Apr 4 12:05:59 bastion LinuxCommandsWazuh: User mohtashim [95427]: 637 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 4 12:06:01 bastion LinuxCommandsWazuh: User mohtashim [95427]: 638 clear Apr 4 12:10:00 bastion LinuxCommandsWazuh: User mohtashim [95427]: 639 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 4 12:27:45 bastion LinuxCommandsWazuh: User ankur [97210]: 824 exit Apr 4 12:27:46 bastion LinuxCommandsWazuh: User ankur [97210]: 825 ls Apr 4 12:27:57 bastion LinuxCommandsWazuh: User ankur [97210]: 826 kubectl get configmaps Apr 4 12:28:28 bastion LinuxCommandsWazuh: User ankur [97210]: 827 kubectl describe configmaps nitrox-dj-config Apr 4 12:33:26 bastion LinuxCommandsWazuh: User ankur [97210]: 828 ls Apr 4 12:33:33 bastion LinuxCommandsWazuh: User ankur [97210]: 829 kubectl get configmaps Apr 4 12:34:02 bastion LinuxCommandsWazuh: User ankur [97210]: 830 kubectl describe configmaps nitrox-ck-config Apr 4 15:27:32 bastion LinuxCommandsWazuh: User ankur [111748]: 830 kubectl describe configmaps nitrox-ck-config Apr 4 15:27:51 bastion LinuxCommandsWazuh: User ankur [111748]: 831 kubectl get configmaps Apr 4 15:33:47 bastion LinuxCommandsWazuh: User ankur [111748]: 832 kubectl edit configmaps dakiya-config Apr 4 15:33:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [111748]: 832 kubectl edit configmaps dakiya-config] Apr 4 15:34:24 bastion LinuxCommandsWazuh: User ankur [111748]: 833 kubectl rollout restart deployment.apps/dakiya Apr 4 15:34:57 bastion LinuxCommandsWazuh: User ankur [111748]: 834 kubectl get pods | grep -i dakiya Apr 4 15:35:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [111748]: 834 kubectl get pods | grep -i dakiya] Apr 4 15:35:02 bastion LinuxCommandsWazuh: User ankur [111748]: 834 kubectl get pods | grep -i dakiya Apr 4 15:35:14 bastion LinuxCommandsWazuh: message repeated 15 times: [ User ankur [111748]: 834 kubectl get pods | grep -i dakiya] Apr 4 15:35:17 bastion LinuxCommandsWazuh: User ankur [111748]: 834 kubectl get pods | grep -i dakiya Apr 4 15:35:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [111748]: 834 kubectl get pods | grep -i dakiya] Apr 4 15:37:05 bastion LinuxCommandsWazuh: User ankur [111748]: 834 kubectl get pods | grep -i dakiya Apr 4 15:37:27 bastion LinuxCommandsWazuh: User ankur [111748]: 835 kubectl get pods | grep -i nitrox Apr 4 15:37:47 bastion LinuxCommandsWazuh: User ankur [113070]: 830 kubectl describe configmaps nitrox-ck-config Apr 4 16:20:49 bastion LinuxCommandsWazuh: User ankur [116318]: 837 kubectl logs -f dramatiq-nitrox-557fc66695-ffv88 Apr 4 16:20:53 bastion LinuxCommandsWazuh: User ankur [116414]: 837 kubectl logs -f dramatiq-nitrox-557fc66695-ffv88 Apr 4 16:20:57 bastion LinuxCommandsWazuh: User ankur [116414]: 838 kubectl logs -f dakiya-68b77bd78b-66jsk Apr 4 16:31:01 bastion LinuxCommandsWazuh: User ankur [116414]: 839 kubectl exec -it dakiya-68b77bd78b-66jsk bash Apr 4 16:31:02 bastion LinuxCommandsWazuh: User ankur [116414]: 839 kubectl exec -it dakiya-68b77bd78b-66jsk bash Apr 4 16:31:04 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [116414]: 839 kubectl exec -it dakiya-68b77bd78b-66jsk bash] Apr 4 16:31:08 bastion LinuxCommandsWazuh: User ankur [117278]: 837 kubectl logs -f dramatiq-nitrox-557fc66695-ffv88 Apr 4 16:31:08 bastion LinuxCommandsWazuh: User ankur [116414]: 839 kubectl exec -it dakiya-68b77bd78b-66jsk bash Apr 4 16:31:16 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [116414]: 839 kubectl exec -it dakiya-68b77bd78b-66jsk bash] Apr 4 16:34:47 bastion LinuxCommandsWazuh: User ankur [117455]: 840 exit Apr 4 16:34:53 bastion LinuxCommandsWazuh: User ankur [117455]: 841 kubectl exec -it dakiya-68b77bd78b-66jsk bash Apr 4 17:37:56 bastion LinuxCommandsWazuh: User mohtashim [122909]: 640 exit Apr 4 17:40:57 bastion LinuxCommandsWazuh: User devesh [123140]: 1119 byobu Apr 4 17:41:01 bastion LinuxCommandsWazuh: User devesh [123140]: 1119 byobu Apr 4 17:45:34 bastion LinuxCommandsWazuh: User ankur [127464]: 842 kubectl logs -f dakiya-68b77bd78b-66jsk Apr 4 17:45:45 bastion LinuxCommandsWazuh: User ankur [127464]: 843 kubectl get pods | grep -i dakiya Apr 4 17:46:00 bastion LinuxCommandsWazuh: User ankur [127464]: 844 kubectl logs -f dakiya-74b86b75db-chzsv Apr 4 17:46:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [127464]: 844 kubectl logs -f dakiya-74b86b75db-chzsv] Apr 4 17:46:09 bastion LinuxCommandsWazuh: User ankur [4126048]: 798 kubectl logs -f dakiya-7c565c4b86-r2q4b Apr 4 17:46:20 bastion LinuxCommandsWazuh: User ankur [4126048]: 799 kubectl get pods | grep -i dakiya Apr 4 17:46:41 bastion LinuxCommandsWazuh: User ankur [4126619]: 804 kubectl get pods | grep -i nitrxo Apr 4 17:46:43 bastion LinuxCommandsWazuh: User ankur [4126619]: 805 kubectl get pods | grep -i nitrox Apr 4 18:09:49 bastion LinuxCommandsWazuh: User mohtashim [122909]: 641 psql Apr 4 18:15:42 bastion LinuxCommandsWazuh: User ankur [4126048]: 800 kubectl logs -f dakiya-74b86b75db-chzsv Apr 4 18:15:42 bastion LinuxCommandsWazuh: message repeated 79 times: [ User ankur [4126048]: 800 kubectl logs -f dakiya-74b86b75db-chzsv] Apr 4 18:16:00 bastion LinuxCommandsWazuh: User ankur [4126048]: 801 kubectl get pods | grep -i dakiya Apr 4 18:21:12 bastion LinuxCommandsWazuh: User ankur [194941]: 842 kubectl logs -f dakiya-68b77bd78b-66jsk Apr 4 18:22:59 bastion LinuxCommandsWazuh: User ankur [4126048]: 802 kubectl logs -f dakiya-5964c589d9-r8f69 Apr 4 18:31:32 bastion LinuxCommandsWazuh: User ankur [214118]: 842 kubectl logs -f dakiya-68b77bd78b-66jsk Apr 4 18:31:56 bastion LinuxCommandsWazuh: User ankur [4126048]: 802 kubectl logs -f dakiya-5964c589d9-r8f69 Apr 4 18:32:02 bastion LinuxCommandsWazuh: User ankur [4126619]: 806 kubectl logs -f dramatiq-nitrox-6f746989b5-t7l84 Apr 4 18:32:06 bastion LinuxCommandsWazuh: User ankur [4126619]: 807 kubectl get pods | grep -i nitrox Apr 4 18:32:29 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ankur [4126619]: 807 kubectl get pods | grep -i nitrox] Apr 4 18:36:19 bastion LinuxCommandsWazuh: User ankur [223550]: 843 exit Apr 4 18:36:27 bastion LinuxCommandsWazuh: User ankur [223550]: 844 psql Apr 4 18:36:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [223550]: 844 psql ] Apr 4 18:45:55 bastion LinuxCommandsWazuh: User devesh [1358905]: 1102 kubetail -f cookie-cutter | grep "Generated contacts for" Apr 4 18:45:59 bastion LinuxCommandsWazuh: User ankur [223550]: 845 psql -U postgres Apr 4 18:46:03 bastion LinuxCommandsWazuh: User devesh [1358905]: 1102 kubetail -f cookie-cutter | grep "Generated contacts for" Apr 4 18:46:07 bastion LinuxCommandsWazuh: User ankur [194941]: 843 clickhouse-ssh Apr 4 18:47:36 bastion LinuxCommandsWazuh: User ankur [4126619]: 808 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 18:47:37 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [4126619]: 808 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8] Apr 4 18:47:47 bastion LinuxCommandsWazuh: User ankur [4126619]: 809 kubectl get pods | grep -i dakiya ' Apr 4 18:47:50 bastion LinuxCommandsWazuh: User ankur [4126619]: 810 kubectl get pods | grep -i dakiya Apr 4 19:00:20 bastion LinuxCommandsWazuh: User ankur [4126619]: 811 ls Apr 4 19:00:29 bastion LinuxCommandsWazuh: User ankur [4126619]: 812 kubectl get pods | grep -i dakiya Apr 4 19:20:29 bastion LinuxCommandsWazuh: User ankur [4126619]: 813 kubectl exec -it dakiya-5964c589d9-r8f69 bash Apr 4 19:20:30 bastion LinuxCommandsWazuh: User ankur [4126048]: 802 kubectl logs -f dakiya-5964c589d9-r8f69 Apr 4 19:20:31 bastion LinuxCommandsWazuh: message repeated 113 times: [ User ankur [4126048]: 802 kubectl logs -f dakiya-5964c589d9-r8f69] Apr 4 19:20:57 bastion LinuxCommandsWazuh: User venky [307674]: 434 kubectl get po -n kube-system | grep dns Apr 4 19:21:11 bastion LinuxCommandsWazuh: User venky [307674]: 434 kubectl get po -n kube-system | grep dns Apr 4 19:21:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [307674]: 434 kubectl get po -n kube-system | grep dns] Apr 4 19:21:22 bastion LinuxCommandsWazuh: User venky [307674]: 435 kubectl get deployments Apr 4 19:21:34 bastion LinuxCommandsWazuh: User venky [307674]: 436 kubectl get po Apr 4 19:21:52 bastion LinuxCommandsWazuh: User venky [307674]: 437 kubectl get po | grep cookie | less Apr 4 19:22:12 bastion LinuxCommandsWazuh: User venky [307674]: 438 kubetail logs -f cookie-cutter-f9c495554-6pgtm Apr 4 19:22:37 bastion LinuxCommandsWazuh: User venky [307674]: 439 kubetail cookie-cutter-f9c495554 Apr 4 19:22:37 bastion LinuxCommandsWazuh: User venky [307674]: 439 kubetail cookie-cutter-f9c495554 Apr 4 19:22:46 bastion LinuxCommandsWazuh: User venky [307674]: 440 kubectl logs -f cookie-cutter-f9c495554-6pgtm Apr 4 19:25:54 bastion LinuxCommandsWazuh: User venky [307674]: 441 kubectl get po | grep cookie | less Apr 4 19:25:56 bastion LinuxCommandsWazuh: User venky [307674]: 442 kubectl logs -f cookie-cutter-f9c495554-6pgtm Apr 4 19:29:21 bastion LinuxCommandsWazuh: User venky [307674]: 442 kubectl logs -f cookie-cutter-f9c495554-6pgtm Apr 4 19:29:55 bastion LinuxCommandsWazuh: User ankur [4126048]: 803 kubectl get pods | grep -i dakiya Apr 4 19:30:22 bastion LinuxCommandsWazuh: User ankur [4126619]: 814 kubectl get pods | grep -i nitrox Apr 4 19:45:47 bastion LinuxCommandsWazuh: User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 19:45:47 bastion LinuxCommandsWazuh: message repeated 56 times: [ User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8] Apr 4 19:45:47 bastion LinuxCommandsWazuh: User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 19:45:47 bastion LinuxCommandsWazuh: User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 19:45:48 bastion LinuxCommandsWazuh: message repeated 21 times: [ User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8] Apr 4 19:45:48 bastion LinuxCommandsWazuh: User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 19:45:49 bastion LinuxCommandsWazuh: message repeated 117 times: [ User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8] Apr 4 19:45:49 bastion LinuxCommandsWazuh: User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8 Apr 4 19:45:50 bastion LinuxCommandsWazuh: message repeated 88 times: [ User ankur [4126619]: 815 kubectl logs -f dramatiq-nitrox-7f9dd4d46-6clz8] Apr 4 19:49:30 bastion LinuxCommandsWazuh: User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k Apr 4 19:49:30 bastion LinuxCommandsWazuh: User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k Apr 4 19:49:30 bastion LinuxCommandsWazuh: User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k Apr 4 19:49:30 bastion LinuxCommandsWazuh: User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k Apr 4 19:49:48 bastion LinuxCommandsWazuh: User ankur [4126619]: 816 kubectl get pods | grep -i nitrox Apr 4 23:49:33 bastion LinuxCommandsWazuh: User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k Apr 4 23:49:34 bastion LinuxCommandsWazuh: message repeated 33 times: [ User ankur [4126048]: 804 kubectl logs -f dakiya-67cfd9d6fc-zpm4k] Apr 4 23:49:55 bastion LinuxCommandsWazuh: User ankur [4126619]: 817 kubectl logs -f dramatiq-nitrox-5dd7d965-hprh5 Apr 4 23:49:55 bastion LinuxCommandsWazuh: message repeated 35 times: [ User ankur [4126619]: 817 kubectl logs -f dramatiq-nitrox-5dd7d965-hprh5]