May 14 11:30:25 bastion LinuxCommandsWazuh: User rihan [24934]: 56  psql -h 34.131.118.186 -U dbuser -d nitrox_v2 -c "\COPY (SELECT id,username,email FROM auth_user) TO 'users_id_username_emails.csv' WITH CSV HEADER"
May 14 12:00:50 bastion LinuxCommandsWazuh: User rihan [24934]: 57  psql
May 14 13:06:26 bastion LinuxCommandsWazuh: User ankur [32927]:   388  exit
May 14 13:06:49 bastion LinuxCommandsWazuh: User ankur [32927]:   388  exit
May 14 13:06:50 bastion LinuxCommandsWazuh: User ankur [32927]:   389  ls
May 14 15:34:52 bastion LinuxCommandsWazuh: User ankur [44063]:   390  exit
May 14 16:29:56 bastion LinuxCommandsWazuh: User ankur [48805]:   390  exit
May 14 16:30:11 bastion LinuxCommandsWazuh: User ankur [49163]:   390  exit
May 14 16:36:07 bastion LinuxCommandsWazuh: User ankur [48805]:   391  byobu
May 14 16:41:42 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1607  psql -h 10.94.16.3 -d analytics_01 -U dbuser
May 14 16:42:07 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1608  stage
May 14 16:42:09 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1609  ls
May 14 16:42:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [55527]:  1609  ls]
May 14 16:42:16 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1610  vi Makefile 
May 14 16:42:17 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1611  ls
May 14 16:42:20 bastion LinuxCommandsWazuh: User shamailtayyab [55527]:  1611  ls
May 14 16:42:23 bastion LinuxCommandsWazuh: User shamailtayyab [55667]:  1611  ls
May 14 16:42:33 bastion LinuxCommandsWazuh: User ubuntu [55757]:   735  exit
May 14 16:42:34 bastion LinuxCommandsWazuh: User ubuntu [55757]:   736  ls
May 14 16:42:38 bastion LinuxCommandsWazuh: User shamailtayyab [55667]:  1612  ssh ubuntu@34.131.208.2
May 14 16:42:40 bastion LinuxCommandsWazuh: User shamailtayyab [55667]:  1612  ssh ubuntu@34.131.208.2
May 14 16:42:42 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1611  ls
May 14 16:42:43 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1612  cd
May 14 16:42:43 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1613  ls
May 14 16:42:46 bastion LinuxCommandsWazuh: User shamailtayyab [55667]:  1612  ssh ubuntu@34.131.208.2
May 14 16:42:49 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1614  cd .ssh/
May 14 16:42:51 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1615  ls
May 14 16:42:55 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1616  cat id_rsa.pub 
May 14 16:43:30 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1617  ls
May 14 16:43:40 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1617  ls
May 14 16:43:43 bastion LinuxCommandsWazuh: User shamailtayyab [55795]:  1618  cat id_rsa.pub 
May 14 16:44:32 bastion LinuxCommandsWazuh: User ubuntu [55757]:   737  sudo su shamailtayyab
May 14 16:44:32 bastion LinuxCommandsWazuh: User ubuntu [55757]:   738  ls
May 14 17:41:42 bastion LinuxCommandsWazuh: User mohtashim [60713]:   525  exit
May 14 17:42:14 bastion LinuxCommandsWazuh: User mohtashim [60713]:   526  psql -h 10.94.16.3 -U postgres -d datapulse_v1
May 14 17:42:16 bastion LinuxCommandsWazuh: User mohtashim [60713]:   527  clear
May 14 17:42:26 bastion LinuxCommandsWazuh: User mohtashim [60713]:   528  kubectl get pods
May 14 17:42:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [60713]:   528  kubectl get pods]
May 14 17:42:37 bastion LinuxCommandsWazuh: User mohtashim [60713]:   529  kubectl get pods grep | 'datapulse'
May 14 17:42:37 bastion LinuxCommandsWazuh: User mohtashim [60713]:   529  kubectl get pods grep | 'datapulse'
May 14 17:42:43 bastion LinuxCommandsWazuh: User mohtashim [60713]:   530  kubectl get pods | grep 'datapulse'
May 14 17:43:12 bastion LinuxCommandsWazuh: User mohtashim [60713]:   530  kubectl get pods | grep 'datapulse'
May 14 17:43:25 bastion LinuxCommandsWazuh: User mohtashim [60713]:   530  kubectl get pods | grep 'datapulse'
May 14 17:43:36 bastion LinuxCommandsWazuh: User mohtashim [60977]:   525  exit
May 14 17:43:41 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [60977]:   525  exit]
May 14 17:43:59 bastion LinuxCommandsWazuh: User mohtashim [60713]:   531  clear
May 14 17:44:01 bastion LinuxCommandsWazuh: User mohtashim [60713]:   532  kubectl get pods | grep 'datapulse'
May 14 17:44:02 bastion LinuxCommandsWazuh: User mohtashim [60713]:   532  kubectl get pods | grep 'datapulse'
May 14 17:45:54 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:45:59 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:46:39 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:46:57 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:47:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox']
May 14 17:47:03 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:47:45 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox']
May 14 17:47:51 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:48:36 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox']
May 14 17:48:37 bastion LinuxCommandsWazuh: User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox'
May 14 17:48:59 bastion LinuxCommandsWazuh: message repeated 10 times: [ User mohtashim [60713]:   533  kubectl get pods | grep 'nitrox']
May 14 18:00:20 bastion LinuxCommandsWazuh: User mohtashim [60713]:   534  psql -h 10.94.16.3 -U postgres -d datapulse_v1
May 14 18:54:34 bastion LinuxCommandsWazuh: User ankur [67154]:   392  exit
May 14 18:58:36 bastion LinuxCommandsWazuh: User ankur [67154]:   393  byobu
May 14 18:58:39 bastion LinuxCommandsWazuh: User ankur [67154]:   394  exiyt
May 14 19:00:09 bastion LinuxCommandsWazuh: User mohtashim [71856]:   535  psql -h 10.94.16.3 -U postgres -d datapulse_v1
May 14 19:00:10 bastion LinuxCommandsWazuh: User mohtashim [71856]:   536  clear
May 14 19:00:17 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [71856]:   536  clear]
May 14 19:00:20 bastion LinuxCommandsWazuh: User mohtashim [71856]:   537  kubectl get hpa