Jun 12 11:24:23 bastion LinuxCommandsWazuh: User ankur [2720832]: 1206 exit Jun 12 11:25:44 bastion LinuxCommandsWazuh: User ankur [2720832]: 1207 byobu Jun 12 11:44:13 bastion LinuxCommandsWazuh: User ankur [2723894]: 1208 exit Jun 12 11:44:30 bastion LinuxCommandsWazuh: User ankur [2723894]: 1209 byobu Jun 12 12:20:05 bastion LinuxCommandsWazuh: User mohtashim [2727803]: 713 exit Jun 12 12:20:10 bastion LinuxCommandsWazuh: User mohtashim [2727803]: 714 kubectl get pods Jun 12 13:17:45 bastion LinuxCommandsWazuh: User mohtashim [2732903]: 715 exit Jun 12 13:29:55 bastion LinuxCommandsWazuh: User mohtashim [2732903]: 716 mongo Jun 12 13:32:03 bastion LinuxCommandsWazuh: User mohtashim [2732903]: 716 mongo Jun 12 13:32:05 bastion LinuxCommandsWazuh: User mohtashim [2732903]: 717 exitt Jun 12 13:32:16 bastion LinuxCommandsWazuh: User rihan [2733950]: 1020 kubectl get pods | grep cookie Jun 12 13:32:37 bastion LinuxCommandsWazuh: User rihan [2733950]: 1021 mongo Jun 12 13:32:56 bastion LinuxCommandsWazuh: User rihan [2734060]: 1021 mongo Jun 12 13:34:52 bastion LinuxCommandsWazuh: User mohtashim [2734186]: 718 exit Jun 12 13:58:30 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 844 exit Jun 12 13:58:30 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 845 ls Jun 12 13:58:34 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 846 cd bin/ Jun 12 13:58:34 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 847 ls Jun 12 13:59:09 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 848 sudo vi prometheus_clean.sh Jun 12 13:59:15 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 848 sudo vi prometheus_clean.sh Jun 12 13:59:20 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 848 sudo vi prometheus_clean.sh Jun 12 13:59:28 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 849 sudo chmod +x prometheus_clean.sh Jun 12 14:00:22 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 850 ./prometheus_clean.sh Jun 12 14:00:34 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 851 kuebctl get pods Jun 12 14:00:44 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 852 kubectl get pods Jun 12 14:01:27 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 853 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jun 12 14:01:38 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 854 gcloud auth activate-service-account --key-file=/home/service.json Jun 12 14:01:42 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 855 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jun 12 14:01:46 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 856 ./prometheus_clean.sh Jun 12 14:03:48 bastion LinuxCommandsWazuh: User ubuntu [2289323]: 849 sudo su venky Jun 12 14:03:58 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 857 cat prometheus_clean.sh Jun 12 14:10:56 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 858 crontab -e Jun 12 14:10:58 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 859 ls Jun 12 14:11:02 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 860 cat prometheus_clean.sh Jun 12 14:11:19 bastion LinuxCommandsWazuh: User ubuntu [2736658]: 861 crontab -e Jun 12 14:38:59 bastion LinuxCommandsWazuh: User mohtashim [2740186]: 719 mongo Jun 12 14:39:06 bastion LinuxCommandsWazuh: User mohtashim [2740186]: 719 mongo Jun 12 14:39:14 bastion LinuxCommandsWazuh: User mohtashim [2740186]: 720 clear Jun 12 14:44:15 bastion LinuxCommandsWazuh: User mohtashim [2740186]: 721 mongo Jun 12 16:05:22 bastion LinuxCommandsWazuh: User mohtashim [2747011]: 722 exit Jun 12 16:16:08 bastion LinuxCommandsWazuh: User ashish [2748558]: 35 exit Jun 12 16:16:12 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [2748558]: 35 exit] Jun 12 16:18:40 bastion LinuxCommandsWazuh: User ashish [2748558]: 36 redis Jun 12 16:19:10 bastion LinuxCommandsWazuh: User mohtashim [2747011]: 723 mongo Jun 12 16:19:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2747011]: 723 mongo] Jun 12 16:20:35 bastion LinuxCommandsWazuh: User ashish [2748816]: 36 redis Jun 12 16:20:45 bastion LinuxCommandsWazuh: User ashish [2748816]: 36 redis Jun 12 16:21:04 bastion LinuxCommandsWazuh: User mohtashim [2747011]: 723 mongo Jun 12 16:21:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2747011]: 723 mongo] Jun 12 16:22:28 bastion LinuxCommandsWazuh: User ashish [2748816]: 36 redis Jun 12 16:27:01 bastion LinuxCommandsWazuh: User mohtashim [2747011]: 724 mongo pixel_v1 Jun 12 16:27:21 bastion LinuxCommandsWazuh: User mohtashim [2749693]: 722 exit Jun 12 16:28:00 bastion LinuxCommandsWazuh: User ubuntu [2750538]: 869 exit Jun 12 16:28:05 bastion LinuxCommandsWazuh: User ashish [2750647]: 36 redis Jun 12 16:28:40 bastion LinuxCommandsWazuh: User venky [2751270]: 1022 exit Jun 12 16:28:45 bastion LinuxCommandsWazuh: User venky [2751486]: 1022 exit Jun 12 16:28:46 bastion LinuxCommandsWazuh: User venky [2751531]: 1022 exit Jun 12 16:29:43 bastion LinuxCommandsWazuh: User venky [2751486]: 1023 make Jun 12 16:30:30 bastion LinuxCommandsWazuh: User venky [2751486]: 1024 vim Makefile Jun 12 16:30:34 bastion LinuxCommandsWazuh: User venky [2751486]: 1025 redis Jun 12 16:30:34 bastion LinuxCommandsWazuh: User venky [2751486]: 1025 redis Jun 12 16:30:36 bastion LinuxCommandsWazuh: User ashish [2750647]: 36 redis Jun 12 16:31:09 bastion LinuxCommandsWazuh: User venky [2751486]: 1025 redis Jun 12 16:31:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2751486]: 1025 redis] Jun 12 16:31:12 bastion LinuxCommandsWazuh: User venky [2751486]: 1026 url-redis-server Jun 12 16:31:23 bastion LinuxCommandsWazuh: User venky [2751486]: 1027 url-redis Jun 12 16:31:25 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2751486]: 1027 url-redis] Jun 12 16:32:03 bastion LinuxCommandsWazuh: User venky [2751486]: 1028 redis-server Jun 12 16:35:18 bastion LinuxCommandsWazuh: User ankur [2763822]: 1210 exit Jun 12 16:35:45 bastion LinuxCommandsWazuh: User ankur [2763822]: 1211 byobu Jun 12 16:40:14 bastion LinuxCommandsWazuh: User ashish [2750647]: 36 redis Jun 12 16:40:17 bastion LinuxCommandsWazuh: User ubuntu [2750538]: 870 sudo su ashish Jun 12 16:40:23 bastion LinuxCommandsWazuh: User venky [2774436]: 1022 exit Jun 12 16:40:25 bastion LinuxCommandsWazuh: User venky [2774436]: 1023 cd Jun 12 16:40:32 bastion LinuxCommandsWazuh: User venky [2774436]: 1024 url-redis-server Jun 12 16:41:15 bastion LinuxCommandsWazuh: User venky [2774436]: 1025 cd .ssh/ Jun 12 16:41:15 bastion LinuxCommandsWazuh: User venky [2774436]: 1026 ls Jun 12 16:41:19 bastion LinuxCommandsWazuh: User venky [2774436]: 1027 cat authorized_keys Jun 12 16:41:27 bastion LinuxCommandsWazuh: User venky [2774436]: 1028 cat id_rsa.pub Jun 12 16:42:32 bastion LinuxCommandsWazuh: User venky [2774436]: 1029 url-redis-server Jun 12 16:50:17 bastion LinuxCommandsWazuh: User venky [2774436]: 1030 redis-cli Jun 12 16:50:20 bastion LinuxCommandsWazuh: User ubuntu [2750538]: 871 sudo su venky Jun 12 16:52:30 bastion LinuxCommandsWazuh: User ubuntu [2750538]: 872 redis Jun 12 16:52:38 bastion LinuxCommandsWazuh: User ubuntu [2797852]: 873 exit Jun 12 16:58:38 bastion LinuxCommandsWazuh: User ubuntu [2797852]: 873 exit Jun 12 16:58:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2797852]: 873 exit] Jun 12 17:04:29 bastion LinuxCommandsWazuh: User rihan [2820557]: 1021 mongo Jun 12 17:04:35 bastion LinuxCommandsWazuh: User mohtashim [2820754]: 722 exit Jun 12 17:04:44 bastion LinuxCommandsWazuh: User mohtashim [2820754]: 723 byobu Jun 12 17:04:45 bastion LinuxCommandsWazuh: User rihan [2820557]: 1022 sudo su mohtashim Jun 12 17:06:42 bastion LinuxCommandsWazuh: User ankur [2825640]: 1212 exit Jun 12 17:09:21 bastion LinuxCommandsWazuh: User rihan [2830775]: 1022 sudo su mohtashim Jun 12 17:09:24 bastion LinuxCommandsWazuh: User mohtashim [2830878]: 723 byobu Jun 12 17:10:23 bastion LinuxCommandsWazuh: User mohtashim [2830878]: 723 byobu Jun 12 17:10:24 bastion LinuxCommandsWazuh: User rihan [2830775]: 1022 sudo su mohtashim Jun 12 17:15:08 bastion LinuxCommandsWazuh: User venky [2842204]: 1032 byobu Jun 12 17:15:13 bastion LinuxCommandsWazuh: User venky [2751486]: 1028 redis-server Jun 12 17:15:13 bastion LinuxCommandsWazuh: User venky [2751486]: 1028 redis-server Jun 12 17:21:45 bastion LinuxCommandsWazuh: User mohtashim [2861231]: 723 byobu Jun 12 17:24:08 bastion LinuxCommandsWazuh: User mohtashim [2861231]: 724 mongo pixel_v1 Jun 12 17:27:12 bastion LinuxCommandsWazuh: User ubuntu [2877103]: 873 exit Jun 12 17:30:35 bastion LinuxCommandsWazuh: User ubuntu [2877103]: 874 redis Jun 12 17:31:29 bastion LinuxCommandsWazuh: User mohtashim [2749693]: 723 mongo Jun 12 17:31:40 bastion LinuxCommandsWazuh: message repeated 4 times: [ User mohtashim [2749693]: 723 mongo] Jun 12 17:31:43 bastion LinuxCommandsWazuh: User mohtashim [2747011]: 725 byobu Jun 12 17:32:35 bastion LinuxCommandsWazuh: User venky [2751486]: 1029 url-redis-server Jun 12 17:32:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2751486]: 1029 url-redis-server ] Jun 12 17:33:37 bastion LinuxCommandsWazuh: User venky [2751486]: 1029 url-redis-server Jun 12 17:33:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2751486]: 1029 url-redis-server ] Jun 12 17:34:04 bastion LinuxCommandsWazuh: User venky [2751486]: 1030 kubectl edit configmaps nitrox-dj-config Jun 12 17:37:13 bastion LinuxCommandsWazuh: User shamailtayyab [2900851]: 1998 exit Jun 12 17:37:13 bastion LinuxCommandsWazuh: User shamailtayyab [2900851]: 1999 ls Jun 12 17:37:17 bastion LinuxCommandsWazuh: User shamailtayyab [2900851]: 2000 k exec -it urlbird-665d8fbb8d-nd5mz bash Jun 12 17:37:54 bastion LinuxCommandsWazuh: User shamailtayyab [2900851]: 2001 k get pods | grep 'cookie' Jun 12 17:38:33 bastion LinuxCommandsWazuh: User venky [2751486]: 1031 redis Jun 12 17:39:25 bastion LinuxCommandsWazuh: User ankur [2825640]: 1213 byobu Jun 12 17:39:26 bastion LinuxCommandsWazuh: User ankur [2825640]: 1214 EXITR Jun 12 17:40:30 bastion LinuxCommandsWazuh: User shamailtayyab [2900851]: 2002 k exec -it cookie-cutter-6555b65cbb-v2hpn bash Jun 12 17:44:27 bastion LinuxCommandsWazuh: User venky [2751486]: 1032 url-redis-server Jun 12 17:49:04 bastion LinuxCommandsWazuh: User venky [2751486]: 1032 url-redis-server Jun 12 17:49:05 bastion LinuxCommandsWazuh: User venky [2751486]: 1032 url-redis-server Jun 12 18:14:15 bastion LinuxCommandsWazuh: User venky [2940072]: 1042 url-redis-server Jun 12 18:14:30 bastion LinuxCommandsWazuh: User venky [2940072]: 1043 kubectl edit configmaps nitrox-dj-config Jun 12 18:26:27 bastion LinuxCommandsWazuh: User venky [2940072]: 1044 redis Jun 12 18:26:33 bastion LinuxCommandsWazuh: User venky [2940072]: 1044 redis Jun 12 18:26:44 bastion LinuxCommandsWazuh: User venky [2940072]: 1045 kubectl edit configmaps nitrox-dj-config Jun 12 18:28:53 bastion LinuxCommandsWazuh: User venky [2955287]: 1042 url-redis-server Jun 12 18:30:05 bastion LinuxCommandsWazuh: User venky [2955287]: 1043 kubetail halla Jun 12 18:30:10 bastion LinuxCommandsWazuh: User venky [2955287]: 1044 kubectl get hpa Jun 12 18:34:30 bastion LinuxCommandsWazuh: User venky [2955287]: 1044 kubectl get hpa Jun 12 18:34:30 bastion LinuxCommandsWazuh: User venky [2955287]: 1044 kubectl get hpa Jun 12 18:34:38 bastion LinuxCommandsWazuh: User venky [2955287]: 1045 kubectl get configmaps Jun 12 18:34:42 bastion LinuxCommandsWazuh: User venky [2955287]: 1046 kubectl get configmaps | grep url Jun 12 18:34:55 bastion LinuxCommandsWazuh: User venky [2955287]: 1047 kubectl get configmap urlbird-config Jun 12 18:44:34 bastion LinuxCommandsWazuh: User venky [2971060]: 1042 url-redis-server Jun 12 18:45:37 bastion LinuxCommandsWazuh: User venky [2972422]: 1042 url-redis-server Jun 12 18:45:51 bastion LinuxCommandsWazuh: User venky [2971060]: 1043 byobu Jun 12 18:45:53 bastion LinuxCommandsWazuh: User venky [2971060]: 1043 byobu Jun 12 18:46:04 bastion LinuxCommandsWazuh: User venky [2842204]: 1032 byobu Jun 12 18:46:16 bastion LinuxCommandsWazuh: User venky [2973818]: 1043 byobu Jun 12 18:46:28 bastion LinuxCommandsWazuh: User venky [2972422]: 1042 url-redis-server Jun 12 18:46:33 bastion LinuxCommandsWazuh: User venky [2972422]: 1042 url-redis-server Jun 12 18:46:36 bastion LinuxCommandsWazuh: User venky [2973818]: 1043 byobu Jun 12 18:53:20 bastion LinuxCommandsWazuh: User venky [2974316]: 1043 byobu Jun 12 18:53:22 bastion LinuxCommandsWazuh: User venky [2974316]: 1043 byobu Jun 12 18:53:24 bastion LinuxCommandsWazuh: User venky [2974316]: 1044 kubectl exec -it urlbird-69797d5c99-msrcc bash Jun 12 18:53:30 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [2974316]: 1044 kubectl exec -it urlbird-69797d5c99-msrcc bash ] Jun 12 18:53:44 bastion LinuxCommandsWazuh: User venky [2974316]: 1045 kubectl exec -it deploy urlbird bash Jun 12 18:55:08 bastion LinuxCommandsWazuh: User venky [2974316]: 1046 kubectl exec -it deploy/urlbird bash Jun 12 19:23:11 bastion LinuxCommandsWazuh: User venky [2974316]: 1046 kubectl exec -it deploy/urlbird bash Jun 12 19:23:21 bastion LinuxCommandsWazuh: User venky [2974316]: 1047 kubectl get svc -owide | grep for Jun 12 19:26:15 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 1998 k exec -it cookie-cutter-6555b65cbb-v2hpn bash Jun 12 19:26:15 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 1999 ls Jun 12 19:26:18 bastion LinuxCommandsWazuh: message repeated 2 times: [ User shamailtayyab [2977805]: 1999 ls] Jun 12 19:26:24 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2000 ps aux | grep urlb Jun 12 19:26:29 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2000 ps aux | grep urlb Jun 12 19:26:37 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2001 k get pods | grep urlb Jun 12 19:27:18 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2002 kubetail urlbird | grep 'Enrichment' Jun 12 19:27:23 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2003 kubetail urlbird Jun 12 19:27:34 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2004 kubetail urlbird-5c4d44cc58-6qbk8 Jun 12 19:28:48 bastion LinuxCommandsWazuh: User shamailtayyab [2977805]: 2005 kubetail urlbird-5c4d44cc58-6qbk8 | grep 'Enrich' Jun 12 19:30:24 bastion LinuxCommandsWazuh: User venky [2974316]: 1048 kubectl exec -it deploy/urlbird bash