Apr 21 09:54:23 bastion LinuxCommandsWazuh: User mohtashim [1507583]: 591 exit Apr 21 10:11:01 bastion LinuxCommandsWazuh: User mohtashim [1507583]: 592 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 13:20:13 bastion LinuxCommandsWazuh: User mohtashim [1524184]: 593 exit Apr 21 13:20:15 bastion LinuxCommandsWazuh: User mohtashim [1524184]: 594 rm known_hosts Apr 21 13:20:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1524184]: 594 rm known_hosts ] Apr 21 13:20:17 bastion LinuxCommandsWazuh: User mohtashim [1524184]: 595 clear Apr 21 13:20:22 bastion LinuxCommandsWazuh: User mohtashim [1524184]: 596 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 13:21:23 bastion LinuxCommandsWazuh: User mohtashim [1524184]: 596 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 13:29:46 bastion LinuxCommandsWazuh: User ankur [1525043]: 1078 byobu Apr 21 13:31:21 bastion LinuxCommandsWazuh: User ankur [1525043]: 1079 psql -U postgres -d vortex_v2 Apr 21 13:31:41 bastion LinuxCommandsWazuh: User ankur [1525043]: 1080 byobu Apr 21 13:41:43 bastion LinuxCommandsWazuh: User ankur [1525043]: 1080 byobu Apr 21 14:01:54 bastion LinuxCommandsWazuh: User mohtashim [1536738]: 597 exit Apr 21 14:03:37 bastion LinuxCommandsWazuh: User mohtashim [1536738]: 598 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:12:07 bastion LinuxCommandsWazuh: User mohtashim [1537561]: 599 exit Apr 21 14:13:16 bastion LinuxCommandsWazuh: User mohtashim [1537561]: 600 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:15:06 bastion LinuxCommandsWazuh: User rihan [1537700]: 887 byobu Apr 21 14:18:44 bastion LinuxCommandsWazuh: User rihan [1537700]: 888 psql -d vortex_v2 -U postgres Apr 21 14:20:01 bastion LinuxCommandsWazuh: User mohtashim [1538504]: 601 exit Apr 21 14:22:18 bastion LinuxCommandsWazuh: User mohtashim [1538504]: 602 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:22:21 bastion LinuxCommandsWazuh: User mohtashim [1538504]: 602 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:22:21 bastion LinuxCommandsWazuh: User mohtashim [1538504]: 602 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:26:24 bastion LinuxCommandsWazuh: User ankur [1539406]: 1081 exit Apr 21 14:26:33 bastion LinuxCommandsWazuh: User ankur [1539406]: 1082 kubectl get configmaps Apr 21 14:26:57 bastion LinuxCommandsWazuh: User ankur [1539406]: 1083 kubectl edit configmaps xlr8-config Apr 21 14:27:27 bastion LinuxCommandsWazuh: User devesh [1539594]: 1153 byobu Apr 21 14:27:48 bastion LinuxCommandsWazuh: User ankur [1539406]: 1084 kubectl edit deploy xlr8 Apr 21 14:36:45 bastion LinuxCommandsWazuh: User mohtashim [1548797]: 603 exit Apr 21 14:38:52 bastion LinuxCommandsWazuh: User mohtashim [1548797]: 604 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:39:24 bastion LinuxCommandsWazuh: User mohtashim [1551451]: 605 exit Apr 21 14:43:45 bastion LinuxCommandsWazuh: User mohtashim [1551451]: 606 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:45:01 bastion LinuxCommandsWazuh: User mohtashim [1556768]: 607 exit Apr 21 14:46:28 bastion LinuxCommandsWazuh: User mohtashim [1556768]: 608 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 14:54:40 bastion LinuxCommandsWazuh: User rihan [1537700]: 888 psql -d vortex_v2 -U postgres Apr 21 15:28:28 bastion LinuxCommandsWazuh: User mohtashim [1599433]: 609 exit Apr 21 15:28:34 bastion LinuxCommandsWazuh: User mohtashim [1599433]: 610 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 15:31:46 bastion LinuxCommandsWazuh: User mohtashim [1599433]: 610 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 15:31:53 bastion LinuxCommandsWazuh: User mohtashim [1599433]: 611 htop Apr 21 15:54:10 bastion LinuxCommandsWazuh: User mohtashim [1623992]: 612 exit Apr 21 15:56:59 bastion LinuxCommandsWazuh: User ankur [1627273]: 1085 exit Apr 21 15:57:01 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [1627273]: 1085 exit] Apr 21 16:04:19 bastion LinuxCommandsWazuh: User mohtashim [1623992]: 613 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 16:04:21 bastion LinuxCommandsWazuh: User mohtashim [1623992]: 614 history Apr 21 16:05:57 bastion LinuxCommandsWazuh: User mohtashim [1623992]: 615 kubectl top pods Apr 21 16:06:13 bastion LinuxCommandsWazuh: User mohtashim [1623992]: 616 kubectl get pods Apr 21 16:27:38 bastion LinuxCommandsWazuh: User mohtashim [1657226]: 617 exit Apr 21 16:29:14 bastion LinuxCommandsWazuh: User mohtashim [1657226]: 618 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 17:01:40 bastion LinuxCommandsWazuh: User rihan [1537700]: 889 psql -d datapulse_v1 -U postgres Apr 21 17:10:24 bastion LinuxCommandsWazuh: User devesh [1698596]: 1153 byobu Apr 21 17:10:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User devesh [1698596]: 1153 byobu] Apr 21 17:14:58 bastion LinuxCommandsWazuh: User rihan [1702861]: 887 byobu Apr 21 17:29:43 bastion LinuxCommandsWazuh: User rihan [1702861]: 888 psql Apr 21 17:31:06 bastion LinuxCommandsWazuh: User rihan [1702861]: 889 psql -d datapulse_v1 -U postgres Apr 21 17:33:03 bastion LinuxCommandsWazuh: User ankur [1720773]: 1085 exit Apr 21 17:36:04 bastion LinuxCommandsWazuh: User rihan [1537700]: 890 make nitrox-bash Apr 21 17:39:48 bastion LinuxCommandsWazuh: User mohtashim [1733676]: 619 exit Apr 21 17:41:10 bastion LinuxCommandsWazuh: User mohtashim [1733676]: 620 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 17:46:40 bastion LinuxCommandsWazuh: User ankur [1720773]: 1086 byobu Apr 21 18:07:02 bastion LinuxCommandsWazuh: User rihan [1702861]: 890 psql Apr 21 18:07:06 bastion LinuxCommandsWazuh: User rihan [1702861]: 891 psql -d datapulse_v1 -U postgres Apr 21 18:07:20 bastion LinuxCommandsWazuh: User rihan [1702861]: 891 psql -d datapulse_v1 -U postgres Apr 21 18:07:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [1702861]: 891 psql -d datapulse_v1 -U postgres] Apr 21 18:13:55 bastion LinuxCommandsWazuh: User ankur [1773065]: 1087 exit Apr 21 18:14:07 bastion LinuxCommandsWazuh: User ankur [440589]: 1047 kubectl get pods | grep -i nitrox Apr 21 18:14:21 bastion LinuxCommandsWazuh: User ankur [1773906]: 1087 exit Apr 21 18:14:30 bastion LinuxCommandsWazuh: User ankur [1773906]: 1088 kubectl get pods | grep -i house Apr 21 18:29:05 bastion LinuxCommandsWazuh: User mohtashim [1802013]: 621 exit Apr 21 18:31:27 bastion LinuxCommandsWazuh: User rihan [1702861]: 891 psql -d datapulse_v1 -U postgres Apr 21 18:33:20 bastion LinuxCommandsWazuh: User ankur [440589]: 1048 kubectl logs -f nitrox-dramatiq-69c68d767-5ll2m Apr 21 18:33:24 bastion LinuxCommandsWazuh: message repeated 163 times: [ User ankur [440589]: 1048 kubectl logs -f nitrox-dramatiq-69c68d767-5ll2m] Apr 21 18:33:27 bastion LinuxCommandsWazuh: User ankur [440589]: 1049 kubectl get pods | grep -i nitrox\ Apr 21 18:33:30 bastion LinuxCommandsWazuh: User ankur [440589]: 1050 kubectl get pods | grep -i nitrox Apr 21 18:33:38 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [440589]: 1050 kubectl get pods | grep -i nitrox] Apr 21 18:33:49 bastion LinuxCommandsWazuh: User ankur [440589]: 1050 kubectl get pods | grep -i nitrox Apr 21 18:33:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [440589]: 1050 kubectl get pods | grep -i nitrox] Apr 21 18:34:32 bastion LinuxCommandsWazuh: User ankur [440589]: 1051 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh Apr 21 18:34:56 bastion LinuxCommandsWazuh: User ankur [440589]: 1051 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh Apr 21 18:34:56 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [440589]: 1051 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh] Apr 21 18:34:58 bastion LinuxCommandsWazuh: User ankur [440589]: 1052 kubectl get pods | grep -i nitrox Apr 21 18:36:21 bastion LinuxCommandsWazuh: User ankur [440589]: 1053 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh Apr 21 18:36:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [440589]: 1053 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh] Apr 21 18:36:25 bastion LinuxCommandsWazuh: User ankur [440589]: 1054 kubectl get pods | grep -i nitrox Apr 21 18:37:19 bastion LinuxCommandsWazuh: User venky [1818727]: 515 sudo su - ubuntu Apr 21 18:37:39 bastion LinuxCommandsWazuh: User venky [1818727]: 516 kubetail nirtox Apr 21 18:37:51 bastion LinuxCommandsWazuh: User venky [1818727]: 517 kubectl get po Apr 21 18:37:57 bastion LinuxCommandsWazuh: User venky [1818727]: 518 kubectl get deploy Apr 21 18:38:05 bastion LinuxCommandsWazuh: User ankur [440589]: 1055 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh Apr 21 18:38:09 bastion LinuxCommandsWazuh: User venky [1818727]: 519 kubetail nitrox-dj Apr 21 18:39:21 bastion LinuxCommandsWazuh: User ankur [440589]: 1055 kubectl logs -f nitrox-dramatiq-6f78549fd7-mqzbh Apr 21 18:40:05 bastion LinuxCommandsWazuh: User ankur [1773906]: 1089 kubectl logs -f house-of-click-547459b76d-j56nb Apr 21 18:40:05 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [1773906]: 1089 kubectl logs -f house-of-click-547459b76d-j56nb] Apr 21 18:40:09 bastion LinuxCommandsWazuh: User ankur [1773906]: 1090 kubectl get configmaps Apr 21 18:40:24 bastion LinuxCommandsWazuh: User ankur [1773906]: 1091 kubectl edit configmaps Apr 21 18:41:24 bastion LinuxCommandsWazuh: User ankur [1773906]: 1092 kubectl edit configmaps nitrox-dj-config Apr 21 18:41:56 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1514 k get pods Apr 21 18:41:58 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1514 k get pods Apr 21 18:41:59 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1515 docker ps Apr 21 18:42:05 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1516 docker ps | grep nitrox Apr 21 18:42:08 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1516 docker ps | grep nitrox Apr 21 18:42:13 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1517 k get pods | grep nitrox Apr 21 18:42:19 bastion LinuxCommandsWazuh: User ankur [1773906]: 1092 kubectl edit configmaps nitrox-dj-config Apr 21 18:42:23 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1518 k logs -f nitrox-dj-55b4b4bf4c-ct7l2 Apr 21 18:42:42 bastion LinuxCommandsWazuh: User ankur [1773906]: 1093 ls Apr 21 18:43:24 bastion LinuxCommandsWazuh: User venky [1818727]: 519 kubetail nitrox-dj Apr 21 18:43:25 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [1818727]: 519 kubetail nitrox-dj] Apr 21 18:44:27 bastion LinuxCommandsWazuh: User venky [1818727]: 520 kubectl get configmap nitrox-dj Apr 21 18:44:30 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash Apr 21 18:44:32 bastion LinuxCommandsWazuh: User venky [1818727]: 521 kubectl get configmap nitrox-dj-configmap Apr 21 18:44:32 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash Apr 21 18:44:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash] Apr 21 18:44:36 bastion LinuxCommandsWazuh: User venky [1818727]: 521 kubectl get configmap nitrox-dj-configmap Apr 21 18:44:37 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash Apr 21 18:44:38 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash Apr 21 18:44:38 bastion LinuxCommandsWazuh: User venky [1818727]: 522 kubectl get configmap nitrox-dj-config Apr 21 18:44:38 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash Apr 21 18:44:41 bastion LinuxCommandsWazuh: message repeated 4 times: [ User shamailtayyab [1828952]: 1519 k exec -it nitrox-dj-55b4b4bf4c-ct7l2 bash] Apr 21 18:44:43 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1520 k get pods | grep nitrox Apr 21 18:45:06 bastion LinuxCommandsWazuh: User venky [1818727]: 523 kubectl edit configmap nitrox-dj-config Apr 21 18:45:17 bastion LinuxCommandsWazuh: User venky [1818727]: 524 kubetail nitrox-dj Apr 21 18:45:21 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [1818727]: 524 kubetail nitrox-dj] Apr 21 18:46:11 bastion LinuxCommandsWazuh: User ankur [1773906]: 1094 kubectl get pods | grep -i "nitrox" Apr 21 18:55:33 bastion LinuxCommandsWazuh: User ankur [1855034]: 1109 exit Apr 21 19:04:45 bastion LinuxCommandsWazuh: User devesh [1867819]: 1153 byobu Apr 21 19:07:24 bastion LinuxCommandsWazuh: User shamailtayyab [1828952]: 1521 k exec -it nitrox-dj-868fd65956-ffvjk bash Apr 21 19:08:23 bastion LinuxCommandsWazuh: User mohtashim [1802013]: 622 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Apr 21 19:08:33 bastion LinuxCommandsWazuh: User mohtashim [1802013]: 623 kubectl get pods Apr 21 19:37:23 bastion LinuxCommandsWazuh: User ankur [1773065]: 1088 byobu Apr 21 20:13:31 bastion LinuxCommandsWazuh: User ankur [1773906]: 1095 kubectl logs -f nitrox-dramatiq-6fcd7bf99-7jtb7 Apr 21 20:13:44 bastion LinuxCommandsWazuh: message repeated 1369 times: [ User ankur [1773906]: 1095 kubectl logs -f nitrox-dramatiq-6fcd7bf99-7jtb7] Apr 21 20:13:44 bastion LinuxCommandsWazuh: User ankur [1773906]: 1096 ] Apr 21 20:13:45 bastion LinuxCommandsWazuh: message repeated 87 times: [ User ankur [1773906]: 1096 ]] Apr 21 20:21:21 bastion LinuxCommandsWazuh: User venky [1979002]: 524 kubetail nitrox-dj Apr 21 20:21:28 bastion LinuxCommandsWazuh: User venky [2503329]: 427 kubectl exec -it nitrox-dj-6f49874bd8-7frhv bash Apr 21 20:21:33 bastion LinuxCommandsWazuh: User venky [2503329]: 428 kubectl get po | grep nitrox Apr 21 20:36:59 bastion LinuxCommandsWazuh: User venky [1979002]: 525 byobu Apr 21 20:37:01 bastion LinuxCommandsWazuh: User venky [1979002]: 525 byobu Apr 21 23:45:06 bastion LinuxCommandsWazuh: User venky [2040283]: 525 byobu