 1681 ./start_slack.sh ] Feb 18 17:41:50 bastion LinuxCommandsWazuh: User devesh [956464]: 815 kubectl get pods Feb 18 17:41:56 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1682 ssh ak@34.131.103.89 Feb 18 17:42:08 bastion LinuxCommandsWazuh: User devesh [877409]: 810 kubectl exec -it vortex-66c6897d94-pr9k5 bash Feb 18 17:42:10 bastion LinuxCommandsWazuh: User devesh [877409]: 811 kubectl get pods Feb 18 17:45:41 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1682 ssh ak@34.131.103.89 Feb 18 17:45:42 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1682 ssh ak@34.131.103.89 Feb 18 17:45:42 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1683 ls Feb 18 17:45:44 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1684 cat service.json Feb 18 17:45:49 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1685 cat start_slack.sh Feb 18 17:46:53 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1686 sudo vi start_slack.sh Feb 18 17:46:59 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1687 ./start_slack.sh Feb 18 17:54:10 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 17:58:13 bastion LinuxCommandsWazuh: User devesh [877409]: 812 kubectl exec -it vortex-7fdc7f8446-mvtzm bash Feb 18 17:58:14 bastion LinuxCommandsWazuh: User devesh [956464]: 816 kubectl logs -f vortex-7fdc7f8446-mvtzm Feb 18 17:58:14 bastion LinuxCommandsWazuh: message repeated 12 times: [ User devesh [956464]: 816 kubectl logs -f vortex-7fdc7f8446-mvtzm] Feb 18 18:05:41 bastion LinuxCommandsWazuh: User ubuntu [576999]: 1687 ./start_slack.sh Feb 18 18:05:42 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [576999]: 1687 ./start_slack.sh ] Feb 18 19:01:08 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 19:01:29 bastion LinuxCommandsWazuh: User rihan [2268]: 729 kubetail datapulse-celery Feb 18 19:58:47 bastion LinuxCommandsWazuh: User devesh [3190056]: 815 byobu Feb 18 19:58:55 bastion LinuxCommandsWazuh: User devesh [3190056]: 816 kubectl get pods Feb 18 19:59:30 bastion LinuxCommandsWazuh: User devesh [3190056]: 817 kubectl logs -f vortex-66548c4785-jdlll Feb 18 19:59:42 bastion LinuxCommandsWazuh: User devesh [956464]: 817 kubectl get pods Feb 18 19:59:56 bastion LinuxCommandsWazuh: User devesh [877409]: 813 kubectl get pods Feb 18 20:03:16 bastion LinuxCommandsWazuh: User devesh [877409]: 814 kubectl exec -it vortex-66548c4785-jdlll bash Feb 18 20:03:17 bastion LinuxCommandsWazuh: User devesh [956464]: 818 kubectl logs -f vortex-66548c4785-jdlll Feb 18 20:03:17 bastion LinuxCommandsWazuh: message repeated 6 times: [ User devesh [956464]: 818 kubectl logs -f vortex-66548c4785-jdlll] Feb 18 20:03:57 bastion LinuxCommandsWazuh: User devesh [956464]: 819 kubectl get pods Feb 18 20:04:10 bastion LinuxCommandsWazuh: User devesh [877409]: 815 kubectl get pods Feb 18 20:08:36 bastion LinuxCommandsWazuh: User devesh [956464]: 820 kubectl logs -f vortex-965866498-dtmb6 Feb 18 20:08:54 bastion LinuxCommandsWazuh: User devesh [956464]: 821 kubectl get pods Feb 18 20:08:59 bastion LinuxCommandsWazuh: User devesh [877409]: 816 kubectl exec -it vortex-965866498-dtmb6 bash Feb 18 20:09:09 bastion LinuxCommandsWazuh: User devesh [877409]: 817 kubectl get pods Feb 18 20:22:23 bastion LinuxCommandsWazuh: User devesh [877409]: 818 kubectl exec -it vortex-5769459f5c-rbhjm bash Feb 18 20:22:25 bastion LinuxCommandsWazuh: User devesh [877409]: 819 kubectl get pods Feb 18 20:22:28 bastion LinuxCommandsWazuh: User devesh [877409]: 819 kubectl get pods Feb 18 20:22:29 bastion LinuxCommandsWazuh: User devesh [877409]: 819 kubectl get pods Feb 18 20:22:40 bastion LinuxCommandsWazuh: User devesh [877409]: 819 kubectl get pods Feb 18 20:22:54 bastion LinuxCommandsWazuh: User devesh [956464]: 822 kubectl logs -f vortex-5769459f5c-rbhjm Feb 18 20:22:55 bastion LinuxCommandsWazuh: User devesh [956464]: 823 kubectl get pods Feb 18 20:27:26 bastion LinuxCommandsWazuh: User devesh [956464]: 824 kubectl logs -f vortex-67cb567469-mcv68 Feb 18 20:27:28 bastion LinuxCommandsWazuh: User devesh [956464]: 825 kubectl get pods Feb 18 20:27:40 bastion LinuxCommandsWazuh: User devesh [956464]: 825 kubectl get pods Feb 18 20:27:58 bastion LinuxCommandsWazuh: User devesh [877409]: 820 kubectl exec -it vortex-67cb567469-mcv68 bash Feb 18 20:28:00 bastion LinuxCommandsWazuh: User devesh [877409]: 821 kubectl get pods Feb 18 20:34:13 bastion LinuxCommandsWazuh: User devesh [877409]: 822 kubectl exec -it vortex-7ddd479f57-bnqht bash Feb 18 20:34:23 bastion LinuxCommandsWazuh: User ankur [3666697]: 1080 exit Feb 18 20:34:27 bastion LinuxCommandsWazuh: User ankur [3666697]: 1081 cd Feb 18 20:34:36 bastion LinuxCommandsWazuh: User ankur [3666697]: 1081 cd Feb 18 20:34:43 bastion LinuxCommandsWazuh: User ankur [3666697]: 1082 kubectl logs -f house-of-click-754c6fb47b-b4lfw Feb 18 20:34:47 bastion LinuxCommandsWazuh: User devesh [877409]: 823 sudo su ankur Feb 18 20:34:50 bastion LinuxCommandsWazuh: User devesh [877409]: 824 sudo su ankut Feb 18 20:34:54 bastion LinuxCommandsWazuh: User devesh [3190056]: 818 byobu Feb 18 20:34:58 bastion LinuxCommandsWazuh: User ankur [3669325]: 1082 kubectl logs -f house-of-click-754c6fb47b-b4lfw Feb 18 20:35:00 bastion LinuxCommandsWazuh: User ankur [3669325]: 1083 cd Feb 18 20:35:09 bastion LinuxCommandsWazuh: User ankur [3669325]: 1083 cd Feb 18 20:35:16 bastion LinuxCommandsWazuh: User ankur [3669325]: 1083 cd Feb 18 20:36:26 bastion LinuxCommandsWazuh: User devesh [3692346]: 833 sudo su ankut Feb 18 20:36:29 bastion LinuxCommandsWazuh: User devesh [956464]: 826 kubectl logs -f vortex-7ddd479f57-bnqht Feb 18 20:36:34 bastion LinuxCommandsWazuh: User devesh [3693040]: 833 sudo su ankut Feb 18 20:36:44 bastion LinuxCommandsWazuh: User devesh [3693040]: 834 kubectl list configmaps Feb 18 20:36:48 bastion LinuxCommandsWazuh: User devesh [3693040]: 835 kubectl get configmaps Feb 18 20:39:21 bastion LinuxCommandsWazuh: User devesh [3693040]: 836 kubectl edit configmaps house-of-click-config Feb 18 21:09:17 bastion LinuxCommandsWazuh: User ankur [3669325]: 1084 clickhouse-ssh