Jun 26 10:55:07 bastion LinuxCommandsWazuh: User abhijeet [3878912]: 144 exit Jun 26 10:55:49 bastion LinuxCommandsWazuh: User abhijeet [3879690]: 144 exit Jun 26 11:01:47 bastion LinuxCommandsWazuh: User ankur [3879944]: 519 byobu Jun 26 11:22:39 bastion LinuxCommandsWazuh: User ankur [3900849]: 519 byobu Jun 26 11:22:40 bastion LinuxCommandsWazuh: User ankur [3900849]: 520 ls Jun 26 11:25:40 bastion LinuxCommandsWazuh: User ayush [3903774]: 184 exit Jun 26 11:30:08 bastion LinuxCommandsWazuh: User ayush [3903774]: 185 cool-server Jun 26 11:30:16 bastion LinuxCommandsWazuh: User ayush [3908832]: 186 exit Jun 26 11:30:35 bastion LinuxCommandsWazuh: User ayush [3908832]: 187 cool-server Jun 26 11:31:45 bastion LinuxCommandsWazuh: User abhijeet [3910253]: 145 cool-server Jun 26 11:34:01 bastion LinuxCommandsWazuh: User ankur [3912329]: 519 byobu Jun 26 11:35:39 bastion LinuxCommandsWazuh: User abhijeet [3913954]: 145 cool-server Jun 26 11:36:20 bastion LinuxCommandsWazuh: User abhijeet [3913954]: 145 cool-server Jun 26 11:38:47 bastion LinuxCommandsWazuh: User ankur [3912329]: 520 clickhouse-ssh Jun 26 11:42:41 bastion LinuxCommandsWazuh: User ankur [3900849]: 521 byobu Jun 26 11:42:44 bastion LinuxCommandsWazuh: User ankur [3900849]: 522 eexit Jun 26 11:59:38 bastion LinuxCommandsWazuh: User ankur [3922790]: 525 exit Jun 26 12:41:24 bastion LinuxCommandsWazuh: User abhijeet [3910253]: 145 cool-server Jun 26 12:51:24 bastion LinuxCommandsWazuh: User ankur [3974810]: 525 exit Jun 26 13:07:05 bastion LinuxCommandsWazuh: User ankur [3990687]: 525 exit Jun 26 13:07:11 bastion LinuxCommandsWazuh: User ankur [3990687]: 526 k get configmaps Jun 26 13:08:26 bastion LinuxCommandsWazuh: User ankur [3990687]: 527 k edit configmaps nitrox-ck-config Jun 26 13:08:28 bastion LinuxCommandsWazuh: User ankur [3990687]: 528 k get configmaps Jun 26 13:08:42 bastion LinuxCommandsWazuh: User mohtashim [2717533]: 831 make bash cookie-cutter Jun 26 13:08:55 bastion LinuxCommandsWazuh: User ankur [3990687]: 529 k edit configmaps urlbird-config Jun 26 13:25:40 bastion LinuxCommandsWazuh: User adil [4008797]: 131 mongo pixel_v1 Jun 26 13:50:33 bastion LinuxCommandsWazuh: User mohtashim [4025476]: 880 exit Jun 26 13:50:35 bastion LinuxCommandsWazuh: User mohtashim [4025476]: 881 clear Jun 26 13:52:38 bastion LinuxCommandsWazuh: User adil [4025599]: 131 mongo pixel_v1 Jun 26 13:53:01 bastion LinuxCommandsWazuh: User adil [4025599]: 132 psql -U postgres Jun 26 13:53:13 bastion LinuxCommandsWazuh: User adil [4025599]: 132 psql -U postgres Jun 26 13:57:25 bastion LinuxCommandsWazuh: User ankur [4026428]: 526 byobu Jun 26 14:07:34 bastion LinuxCommandsWazuh: User venky [4037277]: 1248 exit Jun 26 14:52:38 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 146 exit Jun 26 14:53:05 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 147 cool-server Jun 26 14:53:39 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 148 find / -name internal Jun 26 14:53:57 bastion LinuxCommandsWazuh: User abhijeet [4063057]: 146 exit Jun 26 14:54:55 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 149 ls Jun 26 14:55:00 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 150 cat bash.sh Jun 26 14:55:11 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 151 cat bash.sh | grep internal Jun 26 14:56:30 bastion LinuxCommandsWazuh: User abhijeet [4062888]: 152 internal-server Jun 26 15:13:30 bastion LinuxCommandsWazuh: User aman [4064772]: 143 exit Jun 26 15:13:31 bastion LinuxCommandsWazuh: User aman [4064772]: 144 clear Jun 26 15:13:49 bastion LinuxCommandsWazuh: User aman [4064873]: 145 exit Jun 26 15:13:51 bastion LinuxCommandsWazuh: User aman [4064873]: 146 clear Jun 26 15:31:03 bastion LinuxCommandsWazuh: User abhijeet [4063057]: 147 cool-server Jun 26 15:45:48 bastion LinuxCommandsWazuh: User ankur [4067969]: 526 byobu Jun 26 16:32:47 bastion LinuxCommandsWazuh: User adil [4114601]: 132 psql -U postgres Jun 26 16:33:20 bastion LinuxCommandsWazuh: User mohtashim [4025476]: 882 mongo pixel_v1 Jun 26 16:33:45 bastion LinuxCommandsWazuh: User ankur [4115584]: 526 byobu Jun 26 16:34:23 bastion LinuxCommandsWazuh: User adil [4114601]: 133 mongo use pixe_v1 Jun 26 16:34:31 bastion LinuxCommandsWazuh: User adil [4114601]: 134 mongosh Jun 26 16:35:46 bastion LinuxCommandsWazuh: User adil [4117617]: 132 psql -U postgres Jun 26 16:36:38 bastion LinuxCommandsWazuh: User adil [4117617]: 133 mongosh Jun 26 16:36:57 bastion LinuxCommandsWazuh: User adil [4117617]: 133 mongosh Jun 26 17:53:37 bastion LinuxCommandsWazuh: User abhijeet [1763]: 154 internal-server Jun 26 17:53:38 bastion LinuxCommandsWazuh: User abhijeet [1763]: 155 ls Jun 26 17:53:44 bastion LinuxCommandsWazuh: User abhijeet [1763]: 156 docker ps Jun 26 17:58:26 bastion LinuxCommandsWazuh: User mohtashim [6992]: 883 exit Jun 26 17:58:43 bastion LinuxCommandsWazuh: User mohtashim [6992]: 883 exit Jun 26 17:59:01 bastion LinuxCommandsWazuh: User mohtashim [6992]: 884 mongo pixel_v1 Jun 26 17:59:05 bastion LinuxCommandsWazuh: User mohtashim [6992]: 884 mongo pixel_v1 Jun 26 17:59:05 bastion LinuxCommandsWazuh: User mohtashim [6992]: 884 mongo pixel_v1 Jun 26 18:04:34 bastion LinuxCommandsWazuh: User abhijeet [13195]: 154 internal-server Jun 26 18:09:47 bastion LinuxCommandsWazuh: User abhijeet [1763]: 157 internal-server Jun 26 18:09:57 bastion LinuxCommandsWazuh: User abhijeet [13195]: 154 internal-server Jun 26 18:14:12 bastion LinuxCommandsWazuh: User ayush [22898]: 188 exit Jun 26 18:14:18 bastion LinuxCommandsWazuh: User ayush [22898]: 189 ls Jun 26 18:14:24 bastion ayush: root@ [23094]: su aman [0] Jun 26 18:14:25 bastion ayush: root@ [23094]: ls [0] Jun 26 18:14:31 bastion ayush: root@ [23094]: cd [0] Jun 26 18:14:32 bastion ayush: root@ [23094]: ls [0] Jun 26 18:14:34 bastion ayush: root@ [23094]: cd snap/ [0] Jun 26 18:14:35 bastion ayush: root@ [23094]: ls [0] Jun 26 18:14:41 bastion LinuxCommandsWazuh: User ayush [22898]: 190 sudo su Jun 26 18:15:52 bastion LinuxCommandsWazuh: User ubuntu [25292]: 1578 sudo su ankur Jun 26 18:15:56 bastion LinuxCommandsWazuh: User ak [25358]: 144 exit Jun 26 18:15:57 bastion LinuxCommandsWazuh: User ak [25358]: 145 c d Jun 26 18:15:58 bastion LinuxCommandsWazuh: User ak [25358]: 146 cd Jun 26 18:16:00 bastion LinuxCommandsWazuh: User ak [25358]: 147 k get pods Jun 26 18:16:07 bastion LinuxCommandsWazuh: User ak [25358]: 148 kubectl get pods Jun 26 18:16:09 bastion LinuxCommandsWazuh: User ubuntu [25292]: 1579 sudo su ak Jun 26 18:21:53 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1580 exit Jun 26 18:21:55 bastion LinuxCommandsWazuh: User ayush [31204]: 188 exit Jun 26 18:21:56 bastion LinuxCommandsWazuh: User ayush [31204]: 189 cd Jun 26 18:22:01 bastion LinuxCommandsWazuh: User ayush [31204]: 190 mongo Jun 26 18:22:18 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1581 sudo su ayush Jun 26 18:22:19 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1582 ls Jun 26 18:22:24 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1583 mongo Jun 26 18:22:28 bastion LinuxCommandsWazuh: User ankur [31770]: 526 byobu Jun 26 18:22:29 bastion LinuxCommandsWazuh: User ankur [31770]: 527 cd Jun 26 18:22:40 bastion LinuxCommandsWazuh: User ankur [31770]: 528 vi .bashrc Jun 26 18:22:42 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1584 sudo su ankur Jun 26 18:22:46 bastion LinuxCommandsWazuh: User ayush [32096]: 191 exit Jun 26 18:22:47 bastion LinuxCommandsWazuh: User ayush [32096]: 192 cd Jun 26 18:22:59 bastion LinuxCommandsWazuh: User ayush [32096]: 193 vi .bashrc Jun 26 18:23:05 bastion LinuxCommandsWazuh: User ayush [32096]: 194 source .bashrc Jun 26 18:23:10 bastion LinuxCommandsWazuh: User ayush [32096]: 195 mongo Jun 26 18:24:10 bastion LinuxCommandsWazuh: User ayush [33525]: 194 exit Jun 26 18:24:18 bastion LinuxCommandsWazuh: User ubuntu [31137]: 1585 sudo su ayush Jun 26 18:24:20 bastion LinuxCommandsWazuh: User abhijeet [33781]: 159 exit Jun 26 18:24:36 bastion abhijeet: root@ [34069]: exit [0] Jun 26 18:25:04 bastion LinuxCommandsWazuh: User abhijeet [33781]: 160 sudo su Jun 26 18:25:13 bastion LinuxCommandsWazuh: User abhijeet [33781]: 161 ssh vpn Jun 26 18:25:16 bastion abhijeet: root@ [34845]: exit [0] Jun 26 18:25:21 bastion abhijeet: root@ [34845]: ssh vpn [255] Jun 26 18:35:53 bastion LinuxCommandsWazuh: User ayush [33525]: 195 mongo Jun 26 18:35:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ayush [33525]: 195 mongo] Jun 26 19:11:00 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1586 exit Jun 26 19:11:19 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1587 ls Jun 26 19:11:35 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1588 htop Jun 26 19:11:38 bastion LinuxCommandsWazuh: message repeated 47 times: [ User ubuntu [80852]: 1588 htop] Jun 26 19:12:46 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1589 ls Jun 26 19:12:52 bastion LinuxCommandsWazuh: User ak [82794]: 149 exit Jun 26 19:12:52 bastion LinuxCommandsWazuh: User ak [82794]: 150 ls Jun 26 19:12:54 bastion LinuxCommandsWazuh: User ak [82794]: 151 cd Jun 26 19:12:59 bastion LinuxCommandsWazuh: User ak [82794]: 152 gcloud auth activate-service-account --key-file=/home/service.json Jun 26 19:13:05 bastion LinuxCommandsWazuh: User ak [82794]: 152 gcloud auth activate-service-account --key-file=/home/service.json Jun 26 19:13:18 bastion LinuxCommandsWazuh: User ak [82794]: 152 gcloud auth activate-service-account --key-file=/home/service.json Jun 26 19:13:40 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1590 sudo su ak Jun 26 19:13:46 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1590 sudo su ak Jun 26 19:13:51 bastion LinuxCommandsWazuh: User ankur [83760]: 529 exit Jun 26 19:13:54 bastion LinuxCommandsWazuh: User ankur [83760]: 529 exit Jun 26 19:13:56 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1591 sudo su ankur Jun 26 19:15:00 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1592 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jun 26 19:15:05 bastion LinuxCommandsWazuh: User ak [84967]: 153 exit Jun 26 19:15:07 bastion LinuxCommandsWazuh: User ak [84967]: 154 cd Jun 26 19:15:09 bastion LinuxCommandsWazuh: User ak [84967]: 155 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jun 26 19:16:14 bastion LinuxCommandsWazuh: User ak [84967]: 155 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Jun 26 19:16:27 bastion LinuxCommandsWazuh: User ak [87044]: 153 exit Jun 26 19:16:32 bastion LinuxCommandsWazuh: User ak [87335]: 153 exit Jun 26 19:16:43 bastion LinuxCommandsWazuh: User ak [87335]: 154 kubectl get pods -n nitrox-production Jun 26 19:17:20 bastion LinuxCommandsWazuh: User ak [92928]: 153 exit Jun 26 19:17:21 bastion LinuxCommandsWazuh: User ak [93341]: 153 exit Jun 26 19:17:29 bastion LinuxCommandsWazuh: User ak [87335]: 155 kubetail cookie-cutter -n nitrox-production Jun 26 19:17:30 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ak [87335]: 155 kubetail cookie-cutter -n nitrox-production] Jun 26 19:17:57 bastion LinuxCommandsWazuh: User ak [87335]: 156 # Install krew (if not already) Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 157 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 157 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 158 # Add krew to PATH Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 159 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 159 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:18:05 bastion LinuxCommandsWazuh: User ak [87335]: 160 # Install stern using krew Jun 26 19:18:09 bastion LinuxCommandsWazuh: User ak [87335]: 161 kubectl krew install stern Jun 26 19:19:13 bastion LinuxCommandsWazuh: User ak [107904]: 153 exit Jun 26 19:19:48 bastion LinuxCommandsWazuh: User ak [108983]: 153 exit Jun 26 19:20:05 bastion LinuxCommandsWazuh: User ak [87335]: 162 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:22:59 bastion LinuxCommandsWazuh: User ak [87335]: 162 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:24:03 bastion LinuxCommandsWazuh: User ak [87335]: 162 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:24:04 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ak [87335]: 162 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production] Jun 26 19:25:27 bastion LinuxCommandsWazuh: User ubuntu [119635]: 1586 exit Jun 26 19:25:33 bastion LinuxCommandsWazuh: User ubuntu [119635]: 1587 ls Jun 26 19:25:38 bastion LinuxCommandsWazuh: User venky [120014]: 1249 mongo Jun 26 19:30:33 bastion LinuxCommandsWazuh: User venky [120014]: 1250 redis-server Jun 26 19:30:45 bastion LinuxCommandsWazuh: User ak [87335]: 162 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:30:53 bastion LinuxCommandsWazuh: User ak [87335]: 163 kubectl stern --help Jun 26 19:31:42 bastion LinuxCommandsWazuh: User ak [87335]: 163 kubectl stern --help Jun 26 19:31:44 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ak [87335]: 163 kubectl stern --help] Jun 26 19:32:38 bastion LinuxCommandsWazuh: User ak [87335]: 164 stern -n nitrox production cookie-cutter --tail=0 Jun 26 19:32:45 bastion LinuxCommandsWazuh: User ak [87335]: 165 kuebctl stern -n nitrox production cookie-cutter --tail=0 Jun 26 19:33:12 bastion LinuxCommandsWazuh: User ak [87335]: 166 kubectl stern -n nitrox production cookie-cutter --tail=0 Jun 26 19:34:08 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ak [87335]: 166 kubectl stern -n nitrox production cookie-cutter --tail=0] Jun 26 19:34:09 bastion LinuxCommandsWazuh: User ak [87335]: 167 stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:35:11 bastion LinuxCommandsWazuh: User ak [87335]: 168 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:35:12 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ak [87335]: 168 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production] Jun 26 19:35:26 bastion LinuxCommandsWazuh: User abhijeet [139057]: 159 exit Jun 26 19:35:29 bastion LinuxCommandsWazuh: User abhijeet [139057]: 160 vpn Jun 26 19:35:36 bastion LinuxCommandsWazuh: User ak [84967]: 156 byobu Jun 26 19:35:39 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1593 sudo su ak Jun 26 19:35:51 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1593 sudo su ak Jun 26 19:35:57 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1594 htop Jun 26 19:36:00 bastion LinuxCommandsWazuh: message repeated 31 times: [ User ubuntu [80852]: 1594 htop] Jun 26 19:36:02 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1595 ls Jun 26 19:36:16 bastion LinuxCommandsWazuh: User ak [140982]: 173 exit Jun 26 19:36:23 bastion LinuxCommandsWazuh: User ak [140982]: 174 byobu Jun 26 19:36:28 bastion LinuxCommandsWazuh: User ak [141397]: 173 exit Jun 26 19:36:43 bastion LinuxCommandsWazuh: User ak [141397]: 173 exit Jun 26 19:36:46 bastion LinuxCommandsWazuh: User ak [141397]: 174 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:36:56 bastion LinuxCommandsWazuh: message repeated 10 times: [ User ak [141397]: 174 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production] Jun 26 19:37:11 bastion LinuxCommandsWazuh: User ak [141397]: 175 # Install krew (if not already) Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 176 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 176 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 177 # Add krew to PATH Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 178 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 178 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:37:14 bastion LinuxCommandsWazuh: User ak [141397]: 179 # Install stern using krew Jun 26 19:37:15 bastion LinuxCommandsWazuh: User ak [141397]: 180 kubectl krew install stern Jun 26 19:37:28 bastion LinuxCommandsWazuh: User ak [141397]: 181 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:38:19 bastion LinuxCommandsWazuh: User ak [141397]: 182 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production --include="seconds|to" --tail 0 Jun 26 19:38:34 bastion LinuxCommandsWazuh: User ak [141397]: 183 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production --include="seconds && to" --tail 0 Jun 26 19:38:43 bastion LinuxCommandsWazuh: User ak [141397]: 184 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production --include="seconds||to" --tail 0 Jun 26 19:39:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ak [141397]: 184 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production --include="seconds||to" --tail 0] Jun 26 19:39:41 bastion LinuxCommandsWazuh: User ak [87044]: 154 htop Jun 26 19:39:43 bastion LinuxCommandsWazuh: User ak [140982]: 174 byobu Jun 26 19:39:55 bastion LinuxCommandsWazuh: User ak [140982]: 175 stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:40:03 bastion LinuxCommandsWazuh: User ak [140982]: 176 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:40:16 bastion LinuxCommandsWazuh: User ak [140982]: 177 # Install krew (if not already) Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 178 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 178 ( set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew; ) Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 179 # Add krew to PATH Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 180 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 180 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Jun 26 19:40:19 bastion LinuxCommandsWazuh: User ak [140982]: 181 # Install stern using krew Jun 26 19:40:20 bastion LinuxCommandsWazuh: User ak [140982]: 182 kubectl krew install stern Jun 26 19:41:04 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1596 sudo su ak Jun 26 19:41:09 bastion LinuxCommandsWazuh: User ak [149278]: 197 exit Jun 26 19:41:15 bastion LinuxCommandsWazuh: User ak [149278]: 198 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:42:06 bastion LinuxCommandsWazuh: User ak [149278]: 199 echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc Jun 26 19:42:06 bastion LinuxCommandsWazuh: User ak [149278]: 200 source ~/.bashrc Jun 26 19:42:14 bastion LinuxCommandsWazuh: User ak [149278]: 201 kubectl stern cookie-cutter --max-log-requests=200000 -n nitrox-production Jun 26 19:43:16 bastion LinuxCommandsWazuh: User ak [149278]: 202 kubectl stern cookie-cutter -n nitrox-production --tail 0 Jun 26 19:43:32 bastion LinuxCommandsWazuh: User ak [149278]: 203 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 19:45:53 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1596 sudo su ak Jun 26 19:45:54 bastion LinuxCommandsWazuh: User ak [154462]: 204 exit Jun 26 19:46:21 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1596 sudo su ak Jun 26 19:46:23 bastion LinuxCommandsWazuh: User ubuntu [80852]: 1596 sudo su ak Jun 26 19:50:32 bastion LinuxCommandsWazuh: User venky [120014]: 1251 cd Jun 26 19:50:34 bastion LinuxCommandsWazuh: User ubuntu [119635]: 1588 sudo su venky Jun 26 19:55:51 bastion LinuxCommandsWazuh: User abhijeet [139057]: 161 ssh ubuntu@34.131.222.155 Jun 26 19:55:59 bastion abhijeet: root@ [164492]: exit [0] Jun 26 19:56:02 bastion abhijeet: root@ [164492]: ssh ubuntu@34.131.222.155 [255] Jun 26 19:57:14 bastion LinuxCommandsWazuh: User abhijeet [139057]: 162 sudo su Jun 26 20:01:47 bastion LinuxCommandsWazuh: User venky [170049]: 1252 exit Jun 26 20:01:52 bastion LinuxCommandsWazuh: User venky [3307342]: 1292 kubetail sbert Jun 26 20:02:34 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3307342]: 1292 kubetail sbert] Jun 26 20:05:31 bastion LinuxCommandsWazuh: User venky [3307342]: 1293 htop Jun 26 20:05:49 bastion LinuxCommandsWazuh: User venky [3307342]: 1294 kubetail urlbird Jun 26 20:09:33 bastion LinuxCommandsWazuh: User venky [3307342]: 1294 kubetail urlbird Jun 26 20:09:34 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3307342]: 1294 kubetail urlbird] Jun 26 20:09:47 bastion LinuxCommandsWazuh: User venky [3307342]: 1295 stern Jun 26 20:10:42 bastion LinuxCommandsWazuh: User venky [3307342]: 1295 stern Jun 26 20:10:49 bastion LinuxCommandsWazuh: User ak [188040]: 204 exit Jun 26 20:10:51 bastion LinuxCommandsWazuh: User ak [188040]: 205 cd Jun 26 20:10:52 bastion LinuxCommandsWazuh: User ak [188040]: 206 ls Jun 26 20:10:59 bastion LinuxCommandsWazuh: User ak [188040]: 207 history Jun 26 20:11:17 bastion LinuxCommandsWazuh: User ak [188040]: 207 history Jun 26 20:11:21 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ak [188040]: 207 history ] Jun 26 20:11:53 bastion LinuxCommandsWazuh: User ak [188040]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 20:11:54 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ak [188040]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000] Jun 26 20:11:59 bastion LinuxCommandsWazuh: User venky [190162]: 1252 exit Jun 26 20:12:51 bastion LinuxCommandsWazuh: User venky [190162]: 1253 htop Jun 26 20:12:58 bastion LinuxCommandsWazuh: User venky [190162]: 1253 htop Jun 26 20:12:59 bastion LinuxCommandsWazuh: User venky [2235591]: 27 kubectl get po -owide | grep url Jun 26 20:13:01 bastion LinuxCommandsWazuh: User venky [1679590]: 1220 kubectl get po | grep url Jun 26 20:13:02 bastion LinuxCommandsWazuh: User ak [188040]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 20:13:03 bastion LinuxCommandsWazuh: User ak [188040]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 20:13:03 bastion LinuxCommandsWazuh: User venky [3307342]: 1296 sudo su ak Jun 26 20:13:06 bastion LinuxCommandsWazuh: User ak [192136]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 20:13:10 bastion LinuxCommandsWazuh: User ak [192136]: 208 kubectl stern cookie-cutter -n nitrox-production --tail 0 --max-log-requests=20000 Jun 26 20:13:12 bastion LinuxCommandsWazuh: User ak [192136]: 209 cdf Jun 26 20:13:12 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ak [192136]: 209 cdf ] Jun 26 20:13:13 bastion LinuxCommandsWazuh: User ak [192136]: 210 cd Jun 26 20:13:59 bastion LinuxCommandsWazuh: User ak [192136]: 210 cd Jun 26 20:14:00 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ak [192136]: 210 cd ] Jun 26 20:14:19 bastion LinuxCommandsWazuh: User ak [192136]: 211 kubectl stern cookie-cutter --help