Apr 15 12:12:55 bastion LinuxCommandsWazuh: User shamailtayyab [894785]: 1505 kubetail cookie-cutter-7d9f6b459d | grep 'Identify Payload' Apr 15 12:14:11 bastion LinuxCommandsWazuh: User shamailtayyab [894785]: 1506 psql -h 10.94.16.3 -d analytics_01 -U postgres Apr 15 12:14:16 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [894785]: 1506 psql -h 10.94.16.3 -d analytics_01 -U postgres] Apr 15 12:35:20 bastion LinuxCommandsWazuh: User ankur [896507]: 1009 exit Apr 15 12:55:47 bastion LinuxCommandsWazuh: User mohtashim [898135]: 564 exit Apr 15 12:58:27 bastion LinuxCommandsWazuh: User rihan [898892]: 866 mongo Apr 15 13:00:09 bastion LinuxCommandsWazuh: User rihan [898892]: 866 mongo Apr 15 13:00:46 bastion LinuxCommandsWazuh: User rihan [898892]: 866 mongo Apr 15 13:03:03 bastion LinuxCommandsWazuh: User mohtashim [898135]: 565 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 15 13:17:37 bastion LinuxCommandsWazuh: User rihan [900578]: 866 mongo Apr 15 13:22:04 bastion LinuxCommandsWazuh: User mohtashim [900828]: 566 exit Apr 15 13:22:36 bastion LinuxCommandsWazuh: User mohtashim [900828]: 567 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 15 13:55:28 bastion LinuxCommandsWazuh: User mohtashim [900828]: 567 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 15 13:55:28 bastion LinuxCommandsWazuh: User mohtashim [900828]: 567 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 15 15:11:36 bastion LinuxCommandsWazuh: User ankur [896507]: 1010 clickhouse-ssh Apr 15 15:35:38 bastion LinuxCommandsWazuh: User rihan [900578]: 867 psql Apr 15 15:35:59 bastion LinuxCommandsWazuh: User rihan [900578]: 868 kubectl get pods | grep "nitrox" Apr 15 15:41:34 bastion LinuxCommandsWazuh: User ankur [896507]: 1011 kubectl edit configmaps nitrox-ck-config Apr 15 15:47:11 bastion LinuxCommandsWazuh: User ankur [896507]: 1012 redis Apr 15 15:49:09 bastion LinuxCommandsWazuh: User rihan [900578]: 868 kubectl get pods | grep "nitrox" Apr 15 15:51:25 bastion LinuxCommandsWazuh: User mohtashim [912891]: 568 exit Apr 15 15:51:37 bastion LinuxCommandsWazuh: User rihan [900578]: 869 kubetail -f nitrox-dj Apr 15 15:51:41 bastion LinuxCommandsWazuh: User mohtashim [912891]: 569 kubetail get pods Apr 15 15:51:47 bastion LinuxCommandsWazuh: User mohtashim [912891]: 570 kubectl get pods Apr 15 15:51:56 bastion LinuxCommandsWazuh: User rihan [900578]: 870 kubetail nitrox-dj Apr 15 15:52:22 bastion LinuxCommandsWazuh: User mohtashim [912891]: 571 kubetail -f logs nitrox-dj-78bff5f568-hg5ss Apr 15 15:53:35 bastion LinuxCommandsWazuh: User rihan [926345]: 866 mongo Apr 15 16:28:11 bastion LinuxCommandsWazuh: User ankur [929545]: 1013 exit Apr 15 16:28:24 bastion LinuxCommandsWazuh: User ankur [929545]: 1014 kubectl get pods | grep -i "nitrox" Apr 15 16:28:54 bastion LinuxCommandsWazuh: User ankur [929691]: 1013 exit Apr 15 16:28:55 bastion LinuxCommandsWazuh: User ankur [929691]: 1014 ls Apr 15 16:29:07 bastion LinuxCommandsWazuh: User ankur [929691]: 1015 kubectl get pods | grep -i dakiya Apr 15 16:29:09 bastion LinuxCommandsWazuh: User ankur [929691]: 1015 kubectl get pods | grep -i dakiya Apr 15 16:33:18 bastion LinuxCommandsWazuh: User ankur [929691]: 1016 kubectl logs -f dakiya-7c447b9697-s5n6v Apr 15 16:33:20 bastion LinuxCommandsWazuh: User ankur [929545]: 1015 kubectl logs -f nitrox-dramatiq-7b585cb768-d6wrk Apr 15 16:33:20 bastion LinuxCommandsWazuh: User ankur [929545]: 1015 kubectl logs -f nitrox-dramatiq-7b585cb768-d6wrk Apr 15 16:33:21 bastion LinuxCommandsWazuh: User ankur [929545]: 1015 kubectl logs -f nitrox-dramatiq-7b585cb768-d6wrk Apr 15 16:33:21 bastion LinuxCommandsWazuh: User ankur [929545]: 1015 kubectl logs -f nitrox-dramatiq-7b585cb768-d6wrk Apr 15 16:33:44 bastion LinuxCommandsWazuh: User ankur [648473]: 1008 kubectl get pods | grep -i dakiya Apr 15 16:38:03 bastion LinuxCommandsWazuh: User venky [934847]: 469 exit Apr 15 16:38:24 bastion LinuxCommandsWazuh: User venky [934847]: 470 kubectl edit configmap Apr 15 16:38:29 bastion LinuxCommandsWazuh: User venky [934847]: 471 kubectl get configmap Apr 15 16:44:49 bastion LinuxCommandsWazuh: User ankur [941151]: 1016 exit Apr 15 16:44:59 bastion LinuxCommandsWazuh: User ankur [941151]: 1017 kubectl get pods | grep -i nitrox Apr 15 16:46:10 bastion LinuxCommandsWazuh: User venky [934847]: 472 kubectl edit configmap nitrox-ck-config Apr 15 16:46:11 bastion LinuxCommandsWazuh: User venky [934847]: 472 kubectl edit configmap nitrox-ck-config Apr 15 16:53:06 bastion LinuxCommandsWazuh: User ankur [648473]: 1009 kubectl logs -f dakiya-7c447b9697-s5n6v Apr 15 16:53:06 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ankur [648473]: 1009 kubectl logs -f dakiya-7c447b9697-s5n6v] Apr 15 16:59:48 bastion LinuxCommandsWazuh: User ankur [648473]: 1010 kubectl get pods | grep -i dakiya Apr 15 17:00:40 bastion LinuxCommandsWazuh: User mohtashim [957057]: 572 exit Apr 15 17:05:03 bastion LinuxCommandsWazuh: User mohtashim [957057]: 573 mongo Apr 15 17:17:57 bastion LinuxCommandsWazuh: User ankur [941151]: 1018 kubectl logs -f nitrox-dramatiq-7b585cb768-d6wrk Apr 15 17:18:03 bastion LinuxCommandsWazuh: User ankur [648473]: 1011 kubectl logs -f dakiya-65f569c5d8-n2jpk Apr 15 17:18:14 bastion LinuxCommandsWazuh: User ankur [929691]: 1017 byobu Apr 15 17:33:26 bastion LinuxCommandsWazuh: User rihan [926345]: 867 psql Apr 15 17:38:46 bastion LinuxCommandsWazuh: User rihan [900578]: 870 kubetail nitrox-dj Apr 15 17:38:46 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [900578]: 870 kubetail nitrox-dj] Apr 15 17:52:56 bastion LinuxCommandsWazuh: User ankur [976690]: 1031 exit Apr 15 17:52:58 bastion LinuxCommandsWazuh: User ankur [976690]: 1032 ls Apr 15 18:20:40 bastion LinuxCommandsWazuh: User venky [979405]: 472 kubectl edit configmap nitrox-ck-config Apr 15 18:20:58 bastion LinuxCommandsWazuh: User venky [979405]: 473 kubetail cookie-cutter-queues- Apr 15 18:23:15 bastion LinuxCommandsWazuh: User venky [979405]: 474 kubetail cookie-cutter-queues- | grep "Monkey" Apr 15 18:44:36 bastion LinuxCommandsWazuh: User rihan [900578]: 870 kubetail nitrox-dj Apr 15 18:44:54 bastion LinuxCommandsWazuh: User rihan [3642060]: 870 kubetail nitrox-dj Apr 15 18:45:39 bastion LinuxCommandsWazuh: User rihan [3642060]: 870 kubetail nitrox-dj Apr 15 18:51:54 bastion LinuxCommandsWazuh: User rihan [3642060]: 871 kubectl get pods | grep nitrox Apr 15 19:01:52 bastion LinuxCommandsWazuh: User mohtashim [1457387]: 574 exit Apr 15 19:04:43 bastion LinuxCommandsWazuh: User mohtashim [1457387]: 575 eit Apr 15 19:20:12 bastion LinuxCommandsWazuh: User venky [979405]: 474 kubetail cookie-cutter-queues- | grep "Monkey" Apr 15 21:11:23 bastion LinuxCommandsWazuh: User venky [3617152]: 474 kubetail cookie-cutter-queues- | grep "Monkey" Apr 15 21:11:40 bastion LinuxCommandsWazuh: User venky [3617152]: 474 kubetail cookie-cutter-queues- | grep "Monkey" Apr 15 21:12:18 bastion LinuxCommandsWazuh: User venky [3617152]: 474 kubetail cookie-cutter-queues- | grep "Monkey" Apr 15 21:12:24 bastion LinuxCommandsWazuh: User venky [3617152]: 475 kubectl get po