May 30 06:26:33 bastion LinuxCommandsWazuh: User ankur [2888736]:  1059  exit
May 30 06:26:36 bastion LinuxCommandsWazuh: User ankur [2888793]:  1059  exit
May 30 06:28:29 bastion LinuxCommandsWazuh: User ankur [2890783]:  1059  exit
May 30 06:28:55 bastion LinuxCommandsWazuh: User ankur [2891198]:  1059  exit
May 30 06:29:40 bastion LinuxCommandsWazuh: User ankur [2891911]:  1059  exit
May 30 06:31:55 bastion LinuxCommandsWazuh: User ankur [2888736]:  1060  byobu
May 30 10:29:28 bastion LinuxCommandsWazuh: User ankur [2915992]:  1061  exit
May 30 10:29:30 bastion LinuxCommandsWazuh: User ankur [2915992]:  1062  ls
May 30 11:08:15 bastion LinuxCommandsWazuh: User ankur [2888793]:  1060  clickhouse-ssh 
May 30 11:46:25 bastion LinuxCommandsWazuh: User mohtashim [2993776]:   657  kubectl get pods
May 30 11:48:44 bastion LinuxCommandsWazuh: User mohtashim [2993776]:   658  psql
May 30 11:51:28 bastion LinuxCommandsWazuh: User mohtashim [2993776]:   658  psql
May 30 12:46:46 bastion LinuxCommandsWazuh: User rihan [3054539]: 87  kubetail -f cookie-cutter | grep "TruecallerEventsExporter:-qi"
May 30 12:46:48 bastion LinuxCommandsWazuh: User rihan [3054539]: 87  kubetail -f cookie-cutter | grep "TruecallerEventsExporter:-qi"
May 30 12:47:05 bastion LinuxCommandsWazuh: User rihan [3054539]: 88  docker ps
May 30 12:47:19 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [3054539]: 88  docker ps]
May 30 12:47:33 bastion LinuxCommandsWazuh: User rihan [3054539]: 89  kubectl get pods | grep forever
May 30 12:48:44 bastion LinuxCommandsWazuh: User rihan [3054539]: kubectl exec -it forever-7d4b8f944f-fs4mx bash
May 30 12:49:12 bastion LinuxCommandsWazuh: User rihan [3054539]: 1  kubetail -f forever |  grep "TruecallerEventsExporter:-"
May 30 12:52:40 bastion LinuxCommandsWazuh: User rihan [3054539]: 2  kubetail -f forever |  grep "TruecallerEventsExporter:-qi"
May 30 12:52:47 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   797  sudo su shamailtayyab
May 30 12:52:52 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   798  htop
May 30 12:52:55 bastion LinuxCommandsWazuh: message repeated 17 times: [ User ubuntu [3326359]:   798  htop]
May 30 12:53:37 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   798  htop
May 30 13:06:20 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   799  k get pods
May 30 13:06:28 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   800  htop
May 30 13:06:32 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ubuntu [3326359]:   800  htop]
May 30 13:19:45 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   801  D
May 30 13:19:45 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ubuntu [3326359]:   801  D]
May 30 13:21:41 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   801  D
May 30 13:21:43 bastion LinuxCommandsWazuh: User ubuntu [3326359]:   801  D
May 30 13:30:33 bastion LinuxCommandsWazuh: User ankur [3364780]:  1061  exit
May 30 16:48:43 bastion LinuxCommandsWazuh: User mohtashim [3564234]:   659  exit
May 30 16:48:49 bastion LinuxCommandsWazuh: User mohtashim [3564234]:   660  kubectl get pods
May 30 16:51:26 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   661  exit
May 30 16:51:27 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   662  kubectl get pods
May 30 16:56:07 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   663  kubectl logs -f cookie-cutter-common-task-5ddc479c86-zng8s 
May 30 16:56:13 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   664  mongosh
May 30 16:56:28 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   664  mongosh
May 30 16:57:17 bastion LinuxCommandsWazuh: User ubuntu [3573129]:   802  exit
May 30 16:57:21 bastion LinuxCommandsWazuh: User ankur [3573199]:  1063  byobu
May 30 16:57:33 bastion LinuxCommandsWazuh: User ankur [3573199]:  1064  vi .bashrc
May 30 16:57:40 bastion LinuxCommandsWazuh: User ankur [3573199]:  1065  mongo
May 30 16:57:53 bastion LinuxCommandsWazuh: User ubuntu [3573129]:   803  sudo su ankur
May 30 16:57:59 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   661  exit
May 30 16:58:00 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   662  cd
May 30 16:58:00 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   663  ls
May 30 16:58:10 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   664  vi .bashrc
May 30 16:58:15 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   665  mongo
May 30 16:58:26 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   664  mongosh
May 30 16:59:56 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   666  exiy
May 30 16:59:56 bastion LinuxCommandsWazuh: User mohtashim [3573848]:   666  exiy
May 30 16:59:58 bastion LinuxCommandsWazuh: User ubuntu [3573129]:   804  sudo su mohtashim
May 30 17:03:34 bastion LinuxCommandsWazuh: User ankur [3364780]:  1062  byobu
May 30 17:16:25 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   665  mongo
May 30 17:16:31 bastion LinuxCommandsWazuh: User mohtashim [3566878]:   666  kubectl get pods
May 30 17:42:53 bastion LinuxCommandsWazuh: User ankur [3582588]:  1068  exit
May 30 18:00:08 bastion LinuxCommandsWazuh: User ankur [3600560]:  1068  exit
May 30 18:09:11 bastion LinuxCommandsWazuh: User ankur [3582588]:  1069  byobu
May 30 18:09:56 bastion LinuxCommandsWazuh: User ankur [3609788]:  1070  exit
May 30 18:09:57 bastion LinuxCommandsWazuh: User ankur [3609788]:  1071  ls
