Jul 9 11:42:54 bastion LinuxCommandsWazuh: User mohtashim [4157781]: 1165 exit Jul 9 11:48:41 bastion LinuxCommandsWazuh: User mohtashim [4157781]: 1166 mongo pixel_v1; Jul 9 11:56:14 bastion LinuxCommandsWazuh: User mohtashim [4157781]: 1166 mongo pixel_v1; Jul 9 12:00:30 bastion LinuxCommandsWazuh: User rihan [4159641]: 1105 mongo Jul 9 12:25:43 bastion LinuxCommandsWazuh: User ankur [4161335]: 844 byobu Jul 9 12:41:30 bastion LinuxCommandsWazuh: User mohtashim [4177708]: 1167 exit Jul 9 12:49:24 bastion LinuxCommandsWazuh: User abhijeet [4185951]: 396 cat .bashrc Jul 9 12:49:25 bastion LinuxCommandsWazuh: User abhijeet [4185951]: 397 ls Jul 9 12:49:41 bastion LinuxCommandsWazuh: User abhijeet [4185951]: 398 kubectl get pod -n loki Jul 9 12:53:12 bastion LinuxCommandsWazuh: User abhijeet [4185951]: 399 kubectl get pod -n nitrox-production Jul 9 12:53:52 bastion LinuxCommandsWazuh: User abhijeet [4185951]: 400 kubectl logs cookie-cutter-5b88b4fc67-464nj -n nitrox-production Jul 9 12:55:40 bastion LinuxCommandsWazuh: User ubuntu [4191918]: 1691 mongo Jul 9 12:55:45 bastion LinuxCommandsWazuh: User rihan [4192019]: 1105 mongo Jul 9 12:55:46 bastion LinuxCommandsWazuh: User rihan [4192019]: 1106 cd Jul 9 12:55:56 bastion LinuxCommandsWazuh: User rihan [4192019]: 1107 redis-cli Jul 9 12:56:03 bastion LinuxCommandsWazuh: User rihan [4192019]: 1108 redis Jul 9 12:59:56 bastion LinuxCommandsWazuh: User venky [3513]: 1341 kubetail forever Jul 9 13:00:02 bastion LinuxCommandsWazuh: User venky [3513]: 1341 kubetail forever Jul 9 13:00:03 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3513]: 1341 kubetail forever ] Jul 9 13:00:28 bastion LinuxCommandsWazuh: User venky [3513]: 1342 kubectail cookie-cutter- | grep Pxx0: Jul 9 13:01:15 bastion LinuxCommandsWazuh: User venky [3513]: 1343 kubetail cookie-cutter- | grep Pxx0: Jul 9 13:01:15 bastion LinuxCommandsWazuh: User venky [3513]: 1343 kubetail cookie-cutter- | grep Pxx0: Jul 9 13:16:21 bastion LinuxCommandsWazuh: User rihan [4192019]: 1109 redis-server Jul 9 13:16:22 bastion LinuxCommandsWazuh: User rihan [4192019]: 1110 ls Jul 9 13:16:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [4192019]: 1110 ls] Jul 9 13:16:39 bastion LinuxCommandsWazuh: User ubuntu [4191918]: 1692 sudo su rihan Jul 9 13:18:12 bastion LinuxCommandsWazuh: User rihan [4159641]: 1105 mongo Jul 9 13:19:50 bastion LinuxCommandsWazuh: User venky [3513]: 1343 kubetail cookie-cutter- | grep Pxx0: Jul 9 13:19:50 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [3513]: 1343 kubetail cookie-cutter- | grep Pxx0:] Jul 9 13:22:50 bastion LinuxCommandsWazuh: User venky [3513]: 1344 kubectl get po Jul 9 13:22:52 bastion LinuxCommandsWazuh: User venky [3513]: 1344 kubectl get po Jul 9 13:22:58 bastion LinuxCommandsWazuh: User venky [3513]: 1345 kubectl get po | new Jul 9 13:22:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3513]: 1345 kubectl get po | new] Jul 9 13:23:02 bastion LinuxCommandsWazuh: User venky [3513]: 1346 kubectl get po | grep new Jul 9 13:23:17 bastion LinuxCommandsWazuh: User venky [3513]: 1347 kubectl get po | greo cooki Jul 9 13:23:23 bastion LinuxCommandsWazuh: User venky [3513]: 1348 kubectl get po | grep cooki Jul 9 13:23:49 bastion LinuxCommandsWazuh: User venky [3513]: 1348 kubectl get po | grep cooki Jul 9 13:23:49 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3513]: 1348 kubectl get po | grep cooki] Jul 9 13:23:54 bastion LinuxCommandsWazuh: User venky [3513]: 1349 kubectl get po | grep new Jul 9 13:23:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3513]: 1349 kubectl get po | grep new] Jul 9 13:25:07 bastion LinuxCommandsWazuh: User ubuntu [2058548]: 1693 exit Jul 9 13:25:15 bastion LinuxCommandsWazuh: User ubuntu [2058548]: 1694 vi .bashrc Jul 9 13:25:26 bastion LinuxCommandsWazuh: User ubuntu [2058548]: 1695 stern cookie-cutter Jul 9 13:25:33 bastion LinuxCommandsWazuh: User rihan [2058984]: 1111 exit Jul 9 13:25:37 bastion LinuxCommandsWazuh: User rihan [2058984]: 1112 stern cookie-cutter Jul 9 13:27:15 bastion LinuxCommandsWazuh: User rihan [2058984]: 1113 cd Jul 9 13:27:19 bastion LinuxCommandsWazuh: User rihan [2058984]: 1114 htop Jul 9 13:28:28 bastion LinuxCommandsWazuh: User rihan [2058984]: 1115 man stern Jul 9 13:28:38 bastion LinuxCommandsWazuh: User rihan [2058984]: 1116 stern --help Jul 9 13:29:30 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 401 exit Jul 9 13:29:32 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 402 ls Jul 9 13:29:43 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 403 ./helm show value -n loki Jul 9 13:29:54 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 404 ./helm show all -n loki Jul 9 13:30:23 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 405 ./helm list Jul 9 13:30:27 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 406 ./helm list -n loki Jul 9 13:30:53 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 407 ./helm show all loki -n loki Jul 9 13:31:06 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 408 ./helm show all loki-distributed-0.79.4 -n loki Jul 9 13:31:32 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 409 ./helm status --show-resources -n loki Jul 9 13:31:40 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 410 ./helm status --show-resources -n loki --help Jul 9 13:33:49 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 411 helm get all -n Jul 9 13:33:53 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 412 ./helm get all -n Jul 9 13:33:58 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 413 ./helm get all -n loki Jul 9 13:34:10 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 414 ./helm --help Jul 9 13:34:16 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 415 ./helm --help | grep relase Jul 9 13:34:18 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 416 ./helm --help | grep rel Jul 9 13:34:26 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 417 ./helm list Jul 9 13:34:31 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 418 ./helm list -n A Jul 9 13:34:34 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 419 ./helm list -n loki Jul 9 13:35:16 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 420 ./helm histroy -n loki Jul 9 13:35:22 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 421 ./helm history -n loki Jul 9 13:35:37 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 422 ./helm history loki -n loki Jul 9 13:35:56 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 423 ./helm get all loki -n loki Jul 9 13:36:37 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 424 ./helm status show loki --show-resources -n loki Jul 9 13:36:42 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 425 ./helm status show --show-resources -n loki Jul 9 13:37:04 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 426 ./helm status loki --show-resources -n loki Jul 9 13:38:28 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 427 ./helm get menifest loki -n loki Jul 9 13:38:37 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 428 ./helm get manifest loki -n loki Jul 9 13:40:17 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 429 ./helm get manifest loki -n loki | more Jul 9 13:44:53 bastion LinuxCommandsWazuh: User rihan [2058984]: 1116 stern --help Jul 9 13:44:53 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [2058984]: 1116 stern --help] Jul 9 13:44:54 bastion LinuxCommandsWazuh: User ubuntu [2058548]: 1696 sudo su rihan Jul 9 13:44:56 bastion LinuxCommandsWazuh: User ubuntu [2058548]: 1696 sudo su rihan Jul 9 13:45:55 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 429 ./helm get manifest loki -n loki | more Jul 9 13:46:14 bastion LinuxCommandsWazuh: User abhijeet [2063517]: 430 kubectl get pod -o wide -n loki Jul 9 13:47:24 bastion LinuxCommandsWazuh: User venky [3513]: 1350 kubectl get po | grep cookie Jul 9 13:47:57 bastion LinuxCommandsWazuh: User venky [3513]: 1351 kubectl get po | grep cookie-cutter-que Jul 9 13:48:13 bastion LinuxCommandsWazuh: User venky [3513]: 1352 kubectl get po | grep cookie-cutter-que | wc -l Jul 9 13:49:30 bastion LinuxCommandsWazuh: User mohtashim [2068455]: 1167 exit Jul 9 13:50:08 bastion LinuxCommandsWazuh: User venky [3513]: 1352 kubectl get po | grep cookie-cutter-que | wc -l Jul 9 13:50:09 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3513]: 1352 kubectl get po | grep cookie-cutter-que | wc -l] Jul 9 13:50:30 bastion LinuxCommandsWazuh: User venky [3513]: 1353 kubetail cooki Jul 9 13:50:44 bastion LinuxCommandsWazuh: User venky [3513]: 1354 kubetail cooki | grep Pxx0: Jul 9 13:51:42 bastion LinuxCommandsWazuh: User venky [3513]: 1355 kubetail cooki | grep Px: Jul 9 13:51:43 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3513]: 1355 kubetail cooki | grep Px:] Jul 9 13:51:58 bastion LinuxCommandsWazuh: User venky [3513]: 1356 kubetail cookie-cutter-que Jul 9 13:53:01 bastion LinuxCommandsWazuh: User venky [3513]: 1357 kubetail cookie-cutter-que | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 13:53:07 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [3513]: 1357 kubetail cookie-cutter-que | grep "SHOPIFY_CUSTOMER_EXPORTER"] Jul 9 13:54:33 bastion LinuxCommandsWazuh: User venky [3513]: 1358 stern Jul 9 13:54:53 bastion LinuxCommandsWazuh: User ankur [2196367]: 844 byobu Jul 9 13:54:57 bastion LinuxCommandsWazuh: User venky [3513]: 1358 stern Jul 9 13:54:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3513]: 1358 stern] Jul 9 13:55:03 bastion LinuxCommandsWazuh: User ak [2196551]: 269 exit Jul 9 13:55:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ak [2196551]: 269 exit] Jul 9 13:55:10 bastion LinuxCommandsWazuh: User venky [3513]: 1359 sudo su ak Jul 9 13:55:18 bastion LinuxCommandsWazuh: User venky [3513]: 1360 kubectl stern cookie-cutter Jul 9 13:55:26 bastion LinuxCommandsWazuh: User venky [3513]: 1360 kubectl stern cookie-cutter Jul 9 13:55:27 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [3513]: 1360 kubectl stern cookie-cutter] Jul 9 13:55:28 bastion LinuxCommandsWazuh: User ak [2197085]: 269 exit Jul 9 13:55:57 bastion LinuxCommandsWazuh: User ak [2197085]: 269 exit Jul 9 13:55:57 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ak [2197085]: 269 exit] Jul 9 13:55:58 bastion LinuxCommandsWazuh: User venky [3513]: 1361 sudo su ak Jul 9 13:56:06 bastion LinuxCommandsWazuh: User venky [3513]: 1362 kubectl stern cookie-cutter --max-log-requests=200000 Jul 9 13:56:09 bastion LinuxCommandsWazuh: User venky [3513]: 1362 kubectl stern cookie-cutter --max-log-requests=200000 Jul 9 13:56:11 bastion LinuxCommandsWazuh: message repeated 10 times: [ User venky [3513]: 1362 kubectl stern cookie-cutter --max-log-requests=200000] Jul 9 13:56:45 bastion LinuxCommandsWazuh: User venky [3513]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 14:03:06 bastion LinuxCommandsWazuh: User venky [3513]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 14:03:06 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [3513]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER"] Jul 9 14:03:35 bastion LinuxCommandsWazuh: User venky [3513]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 14:05:20 bastion LinuxCommandsWazuh: User mohtashim [2068455]: 1168 mongo pixel_v1 Jul 9 14:05:26 bastion LinuxCommandsWazuh: User mohtashim [4177708]: 1168 mongo pixel_v1 Jul 9 14:08:59 bastion LinuxCommandsWazuh: User abhijeet [2211270]: 430 kubectl get pod -o wide -n loki Jul 9 14:12:41 bastion LinuxCommandsWazuh: User abhijeet [2211270]: 431 cool-server Jul 9 14:17:17 bastion LinuxCommandsWazuh: User abhijeet [2219764]: 432 exit Jul 9 14:17:22 bastion LinuxCommandsWazuh: User abhijeet [2219764]: 433 ls Jul 9 14:17:41 bastion LinuxCommandsWazuh: User abhijeet [2219764]: 434 kubectl get configmap -n nitrox-production Jul 9 14:19:45 bastion LinuxCommandsWazuh: User abhijeet [2219764]: 435 kubectl get configmap nitrox-ck-config -n nitrox-production Jul 9 14:19:57 bastion LinuxCommandsWazuh: User abhijeet [2219764]: 436 kubectl describe configmap nitrox-ck-config -n nitrox-production Jul 9 14:47:36 bastion LinuxCommandsWazuh: User ashish [2250198]: 127 mongo Jul 9 14:47:39 bastion LinuxCommandsWazuh: User ashish [2250198]: 128 datapulse Jul 9 14:47:40 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [2250198]: 128 datapulse] Jul 9 14:47:46 bastion LinuxCommandsWazuh: User ashish [2250198]: 129 postgres Jul 9 14:47:54 bastion LinuxCommandsWazuh: User ashish [2250198]: 130 ls -lah Jul 9 14:49:28 bastion LinuxCommandsWazuh: User ashish [2250198]: 131 psql -h datapulse-pg -p 5432 -U postgres -d datapulse_v2 Jul 9 14:50:38 bastion LinuxCommandsWazuh: User ashish [2250198]: 132 psql -h 10.94.16.3 -p 5432 -U postgres -d datapulse_v2 Jul 9 15:00:34 bastion LinuxCommandsWazuh: User mohtashim [2252264]: 1171 exit Jul 9 15:03:25 bastion LinuxCommandsWazuh: User ankur [2252575]: 844 byobu Jul 9 15:05:20 bastion LinuxCommandsWazuh: User mohtashim [2254647]: 1171 exit Jul 9 15:19:02 bastion LinuxCommandsWazuh: User ashish [2250198]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 15:19:54 bastion LinuxCommandsWazuh: User ashish [2250198]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 15:22:57 bastion LinuxCommandsWazuh: User ashish [2250198]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 15:25:49 bastion LinuxCommandsWazuh: User mohtashim [2276258]: 1171 exit Jul 9 15:26:04 bastion LinuxCommandsWazuh: User mohtashim [2276258]: 1172 mongo pixel_v1 Jul 9 15:41:22 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1173 exit Jul 9 16:00:19 bastion LinuxCommandsWazuh: User ashish [2250198]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 16:00:21 bastion LinuxCommandsWazuh: User ashish [2250198]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 16:02:22 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1174 mongo pixel_v1 Jul 9 16:02:24 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1175 clear Jul 9 16:02:51 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1176 mongo pixel_v1 Jul 9 16:02:52 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1176 mongo pixel_v1 Jul 9 16:03:10 bastion LinuxCommandsWazuh: User mohtashim [2291876]: 1176 mongo pixel_v1 Jul 9 16:03:34 bastion LinuxCommandsWazuh: User mohtashim [2314341]: 1177 exit Jul 9 16:03:36 bastion LinuxCommandsWazuh: User mohtashim [2314341]: 1178 clear Jul 9 16:04:31 bastion LinuxCommandsWazuh: User mohtashim [2314341]: 1179 mongo pixel_v1 Jul 9 16:04:32 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [2314341]: 1179 mongo pixel_v1] Jul 9 16:16:15 bastion LinuxCommandsWazuh: User adil [2327630]: 154 psql Jul 9 16:25:25 bastion LinuxCommandsWazuh: User adil [2327630]: 155 mongo Jul 9 16:30:18 bastion LinuxCommandsWazuh: User ashish [2341580]: 133 psql -h 10.94.16.3 -p 5432 -U postgres Jul 9 16:32:47 bastion LinuxCommandsWazuh: User ashish [2341580]: 134 mongo Jul 9 16:39:02 bastion LinuxCommandsWazuh: User adil [2350509]: 155 mongo Jul 9 16:44:05 bastion LinuxCommandsWazuh: User mohtashim [2355387]: 1180 exit Jul 9 16:51:00 bastion LinuxCommandsWazuh: User venky [2362581]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 16:51:39 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 16:55:08 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 437 exit Jul 9 16:55:10 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 438 ls Jul 9 16:55:16 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 439 cd /home/ Jul 9 16:55:44 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 440 cd ubuntu/ Jul 9 16:55:45 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 441 ls Jul 9 16:56:06 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 442 ks Jul 9 16:56:07 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 443 ls Jul 9 16:56:12 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 444 cd .. Jul 9 16:56:13 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 445 ls Jul 9 16:56:20 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 446 cd akansha/ Jul 9 16:56:20 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 447 ls Jul 9 16:56:22 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 448 cd .. Jul 9 16:56:22 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 449 l Jul 9 16:57:05 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 16:57:12 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 16:57:50 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:00:08 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 450 ls Jul 9 17:00:11 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 451 cd abhijeet/ Jul 9 17:00:12 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 452 ls Jul 9 17:00:23 bastion abhijeet: root@ [2372453]: exit [0] Jul 9 17:00:38 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:00:44 bastion abhijeet: root@ [2372453]: find / -name service.json [130] Jul 9 17:01:12 bastion abhijeet: root@ [2372453]: cat ../service.json [0] Jul 9 17:01:17 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:01:22 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor"] Jul 9 17:09:23 bastion LinuxCommandsWazuh: User ashish [2381793]: 134 mongo Jul 9 17:09:24 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2381793]: 134 mongo] Jul 9 17:14:28 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:14:29 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor"] Jul 9 17:14:38 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:15:00 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:15:02 bastion LinuxCommandsWazuh: User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 17:15:02 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [2362581]: 1364 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor"] Jul 9 17:20:53 bastion LinuxCommandsWazuh: User ashish [2393507]: 134 mongo Jul 9 17:24:05 bastion LinuxCommandsWazuh: User rihan [4159641]: 1105 mongo Jul 9 17:24:29 bastion LinuxCommandsWazuh: User rihan [2397422]: 1117 exit Jul 9 17:25:22 bastion LinuxCommandsWazuh: User rihan [2399063]: 1117 exit Jul 9 17:26:02 bastion LinuxCommandsWazuh: User rihan [2401028]: 1117 exit Jul 9 17:26:20 bastion LinuxCommandsWazuh: User rihan [2401028]: 1118 mongo Jul 9 17:26:23 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:27:02 bastion LinuxCommandsWazuh: User rihan [2402911]: 1117 exit Jul 9 17:28:06 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:28:13 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2362581]: 1365 kubectl get hpa ] Jul 9 17:28:33 bastion LinuxCommandsWazuh: User rihan [2402911]: 1118 mongo Jul 9 17:28:37 bastion LinuxCommandsWazuh: User rihan [2401028]: 1118 mongo Jul 9 17:32:11 bastion LinuxCommandsWazuh: User abhijeet [2366546]: 453 sudo su Jul 9 17:39:06 bastion LinuxCommandsWazuh: User ayush [2426126]: 211 cool-server Jul 9 17:39:29 bastion ayush: root@ [2426876]: exit [0] Jul 9 17:39:31 bastion ayush: root@ [2426876]: ls [0] Jul 9 17:39:36 bastion ayush: root@ [2426876]: cd .. [0] Jul 9 17:39:38 bastion ayush: root@ [2426876]: cd [0] Jul 9 17:39:40 bastion ayush: root@ [2426876]: ls [0] Jul 9 17:39:42 bastion ayush: root@ [2426876]: cd snap/ [0] Jul 9 17:39:43 bastion ayush: root@ [2426876]: ls [0] Jul 9 17:39:48 bastion LinuxCommandsWazuh: User ayush [2426126]: 212 sudo su Jul 9 17:39:50 bastion LinuxCommandsWazuh: User ayush [2426126]: 213 ls Jul 9 17:40:46 bastion LinuxCommandsWazuh: User ayush [2426126]: 214 cd mnt/ Jul 9 17:40:47 bastion LinuxCommandsWazuh: User ayush [2426126]: 215 ls Jul 9 17:40:50 bastion LinuxCommandsWazuh: User ayush [2426126]: 216 cd .. Jul 9 17:45:30 bastion LinuxCommandsWazuh: User ayush [2426126]: 217 ls Jul 9 17:47:40 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:47:40 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:55:32 bastion LinuxCommandsWazuh: User mohtashim [2457383]: 1180 exit Jul 9 17:55:45 bastion LinuxCommandsWazuh: User mohtashim [2457383]: 1181 mongo pixel_v1 Jul 9 17:58:22 bastion LinuxCommandsWazuh: User ayush [2426126]: 217 ls Jul 9 17:58:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ayush [2426126]: 217 ls] Jul 9 17:59:04 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:59:05 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 17:59:05 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2362581]: 1365 kubectl get hpa ] Jul 9 18:04:32 bastion LinuxCommandsWazuh: User venky [2362581]: 1365 kubectl get hpa Jul 9 18:06:35 bastion LinuxCommandsWazuh: User venky [2362581]: 1366 kubectl exec -it deploy/cookie-cutter-queues Jul 9 18:10:34 bastion LinuxCommandsWazuh: User venky [2362581]: 1367 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:14:36 bastion LinuxCommandsWazuh: User ayush [2494800]: 218 exit Jul 9 18:14:41 bastion LinuxCommandsWazuh: User ayush [2494800]: 219 kubectl get pods Jul 9 18:14:41 bastion LinuxCommandsWazuh: User ayush [2494800]: 219 kubectl get pods Jul 9 18:18:44 bastion LinuxCommandsWazuh: User venky [2362581]: 1367 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:18:45 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1367 kubectl exec -it deploy/cookie-cutter-queues bash] Jul 9 18:20:05 bastion LinuxCommandsWazuh: User venky [2362581]: 1367 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:20:59 bastion LinuxCommandsWazuh: User venky [2362581]: 1368 kubectl cp cookie-cutter-queues-5f6ff9974c-l22z4:/app/mob_export.csv mob_export.csv Jul 9 18:21:00 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [2362581]: 1368 kubectl cp cookie-cutter-queues-5f6ff9974c-l22z4:/app/mob_export.csv mob_export.csv] Jul 9 18:21:16 bastion LinuxCommandsWazuh: User venky [2362581]: 1368 kubectl cp cookie-cutter-queues-5f6ff9974c-l22z4:/app/mob_export.csv mob_export.csv Jul 9 18:21:19 bastion LinuxCommandsWazuh: User venky [2362581]: 1369 ll Jul 9 18:21:25 bastion LinuxCommandsWazuh: User venky [2362581]: 1370 vim mob_export.csv Jul 9 18:23:53 bastion LinuxCommandsWazuh: User venky [2362581]: 1370 vim mob_export.csv Jul 9 18:23:53 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2362581]: 1370 vim mob_export.csv ] Jul 9 18:25:03 bastion LinuxCommandsWazuh: User venky [2362581]: 1371 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:25:14 bastion LinuxCommandsWazuh: User ayush [2494800]: 219 kubectl get pods Jul 9 18:28:51 bastion LinuxCommandsWazuh: User venky [2362581]: 1371 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:28:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1371 kubectl exec -it deploy/cookie-cutter-queues bash] Jul 9 18:30:05 bastion LinuxCommandsWazuh: User venky [2362581]: 1372 kubectl cp cookie-cutter-queues-5f6ff9974c-l22z4:/app/mob_export.csv mob_export.csv Jul 9 18:30:05 bastion LinuxCommandsWazuh: User venky [2362581]: 1372 kubectl cp cookie-cutter-queues-5f6ff9974c-l22z4:/app/mob_export.csv mob_export.csv Jul 9 18:30:39 bastion LinuxCommandsWazuh: User venky [2362581]: 1373 kubectl cp cookie-cutter-queues-5f6ff9974c-trpcf:/app/profile.svg profile.svg Jul 9 18:32:31 bastion LinuxCommandsWazuh: User ayush [2530359]: 220 exit Jul 9 18:33:23 bastion LinuxCommandsWazuh: User venky [2362581]: 1373 kubectl cp cookie-cutter-queues-5f6ff9974c-trpcf:/app/profile.svg profile.svg Jul 9 18:33:24 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1373 kubectl cp cookie-cutter-queues-5f6ff9974c-trpcf:/app/profile.svg profile.svg] Jul 9 18:33:28 bastion LinuxCommandsWazuh: User venky [2362581]: 1373 kubectl cp cookie-cutter-queues-5f6ff9974c-trpcf:/app/profile.svg profile.svg Jul 9 18:33:32 bastion LinuxCommandsWazuh: message repeated 8 times: [ User venky [2362581]: 1373 kubectl cp cookie-cutter-queues-5f6ff9974c-trpcf:/app/profile.svg profile.svg] Jul 9 18:33:39 bastion LinuxCommandsWazuh: User venky [2362581]: 1374 kubectl stern cookie-cutter --max-log-requests=200000 | grep "redis_monitor" Jul 9 18:33:42 bastion LinuxCommandsWazuh: User venky [2362581]: 1375 kubectl stern cookie-cutter --max-log-requests=200000 Jul 9 18:33:44 bastion LinuxCommandsWazuh: message repeated 10 times: [ User venky [2362581]: 1375 kubectl stern cookie-cutter --max-log-requests=200000] Jul 9 18:35:44 bastion LinuxCommandsWazuh: User venky [2362581]: 1375 kubectl stern cookie-cutter --max-log-requests=200000 Jul 9 18:35:46 bastion LinuxCommandsWazuh: message repeated 8 times: [ User venky [2362581]: 1375 kubectl stern cookie-cutter --max-log-requests=200000] Jul 9 18:38:50 bastion LinuxCommandsWazuh: User venky [2362581]: 1376 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:39:13 bastion LinuxCommandsWazuh: User venky [2362581]: 1377 # Install pip if not present (common in minimal containers) Jul 9 18:39:13 bastion LinuxCommandsWazuh: User venky [2362581]: 1378 # apt-get update && apt-get install -y python3-pip Jul 9 18:39:13 bastion LinuxCommandsWazuh: User venky [2362581]: 1378 # apt-get update && apt-get install -y python3-pip Jul 9 18:39:13 bastion LinuxCommandsWazuh: User venky [2362581]: 1379 # Install py-spy Jul 9 18:39:16 bastion LinuxCommandsWazuh: User venky [2362581]: 1380 pip install py-spy Jul 9 18:39:27 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1380 pip install py-spy] Jul 9 18:39:33 bastion LinuxCommandsWazuh: User venky [2362581]: 1380 pip install py-spy Jul 9 18:39:33 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2362581]: 1380 pip install py-spy] Jul 9 18:43:47 bastion LinuxCommandsWazuh: User venky [2362581]: 1381 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:43:50 bastion LinuxCommandsWazuh: User venky [2362581]: 1381 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 18:44:03 bastion LinuxCommandsWazuh: User venky [2362581]: 1382 kubectl get po | grep cooki | wc -l Jul 9 18:44:06 bastion LinuxCommandsWazuh: User venky [2362581]: 1382 kubectl get po | grep cooki | wc -l Jul 9 18:44:11 bastion LinuxCommandsWazuh: User venky [2362581]: 1383 k get po Jul 9 18:44:15 bastion LinuxCommandsWazuh: User venky [2362581]: 1384 kubectl get po Jul 9 18:44:30 bastion LinuxCommandsWazuh: User venky [2362581]: 1385 kubectl logs -f cookie-cutter-6866d755dc-28d4n Jul 9 18:44:43 bastion LinuxCommandsWazuh: User venky [2362581]: 1386 kubectl get po Jul 9 18:45:51 bastion LinuxCommandsWazuh: User rihan [4159641]: 1106 byobu Jul 9 18:45:56 bastion LinuxCommandsWazuh: User venky [2362581]: 1386 kubectl get po Jul 9 18:45:57 bastion LinuxCommandsWazuh: User ayush [2551101]: 221 cool-server Jul 9 18:46:14 bastion LinuxCommandsWazuh: User venky [2362581]: 1386 kubectl get po Jul 9 18:46:14 bastion LinuxCommandsWazuh: User venky [2362581]: 1386 kubectl get po Jul 9 18:46:14 bastion LinuxCommandsWazuh: User ayush [2551101]: 222 cd /media/devops/rkgg/ Jul 9 18:46:28 bastion LinuxCommandsWazuh: User venky [2362581]: 1387 kubectl cp cookie-cutter-queues-5cb47d9dd5-bmpdb:/app/profile.svg profile.svg Jul 9 18:46:32 bastion LinuxCommandsWazuh: User venky [2362581]: 1387 kubectl cp cookie-cutter-queues-5cb47d9dd5-bmpdb:/app/profile.svg profile.svg Jul 9 18:47:17 bastion LinuxCommandsWazuh: User ayush [2551101]: 223 cool-server Jul 9 18:48:12 bastion LinuxCommandsWazuh: User ayush [2551101]: 223 cool-server Jul 9 18:49:41 bastion LinuxCommandsWazuh: User ayush [2551101]: 223 cool-server Jul 9 18:51:12 bastion LinuxCommandsWazuh: User ayush [2551101]: 223 cool-server Jul 9 18:51:44 bastion LinuxCommandsWazuh: User rihan [2551341]: 1120 byobu Jul 9 18:52:33 bastion LinuxCommandsWazuh: User rihan [2399063]: 1118 mongo Jul 9 18:52:36 bastion LinuxCommandsWazuh: User rihan [2397422]: 1118 mongo Jul 9 18:52:38 bastion LinuxCommandsWazuh: User rihan [3479766]: 1094 mongo Jul 9 18:52:41 bastion LinuxCommandsWazuh: User rihan [2551341]: 1120 byobu Jul 9 19:07:55 bastion LinuxCommandsWazuh: User venky [2362581]: 1387 kubectl cp cookie-cutter-queues-5cb47d9dd5-bmpdb:/app/profile.svg profile.svg Jul 9 19:07:55 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1387 kubectl cp cookie-cutter-queues-5cb47d9dd5-bmpdb:/app/profile.svg profile.svg] Jul 9 19:09:28 bastion LinuxCommandsWazuh: User mohtashim [2553999]: 1182 exit Jul 9 19:13:15 bastion LinuxCommandsWazuh: User adil [2554133]: 155 mongo Jul 9 19:14:36 bastion LinuxCommandsWazuh: User venky [2362581]: 1388 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 19:14:52 bastion LinuxCommandsWazuh: User venky [2362581]: 1388 kubectl exec -it deploy/cookie-cutter-queues bash Jul 9 19:15:25 bastion LinuxCommandsWazuh: User venky [3307342]: 1299 kubectl exec -it deploy/cookie-cutter-queues Jul 9 19:15:43 bastion LinuxCommandsWazuh: User venky [2555073]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 19:15:57 bastion LinuxCommandsWazuh: User venky [2555073]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 19:16:01 bastion LinuxCommandsWazuh: User venky [2556068]: 1363 kubectl stern cookie-cutter --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 19:16:10 bastion LinuxCommandsWazuh: User venky [2556068]: 1364 kubectl exec -it deploy/cookie-cutter-queues -- bash Jul 9 19:16:17 bastion LinuxCommandsWazuh: User venky [2556068]: 1365 kubectl get po | grep queue Jul 9 19:28:17 bastion LinuxCommandsWazuh: User venky [2556068]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:28:29 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [2556068]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash] Jul 9 19:28:38 bastion LinuxCommandsWazuh: User venky [2568692]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:28:57 bastion LinuxCommandsWazuh: User venky [2568692]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:28:58 bastion LinuxCommandsWazuh: User venky [2362581]: 1389 byobu Jul 9 19:29:11 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2362581]: 1389 byobu] Jul 9 19:29:42 bastion LinuxCommandsWazuh: User venky [2568692]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:29:44 bastion LinuxCommandsWazuh: User venky [2568692]: 1367 kubectl cp cookie-cutter-queues-64c786f944-q2ml7:/app/profile.speedscope.json profile.speedscope.json Jul 9 19:29:53 bastion LinuxCommandsWazuh: User rihan [2569870]: 1122 mongo Jul 9 19:33:44 bastion LinuxCommandsWazuh: User venky [2568692]: 1367 kubectl cp cookie-cutter-queues-64c786f944-q2ml7:/app/profile.speedscope.json profile.speedscope.json Jul 9 19:35:07 bastion LinuxCommandsWazuh: User rihan [2574905]: 1122 mongo Jul 9 19:35:52 bastion LinuxCommandsWazuh: User venky [2568692]: 1368 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:35:55 bastion LinuxCommandsWazuh: User venky [2568692]: 1369 kubectl cp cookie-cutter-queues-64c786f944-q2ml7:/app/profile.speedscope.json profile.speedscope.json Jul 9 19:39:35 bastion LinuxCommandsWazuh: User venky [2568692]: 1370 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:39:38 bastion LinuxCommandsWazuh: User venky [2568692]: 1371 kubectl cp cookie-cutter-queues-64c786f944-q2ml7:/app/profile.speedscope.json profile.speedscope.json Jul 9 19:43:40 bastion LinuxCommandsWazuh: User venky [3307342]: 1300 kubectl exec -it deploy/cookie-cutter-queues -- bash Jul 9 19:44:11 bastion LinuxCommandsWazuh: User venky [2568692]: 1372 kubectl cp cookie-cutter-queues-64c786f944-9v258:/app/profile.speedscope.json profile.speedscope3.json Jul 9 19:45:02 bastion LinuxCommandsWazuh: User venky [2585217]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:45:09 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [2585217]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash] Jul 9 19:45:12 bastion LinuxCommandsWazuh: User venky [2585217]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash Jul 9 19:45:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2585217]: 1366 kubectl exec -it cookie-cutter-queues-64c786f944-q2ml7 -- bash] Jul 9 19:45:15 bastion LinuxCommandsWazuh: User venky [2362581]: 1389 byobu Jul 9 19:45:22 bastion LinuxCommandsWazuh: message repeated 11 times: [ User venky [2362581]: 1389 byobu] Jul 9 19:45:24 bastion LinuxCommandsWazuh: User venky [2362581]: 1389 byobu Jul 9 19:45:24 bastion LinuxCommandsWazuh: User venky [2362581]: 1389 byobu Jul 9 19:45:32 bastion LinuxCommandsWazuh: message repeated 10 times: [ User venky [2362581]: 1389 byobu] Jul 9 19:45:37 bastion LinuxCommandsWazuh: User venky [2585668]: 1392 byobu Jul 9 19:45:47 bastion LinuxCommandsWazuh: User venky [2585668]: 1392 byobu Jul 9 19:45:51 bastion LinuxCommandsWazuh: User venky [2585668]: 1392 byobu Jul 9 19:45:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2585668]: 1392 byobu] Jul 9 19:45:58 bastion LinuxCommandsWazuh: User venky [2585668]: 1393 kubectl stern cookie-cutter --max-log-requests=200000 Jul 9 19:46:10 bastion LinuxCommandsWazuh: User venky [2585668]: 1394 kubectl stern cookie-cutter-queues --max-log-requests=200000 Jul 9 19:46:21 bastion LinuxCommandsWazuh: User venky [2585668]: 1395 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 19:47:33 bastion LinuxCommandsWazuh: User venky [2585668]: 1395 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 22:24:09 bastion LinuxCommandsWazuh: User venky [2599975]: 1395 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 22:24:48 bastion LinuxCommandsWazuh: User venky [2599975]: 1395 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 22:25:02 bastion LinuxCommandsWazuh: User venky [2599975]: 1396 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep PROFILING: Jul 9 22:27:21 bastion LinuxCommandsWazuh: User venky [2599975]: 1396 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep PROFILING: Jul 9 22:27:24 bastion LinuxCommandsWazuh: User venky [2599975]: 1397 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep SYSTEM MONITOR Jul 9 22:27:31 bastion LinuxCommandsWazuh: User venky [2599975]: 1398 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SYSTEM MONITOR " Jul 9 22:28:33 bastion LinuxCommandsWazuh: User venky [2599975]: 1399 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SYSTEM MONITOR" Jul 9 22:28:39 bastion LinuxCommandsWazuh: User venky [2599975]: 1399 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SYSTEM MONITOR" Jul 9 22:29:01 bastion LinuxCommandsWazuh: User venky [2599975]: 1400 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "HIGH CPU DETECTED" Jul 9 22:33:08 bastion LinuxCommandsWazuh: User venky [2599975]: 1400 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "HIGH CPU DETECTED" Jul 9 22:33:13 bastion LinuxCommandsWazuh: User venky [2599975]: 1401 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 22:33:31 bastion LinuxCommandsWazuh: User venky [2599975]: 1401 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep monitor Jul 9 22:33:42 bastion LinuxCommandsWazuh: User venky [2599975]: 1402 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 Jul 9 22:46:24 bastion LinuxCommandsWazuh: User venky [2599975]: 1402 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 Jul 9 22:46:28 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2599975]: 1402 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 ] Jul 9 22:48:19 bastion LinuxCommandsWazuh: User venky [2599975]: 1402 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 Jul 9 22:48:32 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2599975]: 1402 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 ] Jul 9 22:48:41 bastion LinuxCommandsWazuh: User venky [2599975]: 1403 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 | grep Pxx0: Jul 9 22:48:46 bastion LinuxCommandsWazuh: User venky [2599975]: 1403 kubectl stern cookie-cutter-queues-66df87d7f7-2gl4 | grep Pxx0: Jul 9 22:48:49 bastion LinuxCommandsWazuh: User venky [2599975]: 1404 kubectl stern cookie-cutter-queues | grep Pxx0: Jul 9 22:48:52 bastion LinuxCommandsWazuh: User venky [2599975]: 1405 kubectl stern cookie-cutter-queues | grep Pxx0 Jul 9 22:48:56 bastion LinuxCommandsWazuh: User venky [2599975]: 1406 kubectl stern cookie-cutter- | grep Pxx0 Jul 9 22:48:59 bastion LinuxCommandsWazuh: User venky [2599975]: 1407 kubectl stern cookie-cutter-queues | grep Pxx0 Jul 9 22:49:19 bastion LinuxCommandsWazuh: User venky [2599975]: 1407 kubectl stern cookie-cutter-queues | grep Pxx0 Jul 9 22:49:45 bastion LinuxCommandsWazuh: User venky [2599975]: 1408 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep Pxx0: Jul 9 22:50:15 bastion LinuxCommandsWazuh: User venky [2599975]: 1408 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep Pxx0: Jul 9 22:50:32 bastion LinuxCommandsWazuh: User venky [2599975]: 1409 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep Pxx0 Jul 9 22:50:32 bastion LinuxCommandsWazuh: User venky [2599975]: 1409 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep Pxx0 Jul 9 22:51:08 bastion LinuxCommandsWazuh: User venky [2599975]: 1410 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "MAJOR WARNING" Jul 9 22:51:08 bastion LinuxCommandsWazuh: User venky [2599975]: 1410 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "MAJOR WARNING" Jul 9 22:51:18 bastion LinuxCommandsWazuh: User venky [2599975]: 1411 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 22:51:29 bastion LinuxCommandsWazuh: User venky [2599975]: 1412 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "Pxx0" Jul 9 22:51:40 bastion LinuxCommandsWazuh: User venky [2599975]: 1413 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "PxxO" Jul 9 22:51:59 bastion LinuxCommandsWazuh: User venky [2599975]: 1414 kubectl stern cookie-cutter-queues-56f54945c9-zdkt --max-log-requests=200000 | grep "PxxO" Jul 9 22:53:30 bastion LinuxCommandsWazuh: User venky [2599975]: 1415 kubectl stern cookie-cutter-queues-56f54945c9-zdkt --max-log-requests=200000 | grep "PxxO" | grep loop_maintain_org_contacts Jul 9 22:54:13 bastion LinuxCommandsWazuh: User venky [2599975]: 1416 kubectl stern cookie-cutter-queues-56f54945c9-zdkt --max-log-requests=200000 | grep "ExxO" Jul 9 22:54:48 bastion LinuxCommandsWazuh: User venky [2599975]: 1417 kubectl stern cookie-cutter-queues-56f54945c9-zdkt --max-log-requests=200000 | grep network_reached_users Jul 9 22:57:54 bastion LinuxCommandsWazuh: User venky [2599975]: 1417 kubectl stern cookie-cutter-queues-56f54945c9-zdkt --max-log-requests=200000 | grep network_reached_users Jul 9 22:59:09 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 22:59:20 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:10:38 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:10:40 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:18:24 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:18:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER"] Jul 9 23:23:09 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:23:09 bastion LinuxCommandsWazuh: User venky [2599975]: 1418 kubectl stern cookie-cutter-queues --max-log-requests=200000 | grep "SHOPIFY_CUSTOMER_EXPORTER" Jul 9 23:23:19 bastion LinuxCommandsWazuh: User venky [2599975]: 1419 kubectl get po | grep queue Jul 9 23:23:31 bastion LinuxCommandsWazuh: User venky [2599975]: 1420 kubectl stern cookie-cutter-queues-56f54945c9-v8r22 --max-log-requests=200000 Jul 9 23:28:49 bastion LinuxCommandsWazuh: User venky [2599975]: 1420 kubectl stern cookie-cutter-queues-56f54945c9-v8r22 --max-log-requests=200000 Jul 9 23:28:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2599975]: 1420 kubectl stern cookie-cutter-queues-56f54945c9-v8r22 --max-log-requests=200000 ] Jul 9 23:28:53 bastion LinuxCommandsWazuh: User venky [2599975]: 1421 kubectl get po | grep queue Jul 9 23:28:55 bastion LinuxCommandsWazuh: User venky [2599975]: 1421 kubectl get po | grep queue Jul 9 23:28:59 bastion LinuxCommandsWazuh: User venky [2599975]: 1421 kubectl get po | grep queue Jul 9 23:29:02 bastion LinuxCommandsWazuh: User venky [2599975]: 1422 kubectl get hpa Jul 9 23:29:15 bastion LinuxCommandsWazuh: User venky [2599975]: 1423 kubectl get po | grep queue Jul 9 23:29:21 bastion LinuxCommandsWazuh: User venky [2599975]: 1423 kubectl get po | grep queue Jul 9 23:29:26 bastion LinuxCommandsWazuh: User venky [2599975]: 1423 kubectl get po | grep queue Jul 9 23:29:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2599975]: 1423 kubectl get po | grep queue] Jul 9 23:29:37 bastion LinuxCommandsWazuh: User venky [2599975]: 1424 kubectl stern cookie-cutter-queues-newrelic-954479dbf-6cwd2 --max-log-requests=200000 Jul 9 23:30:28 bastion LinuxCommandsWazuh: User venky [2599975]: 1424 kubectl stern cookie-cutter-queues-newrelic-954479dbf-6cwd2 --max-log-requests=200000 Jul 9 23:30:34 bastion LinuxCommandsWazuh: User venky [2599975]: 1424 kubectl stern cookie-cutter-queues-newrelic-954479dbf-6cwd2 --max-log-requests=200000 Jul 9 23:32:20 bastion LinuxCommandsWazuh: User venky [2599975]: 1424 kubectl stern cookie-cutter-queues-newrelic-954479dbf-6cwd2 --max-log-requests=200000