Apr 30 13:37:33 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   691  exit
Apr 30 13:37:35 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ubuntu [2744144]:   691  exit]
Apr 30 13:37:36 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   692  cd .sss
Apr 30 13:37:39 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   693  cd .ssh/
Apr 30 13:37:51 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   694  sudo vi authorized_keys 
Apr 30 13:37:52 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   695  ls
Apr 30 13:37:54 bastion LinuxCommandsWazuh: User ubuntu [2744144]:   696  cd ..
Apr 30 13:37:59 bastion LinuxCommandsWazuh: User ankur [2744242]:   156  byobu
Apr 30 13:38:00 bastion LinuxCommandsWazuh: User ankur [2744242]:   157  ls
Apr 30 13:38:01 bastion LinuxCommandsWazuh: User ankur [2744242]:   158  cd
Apr 30 13:38:01 bastion LinuxCommandsWazuh: User ankur [2744242]:   159  ls
Apr 30 13:38:03 bastion LinuxCommandsWazuh: User ankur [2744242]:   160  cd .ssh/
Apr 30 13:51:29 bastion LinuxCommandsWazuh: User ankur [2745123]:   156  byobu
Apr 30 13:51:31 bastion LinuxCommandsWazuh: User ankur [2745123]:   157  ls
Apr 30 13:51:36 bastion LinuxCommandsWazuh: User ankur [2745123]:   158  clickhouse-ssh 
Apr 30 13:52:05 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2745123]:   158  clickhouse-ssh ]
Apr 30 13:55:08 bastion LinuxCommandsWazuh: User ankur [2745276]:   156  byobu
Apr 30 14:58:02 bastion LinuxCommandsWazuh: User ankur [2745276]:   157  clickhouse-ssh 
Apr 30 14:58:22 bastion LinuxCommandsWazuh: User ankur [2228311]:   161  kubectl get configmaps 
Apr 30 14:58:56 bastion LinuxCommandsWazuh: User ankur [2228311]:   162  kubectl edit configmaps house-of-click-config
Apr 30 15:27:52 bastion LinuxCommandsWazuh: User ankur [2228311]:   162  kubectl edit configmaps house-of-click-config
Apr 30 15:27:59 bastion LinuxCommandsWazuh: User ankur [2228311]:   162  kubectl edit configmaps house-of-click-config
Apr 30 15:38:01 bastion LinuxCommandsWazuh: User ankur [2228311]:   162  kubectl edit configmaps house-of-click-config
Apr 30 15:39:19 bastion LinuxCommandsWazuh: User ankur [2228311]:   162  kubectl edit configmaps house-of-click-config
Apr 30 15:40:25 bastion LinuxCommandsWazuh: User ankur [2228311]:   163  kubectl get 
Apr 30 15:40:32 bastion LinuxCommandsWazuh: User ankur [2228311]:   164  kubectl get deployment
Apr 30 15:40:52 bastion LinuxCommandsWazuh: User ankur [2228311]:   165  kubectl rollout restart deployment/house-of-click
Apr 30 15:41:01 bastion LinuxCommandsWazuh: User ankur [2228311]:   166  kubectl get pods | grep house
Apr 30 15:41:08 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [2228311]:   166  kubectl get pods | grep house]
Apr 30 15:55:07 bastion LinuxCommandsWazuh: User ankur [2228311]:   166  kubectl get pods | grep house
Apr 30 15:55:23 bastion LinuxCommandsWazuh: User ankur [2228311]:   167  kubectl logs -f house-of-click-774fff688d-66cqr
Apr 30 15:59:39 bastion LinuxCommandsWazuh: User ankur [2228311]:   168  kubectl logs -f house-of-click-774fff688d-66cqr | grep -i "ALERT: "
Apr 30 15:59:39 bastion LinuxCommandsWazuh: User ankur [2228311]:   168  kubectl logs -f house-of-click-774fff688d-66cqr | grep -i "ALERT: "
Apr 30 16:01:21 bastion LinuxCommandsWazuh: User ankur [2228311]:   169  kubectl exec -it  house-of-click-774fff688d-66cqr bash 
Apr 30 16:01:46 bastion LinuxCommandsWazuh: User ankur [618279]:  1006  clickhouse-ssh 
Apr 30 16:04:10 bastion LinuxCommandsWazuh: User ankur [2228311]:   170  kubectl logs -f house-of-click-774fff688d-66cqr | grep -i "ALERT: "
Apr 30 16:04:16 bastion LinuxCommandsWazuh: User ankur [2228311]:   171  kubectl exec -it  house-of-click-774fff688d-66cqr bash 
Apr 30 16:40:04 bastion LinuxCommandsWazuh: User ankur [2228311]:   172  kubectl get pods | grep house
Apr 30 16:58:31 bastion LinuxCommandsWazuh: User ankur [2228311]:   172  kubectl get pods | grep house
Apr 30 17:17:12 bastion LinuxCommandsWazuh: User ankur [2228311]:   173  kubectl logs -f house-of-click-774fff688d-vh9mw | grep -i "ALERT: "
Apr 30 17:17:12 bastion LinuxCommandsWazuh: message repeated 15 times: [ User ankur [2228311]:   173  kubectl logs -f house-of-click-774fff688d-vh9mw | grep -i "ALERT: "]
Apr 30 17:19:40 bastion LinuxCommandsWazuh: User ankur [2228311]:   174  kubectl get pods | grep house
Apr 30 17:19:49 bastion LinuxCommandsWazuh: message repeated 61 times: [ User ankur [2228311]:   174  kubectl get pods | grep house]
Apr 30 17:20:17 bastion LinuxCommandsWazuh: User ankur [2228311]:   175  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:22:21 bastion LinuxCommandsWazuh: User ankur [2228311]:   176  kubectl exec -it house-of-click-5f8ccf4477-zjvqk bash 
Apr 30 17:22:38 bastion LinuxCommandsWazuh: User ankur [2228311]:   177  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:22:46 bastion LinuxCommandsWazuh: User ankur [2228311]:   178  kubectl exec -it house-of-click-5f8ccf4477-zjvqk bash 
Apr 30 17:31:04 bastion LinuxCommandsWazuh: User ankur [2228311]:   179  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:31:14 bastion LinuxCommandsWazuh: User ankur [2228311]:   179  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:36:43 bastion LinuxCommandsWazuh: User ankur [2228311]:   180  kubectl logs -f house-of-click-5f8ccf4477-zjvqk
Apr 30 17:42:28 bastion LinuxCommandsWazuh: User ankur [2228311]:   181  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:45:10 bastion LinuxCommandsWazuh: User ankur [2228311]:   181  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "
Apr 30 17:45:10 bastion LinuxCommandsWazuh: message repeated 11 times: [ User ankur [2228311]:   181  kubectl logs -f house-of-click-5f8ccf4477-zjvqk | grep -i "ALERT: "]
Apr 30 17:45:16 bastion LinuxCommandsWazuh: User ankur [2228311]:   182  kubectl get pods | grep house
Apr 30 17:45:19 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2228311]:   182  kubectl get pods | grep house]
Apr 30 19:01:49 bastion LinuxCommandsWazuh: User ankur [2228311]:   183  kubectl logs -f house-of-click-c99d4469b-wf4pp | grep -i "ALERT: "
Apr 30 19:01:49 bastion LinuxCommandsWazuh: message repeated 11 times: [ User ankur [2228311]:   183  kubectl logs -f house-of-click-c99d4469b-wf4pp | grep -i "ALERT: "]
Apr 30 19:01:51 bastion LinuxCommandsWazuh: User ankur [2228311]:   184  ]\
Apr 30 19:01:52 bastion LinuxCommandsWazuh: message repeated 30 times: [ User ankur [2228311]:   184  ]\]
Apr 30 19:02:03 bastion LinuxCommandsWazuh: User ankur [2228311]:   185  kubectl get pods | grep house
Apr 30 19:11:19 bastion LinuxCommandsWazuh: User shamailtayyab [3001686]:  1560  k logs -f cookie-cutter-queues-544456f7dd-tt55z
Apr 30 19:12:03 bastion LinuxCommandsWazuh: User shamailtayyab [3001686]:  1560  k logs -f cookie-cutter-queues-544456f7dd-tt55z
Apr 30 19:12:06 bastion LinuxCommandsWazuh: User shamailtayyab [3001686]:  1560  k logs -f cookie-cutter-queues-544456f7dd-tt55z
Apr 30 19:12:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [3001686]:  1560  k logs -f cookie-cutter-queues-544456f7dd-tt55z]
Apr 30 19:12:12 bastion LinuxCommandsWazuh: User shamailtayyab [3001686]:  1561  vpn
Apr 30 19:12:41 bastion LinuxCommandsWazuh: User shamailtayyab [3001686]:  1562  vi ~/.bashrc 
Apr 30 19:23:06 bastion LinuxCommandsWazuh: User ankur [2745276]:   158  byobu
