Jun 27 10:47:41 bastion LinuxCommandsWazuh: User ubuntu [286739]:  1600  exit
Jun 27 10:47:58 bastion LinuxCommandsWazuh: User ubuntu [286739]:  1601  kubctl get pods -A
Jun 27 10:49:49 bastion LinuxCommandsWazuh: User ubuntu [286866]:  1602  exit
Jun 27 10:50:23 bastion LinuxCommandsWazuh: User ankit [286959]:   273  exit
Jun 27 10:50:34 bastion LinuxCommandsWazuh: User ankit [286959]:   274  kubectl get pods -A
Jun 27 10:50:40 bastion LinuxCommandsWazuh: User ankit [286959]:   275  kubectl get ns
Jun 27 10:50:54 bastion LinuxCommandsWazuh: User ankit [286959]:   276  kubectl get pods -n nitrox-production
Jun 27 10:56:35 bastion LinuxCommandsWazuh: User ankit [286959]:   277  kubectl get ns
Jun 27 10:56:43 bastion LinuxCommandsWazuh: User ankit [286959]:   278  kubectl get pods -n loki
Jun 27 10:58:02 bastion LinuxCommandsWazuh: User ankit [286959]:   279  helm list -A
Jun 27 10:59:06 bastion LinuxCommandsWazuh: User ankit [286959]:   280  helm list -n loki
Jun 27 10:59:20 bastion LinuxCommandsWazuh: User ankit [286959]:   281  sudo su
Jun 27 10:59:25 bastion LinuxCommandsWazuh: User ubuntu [287950]:  1602  exit
Jun 27 10:59:28 bastion LinuxCommandsWazuh: User ubuntu [287950]:  1603  helm list -n loki
Jun 27 10:59:35 bastion LinuxCommandsWazuh: User ankit [288062]:   282  exit
Jun 27 10:59:38 bastion LinuxCommandsWazuh: User ankit [288062]:   283  helm list -n loki
Jun 27 10:59:42 bastion LinuxCommandsWazuh: User ankit [288062]:   284  kubectl get pods -n loki
Jun 27 11:00:25 bastion LinuxCommandsWazuh: User ankit [288062]:   285  kubectl get promtail-zcsn7 -o yaml
Jun 27 12:00:49 bastion LinuxCommandsWazuh: User ankur [293269]:   529  exit
Jun 27 12:06:05 bastion LinuxCommandsWazuh: User ankur [293269]:   530  byobu
Jun 27 12:45:25 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1604  exit
Jun 27 12:45:31 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1605  ls
Jun 27 12:45:37 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1606  sudo vi ~/.config/stern/config.yaml.
Jun 27 12:45:42 bastion LinuxCommandsWazuh: User ak [301594]:   208  kubectl stern cookie-cutter  -n nitrox-production --tail 0 --max-log-requests=20000
Jun 27 12:45:43 bastion LinuxCommandsWazuh: User ak [301594]:   209  cd
Jun 27 12:45:44 bastion LinuxCommandsWazuh: User ak [301594]:   210  ~/.config/stern/config.yaml.
Jun 27 12:45:48 bastion LinuxCommandsWazuh: User ak [301594]:   210  ~/.config/stern/config.yaml.
Jun 27 12:46:47 bastion LinuxCommandsWazuh: User ak [301594]:   211  cd /.config
Jun 27 12:46:49 bastion LinuxCommandsWazuh: User ak [301594]:   212  cd 
Jun 27 12:47:19 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1607  sudo su ak
Jun 27 12:47:19 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:51:38 bastion LinuxCommandsWazuh: User mohtashim [302518]:   884  mongo pixel_v1
Jun 27 12:51:51 bastion LinuxCommandsWazuh: User mohtashim [302518]:   885  clear
Jun 27 12:51:55 bastion LinuxCommandsWazuh: User mohtashim [302518]:   886  kubectl get pods
Jun 27 12:52:09 bastion LinuxCommandsWazuh: User mohtashim [302518]:   886  kubectl get pods
Jun 27 12:52:18 bastion LinuxCommandsWazuh: User mohtashim [302518]:   887  clear
Jun 27 12:52:20 bastion LinuxCommandsWazuh: User mohtashim [302518]:   888  kubectl get pods
Jun 27 12:52:36 bastion LinuxCommandsWazuh: User mohtashim [302518]:   889  clear
Jun 27 12:52:38 bastion LinuxCommandsWazuh: User mohtashim [302518]:   890  kubectl get pods
Jun 27 12:52:51 bastion LinuxCommandsWazuh: User mohtashim [302518]:   891  clear
Jun 27 12:52:52 bastion LinuxCommandsWazuh: User mohtashim [302518]:   892  kubectl get pods
Jun 27 12:52:59 bastion LinuxCommandsWazuh: User mohtashim [302518]:   893  clear
Jun 27 12:53:00 bastion LinuxCommandsWazuh: User mohtashim [302518]:   894  kubectl get pods
Jun 27 12:53:11 bastion LinuxCommandsWazuh: User mohtashim [302518]:   895  clear
Jun 27 12:53:13 bastion LinuxCommandsWazuh: User mohtashim [302518]:   896  kubectl get pods
Jun 27 12:53:44 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:56:30 bastion LinuxCommandsWazuh: User mohtashim [303521]:   897  exit
Jun 27 12:58:54 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:59:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [301560]:  1608  ls]
Jun 27 12:59:20 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:59:20 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:59:22 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1608  ls
Jun 27 12:59:33 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1609  ping 8.8.8.8
Jun 27 13:00:35 bastion LinuxCommandsWazuh: User ubuntu [301560]:  1610  curl ifconfig.me
Jun 27 13:05:37 bastion LinuxCommandsWazuh: User mohtashim [303521]:   898  mongo pixel_v1
Jun 27 13:05:39 bastion LinuxCommandsWazuh: User mohtashim [303521]:   899  clear
Jun 27 13:05:45 bastion LinuxCommandsWazuh: User mohtashim [303521]: kubectl get pods
Jun 27 13:07:24 bastion LinuxCommandsWazuh: User mohtashim [303521]: kubectl get pods
Jun 27 13:07:25 bastion LinuxCommandsWazuh: User mohtashim [303521]: kubectl get pods
Jun 27 13:07:26 bastion LinuxCommandsWazuh: User mohtashim [303521]: 1  clear
Jun 27 13:07:28 bastion LinuxCommandsWazuh: User mohtashim [303521]: 2  kubectl get pods
Jun 27 13:09:54 bastion LinuxCommandsWazuh: User mohtashim [304722]:   897  exit
Jun 27 13:19:23 bastion LinuxCommandsWazuh: User mohtashim [303521]: 3  kubectl logs -f cookie-cutter-common-task-695456f9f8-nc6cd
Jun 27 13:19:32 bastion LinuxCommandsWazuh: User mohtashim [303521]: 3  kubectl logs -f cookie-cutter-common-task-695456f9f8-nc6cd
Jun 27 13:19:34 bastion LinuxCommandsWazuh: User mohtashim [303521]: 4  clear
Jun 27 13:19:43 bastion LinuxCommandsWazuh: User mohtashim [303521]: 5  kubectl get pods
Jun 27 13:22:26 bastion LinuxCommandsWazuh: User venky [305727]:  1289  byobu
Jun 27 13:22:42 bastion LinuxCommandsWazuh: User ak [192136]:   212  kubectl get po | url 
Jun 27 13:22:44 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ak [192136]:   212  kubectl get po | url ]
Jun 27 13:22:47 bastion LinuxCommandsWazuh: User ak [192136]:   213  kubectl get po | grep url 
Jun 27 13:22:59 bastion LinuxCommandsWazuh: User ak [192136]:   214  kubectl get po -n nitrox-production | grep url 
Jun 27 13:23:17 bastion LinuxCommandsWazuh: User mohtashim [303521]: 6  kubectl hpa
Jun 27 13:23:24 bastion LinuxCommandsWazuh: User mohtashim [303521]: 7  kubectl get hpa
Jun 27 13:24:15 bastion LinuxCommandsWazuh: User mohtashim [303521]: 8  make mongo
Jun 27 13:24:17 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [303521]: 8  make mongo]
Jun 27 13:31:33 bastion LinuxCommandsWazuh: User mohtashim [303521]: mongo pixel_v1
Jun 27 13:31:35 bastion LinuxCommandsWazuh: User mohtashim [303521]: 10  clear
Jun 27 13:31:43 bastion LinuxCommandsWazuh: User mohtashim [303521]: 11  kubectl get pods
Jun 27 13:31:58 bastion LinuxCommandsWazuh: User mohtashim [303521]: 11  kubectl get pods
Jun 27 13:32:00 bastion LinuxCommandsWazuh: User mohtashim [303521]: 12  clear
Jun 27 13:32:08 bastion LinuxCommandsWazuh: User mohtashim [303521]: 13  kubectl get pods
Jun 27 13:32:17 bastion LinuxCommandsWazuh: User mohtashim [303521]: 13  kubectl get pods
Jun 27 13:46:24 bastion LinuxCommandsWazuh: User ankur [330376]:   531  exit
Jun 27 13:47:30 bastion LinuxCommandsWazuh: User abhijeet [331498]:   165  sudo su
Jun 27 13:47:43 bastion LinuxCommandsWazuh: User abhijeet [331498]:   166  kubectl get all -n nitro
Jun 27 13:47:48 bastion LinuxCommandsWazuh: User abhijeet [331498]:   166  kubectl get all -n nitro
Jun 27 13:47:53 bastion LinuxCommandsWazuh: User abhijeet [331498]:   167  kubectl get pods
Jun 27 13:53:27 bastion LinuxCommandsWazuh: User abhijeet [331498]:   168  l
Jun 27 13:53:36 bastion LinuxCommandsWazuh: User abhijeet [331498]:   169  kubectl get pods
Jun 27 13:53:59 bastion LinuxCommandsWazuh: User abhijeet [331498]:   170  kubectl descibe pod vortex-644c55b585-x98nr
Jun 27 13:54:06 bastion LinuxCommandsWazuh: User abhijeet [331498]:   171  kubectl describe pod vortex-644c55b585-x98nr
Jun 27 13:54:11 bastion LinuxCommandsWazuh: User abhijeet [331498]:   172  kubectl describe pod vortex-644c55b585-x98nr | grep lease
Jun 27 13:54:14 bastion LinuxCommandsWazuh: User abhijeet [331498]:   173  kubectl describe pod vortex-644c55b585-x98nr 
Jun 27 13:54:19 bastion LinuxCommandsWazuh: User abhijeet [331498]:   174  kubectl get pods
Jun 27 13:57:52 bastion LinuxCommandsWazuh: User ak [192136]:   215  kubectl stern cookie-cutter  --help
Jun 27 13:57:54 bastion LinuxCommandsWazuh: User ak [192136]:   215  kubectl stern cookie-cutter  --help
Jun 27 13:57:59 bastion LinuxCommandsWazuh: User ak [192136]:   216  kubectl stern cookie-cutter  
Jun 27 13:58:06 bastion LinuxCommandsWazuh: User ak [192136]:   217  kubectl stern url-bird
Jun 27 13:58:33 bastion LinuxCommandsWazuh: User ak [192136]:   218  kubectl stern urlbird
Jun 27 13:58:34 bastion LinuxCommandsWazuh: User ak [192136]:   218  kubectl stern urlbird
Jun 27 13:58:46 bastion LinuxCommandsWazuh: User ak [192136]:   219  kubetail urlbird 
Jun 27 14:00:23 bastion LinuxCommandsWazuh: User venky [305727]:  1289  byobu
Jun 27 14:01:11 bastion LinuxCommandsWazuh: User venky [305727]:  1290  kubetail urlbird | grep "DEMOGRAPHICS: Biscuit ID"
Jun 27 14:21:22 bastion LinuxCommandsWazuh: User ankur [393667]:   531  exit
Jun 27 14:21:24 bastion LinuxCommandsWazuh: User ankur [393667]:   532  ls
Jun 27 14:22:13 bastion LinuxCommandsWazuh: User ankur [3990687]:   530  k get pods | grep vortex
Jun 27 14:27:07 bastion LinuxCommandsWazuh: User ankur [3990687]:   531  k logs -f vortex-68b7b49fb-9q6pk
Jun 27 14:27:07 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3990687]:   531  k logs -f vortex-68b7b49fb-9q6pk]
Jun 27 14:36:53 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1611  exit
Jun 27 14:37:17 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1611  exit
Jun 27 14:37:19 bastion LinuxCommandsWazuh: User ak [410027]:   213  exit
Jun 27 14:37:20 bastion LinuxCommandsWazuh: User ak [410027]:   214  cd
Jun 27 14:37:22 bastion LinuxCommandsWazuh: User ak [410027]:   215  kubectl config set-context
Jun 27 14:37:36 bastion LinuxCommandsWazuh: User ak [410027]:   216  kubectl config set-context --namespace nitrox-production
Jun 27 14:37:54 bastion LinuxCommandsWazuh: User ak [410027]:   217  kubectl config set-context --current --namespace nitrox-production
Jun 27 14:38:00 bastion LinuxCommandsWazuh: User ak [410027]:   217  kubectl config set-context --current --namespace nitrox-production
Jun 27 14:39:05 bastion LinuxCommandsWazuh: User ak [410027]:   218  sudo vi # <flag name>: <value>
Jun 27 14:39:16 bastion LinuxCommandsWazuh: User ak [410027]:   219  sudo vi ~/.config/stern/config.yaml
Jun 27 14:39:20 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1612  sudo su ak
Jun 27 14:40:19 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1613  sudo usermod -aG google-sudoers ak
Jun 27 14:40:22 bastion LinuxCommandsWazuh: User ak [413065]:   220  exit
Jun 27 14:40:23 bastion LinuxCommandsWazuh: User ak [413065]:   221  cd
Jun 27 14:40:31 bastion LinuxCommandsWazuh: User ak [413065]:   222  sudo vi ~/.config/stern/config.yaml
Jun 27 14:41:38 bastion LinuxCommandsWazuh: User ak [413065]:   223  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:41:38 bastion LinuxCommandsWazuh: User ak [413065]:   224  source ~/.bashrc
Jun 27 14:41:45 bastion LinuxCommandsWazuh: User ak [413065]:   225  stern cookie-cutter
Jun 27 14:42:55 bastion LinuxCommandsWazuh: User ankur [3990687]:   531  k logs -f vortex-68b7b49fb-9q6pk
Jun 27 14:42:58 bastion LinuxCommandsWazuh: User ankur [3990687]:   532  k get pods | grep vortex
Jun 27 14:47:29 bastion LinuxCommandsWazuh: User ankur [3990687]:   533  k logs -f vortex-74f44c9bbd-l6jnq
Jun 27 14:47:31 bastion LinuxCommandsWazuh: User ankur [3990687]:   534  k get pods | grep vortex
Jun 27 14:47:41 bastion LinuxCommandsWazuh: message repeated 14 times: [ User ankur [3990687]:   534  k get pods | grep vortex]
Jun 27 14:48:13 bastion LinuxCommandsWazuh: User ankur [3990687]:   535  k logs -f vortex-856fd55889-bnpgg
Jun 27 14:48:13 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3990687]:   535  k logs -f vortex-856fd55889-bnpgg]
Jun 27 14:48:16 bastion LinuxCommandsWazuh: User ankur [393667]:   533  byobu
Jun 27 14:49:22 bastion LinuxCommandsWazuh: User venky [421456]:  1289  byobu
Jun 27 14:49:23 bastion LinuxCommandsWazuh: User venky [421456]:  1290  cd
Jun 27 14:49:24 bastion LinuxCommandsWazuh: User venky [421456]:  1291  # Install krew (if not already)
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1292  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1292  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1293  # Add krew to PATH
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1294  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1294  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:49:31 bastion LinuxCommandsWazuh: User venky [421456]:  1295  # Install stern using krew
Jun 27 14:49:35 bastion LinuxCommandsWazuh: User venky [421456]:  1296  kubectl krew install stern
Jun 27 14:50:08 bastion LinuxCommandsWazuh: User venky [421456]:  1297  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:50:08 bastion LinuxCommandsWazuh: User venky [421456]:  1298  source ~/.bashrc
Jun 27 14:50:17 bastion LinuxCommandsWazuh: User venky [421456]:  1299  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:50:19 bastion LinuxCommandsWazuh: User venky [421456]:  1300  source ~/.bashrc
Jun 27 14:50:22 bastion LinuxCommandsWazuh: User ak [413065]:   226  sudo su venky
Jun 27 14:50:26 bastion LinuxCommandsWazuh: User ankur [421617]:   534  exit
Jun 27 14:50:28 bastion LinuxCommandsWazuh: User ankur [421617]:   535  cd
Jun 27 14:50:31 bastion LinuxCommandsWazuh: User ankur [421617]:   536  # Install krew (if not already)
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   537  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   537  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   538  # Add krew to PATH
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   539  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   539  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:50:36 bastion LinuxCommandsWazuh: User ankur [421617]:   540  # Install stern using krew
Jun 27 14:50:39 bastion LinuxCommandsWazuh: User ankur [421617]:   541  kubectl krew install stern
Jun 27 14:50:39 bastion LinuxCommandsWazuh: User ankur [421617]:   542  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:50:39 bastion LinuxCommandsWazuh: User ankur [421617]:   543  source ~/.bashrc
Jun 27 14:50:39 bastion LinuxCommandsWazuh: User ankur [421617]:   543  source ~/.bashrc
Jun 27 14:50:39 bastion LinuxCommandsWazuh: User ankur [421617]:   544  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:50:42 bastion LinuxCommandsWazuh: User ankur [421617]:   545  source ~/.bashrc
Jun 27 14:50:44 bastion LinuxCommandsWazuh: User ak [413065]:   227  sudo su ankur
Jun 27 14:50:47 bastion LinuxCommandsWazuh: User rihan [421780]:  1075  make cookie-bash 
Jun 27 14:50:49 bastion LinuxCommandsWazuh: User rihan [421780]:  1076  cd
Jun 27 14:50:50 bastion LinuxCommandsWazuh: User rihan [421780]:  1077  # Install krew (if not already)
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1078  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1078  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1079  # Add krew to PATH
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1080  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1080  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:50:56 bastion LinuxCommandsWazuh: User rihan [421780]:  1081  # Install stern using krew
Jun 27 14:50:59 bastion LinuxCommandsWazuh: User rihan [421780]:  1082  kubectl krew install stern
Jun 27 14:50:59 bastion LinuxCommandsWazuh: User rihan [421780]:  1083  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:50:59 bastion LinuxCommandsWazuh: User rihan [421780]:  1084  source ~/.bashrc
Jun 27 14:50:59 bastion LinuxCommandsWazuh: User rihan [421780]:  1084  source ~/.bashrc
Jun 27 14:50:59 bastion LinuxCommandsWazuh: User rihan [421780]:  1085  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:51:01 bastion LinuxCommandsWazuh: User rihan [421780]:  1086  source ~/.bashrc
Jun 27 14:51:03 bastion LinuxCommandsWazuh: User ak [413065]:   228  sudo su rihan
Jun 27 14:51:10 bastion LinuxCommandsWazuh: User ak [413065]:   229  sudo su shamailtayaab
Jun 27 14:51:12 bastion LinuxCommandsWazuh: User ak [413065]:   230  cd ..
Jun 27 14:51:16 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  1998  internal 
Jun 27 14:51:17 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  1999  cd
Jun 27 14:51:18 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2000  # Install krew (if not already)
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2001  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2001  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2002  # Add krew to PATH
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2003  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2003  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:51:23 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2004  # Install stern using krew
Jun 27 14:51:26 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2005  kubectl krew install stern
Jun 27 14:51:26 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2006  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:51:26 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2007  source ~/.bashrc
Jun 27 14:51:26 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2007  source ~/.bashrc
Jun 27 14:51:26 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2008  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:51:27 bastion LinuxCommandsWazuh: User shamailtayyab [421963]:  2009  source ~/.bashrc
Jun 27 14:51:29 bastion LinuxCommandsWazuh: User ak [413065]:   231  sudo su shamailtayyab
Jun 27 14:51:34 bastion LinuxCommandsWazuh: User mohtashim [422123]: 14  exit
Jun 27 14:51:35 bastion LinuxCommandsWazuh: User mohtashim [422123]: 15  cd
Jun 27 14:51:36 bastion LinuxCommandsWazuh: User mohtashim [422123]: 16  # Install krew (if not already)
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 17  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 17  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 18  # Add krew to PATH
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 19  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 19  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:51:43 bastion LinuxCommandsWazuh: User mohtashim [422123]: 20  # Install stern using krew
Jun 27 14:51:46 bastion LinuxCommandsWazuh: User mohtashim [422123]: 21  kubectl krew install stern
Jun 27 14:51:46 bastion LinuxCommandsWazuh: User mohtashim [422123]: 22  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:51:46 bastion LinuxCommandsWazuh: User mohtashim [422123]: 23  source ~/.bashrc
Jun 27 14:51:46 bastion LinuxCommandsWazuh: User mohtashim [422123]: 23  source ~/.bashrc
Jun 27 14:51:46 bastion LinuxCommandsWazuh: User mohtashim [422123]: 24  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:51:47 bastion LinuxCommandsWazuh: User mohtashim [422123]: 25  source ~/.bashrc
Jun 27 14:52:05 bastion LinuxCommandsWazuh: User ak [413065]:   232  sudo su mohtashim
Jun 27 14:52:08 bastion LinuxCommandsWazuh: User ak [413065]:   233  ks
Jun 27 14:52:08 bastion LinuxCommandsWazuh: User ak [413065]:   234  ls
Jun 27 14:52:13 bastion LinuxCommandsWazuh: User adil [422310]:   136  mongo
Jun 27 14:52:15 bastion LinuxCommandsWazuh: User adil [422310]:   137  # Install krew (if not already)
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   138  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   138  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   139  # Add krew to PATH
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   140  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   140  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:52:21 bastion LinuxCommandsWazuh: User adil [422310]:   141  # Install stern using krew
Jun 27 14:52:23 bastion LinuxCommandsWazuh: User adil [422310]:   142  kubectl krew install stern
Jun 27 14:52:23 bastion LinuxCommandsWazuh: User adil [422310]:   143  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:52:24 bastion LinuxCommandsWazuh: User adil [422310]:   144  source ~/.bashrc
Jun 27 14:52:24 bastion LinuxCommandsWazuh: User adil [422310]:   144  source ~/.bashrc
Jun 27 14:52:24 bastion LinuxCommandsWazuh: User adil [422310]:   145  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:52:25 bastion LinuxCommandsWazuh: User adil [422310]:   146  source ~/.bashrc
Jun 27 14:52:29 bastion LinuxCommandsWazuh: User adil [422310]:   147  cd
Jun 27 14:52:36 bastion LinuxCommandsWazuh: User adil [422310]:   148  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:52:37 bastion LinuxCommandsWazuh: User adil [422310]:   149  source ~/.bashrc
Jun 27 14:52:37 bastion LinuxCommandsWazuh: User adil [422310]:   149  source ~/.bashrc
Jun 27 14:52:37 bastion LinuxCommandsWazuh: User adil [422310]:   150  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:52:37 bastion LinuxCommandsWazuh: User adil [422310]:   151  source ~/.bashrc
Jun 27 14:52:39 bastion LinuxCommandsWazuh: User ak [413065]:   235  sudo su adil
Jun 27 14:52:41 bastion LinuxCommandsWazuh: User ak [413065]:   236  ls
Jun 27 14:52:46 bastion LinuxCommandsWazuh: User ankit [422514]:   286  exit
Jun 27 14:52:47 bastion LinuxCommandsWazuh: User ankit [422514]:   287  cd
Jun 27 14:52:53 bastion LinuxCommandsWazuh: User ankit [422514]:   288  # Install krew (if not already)
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   289  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   289  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   290  # Add krew to PATH
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   291  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   291  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:52:58 bastion LinuxCommandsWazuh: User ankit [422514]:   292  # Install stern using krew
Jun 27 14:53:01 bastion LinuxCommandsWazuh: User ankit [422514]:   293  kubectl krew install stern
Jun 27 14:53:01 bastion LinuxCommandsWazuh: User ankit [422514]:   294  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:53:01 bastion LinuxCommandsWazuh: User ankit [422514]:   295  source ~/.bashrc
Jun 27 14:53:01 bastion LinuxCommandsWazuh: User ankit [422514]:   295  source ~/.bashrc
Jun 27 14:53:01 bastion LinuxCommandsWazuh: User ankit [422514]:   296  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:53:03 bastion LinuxCommandsWazuh: User ankit [422514]:   297  source ~/.bashrc
Jun 27 14:53:04 bastion LinuxCommandsWazuh: User ak [413065]:   237  sudo su ankit
Jun 27 14:53:05 bastion LinuxCommandsWazuh: User ak [413065]:   238  ls
Jun 27 14:53:06 bastion LinuxCommandsWazuh: User ak [413065]:   239  cd
Jun 27 14:53:19 bastion LinuxCommandsWazuh: User anshika [422688]:   106  exit
Jun 27 14:53:24 bastion LinuxCommandsWazuh: User anshika [422688]:   107  cd
Jun 27 14:53:25 bastion LinuxCommandsWazuh: User anshika [422688]:   108  # Install krew (if not already)
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   109  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   109  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   110  # Add krew to PATH
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   111  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   111  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:53:31 bastion LinuxCommandsWazuh: User anshika [422688]:   112  # Install stern using krew
Jun 27 14:53:34 bastion LinuxCommandsWazuh: User anshika [422688]:   113  kubectl krew install stern
Jun 27 14:53:34 bastion LinuxCommandsWazuh: User anshika [422688]:   114  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:53:34 bastion LinuxCommandsWazuh: User anshika [422688]:   115  source ~/.bashrc
Jun 27 14:53:34 bastion LinuxCommandsWazuh: User anshika [422688]:   115  source ~/.bashrc
Jun 27 14:53:34 bastion LinuxCommandsWazuh: User anshika [422688]:   116  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:53:38 bastion LinuxCommandsWazuh: User anshika [422688]:   117  source ~/.bashrc
Jun 27 14:53:40 bastion LinuxCommandsWazuh: User ak [413065]:   240  sudo su anshika
Jun 27 14:53:41 bastion LinuxCommandsWazuh: User ak [413065]:   241  ls
Jun 27 14:53:42 bastion LinuxCommandsWazuh: User ak [413065]:   242  cd ..
Jun 27 14:53:45 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1611  exit
Jun 27 14:53:46 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1612  cd
Jun 27 14:53:47 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1613  # Install krew (if not already)
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1614  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1614  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1615  # Add krew to PATH
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1616  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1616  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:53:54 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1617  # Install stern using krew
Jun 27 14:53:57 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1618  kubectl krew install stern
Jun 27 14:53:57 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1619  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:53:57 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1620  source ~/.bashrc
Jun 27 14:53:57 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1620  source ~/.bashrc
Jun 27 14:53:57 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1621  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:54:18 bastion LinuxCommandsWazuh: User ubuntu [422861]:  1622  source ~/.bashrc
Jun 27 14:54:23 bastion LinuxCommandsWazuh: User ak [413065]:   243  sudo su ubuntu
Jun 27 14:54:27 bastion LinuxCommandsWazuh: User ak [413065]:   244  ls
Jun 27 14:54:33 bastion LinuxCommandsWazuh: User abhijeet [423031]:   174  kubectl get pods
Jun 27 14:54:36 bastion LinuxCommandsWazuh: User abhijeet [423031]:   175  cd
Jun 27 14:54:38 bastion LinuxCommandsWazuh: User abhijeet [423031]:   176  # Install krew (if not already)
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   177  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   177  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   178  # Add krew to PATH
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   179  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   179  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:54:43 bastion LinuxCommandsWazuh: User abhijeet [423031]:   180  # Install stern using krew
Jun 27 14:54:46 bastion LinuxCommandsWazuh: User abhijeet [423031]:   181  kubectl krew install stern
Jun 27 14:54:46 bastion LinuxCommandsWazuh: User abhijeet [423031]:   182  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:54:46 bastion LinuxCommandsWazuh: User abhijeet [423031]:   183  source ~/.bashrc
Jun 27 14:54:46 bastion LinuxCommandsWazuh: User abhijeet [423031]:   183  source ~/.bashrc
Jun 27 14:54:46 bastion LinuxCommandsWazuh: User abhijeet [423031]:   184  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:55:10 bastion LinuxCommandsWazuh: User abhijeet [423031]:   185  source ~/.bashrc
Jun 27 14:55:13 bastion LinuxCommandsWazuh: User ak [413065]:   245  sudo su abhijeet
Jun 27 14:55:15 bastion LinuxCommandsWazuh: User ak [413065]:   246  ls
Jun 27 14:55:22 bastion LinuxCommandsWazuh: User aman [423217]:   147  exit
Jun 27 14:55:24 bastion LinuxCommandsWazuh: User aman [423217]:   148  cd
Jun 27 14:55:25 bastion LinuxCommandsWazuh: User aman [423217]:   149  # Install krew (if not already)
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   150  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   150  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   151  # Add krew to PATH
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   152  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   152  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:55:31 bastion LinuxCommandsWazuh: User aman [423217]:   153  # Install stern using krew
Jun 27 14:55:34 bastion LinuxCommandsWazuh: User aman [423217]:   154  kubectl krew install stern
Jun 27 14:55:34 bastion LinuxCommandsWazuh: User aman [423217]:   155  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:55:34 bastion LinuxCommandsWazuh: User aman [423217]:   156  source ~/.bashrc
Jun 27 14:55:34 bastion LinuxCommandsWazuh: User aman [423217]:   156  source ~/.bashrc
Jun 27 14:55:34 bastion LinuxCommandsWazuh: User aman [423217]:   157  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:55:36 bastion LinuxCommandsWazuh: User aman [423217]:   158  source ~/.bashrc
Jun 27 14:55:41 bastion LinuxCommandsWazuh: User ak [413065]:   247  sudo su aman
Jun 27 14:55:52 bastion LinuxCommandsWazuh: User ak [413065]:   247  sudo su aman
Jun 27 14:55:54 bastion LinuxCommandsWazuh: User ak [413065]:   248  ls
Jun 27 14:56:02 bastion LinuxCommandsWazuh: User ashish [424172]:    53  redis-cli llen dramatiq:default
Jun 27 14:56:05 bastion LinuxCommandsWazuh: User ashish [424172]:    54  cd
Jun 27 14:56:07 bastion LinuxCommandsWazuh: User ashish [424172]:    55  # Install krew (if not already)
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    56  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    56  (   set -x; cd "$(mktemp -d)" &&   OS="$(uname | tr '[:upper:]' '[:lower:]')" &&   ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" &&   KREW="krew-${OS}_${ARCH}" &&   curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz" &&   tar zxvf "${KREW}.tar.gz" &&   ./"${KREW}" install krew; )
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    57  # Add krew to PATH
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    58  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    58  export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"
Jun 27 14:56:15 bastion LinuxCommandsWazuh: User ashish [424172]:    59  # Install stern using krew
Jun 27 14:56:18 bastion LinuxCommandsWazuh: User ashish [424172]:    60  kubectl krew install stern
Jun 27 14:56:18 bastion LinuxCommandsWazuh: User ashish [424172]:    61  echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc
Jun 27 14:56:18 bastion LinuxCommandsWazuh: User ashish [424172]:    62  source ~/.bashrc
Jun 27 14:56:18 bastion LinuxCommandsWazuh: User ashish [424172]:    62  source ~/.bashrc
Jun 27 14:56:18 bastion LinuxCommandsWazuh: User ashish [424172]:    63  echo 'alias stern="kubectl stern --max-log-requests=200000"' >> ~/.bashrc
Jun 27 14:56:21 bastion LinuxCommandsWazuh: User ashish [424172]:    64  source ~/.bashrc
Jun 27 14:56:25 bastion LinuxCommandsWazuh: User ak [413065]:   249  sudo su ashish
Jun 27 14:56:26 bastion LinuxCommandsWazuh: User ak [413065]:   250  ls
Jun 27 14:56:38 bastion LinuxCommandsWazuh: User ak [413065]:   250  ls
Jun 27 14:56:41 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1614  sudo su ak
Jun 27 14:56:46 bastion LinuxCommandsWazuh: User ubuntu [409621]:  1615  htop
Jun 27 14:56:49 bastion LinuxCommandsWazuh: message repeated 21 times: [ User ubuntu [409621]:  1615  htop]
Jun 27 14:57:13 bastion LinuxCommandsWazuh: User ubuntu [424602]:  1628  exit
Jun 27 14:57:56 bastion LinuxCommandsWazuh: User ubuntu [424602]:  1629  stren cookie-cutter
Jun 27 14:58:16 bastion LinuxCommandsWazuh: User ubuntu [424602]:  1630  stern cookie-cutter
Jun 27 14:58:31 bastion LinuxCommandsWazuh: User venky [424673]:  1302  kubetail urlbird | grep "DEMOGRAPHICS: Biscuit ID"
Jun 27 14:58:34 bastion LinuxCommandsWazuh: User venky [424673]:  1303  stern
Jun 27 14:58:45 bastion LinuxCommandsWazuh: User venky [424673]:  1304  stern cookie-cutter
Jun 27 15:02:54 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1631  sudo su venky
Jun 27 15:03:28 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1632  ls
Jun 27 15:04:19 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1633  Stern nitrox-dj
Jun 27 15:04:31 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1634  stern nitrox-dj
Jun 27 15:04:42 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1635  sudos u ak
Jun 27 15:04:45 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1636  sudo su alk
Jun 27 15:04:49 bastion LinuxCommandsWazuh: User ak [425023]:   251  exit
Jun 27 15:04:50 bastion LinuxCommandsWazuh: User ak [425023]:   252  cd
Jun 27 15:05:05 bastion LinuxCommandsWazuh: User ak [425023]:   252  cd
Jun 27 15:05:19 bastion LinuxCommandsWazuh: User ak [425023]:   252  cd
Jun 27 15:05:21 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1637  sudo su ak
Jun 27 15:05:23 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1638  gcloud auth activate-service-account --key-file=/home/service.json
Jun 27 15:05:28 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1638  gcloud auth activate-service-account --key-file=/home/service.json
Jun 27 15:06:14 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1639  kubectl config set-context --current --namespace=nitrox-production
Jun 27 15:06:22 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1640  stern nitrox-dj
Jun 27 15:07:46 bastion LinuxCommandsWazuh: User ashish [425848]:    65  exit
Jun 27 15:07:47 bastion LinuxCommandsWazuh: User ashish [425848]:    66  cd
Jun 27 15:07:52 bastion LinuxCommandsWazuh: User ashish [425848]:    67  vi .bahsrc
Jun 27 15:08:40 bastion LinuxCommandsWazuh: User ubuntu [425963]:  1631  sudo su venky
Jun 27 15:08:44 bastion LinuxCommandsWazuh: User venky [425976]:  1304  stern cookie-cutter 
Jun 27 15:08:45 bastion LinuxCommandsWazuh: User venky [425976]:  1305  cd
Jun 27 15:09:04 bastion LinuxCommandsWazuh: User ashish [425848]:    68  vi .bashrc
Jun 27 15:09:27 bastion LinuxCommandsWazuh: User ashish [426082]:    65  exit
Jun 27 15:09:29 bastion LinuxCommandsWazuh: User ashish [426082]:    66  clear
Jun 27 15:09:32 bastion LinuxCommandsWazuh: User ashish [426082]:    67  ls -lah
Jun 27 15:09:50 bastion LinuxCommandsWazuh: User ashish [425848]:    69  mongo
Jun 27 15:09:57 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1641  sudo su ashish
Jun 27 15:09:58 bastion LinuxCommandsWazuh: User ashish [426145]:    70  exit
Jun 27 15:10:02 bastion LinuxCommandsWazuh: User ashish [426145]:    71  mongo
Jun 27 15:10:13 bastion LinuxCommandsWazuh: User aman [426265]:   159  exit
Jun 27 15:12:21 bastion LinuxCommandsWazuh: User ubuntu [424933]:  1641  sudo su ashish
Jun 27 15:13:01 bastion LinuxCommandsWazuh: User aman [426265]:   160  clear
Jun 27 15:17:36 bastion LinuxCommandsWazuh: User ashish [426082]:    68  mongo
Jun 27 15:22:49 bastion LinuxCommandsWazuh: User venky [425976]:  1306  vi .bashrc
Jun 27 15:35:46 bastion LinuxCommandsWazuh: User ashish [426082]:    68  mongo
Jun 27 15:35:53 bastion LinuxCommandsWazuh: User ashish [428705]:    75  mongo
Jun 27 15:36:18 bastion LinuxCommandsWazuh: User ashish [428705]:    76  clickhouse-ssh > clickhouse-client -d analytics
Jun 27 15:39:30 bastion LinuxCommandsWazuh: User aman [428918]:   159  exit
Jun 27 15:39:31 bastion LinuxCommandsWazuh: User aman [428918]:   160  clear
Jun 27 15:39:34 bastion LinuxCommandsWazuh: User aman [428918]:   161  mongo
Jun 27 15:39:47 bastion LinuxCommandsWazuh: User aman [428918]:   162  clear
Jun 27 15:39:51 bastion LinuxCommandsWazuh: User aman [428918]:   163  mongo
Jun 27 15:39:54 bastion LinuxCommandsWazuh: User aman [428918]:   164  clear
Jun 27 15:41:41 bastion LinuxCommandsWazuh: User ashish [428705]:    77  clickhouse-ssh
Jun 27 15:41:43 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [428705]:    77  clickhouse-ssh]
Jun 27 15:44:12 bastion LinuxCommandsWazuh: User ankur [429192]:   546  exit
Jun 27 15:44:23 bastion LinuxCommandsWazuh: User ashish [429547]:    77  clickhouse-ssh
Jun 27 15:45:05 bastion LinuxCommandsWazuh: User ankur [429192]:   547  byobu
Jun 27 15:59:48 bastion LinuxCommandsWazuh: User ashish [429547]:    78  mongo
Jun 27 16:38:16 bastion LinuxCommandsWazuh: User mohtashim [435057]: 27  mongo pixel_v1
Jun 27 16:38:21 bastion LinuxCommandsWazuh: User mohtashim [435057]: 27  mongo pixel_v1
Jun 27 16:38:23 bastion LinuxCommandsWazuh: User mohtashim [435057]: 27  mongo pixel_v1
Jun 27 16:38:27 bastion LinuxCommandsWazuh: User mohtashim [435057]: 28  psql
Jun 27 16:39:43 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [435057]: 28  psql]
Jun 27 16:43:58 bastion LinuxCommandsWazuh: User ankur [435341]:   548  exit
Jun 27 16:44:30 bastion LinuxCommandsWazuh: User ankur [3990687]:   536  k get pods | grep url 
Jun 27 16:44:54 bastion LinuxCommandsWazuh: User ankur [3990687]:   537  kubtail urlbird-649d86cd8c
Jun 27 16:45:35 bastion LinuxCommandsWazuh: User ankur [3990687]:   538  kubetail urlbird-649d86cd8c
Jun 27 16:51:23 bastion LinuxCommandsWazuh: User ankur [3990687]:   539  kubetail urlbird-649d86cd8c | grep "USER_COUNT:"
Jun 27 16:51:54 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3990687]:   539  kubetail urlbird-649d86cd8c | grep "USER_COUNT:"]
Jun 27 16:51:58 bastion LinuxCommandsWazuh: User ankur [3990687]:   540  k get pods | grep url 
Jun 27 16:53:26 bastion LinuxCommandsWazuh: User ankur [3990687]:   541  kubetail urlbird-d5d5fc88c | grep "USER_COUNT:"
Jun 27 16:53:27 bastion LinuxCommandsWazuh: User ankur [3990687]:   542  k get pods | grep url 
Jun 27 16:54:00 bastion LinuxCommandsWazuh: User abhijeet [651468]:   186  exit
Jun 27 16:54:03 bastion LinuxCommandsWazuh: User ankur [3990687]:   542  k get pods | grep url 
Jun 27 16:54:17 bastion LinuxCommandsWazuh: User abhijeet [651468]:   187  ssh ubuntu@34.131.222.155
Jun 27 16:54:31 bastion LinuxCommandsWazuh: User abhijeet [651468]:   188  ssh vpn
Jun 27 16:54:35 bastion LinuxCommandsWazuh: User ankur [3990687]:   543  kubetail urlbird-d5d5fc88c | grep "USER_COUNT:"
Jun 27 17:25:05 bastion LinuxCommandsWazuh: User ankur [3990687]:   544  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' --data '{#012  "categories": [#012    "Health",#012    "Child Care",#012    "Infant Care",#012    "Toddler Nutrition",#012    "Cardiology",#012    "Nutrition"#012  ],#012  "from_date": "2025-06-05T18:30:00.000Z",#012  "to_date": "2025-06-05T18:30:00.000Z",#012  "state": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "city": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "customer_group": "discount-hunters"#012}'
Jun 27 17:26:53 bastion LinuxCommandsWazuh: User ankur [3990687]:   545  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' --data '{#012  "categories": [#012    "Health",#012    "Child Care",#012    "Infant Care",#012    "Toddler Nutrition",#012    "Cardiology",#012    "Nutrition"#012  ],#012  "from_date": "2025-06-05T18:30:00.000Z",#012  "to_date": "2025-06-05T18:30:00.000Z",#012  "state": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "city": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "customer_group": "discount-hunters"#012}'
Jun 27 17:33:13 bastion LinuxCommandsWazuh: User abhijeet [749819]:   188  ssh vpn
Jun 27 17:33:22 bastion LinuxCommandsWazuh: User abhijeet [749819]:   189  ssh internal-servre
Jun 27 17:44:35 bastion LinuxCommandsWazuh: User ankur [3990687]:   546  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' --data '{#012  "categories": [#012    "Health",#012    "Child Care",#012    "Infant Care",#012    "Toddler Nutrition",#012    "Cardiology",#012    "Nutrition"#012  ],#012  "from_date": "2025-06-05T18:30:00.000Z",#012  "to_date": "2025-06-05T18:30:00.000Z",#012  "state": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "city": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "customer_group": "discount-hunters"#012}'
Jun 27 17:45:37 bastion LinuxCommandsWazuh: User ankur [3990687]:   547  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' --data '{#012  "categories": [#012    "Nutrition"#012  ],#012  "from_date": "2025-06-05T18:30:00.000Z",#012  "to_date": "2025-06-05T18:30:00.000Z",#012  "state": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "city": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "customer_group": "discount-hunters"#012}'
Jun 27 17:46:13 bastion LinuxCommandsWazuh: User ankur [3990687]:   548  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' --data '{#012  "categories": [#012    "Nutrition"#012  ],#012  "from_date": "2025-06-05T18:30:00.000Z",#012  "to_date": "2025-06-05T18:30:00.000Z",#012  "state": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "city": [#012    "Odisha",#012    "Bhubaneswar",#012    "Cuttack",#012    "Rourkela",#012    "Puri",#012    "Sambalpur"#012  ],#012  "customer_group": "discount-hunters"#012}'
Jun 27 17:46:46 bastion LinuxCommandsWazuh: User ankur [3990687]:   549  k get pods | grep urlbird
Jun 27 17:47:58 bastion LinuxCommandsWazuh: User ankur [876675]:   548  exit
Jun 27 17:48:08 bastion LinuxCommandsWazuh: User ankur [876675]:   549  k get pods | grep vortex
Jun 27 17:49:06 bastion LinuxCommandsWazuh: User ankur [3990687]:   550  kubetail urlbird-8b745cf8f | grep "COUNT_USER_FOR_FACET Found"
Jun 27 17:52:42 bastion LinuxCommandsWazuh: User ankur [3990687]:   550  kubetail urlbird-8b745cf8f | grep "COUNT_USER_FOR_FACET Found"
Jun 27 17:52:52 bastion LinuxCommandsWazuh: User ankur [3990687]:   551  kubetail urlbird-8b745cf8f | grep "COUNT_USER_FOR_FACET length of Biscuit_ids"
Jun 27 17:52:54 bastion LinuxCommandsWazuh: User ankur [3990687]:   552  k get pods | grep urlbird
Jun 27 17:53:11 bastion LinuxCommandsWazuh: User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9
Jun 27 17:53:12 bastion LinuxCommandsWazuh: message repeated 55 times: [ User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9]
Jun 27 17:53:12 bastion LinuxCommandsWazuh: User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9
Jun 27 17:53:12 bastion LinuxCommandsWazuh: message repeated 18 times: [ User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9]
Jun 27 17:53:12 bastion LinuxCommandsWazuh: User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9
Jun 27 17:53:13 bastion LinuxCommandsWazuh: message repeated 21 times: [ User ankur [876675]:   550  k logs -f vortex-787ffd6b5f-jqtr9]
Jun 27 17:53:19 bastion LinuxCommandsWazuh: User ankur [3990687]:   553  kubetail urlbird-857565d8bd | grep "COUNT_USER_FOR_FACET length of Biscuit_ids"
Jun 27 17:53:21 bastion LinuxCommandsWazuh: User ankur [3990687]:   554  k get pods | grep urlbird
Jun 27 17:53:24 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3990687]:   554  k get pods | grep urlbird]
Jun 27 17:53:33 bastion LinuxCommandsWazuh: User ankur [3990687]:   554  k get pods | grep urlbird
Jun 27 17:53:53 bastion LinuxCommandsWazuh: User ankur [876675]:   551  k get pods | grep vortex
Jun 27 17:59:17 bastion LinuxCommandsWazuh: User ankur [876675]:   552  k logs -f vortex-74cd4dfff8-2kkz4
Jun 27 17:59:22 bastion LinuxCommandsWazuh: User ankur [3990687]:   555  kubetail urlbird-857565d8bd | grep "COUNT_USER_FOR_FACET length of Biscuit_ids"
Jun 27 17:59:26 bastion LinuxCommandsWazuh: User ankur [3990687]:   555  kubetail urlbird-857565d8bd | grep "COUNT_USER_FOR_FACET length of Biscuit_ids"
Jun 27 17:59:27 bastion LinuxCommandsWazuh: User ankur [3990687]:   556  curl -X POST "http://<your-es-host>:9200/<your-index-name>/_search?scroll=5m" -H 'Content-Type: application/json' -u <username>:<password> -d '#012{#012  "_source": ["biscuit_id"],#012  "size": 5000,#012  "track_total_hits": true,#012  "query": {#012    "terms": {#012      "behaviour_tag": ["Fashion", "Electronics"]   # <-- Replace with actual categories#012    }#012  }#012}'
Jun 27 18:00:46 bastion LinuxCommandsWazuh: User ankur [3990687]:   557  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' -d '#012{#012  "_source": ["biscuit_id"],#012  "size": 5000,#012  "track_total_hits": true,#012  "query": {#012    "terms": {#012      "behaviour_tag": ["Fashion", "Electronics"]#012    }#012  }#012}'
Jun 27 18:00:46 bastion LinuxCommandsWazuh: User ankur [3990687]:   557  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' -d '#012{#012  "_source": ["biscuit_id"],#012  "size": 5000,#012  "track_total_hits": true,#012  "query": {#012    "terms": {#012      "behaviour_tag": ["Fashion", "Electronics"]#012    }#012  }#012}'
Jun 27 18:01:26 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 29  exit
Jun 27 18:01:32 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 30  kubectl get pods
Jun 27 18:03:45 bastion LinuxCommandsWazuh: User ankur [3990687]:   558  curl --location 'https://urlbird.nitrocommerce.ai/interest-groups/users/count' --header 'Authorization: Basic bml0cm86NipIVCE5OTA1Mnk=' --header 'Content-Type: application/json' -d '#012{#012  "_source": ["biscuit_id"],#012  "size": 5000,#012  "track_total_hits": true,#012  "query": {#012    "terms": {#012      "behaviour_tag": ["Fashion"]#012    }#012  }#012}'
Jun 27 18:05:46 bastion LinuxCommandsWazuh: User ankur [3990687]:   559  curl -X POST "http://localhost:9200/behaviour/_search" -H "Content-Type: application/json" -u elastic:ixbqCnn8N8mBYhmUnw0H1d87 -d '#012{#012  "_source": ["biscuit_id"],#012  "size": 5000,#012  "track_total_hits": true,#012  "query": {#012    "terms": {#012      "behaviour_tag": ["Fashion"]#012    }#012  }#012}'
Jun 27 18:08:11 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 31  kubectl logs -f vortex-74cd4dfff8-2kkz4
Jun 27 18:13:43 bastion LinuxCommandsWazuh: User ankur [876675]:   552  k logs -f vortex-74cd4dfff8-2kkz4
Jun 27 18:13:45 bastion LinuxCommandsWazuh: User ankur [876675]:   553  k get pods | grep vortex
Jun 27 18:14:20 bastion LinuxCommandsWazuh: User ankur [3990687]:   560  k get pods | grep urlbird
Jun 27 18:14:43 bastion LinuxCommandsWazuh: User ankur [3990687]:   561  kubetail urlbird-6c9ddc7c94
Jun 27 18:16:28 bastion LinuxCommandsWazuh: User ankur [3990687]:   562  kubetail urlbird-6c9ddc7c94 | grep "COUNT_USER_FOR_FACET length of Biscuit_ids"
Jun 27 18:17:07 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 32  kubectl get pods
Jun 27 18:21:16 bastion LinuxCommandsWazuh: User ankur [876675]:   554  k logs -f vortex-7c4c7cf49d-gwn4h
Jun 27 18:21:17 bastion LinuxCommandsWazuh: message repeated 94 times: [ User ankur [876675]:   554  k logs -f vortex-7c4c7cf49d-gwn4h]
Jun 27 18:22:27 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 33  kubectl logs -f cookie-cutter-common-task-cf8c7b4dd-f7p82
Jun 27 18:22:46 bastion LinuxCommandsWazuh: User mohtashim [2228295]: 34  kubectl logs -f cookie-cutter-common-task-cf8c7b4dd-f7p82 | grep "2025-06-27 12:52:04.441:download_identified_contacts:downloads_helper.py:371:INFO:<CONTACT_DOWNLOAD> current_contacts_count: 51312"