Jun 25 11:59:25 bastion LinuxCommandsWazuh: User aman [2589181]: 136 exit Jun 25 11:59:26 bastion LinuxCommandsWazuh: User aman [2589181]: 137 clear Jun 25 11:59:32 bastion LinuxCommandsWazuh: User aman [2589181]: 138 make cookie-cutter Jun 25 11:59:42 bastion LinuxCommandsWazuh: User aman [2589181]: 139 nano Makefile Jun 25 12:00:53 bastion LinuxCommandsWazuh: User aman [2589181]: 140 make cookie-logs Jun 25 12:00:54 bastion LinuxCommandsWazuh: User aman [2589181]: 140 make cookie-logs Jun 25 12:00:56 bastion LinuxCommandsWazuh: User aman [2589181]: 141 clear Jun 25 12:01:43 bastion LinuxCommandsWazuh: User rihan [2589709]: 1062 byobu Jun 25 12:05:33 bastion LinuxCommandsWazuh: User aman [2589181]: 142 make cookie-logs Jun 25 12:08:10 bastion LinuxCommandsWazuh: User rihan [1089225]: 5 make cookie-bash Jun 25 12:11:34 bastion LinuxCommandsWazuh: User ubuntu [2599758]: 1554 k get pods Jun 25 12:11:37 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ubuntu [2599758]: 1554 k get pods] Jun 25 12:11:38 bastion LinuxCommandsWazuh: User ubuntu [2599758]: 1555 ls Jun 25 12:12:06 bastion LinuxCommandsWazuh: User venky [2600347]: 1232 redis Jun 25 12:12:07 bastion LinuxCommandsWazuh: User venky [2600347]: 1233 cd Jun 25 12:12:09 bastion LinuxCommandsWazuh: User venky [2600347]: 1234 l;s Jun 25 12:12:09 bastion LinuxCommandsWazuh: User venky [2600347]: 1235 cd Jun 25 12:12:24 bastion LinuxCommandsWazuh: User venky [2600347]: 1236 redis-server Jun 25 12:15:59 bastion LinuxCommandsWazuh: User venky [2600347]: 1236 redis-server Jun 25 12:15:59 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [2600347]: 1236 redis-server ] Jun 25 12:16:15 bastion LinuxCommandsWazuh: User venky [2600347]: 1236 redis-server Jun 25 12:16:20 bastion LinuxCommandsWazuh: User ubuntu [2599758]: 1556 sudo su venky Jun 25 12:16:25 bastion LinuxCommandsWazuh: User rihan [2605087]: 1062 byobu Jun 25 12:16:25 bastion LinuxCommandsWazuh: User rihan [2605087]: 1063 cd Jun 25 12:16:28 bastion LinuxCommandsWazuh: User rihan [2605087]: 1064 cd .ssh/ Jun 25 12:17:27 bastion LinuxCommandsWazuh: User rihan [2605087]: 1065 sudo vi authorized_keys Jun 25 12:17:37 bastion LinuxCommandsWazuh: User rihan [2605087]: 1066 cd Jun 25 12:17:47 bastion LinuxCommandsWazuh: User rihan [2605087]: 1067 vi bashrc Jun 25 12:18:04 bastion LinuxCommandsWazuh: User rihan [2605087]: 1068 vi .bashrc Jun 25 12:22:21 bastion LinuxCommandsWazuh: User rihan [2605087]: 1069 CD Jun 25 12:22:22 bastion LinuxCommandsWazuh: User rihan [2605087]: 1070 LS Jun 25 12:22:24 bastion LinuxCommandsWazuh: User rihan [2605087]: 1071 EXIT Jun 25 12:22:27 bastion LinuxCommandsWazuh: User ubuntu [2599758]: 1557 sudo su rihan Jun 25 12:22:43 bastion LinuxCommandsWazuh: User rihan [2611108]: 1072 exit Jun 25 12:32:27 bastion LinuxCommandsWazuh: User rihan [2611108]: 1073 mongo Jun 25 12:36:03 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1558 exit Jun 25 12:36:12 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1559 cd .. Jun 25 12:36:16 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1560 cd abhijeet Jun 25 12:36:17 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1561 c d Jun 25 12:36:18 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1562 cd Jun 25 12:36:19 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1563 ls Jun 25 12:36:21 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1564 cd .ssh/ Jun 25 12:36:22 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1565 l;s Jun 25 12:36:23 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1566 ls Jun 25 12:36:35 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 67 kubectl get all -n kube-system | grep headlamp Jun 25 12:36:36 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 68 cd Jun 25 12:36:36 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 69 ls Jun 25 12:36:37 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 69 ls Jun 25 12:36:43 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 70 rm service.json Jun 25 12:36:44 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 71 ls Jun 25 12:36:49 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 72 cd .ssh/ Jun 25 12:36:49 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 73 ls Jun 25 12:36:57 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 74 ssh-keygen Jun 25 12:38:04 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 75 cd Jun 25 12:38:05 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 76 ls Jun 25 12:38:07 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 77 cd .ls Jun 25 12:38:10 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 78 cd .ssh/ Jun 25 12:38:10 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 79 ;s Jun 25 12:38:12 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 80 ls Jun 25 12:38:19 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 81 cat id_rsa.pub Jun 25 12:42:25 bastion LinuxCommandsWazuh: User ubuntu [2631274]: 1558 exit Jun 25 12:42:28 bastion LinuxCommandsWazuh: User venky [2631335]: 1237 exit Jun 25 12:42:29 bastion LinuxCommandsWazuh: User venky [2631335]: 1238 cd Jun 25 12:43:20 bastion LinuxCommandsWazuh: User venky [2631335]: 1239 redis-server Jun 25 12:43:23 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 82 cd Jun 25 12:44:18 bastion LinuxCommandsWazuh: User rihan [1089225]: 5 make cookie-bash Jun 25 12:45:04 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 83 vi .bashrc Jun 25 12:45:09 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 84 source .bashrc Jun 25 12:45:17 bastion LinuxCommandsWazuh: User mohtashim [2634074]: 828 mongo pixel_v1 Jun 25 12:45:20 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 85 internal-server Jun 25 12:45:35 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 86 redis-server Jun 25 12:45:44 bastion LinuxCommandsWazuh: User ankur [2634619]: 1465 byobu Jun 25 12:45:44 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 87 k get pods Jun 25 12:46:32 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 87 k get pods Jun 25 12:47:02 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 88 kubectl config set-context --current --namespace=nitrox-production Jun 25 12:47:06 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 89 k get pods Jun 25 12:47:22 bastion LinuxCommandsWazuh: User abhijeet [2625572]: cp /home/ubuntu/bash.sh . Jun 25 12:47:32 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 1 vi Makefile Jun 25 12:47:36 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 2 make bash Jun 25 12:50:56 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 3 cd .ssh/ Jun 25 12:51:02 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 4 cat id_rsa.pub Jun 25 12:51:21 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 5 cd Jun 25 12:52:12 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 6 vi .bashrc Jun 25 12:52:17 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 7 source .bashrc Jun 25 12:52:29 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 8 sentry-server Jun 25 12:53:32 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 8 sentry-server Jun 25 12:53:34 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 8 sentry-server Jun 25 12:53:39 bastion LinuxCommandsWazuh: User abhijeet [2625572]: cd .,ss Jun 25 12:53:42 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 100 cd .ssh/ Jun 25 12:53:42 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 101 ls Jun 25 12:53:44 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 102 cat id_rsa.pub Jun 25 12:55:05 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 103 ssh ubuntu@34.131.95.95 Jun 25 12:55:10 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 104 sentry-server Jun 25 12:55:29 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 105 cd Jun 25 12:55:47 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 106 vi .bashrc Jun 25 12:55:50 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 107 sentry-server \ Jun 25 12:55:52 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 108 sentry-server Jun 25 12:56:08 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 109 source .bashrc Jun 25 12:56:12 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 110 sentry-server Jun 25 13:02:11 bastion LinuxCommandsWazuh: User mohtashim [2634074]: 828 mongo pixel_v1 Jun 25 13:02:11 bastion LinuxCommandsWazuh: User mohtashim [2634074]: 828 mongo pixel_v1 Jun 25 13:03:34 bastion LinuxCommandsWazuh: User rihan [1089225]: 5 make cookie-bash Jun 25 13:04:23 bastion LinuxCommandsWazuh: User mohtashim [2667412]: 829 exit Jun 25 13:16:18 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 110 sentry-server Jun 25 13:16:18 bastion LinuxCommandsWazuh: message repeated 5 times: [ User abhijeet [2625572]: 110 sentry-server ] Jun 25 13:21:58 bastion LinuxCommandsWazuh: User ankur [2686046]: 1465 byobu Jun 25 13:22:50 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 111 vi .bashrc Jun 25 13:24:00 bastion LinuxCommandsWazuh: User rihan [1089225]: 5 make cookie-bash Jun 25 13:24:17 bastion LinuxCommandsWazuh: User rihan [1089225]: 5 make cookie-bash Jun 25 13:24:17 bastion LinuxCommandsWazuh: User rihan [2589709]: 1062 byobu Jun 25 13:25:15 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 112 vi .bahsrc Jun 25 13:25:16 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 113 ls Jun 25 13:25:33 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 114 cd .ssh/ Jun 25 13:25:39 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 115 sudo vi .bash Jun 25 13:25:48 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 116 vi .bahsrc Jun 25 13:25:49 bastion LinuxCommandsWazuh: User abhijeet [2625572]: 117 cd Jun 25 13:25:56 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1567 sudo su abhijeet Jun 25 13:25:59 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 118 exit Jun 25 13:26:00 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 119 cd Jun 25 13:27:07 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 120 vi .bashrc Jun 25 13:27:09 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 121 ssh -p 12222 devops@34.131.103.89 Jun 25 13:27:14 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 122 cd .ssh/ Jun 25 13:27:14 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 123 ls Jun 25 13:27:17 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 124 cat id_rsa.pub Jun 25 13:29:34 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 125 ssh -p 12222 devops@34.131.103.89 Jun 25 13:29:39 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 126 cd Jun 25 13:29:49 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 127 cdinternal-server Jun 25 13:29:55 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 128 internal-server Jun 25 13:30:08 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 129 vi .bashrc Jun 25 13:30:11 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 130 cool-server Jun 25 13:50:47 bastion LinuxCommandsWazuh: User mohtashim [2667412]: 830 mongo pixel_v1 Jun 25 13:50:47 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [2667412]: 830 mongo pixel_v1] Jun 25 13:50:49 bastion LinuxCommandsWazuh: User mohtashim [2667412]: 831 clear Jun 25 13:50:53 bastion LinuxCommandsWazuh: User mohtashim [2717533]: 829 exit Jun 25 13:51:03 bastion LinuxCommandsWazuh: User mohtashim [2717533]: 830 make cookie-cutter-bash Jun 25 13:51:20 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [2717533]: 830 make cookie-cutter-bash] Jun 25 13:52:14 bastion LinuxCommandsWazuh: User ankur [2720282]: 1465 byobu Jun 25 13:52:18 bastion LinuxCommandsWazuh: User mohtashim [2667412]: 832 byobu Jun 25 13:52:29 bastion LinuxCommandsWazuh: User ankur [2720282]: 1466 cat Makefile Jun 25 13:58:08 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 130 cool-server Jun 25 13:58:08 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [2692846]: 130 cool-server] Jun 25 13:58:11 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 131 k get pods Jun 25 13:58:15 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 131 k get pods Jun 25 13:59:51 bastion LinuxCommandsWazuh: User aman [2589181]: 142 make cookie-logs Jun 25 14:00:11 bastion LinuxCommandsWazuh: User ankit [2728689]: 265 exit Jun 25 14:00:20 bastion LinuxCommandsWazuh: User ankit [2728689]: 266 kubectl get pods -n nitrox-production Jun 25 14:01:03 bastion LinuxCommandsWazuh: User ankit [2728689]: 267 kubectl logs -f datapulse-web-55689c9c49-fxz6t Jun 25 14:01:16 bastion LinuxCommandsWazuh: User ankit [2728689]: 268 kubectl get pods -n nitrox-production Jun 25 14:05:55 bastion LinuxCommandsWazuh: User adil [2734913]: 127 psql -U postgres Jun 25 14:06:40 bastion LinuxCommandsWazuh: User adil [2734913]: 127 psql -U postgres Jun 25 14:06:40 bastion LinuxCommandsWazuh: User adil [2734913]: 127 psql -U postgres Jun 25 14:06:54 bastion LinuxCommandsWazuh: User adil [2734913]: 128 kubectl get configmaps Jun 25 14:11:47 bastion LinuxCommandsWazuh: User adil [2734913]: 129 kubectl edit configmaps nitrox-dj-config Jun 25 14:27:32 bastion LinuxCommandsWazuh: User venky [2756492]: 1237 exit Jun 25 14:27:39 bastion LinuxCommandsWazuh: User venky [2756492]: 1237 exit Jun 25 14:27:39 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2756492]: 1237 exit] Jun 25 14:27:42 bastion LinuxCommandsWazuh: User venky [2756492]: 1238 ls Jun 25 14:27:52 bastion LinuxCommandsWazuh: User venky [2756492]: 1239 kubectl get po | grep url Jun 25 14:29:40 bastion LinuxCommandsWazuh: User venky [2756492]: 1240 kubetail urlbird-jobs-c95568b89-czjkq | grep "LLM Categorizer:" Jun 25 14:29:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2756492]: 1240 kubetail urlbird-jobs-c95568b89-czjkq | grep "LLM Categorizer:"] Jun 25 14:32:55 bastion LinuxCommandsWazuh: User venky [2756492]: 1240 kubetail urlbird-jobs-c95568b89-czjkq | grep "LLM Categorizer:" Jun 25 14:32:56 bastion LinuxCommandsWazuh: User venky [2756492]: 1241 kubectl get po | grep url Jun 25 14:33:05 bastion LinuxCommandsWazuh: User venky [2756492]: 1241 kubectl get po | grep url Jun 25 14:33:25 bastion LinuxCommandsWazuh: User venky [2756492]: 1242 kubetail urlbird-jobs-7c556f59f4-9qb9c | grep "LLM Categorizer:" Jun 25 14:33:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2756492]: 1242 kubetail urlbird-jobs-7c556f59f4-9qb9c | grep "LLM Categorizer:"] Jun 25 14:33:40 bastion LinuxCommandsWazuh: User venky [2756492]: 1243 kubectl get po | grep url Jun 25 14:34:29 bastion LinuxCommandsWazuh: User venky [2756492]: 1243 kubectl get po | grep url Jun 25 14:35:38 bastion LinuxCommandsWazuh: User mohtashim [2824943]: 833 exit Jun 25 14:35:40 bastion LinuxCommandsWazuh: User mohtashim [2824943]: 834 clear Jun 25 14:35:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2824943]: 834 clear] Jun 25 14:36:03 bastion LinuxCommandsWazuh: User ubuntu [2835431]: 1558 exit Jun 25 14:36:08 bastion LinuxCommandsWazuh: User mohtashim [2837262]: 833 exit Jun 25 14:36:12 bastion LinuxCommandsWazuh: User mohtashim [2837262]: 834 clear Jun 25 14:36:13 bastion LinuxCommandsWazuh: User ubuntu [2835431]: 1559 htop Jun 25 14:36:15 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ubuntu [2835431]: 1559 htop] Jun 25 14:39:47 bastion LinuxCommandsWazuh: User mohtashim [2837262]: 835 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 14:40:27 bastion LinuxCommandsWazuh: User mohtashim [2837262]: 835 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 14:41:47 bastion LinuxCommandsWazuh: User mohtashim [2953908]: 838 exit Jun 25 14:46:50 bastion LinuxCommandsWazuh: User mohtashim [2953908]: 839 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 15:50:17 bastion LinuxCommandsWazuh: User mohtashim [2717533]: 831 make bash cookie-cutter Jun 25 16:04:24 bastion LinuxCommandsWazuh: User mohtashim [3577383]: 840 exit Jun 25 16:04:25 bastion LinuxCommandsWazuh: User mohtashim [3577383]: 841 clear Jun 25 16:50:29 bastion LinuxCommandsWazuh: User ankur [3582196]: 1467 exit Jun 25 16:52:05 bastion LinuxCommandsWazuh: User ankur [3582196]: 1468 ls Jun 25 16:55:07 bastion LinuxCommandsWazuh: User abhijeet [2692846]: 131 k get pods Jun 25 16:55:07 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [2692846]: 131 k get pods] Jun 25 16:55:09 bastion LinuxCommandsWazuh: User ubuntu [2624966]: 1567 sudo su abhijeet Jun 25 17:08:09 bastion LinuxCommandsWazuh: User abhijeet [3598705]: 132 exit Jun 25 17:08:39 bastion LinuxCommandsWazuh: User abhijeet [3598705]: 133 history | grep cool Jun 25 17:10:36 bastion LinuxCommandsWazuh: User mohtashim [3577383]: 842 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 17:17:58 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 134 cool-server Jun 25 17:18:10 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 134 cool-server Jun 25 17:18:16 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 135 nslookup cool-server Jun 25 17:19:22 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 136 cool-server Jun 25 17:19:39 bastion LinuxCommandsWazuh: User ubuntu [3610335]: 1570 exit Jun 25 17:19:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3610335]: 1570 exit] Jun 25 17:19:45 bastion LinuxCommandsWazuh: User abhijeet [3610440]: 134 cool-server Jun 25 17:19:46 bastion LinuxCommandsWazuh: User abhijeet [3610440]: 135 cd Jun 25 17:20:47 bastion LinuxCommandsWazuh: User abhijeet [3610440]: 136 cool-server Jun 25 17:20:51 bastion LinuxCommandsWazuh: User abhijeet [3610440]: 136 cool-server Jun 25 17:26:16 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 843 exit Jun 25 17:26:26 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 844 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 17:26:26 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3617325]: 844 psql -h 10.94.16.3 -U postgres -d vortex_v2] Jun 25 17:26:54 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 845 byobu Jun 25 17:32:42 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 846 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 17:32:46 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 847 kubectl get pods Jun 25 17:33:34 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 848 kubectl logs -f vortex-dramatiq-6796db4576-kqcfb Jun 25 17:33:34 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 848 kubectl logs -f vortex-dramatiq-6796db4576-kqcfb Jun 25 17:33:39 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 849 kubectl get pods Jun 25 17:34:34 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 850 kubectl logs -f dakiya-64ffdbf74d-2rc4k Jun 25 17:34:49 bastion LinuxCommandsWazuh: User mohtashim [3626037]: 843 exit Jun 25 17:34:57 bastion LinuxCommandsWazuh: User mohtashim [3626037]: 844 kubectl get pods Jun 25 17:36:12 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 843 exit Jun 25 17:36:18 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 844 kubectl get pods Jun 25 17:36:52 bastion LinuxCommandsWazuh: User ankur [2390228]: 1458 k get pods | grep vortex Jun 25 17:37:37 bastion LinuxCommandsWazuh: User ankur [2390228]: 1459 k logs -f vortex-7d6f9589b6-cwtdr Jun 25 17:40:08 bastion LinuxCommandsWazuh: User ankur [2390228]: 1459 k logs -f vortex-7d6f9589b6-cwtdr Jun 25 17:40:10 bastion LinuxCommandsWazuh: User ankur [2390228]: 1460 k get pods | grep vortex Jun 25 17:41:00 bastion LinuxCommandsWazuh: User ankur [2390228]: 1461 k logs -f vortex-dramatiq-6796db4576-kqcfb Jun 25 17:41:01 bastion LinuxCommandsWazuh: User ankur [2390228]: 1462 k get pods | grep vortex Jun 25 17:41:03 bastion LinuxCommandsWazuh: User ankur [2390228]: 1462 k get pods | grep vortex Jun 25 17:43:00 bastion LinuxCommandsWazuh: User ankur [2390228]: 1463 k logs -f vortex-7d6f9589b6-cwtdr Jun 25 17:50:42 bastion LinuxCommandsWazuh: User mohtashim [3626037]: 845 kubectl logs -f vortex-dramatiq-6796db4576-kqcfb Jun 25 17:50:42 bastion LinuxCommandsWazuh: message repeated 9 times: [ User mohtashim [3626037]: 845 kubectl logs -f vortex-dramatiq-6796db4576-kqcfb] Jun 25 17:50:55 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 845 kubectl logs -f vortex-7d6f9589b6-cwtdr Jun 25 17:50:55 bastion LinuxCommandsWazuh: User ankur [2390228]: 1463 k logs -f vortex-7d6f9589b6-cwtdr Jun 25 17:50:55 bastion LinuxCommandsWazuh: message repeated 23 times: [ User ankur [2390228]: 1463 k logs -f vortex-7d6f9589b6-cwtdr] Jun 25 17:51:38 bastion LinuxCommandsWazuh: User ankur [2390228]: 1464 k get pods | grep vortex Jun 25 17:52:00 bastion LinuxCommandsWazuh: User ankur [2390228]: 1465 k logs -f vortex-644c55b585-x98nr Jun 25 17:52:02 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2390228]: 1465 k logs -f vortex-644c55b585-x98nr] Jun 25 17:52:43 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 846 kubectl get pods Jun 25 17:52:48 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 851 kubectl logs -f dakiya-64ffdbf74d-2rc4k | grep 'mohtashim' Jun 25 17:52:48 bastion LinuxCommandsWazuh: User mohtashim [3617325]: 851 kubectl logs -f dakiya-64ffdbf74d-2rc4k | grep 'mohtashim' Jun 25 17:52:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3617325]: 851 kubectl logs -f dakiya-64ffdbf74d-2rc4k | grep 'mohtashim'] Jun 25 17:53:38 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 853 kubectl logs -f dakiya-64ffdbf74d-2rc4k | grep 'mohtashim' Jun 25 17:53:48 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 854 kubectl logs -f dakiya-64ffdbf74d-2rc4k Jun 25 17:53:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3645732]: 854 kubectl logs -f dakiya-64ffdbf74d-2rc4k] Jun 25 17:55:09 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 855 clear Jun 25 17:58:25 bastion LinuxCommandsWazuh: User abhijeet [3610440]: 136 cool-server Jun 25 17:58:27 bastion LinuxCommandsWazuh: User ubuntu [3610335]: 1571 sudo su abhijeet Jun 25 17:58:30 bastion LinuxCommandsWazuh: User ayush [3650968]: 170 internal Jun 25 17:58:30 bastion LinuxCommandsWazuh: User ayush [3650968]: 171 cd Jun 25 17:58:33 bastion LinuxCommandsWazuh: User ayush [3650968]: 172 ssh -p 12222 devops@34.131.103.89 Jun 25 17:58:37 bastion LinuxCommandsWazuh: User ayush [3650968]: 173 cd .ssh/ Jun 25 17:58:38 bastion LinuxCommandsWazuh: User ayush [3650968]: 174 ls Jun 25 17:58:53 bastion LinuxCommandsWazuh: User ayush [3650968]: 175 vi yes.pub Jun 25 17:59:25 bastion LinuxCommandsWazuh: User ayush [3650968]: 176 ssh -p 12222 devops@34.131.103.89 Jun 25 17:59:44 bastion LinuxCommandsWazuh: User ayush [3650968]: 176 ssh -p 12222 devops@34.131.103.89 Jun 25 17:59:56 bastion LinuxCommandsWazuh: User ayush [3650968]: 177 vi .bashrc Jun 25 17:59:57 bastion LinuxCommandsWazuh: User ayush [3650968]: 178 cd Jun 25 18:00:46 bastion LinuxCommandsWazuh: User ayush [3650968]: 179 vi .bashrc Jun 25 18:00:50 bastion LinuxCommandsWazuh: User ubuntu [3610335]: 1572 sudo su ayush Jun 25 18:00:50 bastion LinuxCommandsWazuh: User ayush [3653708]: 180 exit Jun 25 18:00:52 bastion LinuxCommandsWazuh: User ayush [3653708]: 181 cd Jun 25 18:00:55 bastion LinuxCommandsWazuh: User ayush [3653708]: 182 cool-server Jun 25 18:05:13 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 855 clear Jun 25 18:05:13 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 855 clear Jun 25 18:05:17 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 856 kubectl get pods Jun 25 18:06:26 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 136 cool-server Jun 25 18:06:36 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 856 kubectl get pods Jun 25 18:06:56 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3645732]: 856 kubectl get pods] Jun 25 18:07:12 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 857 kubectl logs -f dakiya-64ffdbf74d-2rc4k Jun 25 18:07:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3645732]: 857 kubectl logs -f dakiya-64ffdbf74d-2rc4k] Jun 25 18:07:14 bastion LinuxCommandsWazuh: User mohtashim [3645732]: 858 clear Jun 25 18:08:32 bastion LinuxCommandsWazuh: User ubuntu [3661738]: 1570 exit Jun 25 18:08:34 bastion LinuxCommandsWazuh: User ubuntu [3661738]: 1571 lsa Jun 25 18:08:35 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 847 kubectl logs -f vortex-dramatiq-8c8486ff-6fwbb Jun 25 18:08:35 bastion LinuxCommandsWazuh: User ubuntu [3661738]: 1572 ls Jun 25 18:08:35 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 847 kubectl logs -f vortex-dramatiq-8c8486ff-6fwbb Jun 25 18:08:40 bastion LinuxCommandsWazuh: User ankur [2390228]: 1466 k get pods | grep vortex Jun 25 18:08:47 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 847 kubectl logs -f vortex-dramatiq-8c8486ff-6fwbb Jun 25 18:08:47 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 847 kubectl logs -f vortex-dramatiq-8c8486ff-6fwbb Jun 25 18:08:52 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 848 kubectl get pods Jun 25 18:08:54 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 848 kubectl get pods Jun 25 18:08:55 bastion LinuxCommandsWazuh: User ankit [3662303]: 268 kubectl get pods -n nitrox-production Jun 25 18:08:56 bastion LinuxCommandsWazuh: User ankur [2390228]: 1467 k rollout restart deployment/vortex-dramatiq Jun 25 18:09:00 bastion LinuxCommandsWazuh: User ankur [2390228]: 1468 k get pods | grep vortex Jun 25 18:09:00 bastion LinuxCommandsWazuh: User ankit [3662303]: 268 kubectl get pods -n nitrox-production Jun 25 18:09:01 bastion LinuxCommandsWazuh: User ankur [2390228]: 1468 k get pods | grep vortex Jun 25 18:09:09 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ankur [2390228]: 1468 k get pods | grep vortex] Jun 25 18:09:09 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 848 kubectl get pods Jun 25 18:09:11 bastion LinuxCommandsWazuh: User ankur [2390228]: 1468 k get pods | grep vortex Jun 25 18:09:34 bastion LinuxCommandsWazuh: message repeated 25 times: [ User ankur [2390228]: 1468 k get pods | grep vortex] Jun 25 18:10:47 bastion LinuxCommandsWazuh: User mohtashim [3628128]: 849 kubectl logs -f vortex-dramatiq-57d6bbdb84-kt549 Jun 25 18:10:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3628128]: 849 kubectl logs -f vortex-dramatiq-57d6bbdb84-kt549] Jun 25 18:11:14 bastion LinuxCommandsWazuh: User mohtashim [3665302]: 866 exit Jun 25 18:11:19 bastion LinuxCommandsWazuh: User ankit [3662303]: 269 kubectl describe pod -n nitrox-production Jun 25 18:11:35 bastion LinuxCommandsWazuh: User ankur [2390228]: 1468 k get pods | grep vortex Jun 25 18:11:36 bastion LinuxCommandsWazuh: User ankit [3662303]: 270 kubectl describe pod datapulse-celery-6d998f579d-59vw9 -n nitrox-production Jun 25 18:15:07 bastion LinuxCommandsWazuh: User ankur [3668896]: 1479 exit Jun 25 18:15:09 bastion LinuxCommandsWazuh: User ankur [3668896]: 1480 k get pods | grep vortex Jun 25 18:15:39 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 866 exit Jun 25 18:15:49 bastion LinuxCommandsWazuh: User ankur [3668896]: 1481 k rollout restart deployment/vortex-dramatiq Jun 25 18:15:58 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 867 kubectl logs -f vortex-dramatiq-57d6bbdb84-kt549 Jun 25 18:15:58 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 867 kubectl logs -f vortex-dramatiq-57d6bbdb84-kt549 Jun 25 18:15:59 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 868 clear Jun 25 18:16:06 bastion LinuxCommandsWazuh: User ankur [3668896]: 1482 k get pods | grep vortex Jun 25 18:16:07 bastion LinuxCommandsWazuh: User ankur [3668896]: 1482 k get pods | grep vortex Jun 25 18:16:07 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 869 kubectl get pods Jun 25 18:16:08 bastion LinuxCommandsWazuh: User ankur [3668896]: 1482 k get pods | grep vortex Jun 25 18:16:13 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [3668896]: 1482 k get pods | grep vortex] Jun 25 18:17:45 bastion LinuxCommandsWazuh: User ankit [3662303]: 270 kubectl describe pod datapulse-celery-6d998f579d-59vw9 -n nitrox-production Jun 25 18:17:54 bastion LinuxCommandsWazuh: User ankit [3662303]: 271 kubectl get pods -n nitrox-production Jun 25 18:18:01 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 870 kubectl logs -f vortex-dramatiq-5f6f7cd74b-knwcp Jun 25 18:18:02 bastion LinuxCommandsWazuh: User mohtashim [3669510]: 871 clear Jun 25 18:19:19 bastion LinuxCommandsWazuh: User mohtashim [3673969]: 872 exit Jun 25 18:20:46 bastion LinuxCommandsWazuh: User mohtashim [3673969]: 873 kubectl logs -f vortex-dramatiq-5f6f7cd74b-knwcp Jun 25 18:24:29 bastion LinuxCommandsWazuh: User ankit [3662303]: 271 kubectl get pods -n nitrox-production Jun 25 18:24:37 bastion LinuxCommandsWazuh: User ankur [3668896]: 1482 k get pods | grep vortex Jun 25 18:24:54 bastion LinuxCommandsWazuh: User ankit [3662303]: 272 kubectl describe pod datapulse-celery-6d998f579d-bqnd9 -n nitrox-production Jun 25 18:25:59 bastion LinuxCommandsWazuh: User ankit [3662303]: 272 kubectl describe pod datapulse-celery-6d998f579d-bqnd9 -n nitrox-production Jun 25 18:30:34 bastion LinuxCommandsWazuh: User mohtashim [3685490]: 874 exit Jun 25 18:31:06 bastion LinuxCommandsWazuh: User ayush [3653708]: 182 cool-server Jun 25 18:31:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [3653708]: 182 cool-server ] Jun 25 18:31:07 bastion LinuxCommandsWazuh: User ayush [3653708]: 183 ls Jun 25 18:31:09 bastion LinuxCommandsWazuh: User ubuntu [3610335]: 1572 sudo su ayush Jun 25 18:32:39 bastion LinuxCommandsWazuh: User ubuntu [3610335]: 1572 sudo su ayush Jun 25 18:32:40 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ubuntu [3610335]: 1572 sudo su ayush] Jun 25 18:34:34 bastion LinuxCommandsWazuh: User ankit [3662303]: 272 kubectl describe pod datapulse-celery-6d998f579d-bqnd9 -n nitrox-production Jun 25 18:36:37 bastion LinuxCommandsWazuh: User abhijeet [3608588]: 136 cool-server Jun 25 18:45:07 bastion LinuxCommandsWazuh: User mohtashim [3685490]: 875 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 19:16:48 bastion LinuxCommandsWazuh: User ankur [3582196]: 1469 byobu Jun 25 19:17:43 bastion LinuxCommandsWazuh: User mohtashim [3731945]: 877 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 19:18:45 bastion LinuxCommandsWazuh: User ankur [3732041]: 500 exit Jun 25 19:18:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3732041]: 500 exit] Jun 25 19:18:50 bastion LinuxCommandsWazuh: User ankur [3732135]: 500 exit Jun 25 19:21:12 bastion LinuxCommandsWazuh: User abhijeet [3734532]: 140 exit Jun 25 19:22:10 bastion LinuxCommandsWazuh: User abhijeet [3734532]: 141 cool-server Jun 25 19:24:31 bastion LinuxCommandsWazuh: User mohtashim [3731945]: 877 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jun 25 19:26:35 bastion LinuxCommandsWazuh: User ankur [3740320]: 500 exit Jun 25 19:26:45 bastion LinuxCommandsWazuh: User ankur [3740320]: 501 cat Makefile Jun 25 19:26:51 bastion LinuxCommandsWazuh: User ankur [3740320]: 502 cat .bashrc Jun 25 19:28:23 bastion LinuxCommandsWazuh: User mohtashim [3742005]: 878 exit Jun 25 19:28:31 bastion LinuxCommandsWazuh: User mohtashim [3742005]: 879 kubectl get pods Jun 25 19:30:08 bastion LinuxCommandsWazuh: User ankur [3740320]: 503 ls Jun 25 19:30:25 bastion LinuxCommandsWazuh: User ankur [3740320]: 504 k get pods | grep datapulse Jun 25 19:31:34 bastion LinuxCommandsWazuh: User ankur [3740320]: 504 k get pods | grep datapulse Jun 25 19:32:50 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3740320]: 504 k get pods | grep datapulse] Jun 25 19:35:29 bastion LinuxCommandsWazuh: User venky [2631335]: 1240 vi .bashrc Jun 25 19:35:31 bastion LinuxCommandsWazuh: User ubuntu [2631274]: 1559 sudo su venky Jun 25 19:35:34 bastion LinuxCommandsWazuh: User ankur [3748815]: 500 exit Jun 25 19:35:35 bastion LinuxCommandsWazuh: User ankur [3748815]: 501 cd Jun 25 19:35:38 bastion LinuxCommandsWazuh: User ankur [3748815]: 502 cd .ssh/ Jun 25 19:35:38 bastion LinuxCommandsWazuh: User ankur [3748815]: 503 ls Jun 25 19:35:42 bastion LinuxCommandsWazuh: User ankur [3748815]: 504 cat id_rsa.pub Jun 25 19:36:14 bastion LinuxCommandsWazuh: User adil [3750254]: 129 kubectl edit configmaps nitrox-dj-config Jun 25 19:36:19 bastion LinuxCommandsWazuh: User ankur [3748815]: 504 cat id_rsa.pub Jun 25 19:36:19 bastion LinuxCommandsWazuh: User ankur [3748815]: 504 cat id_rsa.pub Jun 25 19:36:20 bastion LinuxCommandsWazuh: User adil [3750254]: 130 mongosh Jun 25 19:36:20 bastion LinuxCommandsWazuh: User ankur [3748815]: 504 cat id_rsa.pub Jun 25 19:36:20 bastion LinuxCommandsWazuh: User ankur [3748815]: 504 cat id_rsa.pub Jun 25 19:36:22 bastion LinuxCommandsWazuh: User adil [3750254]: 130 mongosh Jun 25 19:36:23 bastion LinuxCommandsWazuh: message repeated 2 times: [ User adil [3750254]: 130 mongosh] Jun 25 19:36:33 bastion LinuxCommandsWazuh: User ankur [3748815]: 505 ssh ubuntu@34.131.143.70 Jun 25 19:36:35 bastion LinuxCommandsWazuh: User ankur [3748815]: 506 cd Jun 25 19:37:04 bastion LinuxCommandsWazuh: User ankur [3748815]: 507 vi .bashrc Jun 25 19:37:07 bastion LinuxCommandsWazuh: User ubuntu [2631274]: 1560 sudo su ankur Jun 25 19:38:31 bastion LinuxCommandsWazuh: User ankur [3740320]: 505 cat .bashrc Jun 25 19:38:35 bastion LinuxCommandsWazuh: User ankur [3740320]: 506 clear Jun 25 19:38:39 bastion LinuxCommandsWazuh: User ankur [3740320]: 507 elk-serv Jun 25 19:38:47 bastion LinuxCommandsWazuh: User ankur [3732135]: 501 byobu Jun 25 19:38:56 bastion LinuxCommandsWazuh: User ankur [3752843]: 518 exit Jun 25 19:39:01 bastion LinuxCommandsWazuh: User ankur [3752953]: 518 exit Jun 25 20:21:30 bastion LinuxCommandsWazuh: User abhijeet [3795450]: 142 exit Jun 25 20:22:38 bastion LinuxCommandsWazuh: User abhijeet [3795450]: 143 cool-server