Apr 2 11:55:46 bastion LinuxCommandsWazuh: User mohtashim [588484]: 611 exit Apr 2 11:55:48 bastion LinuxCommandsWazuh: User mohtashim [588484]: 612 clear Apr 2 11:55:56 bastion LinuxCommandsWazuh: User mohtashim [588484]: 613 psql Apr 2 11:57:44 bastion LinuxCommandsWazuh: User mohtashim [588484]: 614 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 2 12:38:50 bastion LinuxCommandsWazuh: User venky [592821]: 429 kubectl edit configmap kube-dns-autoscaler -n kube-system Apr 2 12:38:58 bastion LinuxCommandsWazuh: User venky [592821]: 430 kubectl get hpa -n kube-system Apr 2 12:40:15 bastion LinuxCommandsWazuh: User venky [592821]: 431 kubectl edit configmap kube-dns-autoscaler -n kube-system Apr 2 12:40:19 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [592821]: 431 kubectl edit configmap kube-dns-autoscaler -n kube-system] Apr 2 12:40:24 bastion LinuxCommandsWazuh: User venky [592821]: 432 kubetail kube-dns -n kube-system Apr 2 12:40:38 bastion LinuxCommandsWazuh: User venky [592821]: 433 kubectl get po -n kube-system | dns Apr 2 12:40:42 bastion LinuxCommandsWazuh: User venky [592821]: 434 kubectl get po -n kube-system | grep dns Apr 2 12:46:45 bastion LinuxCommandsWazuh: User rihan [594309]: 827 byobu Apr 2 12:46:52 bastion LinuxCommandsWazuh: User rihan [594490]: 827 byobu Apr 2 12:53:11 bastion LinuxCommandsWazuh: User rihan [600257]: 827 byobu Apr 2 13:04:42 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1141 k logs -f cookie-cutter-queues-d4f6d8fdf-xrrcn | grep 'PxxO' Apr 2 13:04:51 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1142 redis Apr 2 13:04:53 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1143 alias redis Apr 2 13:04:58 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1143 alias redis Apr 2 13:05:00 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1143 alias redis Apr 2 13:05:03 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1143 alias redis Apr 2 13:34:28 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1144 ssh ubuntu@10.190.0.7 Apr 2 13:34:30 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1145 ls Apr 2 13:34:34 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1146 ssh-bas Apr 2 13:34:35 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1146 ssh-bas Apr 2 13:34:39 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1147 k get pods Apr 2 13:34:46 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1147 k get pods Apr 2 13:35:31 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1148 kubectl exec -it cookie-cutter-6cbc547697-tcc54 bash Apr 2 13:35:33 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1149 k get pods Apr 2 13:48:43 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1150 kubectl exec -it nitrox-dj-64765cd47f-wfnpl bash Apr 2 13:48:44 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1151 k get pods Apr 2 13:51:03 bastion LinuxCommandsWazuh: User shamailtayyab [657305]: 1141 k logs -f cookie-cutter-queues-d4f6d8fdf-xrrcn | grep 'PxxO' Apr 2 14:00:11 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1152 kubectl exec -it cookie-cutter-6dfc7498f-kn87t bash Apr 2 14:00:17 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1153 k get pods Apr 2 14:01:34 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1153 k get pods Apr 2 14:01:43 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1153 k get pods Apr 2 14:01:47 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1154 kube get pods Apr 2 14:01:58 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1155 kubectl logs -f cookie-cutter-7765d8f87b-xqxnz Apr 2 14:02:14 bastion LinuxCommandsWazuh: User shamailtayyab [657305]: 1142 redis Apr 2 14:02:17 bastion LinuxCommandsWazuh: User shamailtayyab [657305]: 1143 k get pods Apr 2 14:02:25 bastion LinuxCommandsWazuh: User shamailtayyab [657305]: 1144 k exec nitrox-dj-64765cd47f-wfnpl bash Apr 2 14:03:26 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1156 kubectl logs -f cookie-cutter-7765d8f87b-xqxnz | grep "Saving to hybrid" Apr 2 14:04:00 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1157 kubetail cookie-cutter-77 | grep "Saving to hybrid" Apr 2 14:04:06 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1158 kubetail cookie-cutter-77 Apr 2 14:05:45 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1159 kubetail cookie-cutter-77 | grep "Saving to hybrid" Apr 2 14:05:49 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1159 kubetail cookie-cutter-77 | grep "Saving to hybrid" Apr 2 14:09:22 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1159 kubetail cookie-cutter-77 | grep "Saving to hybrid" Apr 2 14:09:24 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1160 kubectl logs -f cookie-cutter-7765d8f87b-xqxnz | grep "Saving to hybrid" Apr 2 14:09:28 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1161 k get pods Apr 2 14:10:55 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1162 kubetail cookie-cutter-66 | grep "Saving to hybrid" Apr 2 14:12:22 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1163 k get pods Apr 2 14:12:29 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1164 kubetail cookie-cutter-68 | grep "Saving to hybrid" Apr 2 14:12:42 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1165 k get pods Apr 2 14:13:10 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1166 kubetail cookie-cutter-64 | grep "Saving to hybrid" Apr 2 14:13:54 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1166 kubetail cookie-cutter-64 | grep "Saving to hybrid" Apr 2 14:13:57 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1167 k get pods Apr 2 14:20:51 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1168 kubectl exec -it cookie-cutter-646b464989-xx6bt bash Apr 2 14:30:10 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1169 k get pods Apr 2 14:30:20 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1170 k logs -f cookie-cutter-596db4479c-pq2kk Apr 2 14:42:00 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1171 k get pods Apr 2 14:45:00 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1171 k get pods Apr 2 15:11:37 bastion LinuxCommandsWazuh: User mohtashim [1135560]: 615 exit Apr 2 15:11:38 bastion LinuxCommandsWazuh: User mohtashim [1135560]: 616 clear Apr 2 15:11:45 bastion LinuxCommandsWazuh: User mohtashim [1135560]: 617 kubectl get pods Apr 2 15:14:06 bastion LinuxCommandsWazuh: User mohtashim [1135560]: 618 kubectl logs -f datapulse-web-cd58d7558-n2lfg Apr 2 15:14:07 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1135560]: 618 kubectl logs -f datapulse-web-cd58d7558-n2lfg ] Apr 2 16:19:44 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1171 k get pods Apr 2 16:20:10 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1172 k logs -f cookie-cutter-746d95875b-t6bpn | grep Pxx1 Apr 2 16:25:12 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1172 k logs -f cookie-cutter-746d95875b-t6bpn | grep Pxx1 Apr 2 16:25:12 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1172 k logs -f cookie-cutter-746d95875b-t6bpn | grep Pxx1 Apr 2 16:29:22 bastion LinuxCommandsWazuh: User mohtashim [1211922]: 619 exit Apr 2 16:29:31 bastion LinuxCommandsWazuh: User mohtashim [1211922]: 619 exit Apr 2 16:29:31 bastion LinuxCommandsWazuh: User mohtashim [1211922]: 619 exit Apr 2 16:30:18 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1172 k logs -f cookie-cutter-746d95875b-t6bpn | grep Pxx1 Apr 2 16:30:20 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1173 k get pods Apr 2 16:30:44 bastion LinuxCommandsWazuh: User mohtashim [1211922]: 620 psql Apr 2 16:31:32 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1173 k get pods Apr 2 16:31:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [611555]: 1173 k get pods] Apr 2 16:32:33 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1174 k logs -f cookie-cutter-c46958f55-q9rjb Apr 2 16:32:56 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1175 k logs -f cookie-cutter-c46958f55-q9rjb | grep Pxx1 Apr 2 16:34:36 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1175 k logs -f cookie-cutter-c46958f55-q9rjb | grep Pxx1 Apr 2 16:34:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [611555]: 1175 k logs -f cookie-cutter-c46958f55-q9rjb | grep Pxx1] Apr 2 16:35:03 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1175 k logs -f cookie-cutter-c46958f55-q9rjb | grep Pxx1 Apr 2 16:35:03 bastion LinuxCommandsWazuh: User shamailtayyab [611555]: 1175 k logs -f cookie-cutter-c46958f55-q9rjb | grep Pxx1 Apr 2 17:07:54 bastion LinuxCommandsWazuh: User shamailtayyab [657305]: 1145 k exec -it nitrox-dj-64765cd47f-wfnpl bash Apr 2 17:13:10 bastion LinuxCommandsWazuh: User mohtashim [1254835]: 621 exit Apr 2 17:13:15 bastion LinuxCommandsWazuh: User mohtashim [1254835]: 622 kubectl get pods Apr 2 17:14:42 bastion LinuxCommandsWazuh: User mohtashim [1254835]: 623 kubectl logs -f datapulse-web-864f8fd48b-lgmnb Apr 2 17:17:23 bastion LinuxCommandsWazuh: User ankur [1259464]: 751 exit Apr 2 17:18:07 bastion LinuxCommandsWazuh: User ankur [1259464]: 752 kubectl get pods | grep -i nitrox Apr 2 17:18:33 bastion LinuxCommandsWazuh: User ankur [1259464]: 753 kubectl logs -f dramatiq-nitrox-54689c8bdc-689nn Apr 2 17:18:36 bastion LinuxCommandsWazuh: User ankur [1260680]: 751 exit Apr 2 17:18:46 bastion LinuxCommandsWazuh: User ankur [1260680]: 752 kubectl get pods | grep -i nitrox Apr 2 17:19:01 bastion LinuxCommandsWazuh: User ankur [1261597]: 751 exit Apr 2 17:19:09 bastion LinuxCommandsWazuh: User ankur [1261597]: 752 kubectl get pods | grep -i nitrox Apr 2 17:19:23 bastion LinuxCommandsWazuh: User ankur [1262296]: 751 exit Apr 2 17:19:32 bastion LinuxCommandsWazuh: User ankur [1262296]: 752 kubect get pods | grep -i house Apr 2 17:19:37 bastion LinuxCommandsWazuh: User ankur [1262296]: 753 kubectl get pods | grep -i house Apr 2 17:27:37 bastion LinuxCommandsWazuh: User ankur [1278230]: 751 exit Apr 2 17:38:03 bastion LinuxCommandsWazuh: User ankur [1260680]: 753 kubectl logs -f dramatiq-nitrox-54689c8bdc-689nn Apr 2 17:38:03 bastion LinuxCommandsWazuh: message repeated 10 times: [ User ankur [1260680]: 753 kubectl logs -f dramatiq-nitrox-54689c8bdc-689nn] Apr 2 17:38:24 bastion LinuxCommandsWazuh: User ankur [1261597]: 753 kubectl logs -f nitrox-dj-795b56df87-jcgzd Apr 2 17:38:24 bastion LinuxCommandsWazuh: message repeated 39 times: [ User ankur [1261597]: 753 kubectl logs -f nitrox-dj-795b56df87-jcgzd] Apr 2 17:38:44 bastion LinuxCommandsWazuh: User ankur [1260680]: 754 kubectl get pods | grep -i nitrox Apr 2 17:41:19 bastion LinuxCommandsWazuh: User ankur [1261597]: 754 kubectl get pods | grep -i nitrox Apr 2 17:41:30 bastion LinuxCommandsWazuh: User ankur [1261597]: 755 kubectl exec -it dramatiq-nitrox-5b878d4c46-xndx8 Apr 2 17:43:01 bastion LinuxCommandsWazuh: User devesh [1301787]: 1119 byobu Apr 2 17:43:07 bastion LinuxCommandsWazuh: User devesh [1358905]: 1097 kubectl logs -f intelligence-774695957b-jx78l Apr 2 17:43:14 bastion LinuxCommandsWazuh: User devesh [1358905]: 1098 kubectl get pods Apr 2 17:44:20 bastion LinuxCommandsWazuh: User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4 Apr 2 17:44:21 bastion LinuxCommandsWazuh: message repeated 67 times: [ User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4] Apr 2 17:44:21 bastion LinuxCommandsWazuh: User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4 Apr 2 17:44:21 bastion LinuxCommandsWazuh: message repeated 24 times: [ User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4] Apr 2 17:44:21 bastion LinuxCommandsWazuh: User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4 Apr 2 17:44:22 bastion LinuxCommandsWazuh: message repeated 69 times: [ User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4] Apr 2 17:54:19 bastion LinuxCommandsWazuh: User ankur [1262296]: 754 kubectl logs -f house-of-click-665d5d5698-9crr4 Apr 2 17:55:20 bastion LinuxCommandsWazuh: User ankur [1262296]: 755 kubectl get pods | grep -i house Apr 2 17:55:28 bastion LinuxCommandsWazuh: User devesh [314691]: 1122 mongosh --host 10.190.0.29 Apr 2 17:56:10 bastion LinuxCommandsWazuh: User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6 Apr 2 17:56:11 bastion LinuxCommandsWazuh: message repeated 41 times: [ User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6] Apr 2 18:04:59 bastion LinuxCommandsWazuh: User mohtashim [1344378]: 624 exit Apr 2 18:05:00 bastion LinuxCommandsWazuh: User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6 Apr 2 18:05:01 bastion LinuxCommandsWazuh: message repeated 118 times: [ User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6] Apr 2 18:05:01 bastion LinuxCommandsWazuh: User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6 Apr 2 18:05:04 bastion LinuxCommandsWazuh: message repeated 297 times: [ User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6] Apr 2 18:06:40 bastion LinuxCommandsWazuh: User ankur [1262296]: 756 kubectl logs -f house-of-click-76d86bcb49-p2sr6 Apr 2 18:06:53 bastion LinuxCommandsWazuh: User mohtashim [1344378]: 625 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 2 18:33:05 bastion LinuxCommandsWazuh: User devesh [2551314]: 1124 mongosh --host 10.190.0.29 Apr 2 18:33:06 bastion LinuxCommandsWazuh: User devesh [2551314]: 1124 mongosh --host 10.190.0.29 Apr 2 18:33:10 bastion LinuxCommandsWazuh: User devesh [2551314]: 1125 kubectl get pods Apr 2 18:40:00 bastion LinuxCommandsWazuh: User ankur [1260680]: 755 kubectl logs -f dramatiq-nitrox-5b878d4c46-xndx8 Apr 2 18:42:30 bastion LinuxCommandsWazuh: User devesh [2551314]: 1125 kubectl get pods Apr 2 18:42:30 bastion LinuxCommandsWazuh: message repeated 2 times: [ User devesh [2551314]: 1125 kubectl get pods] Apr 2 18:45:25 bastion LinuxCommandsWazuh: User ankur [1262296]: 757 kubectl get pods | grep -i house Apr 2 18:46:36 bastion LinuxCommandsWazuh: User ankur [1262296]: 758 kubectl logs -f house-of-click-676b978499-nmr2l Apr 2 18:54:55 bastion LinuxCommandsWazuh: User devesh [1358905]: 1099 kubectl logs -f nitrox-dj-5dfd8799d6-9qc4b Apr 2 18:55:01 bastion LinuxCommandsWazuh: User devesh [1358905]: 1100 kubectl get pods Apr 2 18:56:30 bastion LinuxCommandsWazuh: User devesh [1358905]: 1101 kubetail -f cookie-cutter Apr 2 19:55:51 bastion LinuxCommandsWazuh: User ankur [1261597]: 756 kubectl exec -it dramatiq-nitrox-5b878d4c46-xndx8 bash Apr 2 19:55:51 bastion LinuxCommandsWazuh: User ankur [1260680]: 755 kubectl logs -f dramatiq-nitrox-5b878d4c46-xndx8 Apr 2 19:55:52 bastion LinuxCommandsWazuh: message repeated 79 times: [ User ankur [1260680]: 755 kubectl logs -f dramatiq-nitrox-5b878d4c46-xndx8] Apr 2 19:55:54 bastion LinuxCommandsWazuh: User ankur [1262296]: 758 kubectl logs -f house-of-click-676b978499-nmr2l Apr 2 19:55:54 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1262296]: 758 kubectl logs -f house-of-click-676b978499-nmr2l] Apr 2 20:04:22 bastion LinuxCommandsWazuh: User ankur [1260680]: 756 ' Apr 2 20:04:28 bastion LinuxCommandsWazuh: User ankur [1260680]: 757 kubectl get pods | grep -i nitrox Apr 2 20:04:44 bastion LinuxCommandsWazuh: User ankur [1262296]: 759 kubectl get pods | grep -i house Apr 2 20:05:14 bastion LinuxCommandsWazuh: User ankur [1278230]: 752 clickhouse-ssh Apr 2 20:10:22 bastion LinuxCommandsWazuh: User ankur [1605477]: 759 exit Apr 2 20:15:33 bastion LinuxCommandsWazuh: User ankur [1262296]: 760 kubectl logs -f house-of-click-686d846f45-gflpg Apr 2 20:15:33 bastion LinuxCommandsWazuh: User ankur [1262296]: 760 kubectl logs -f house-of-click-686d846f45-gflpg Apr 2 20:15:33 bastion LinuxCommandsWazuh: User ankur [1262296]: 760 kubectl logs -f house-of-click-686d846f45-gflpg Apr 2 20:15:52 bastion LinuxCommandsWazuh: User ankur [1605477]: 760 clickhouse-ssh Apr 2 20:17:28 bastion LinuxCommandsWazuh: User ankur [1260680]: 758 kubectl logs -f dramatiq-nitrox-75784f6647-7ftcz Apr 2 20:17:29 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [1260680]: 758 kubectl logs -f dramatiq-nitrox-75784f6647-7ftcz] Apr 2 20:17:30 bastion LinuxCommandsWazuh: User ankur [1259464]: 754 byobu Apr 2 20:48:13 bastion LinuxCommandsWazuh: User mohtashim [1615063]: 626 exit Apr 2 20:48:19 bastion LinuxCommandsWazuh: User mohtashim [1615063]: 627 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 2 20:48:50 bastion LinuxCommandsWazuh: User mohtashim [1615063]: 627 psql -h 10.94.16.3 -U postgres -d datapulse_v1