Feb 27 13:57:31 bastion LinuxCommandsWazuh: User ankur [1440607]: 1126 kafka-ssh Feb 27 13:57:36 bastion LinuxCommandsWazuh: User ankur [1440607]: 1127 ls Feb 27 13:58:05 bastion LinuxCommandsWazuh: User ankur [1440607]: 1128 clickhouse-ssh Feb 27 13:58:08 bastion LinuxCommandsWazuh: User ankur [1440678]: 1126 kafka-ssh Feb 27 13:58:46 bastion LinuxCommandsWazuh: User ankur [1441378]: 1126 kafka-ssh Feb 27 13:58:56 bastion LinuxCommandsWazuh: User ankur [1441378]: 1127 redis Feb 27 13:59:07 bastion LinuxCommandsWazuh: User ankur [1441378]: 1128 kubectl get pods Feb 27 13:59:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1441378]: 1128 kubectl get pods ] Feb 27 13:59:14 bastion LinuxCommandsWazuh: User ankur [1441378]: 1129 kubectl get configmaps Feb 27 13:59:34 bastion LinuxCommandsWazuh: User ankur [1441378]: 1130 kubectl describe configmaps house-of-click-config Feb 27 14:05:21 bastion LinuxCommandsWazuh: User ankur [1441378]: 1131 redis Feb 27 14:05:29 bastion LinuxCommandsWazuh: User ankur [1441378]: 1131 redis Feb 27 14:05:54 bastion LinuxCommandsWazuh: User ankur [1448209]: 1126 kafka-ssh Feb 27 14:06:06 bastion LinuxCommandsWazuh: User ankur [1448209]: 1127 kubectl get pods | grep -i click Feb 27 14:06:17 bastion LinuxCommandsWazuh: User ankur [1448209]: 1128 kubectl logs -f house-of-click-dcd56d477-ggqgj Feb 27 14:07:58 bastion LinuxCommandsWazuh: User devesh [1450288]: 853 byobu Feb 27 14:08:01 bastion LinuxCommandsWazuh: User devesh [1450288]: 853 byobu Feb 27 14:08:13 bastion LinuxCommandsWazuh: User devesh [1450623]: 853 byobu Feb 27 14:08:27 bastion LinuxCommandsWazuh: User devesh [1450623]: 854 ssh-nitro Feb 27 14:08:39 bastion LinuxCommandsWazuh: User devesh [1450623]: 855 mongosh --host 10.190.0.29 Feb 27 14:15:33 bastion LinuxCommandsWazuh: User ankur [1448209]: 1129 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i insert Feb 27 14:17:09 bastion LinuxCommandsWazuh: User devesh [1450623]: 855 mongosh --host 10.190.0.29 Feb 27 14:18:10 bastion LinuxCommandsWazuh: User ankur [1448209]: 1130 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Query in current job:" Feb 27 14:20:12 bastion LinuxCommandsWazuh: User ankur [1448209]: 1130 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Query in current job:" Feb 27 14:20:19 bastion LinuxCommandsWazuh: User ankur [1448209]: 1130 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Query in current job:" Feb 27 14:28:04 bastion LinuxCommandsWazuh: User ankur [1448209]: 1131 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "insert" Feb 27 14:28:15 bastion LinuxCommandsWazuh: User ankur [1448209]: 1131 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "insert" Feb 27 14:29:14 bastion LinuxCommandsWazuh: User ankur [1448209]: 1132 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Latest entry" Feb 27 14:30:31 bastion LinuxCommandsWazuh: User ankur [1441378]: 1131 redis Feb 27 14:30:45 bastion LinuxCommandsWazuh: User ankur [1441378]: 1131 redis Feb 27 14:30:47 bastion LinuxCommandsWazuh: User ankur [1441378]: 1132 kubectl describe configmaps house-of-click-config Feb 27 14:30:56 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [1441378]: 1132 kubectl describe configmaps house-of-click-config] Feb 27 14:31:36 bastion LinuxCommandsWazuh: User ankur [1448209]: 1132 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Latest entry" Feb 27 14:33:21 bastion LinuxCommandsWazuh: User ankur [1448209]: 1132 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "Latest entry" Feb 27 14:33:57 bastion LinuxCommandsWazuh: User ankur [1448209]: 1133 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "routes.inmarket_route:insert_table_data" Feb 27 14:38:38 bastion LinuxCommandsWazuh: User devesh [1479292]: 855 mongosh --host 10.190.0.29 Feb 27 15:40:17 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1702 sudo su ankur Feb 27 15:40:18 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1703 cd .. Feb 27 15:40:19 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1704 ls Feb 27 15:40:24 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 892 internal Feb 27 15:40:25 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 893 cd Feb 27 15:40:31 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 894 crontab -e Feb 27 15:40:45 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 895 vi .bashrc Feb 27 15:40:54 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 896 cat .bashrc Feb 27 15:41:05 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 897 mongo-server Feb 27 15:41:41 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 898 vi .bashrc Feb 27 15:41:45 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 898 vi .bashrc Feb 27 15:41:50 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: 899 source .bashrc Feb 27 15:42:10 bastion LinuxCommandsWazuh: User shamailtayyab [1503463]: mongo-server Feb 27 15:42:12 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1705 sudo su shamailtayyab Feb 27 15:42:12 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1706 ls Feb 27 15:42:24 bastion LinuxCommandsWazuh: User venky [1503598]: 253 byobu Feb 27 15:42:25 bastion LinuxCommandsWazuh: User venky [1503598]: 254 cd Feb 27 15:42:25 bastion LinuxCommandsWazuh: User venky [1503598]: 255 ls Feb 27 15:42:29 bastion LinuxCommandsWazuh: User venky [1503598]: 256 cat .bashrc Feb 27 15:42:51 bastion LinuxCommandsWazuh: User venky [1503598]: 257 vi .bashrc Feb 27 15:42:55 bastion LinuxCommandsWazuh: User venky [1503598]: 258 source .bashrc Feb 27 15:43:02 bastion LinuxCommandsWazuh: User venky [1503598]: 259 mongo-server Feb 27 15:43:06 bastion LinuxCommandsWazuh: User venky [1503598]: 260 cd .ssh/ Feb 27 15:43:14 bastion LinuxCommandsWazuh: User venky [1503598]: 261 cat id_rsa.pub Feb 27 15:43:35 bastion LinuxCommandsWazuh: User venky [1503598]: 261 cat id_rsa.pub Feb 27 15:43:46 bastion LinuxCommandsWazuh: User venky [1503598]: 262 mongo-server Feb 27 15:43:46 bastion LinuxCommandsWazuh: User venky [1503598]: 263 ls Feb 27 15:43:47 bastion LinuxCommandsWazuh: User venky [1503598]: 264 cd Feb 27 15:43:48 bastion LinuxCommandsWazuh: User venky [1503598]: 265 ls Feb 27 15:44:44 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1707 sudo su venky Feb 27 15:44:48 bastion LinuxCommandsWazuh: User rihan [1503722]: 750 byobu Feb 27 15:44:50 bastion LinuxCommandsWazuh: User rihan [1503722]: 751 cd Feb 27 15:45:13 bastion LinuxCommandsWazuh: User rihan [1503722]: 752 vi .bashrc Feb 27 15:45:23 bastion LinuxCommandsWazuh: User rihan [1503722]: 753 mongo-server Feb 27 15:45:27 bastion LinuxCommandsWazuh: User rihan [1503722]: 754 source .bashrc Feb 27 15:45:32 bastion LinuxCommandsWazuh: User rihan [1503722]: 755 mongo-server Feb 27 15:45:34 bastion LinuxCommandsWazuh: User rihan [1503722]: 756 cd .ssh/ Feb 27 15:45:39 bastion LinuxCommandsWazuh: User rihan [1503722]: 757 cat id_rsa.pub Feb 27 15:46:09 bastion LinuxCommandsWazuh: User rihan [1503722]: 758 mongo-server Feb 27 15:46:11 bastion LinuxCommandsWazuh: User ubuntu [1503432]: 1708 sudo su rihan Feb 27 15:57:18 bastion LinuxCommandsWazuh: User ankur [1503955]: 1129 byobu Feb 27 15:57:27 bastion LinuxCommandsWazuh: User ankur [1503955]: 1130 psql -U postgres Feb 27 15:59:16 bastion LinuxCommandsWazuh: User ankur [1503955]: 1130 psql -U postgres Feb 27 15:59:24 bastion LinuxCommandsWazuh: User ankur [1504111]: 1129 byobu Feb 27 16:00:04 bastion LinuxCommandsWazuh: User ankur [1504111]: 1130 kubectl get pods | grep -i vortex Feb 27 16:14:43 bastion LinuxCommandsWazuh: User ankur [1504111]: 1131 kubectl logs -f vortex-7db46b7fd4-wzs9b Feb 27 16:14:43 bastion LinuxCommandsWazuh: message repeated 14 times: [ User ankur [1504111]: 1131 kubectl logs -f vortex-7db46b7fd4-wzs9b] Feb 27 16:14:56 bastion LinuxCommandsWazuh: User ankur [1504111]: 1132 kubectl get pods | grep -i vortex Feb 27 16:15:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [1504111]: 1132 kubectl get pods | grep -i vortex] Feb 27 16:15:02 bastion LinuxCommandsWazuh: User ankur [1504111]: 1132 kubectl get pods | grep -i vortex Feb 27 16:15:11 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [1504111]: 1132 kubectl get pods | grep -i vortex] Feb 27 16:16:22 bastion LinuxCommandsWazuh: User ankur [1504111]: 1133 kubectl logs -f vortex-f8858db85-sqb2r Feb 27 16:16:22 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ankur [1504111]: 1133 kubectl logs -f vortex-f8858db85-sqb2r] Feb 27 16:16:57 bastion LinuxCommandsWazuh: User ankur [1504793]: 1129 byobu Feb 27 16:17:46 bastion LinuxCommandsWazuh: User ankur [1504793]: 1130 psql Feb 27 16:17:51 bastion LinuxCommandsWazuh: User ankur [1503955]: 1130 psql -U postgres Feb 27 16:19:57 bastion LinuxCommandsWazuh: User ankur [1504925]: 1138 exit Feb 27 16:26:12 bastion LinuxCommandsWazuh: User ankur [1504925]: 1139 psql Feb 27 16:47:42 bastion LinuxCommandsWazuh: User rihan [1505415]: 759 exit Feb 27 16:47:55 bastion LinuxCommandsWazuh: User rihan [1127]: 729 kubetail datapulse-web Feb 27 16:48:14 bastion LinuxCommandsWazuh: User rihan [3612563]: 751 psql Feb 27 16:53:15 bastion LinuxCommandsWazuh: User rihan [1519505]: 759 exit Feb 27 16:57:22 bastion LinuxCommandsWazuh: User devesh [1534862]: 500 mongosh --host 10.190.0.29 Feb 27 17:00:20 bastion LinuxCommandsWazuh: User rihan [3612563]: 752 make nitrox-bash Feb 27 17:17:43 bastion LinuxCommandsWazuh: User ankur [1781824]: 1140 exit Feb 27 17:18:05 bastion LinuxCommandsWazuh: User ankur [1781824]: 1141 clickhouse-ssh Feb 27 17:18:21 bastion LinuxCommandsWazuh: User ankur [1781824]: 1142 kubectl get pods | grep -i click Feb 27 17:18:32 bastion LinuxCommandsWazuh: User ankur [1781824]: 1143 kubectl exec -it house-of-click-dcd56d477-ggqgj Feb 27 17:19:42 bastion LinuxCommandsWazuh: User ankur [1781824]: 1144 kubectl exec -it house-of-click-dcd56d477-ggqgj bash Feb 27 18:42:39 bastion LinuxCommandsWazuh: User ankur [1448209]: 1133 kubectl logs -f house-of-click-dcd56d477-ggqgj | grep -i "routes.inmarket_route:insert_table_data" Feb 27 20:56:32 bastion LinuxCommandsWazuh: User venky [637126]: 266 exit Feb 27 20:56:35 bastion LinuxCommandsWazuh: User venky [637126]: 267 byobu Feb 27 20:56:55 bastion LinuxCommandsWazuh: User venky [637126]: 267 byobu Feb 27 20:57:00 bastion LinuxCommandsWazuh: User venky [637126]: 267 byobu Feb 27 20:57:37 bastion LinuxCommandsWazuh: message repeated 10 times: [ User venky [637126]: 267 byobu] Feb 27 20:58:02 bastion LinuxCommandsWazuh: User venky [637126]: 268 sudo apt install xterm Feb 27 20:58:06 bastion LinuxCommandsWazuh: User venky [637126]: 268 sudo apt install xterm Feb 27 20:58:42 bastion LinuxCommandsWazuh: User venky [637126]: 268 sudo apt install xterm Feb 27 21:00:03 bastion LinuxCommandsWazuh: User venky [639869]: 268 sudo apt install xterm Feb 27 21:00:13 bastion LinuxCommandsWazuh: User venky [639869]: 268 sudo apt install xterm Feb 27 23:16:22 bastion LinuxCommandsWazuh: User venky [651143]: 269 kubetail house-of Feb 27 23:17:10 bastion LinuxCommandsWazuh: User venky [651143]: 269 kubetail house-of Feb 27 23:17:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [651143]: 269 kubetail house-of] Feb 27 23:18:34 bastion LinuxCommandsWazuh: User venky [651143]: 270 kubetail house-of | grep "stat" Feb 27 23:26:34 bastion LinuxCommandsWazuh: User venky [652078]: 270 kubetail house-of | grep "stat" Feb 27 23:26:38 bastion LinuxCommandsWazuh: User venky [652078]: 270 kubetail house-of | grep "stat" Feb 27 23:26:53 bastion LinuxCommandsWazuh: message repeated 10 times: [ User venky [652078]: 270 kubetail house-of | grep "stat"]