Jul 16 10:53:31 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 584 internal-server Jul 16 10:53:32 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 585 ls Jul 16 10:53:35 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 586 cd .. Jul 16 10:53:37 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 587 cd ubuntu/ Jul 16 10:53:37 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 587 cd ubuntu/ Jul 16 10:53:38 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 588 ls Jul 16 10:53:40 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 589 cd bin/ Jul 16 10:53:40 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 590 l Jul 16 10:53:49 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 591 cat cpu_and_memory.sh Jul 16 10:56:07 bastion LinuxCommandsWazuh: User abhijeet [1126194]: 592 cat /etc/crontab Jul 16 11:01:58 bastion LinuxCommandsWazuh: User ankur [1127191]: byobu Jul 16 11:02:16 bastion LinuxCommandsWazuh: User ankur [1127191]: byobu Jul 16 11:46:52 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 593 exit Jul 16 11:47:24 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 594 kubectl get pods -n nitrox-production | grep sent Jul 16 11:47:28 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 595 ls Jul 16 11:47:31 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 596 cd K8s-tools/ Jul 16 11:47:51 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 597 ./kubeScrib.sh Jul 16 11:48:40 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 598 internal-server Jul 16 11:48:50 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 599 ssh ubuntu@stage Jul 16 11:48:53 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 600 ssh ubunt@stage Jul 16 11:48:58 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 601 ssh ubuntu@stage Jul 16 11:49:04 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 602 ssh abhijeet@stage Jul 16 11:49:08 bastion LinuxCommandsWazuh: User abhijeet [1131514]: 603 ssh abhijeet-singh@stage Jul 16 12:07:10 bastion LinuxCommandsWazuh: User abhijeet [1133542]: 604 exit Jul 16 12:07:23 bastion LinuxCommandsWazuh: User abhijeet [1133542]: 605 cd K8s-tools/ Jul 16 12:07:24 bastion LinuxCommandsWazuh: User abhijeet [1133542]: 606 ls Jul 16 12:07:45 bastion LinuxCommandsWazuh: User abhijeet [1133542]: 607 ./kubeScrib.sh Jul 16 12:08:01 bastion LinuxCommandsWazuh: User abhijeet [1133542]: 608 kubectl get configmaps Jul 16 12:13:23 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 609 exit Jul 16 12:13:26 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 610 ls Jul 16 12:13:44 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 611 ./helm list -n loki Jul 16 12:14:19 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 612 ./helm get values loki -n loki Jul 16 12:15:58 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 613 kubectl get pods -n loki Jul 16 12:16:48 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 614 kubectl exec -it loki-querier-0 -- bash Jul 16 12:17:06 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 615 kubectl exec -it loki-querier-0 -n loki -- bash Jul 16 12:19:04 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 616 kubectl exec -it loki-querier-0 -n loki -- sh Jul 16 12:19:58 bastion LinuxCommandsWazuh: User ankur [1134834]: 10 exit Jul 16 12:20:41 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 617 kubectl exec -it loki-ingester-0 -n loki -- sh Jul 16 12:20:52 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 618 kubectl get configmaps -n loki Jul 16 12:21:08 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 619 kubectl describe configmaps loki -n loki Jul 16 12:29:20 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 620 kubectl get secretes -n loki Jul 16 12:29:29 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 621 kubectl get --help Jul 16 12:30:26 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 622 kubectl describe configmaps loki -n loki Jul 16 12:32:33 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 623 kubectl get serviceaccount -n loki Jul 16 12:32:46 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 624 kubectl describe serviceaccount loki -n loki Jul 16 12:40:40 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 625 nslookup developer.gserviceaccount.com Jul 16 12:40:56 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 626 nslookup 986238930017-compute@developer.gserviceaccount.com Jul 16 12:42:12 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 627 ls Jul 16 12:42:14 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 628 cd .. Jul 16 12:42:15 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 629 l Jul 16 12:42:19 bastion LinuxCommandsWazuh: User abhijeet [1133853]: 630 cat service.json Jul 16 12:51:12 bastion LinuxCommandsWazuh: User mohtashim [1166303]: 1301 kubectl get pods Jul 16 13:04:09 bastion LinuxCommandsWazuh: User mohtashim [1166303]: 1302 mongo pixel_v1 Jul 16 13:19:45 bastion LinuxCommandsWazuh: User mohtashim [1195264]: 1301 kubectl get pods Jul 16 13:20:20 bastion LinuxCommandsWazuh: User mohtashim [1195264]: 1302 mongo pixel_v1 Jul 16 13:26:11 bastion LinuxCommandsWazuh: User ashish [1202054]: 142 mongo Jul 16 13:26:14 bastion LinuxCommandsWazuh: User ashish [1202054]: 143 ls -lah Jul 16 13:26:40 bastion LinuxCommandsWazuh: User ashish [1202054]: 144 cat Makefile Jul 16 13:27:24 bastion LinuxCommandsWazuh: User ashish [1202054]: 145 make deployments Jul 16 13:27:38 bastion LinuxCommandsWazuh: User ashish [1202054]: 146 make pofs Jul 16 13:27:41 bastion LinuxCommandsWazuh: User ashish [1202054]: 147 make pods Jul 16 13:27:44 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1202054]: 147 make pods] Jul 16 13:27:45 bastion LinuxCommandsWazuh: User ashish [1202054]: 148 clear Jul 16 13:27:47 bastion LinuxCommandsWazuh: User ashish [1202054]: 148 clear Jul 16 13:28:24 bastion LinuxCommandsWazuh: User mohtashim [1195264]: 1303 clear Jul 16 13:28:29 bastion LinuxCommandsWazuh: User mohtashim [1195264]: 1304 kubectl get pods Jul 16 13:28:38 bastion LinuxCommandsWazuh: message repeated 6 times: [ User mohtashim [1195264]: 1304 kubectl get pods] Jul 16 13:28:41 bastion LinuxCommandsWazuh: User ankur [1134834]: 11 byobu Jul 16 13:29:21 bastion LinuxCommandsWazuh: User mohtashim [1204621]: 1306 exit Jul 16 13:33:31 bastion LinuxCommandsWazuh: User rihan [1204750]: 1127 kubectl get pods | grep cookie Jul 16 13:33:38 bastion LinuxCommandsWazuh: User ubuntu [1204769]: 1711 cat service.json Jul 16 13:54:11 bastion LinuxCommandsWazuh: User mohtashim [1206428]: 1306 exit Jul 16 13:55:05 bastion LinuxCommandsWazuh: User mohtashim [1206428]: 1307 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jul 16 14:04:14 bastion LinuxCommandsWazuh: User mohtashim [1207409]: 1308 exit Jul 16 14:04:17 bastion LinuxCommandsWazuh: User mohtashim [1207409]: 1309 kubectl get pods Jul 16 15:04:10 bastion LinuxCommandsWazuh: User ubuntu [1204769]: 1712 clickhouse Jul 16 15:07:31 bastion LinuxCommandsWazuh: User ashish [1213321]: 148 clear Jul 16 15:12:38 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 630 cat service.json Jul 16 15:12:40 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 631 ls Jul 16 15:34:48 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 632 kubectl exec -it loki-querier-0 -n loki -- sh Jul 16 15:34:49 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 633 ls Jul 16 15:34:51 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 634 cd .. Jul 16 15:34:51 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 635 l Jul 16 15:34:54 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 636 cat service.json Jul 16 15:45:33 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 637 curl -v telnet://34.131.22.255:8080 Jul 16 15:48:13 bastion LinuxCommandsWazuh: User abhijeet [1213507]: 637 curl -v telnet://34.131.22.255:8080 Jul 16 15:59:09 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 638 exit Jul 16 15:59:10 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 639 ls Jul 16 15:59:26 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 640 kubectl get pods -n loki Jul 16 15:59:44 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 641 kubectl exec -it grafana-769c7b685f-m4krs -- bash Jul 16 16:12:02 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 642 kubectl exec -it grafana-769c7b685f-m4krs -n loki -- bash Jul 16 16:18:10 bastion LinuxCommandsWazuh: User rihan [1219547]: 1128 sudo su ubuntu Jul 16 16:22:53 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 643 ls Jul 16 16:22:56 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 644 cd K8s-tools/ Jul 16 16:22:56 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 645 ls Jul 16 16:25:11 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 646 ./kubeScrib.sh Jul 16 16:25:12 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 647 ls Jul 16 16:25:36 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 648 kubectl get configmap -n loki Jul 16 16:26:28 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 649 kubectl describe deployment promtail -n loki Jul 16 16:26:39 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 650 kubectl describe deamonset promtail -n loki Jul 16 16:27:04 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 651 ./kubeScrib.sh Jul 16 16:28:09 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 651 ./kubeScrib.sh Jul 16 16:32:29 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 652 internal-server Jul 16 16:32:32 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 653 cd .. Jul 16 16:32:35 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 654 ./helm Jul 16 16:32:40 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 655 ./helm list -n loki Jul 16 16:32:50 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 656 ./helm get values -n loki Jul 16 16:33:02 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 657 ./helm get values promtail -n loki Jul 16 16:33:10 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 658 ./helm edit values promtail -n loki Jul 16 16:33:58 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 659 kubectl get deployment -n loki Jul 16 16:34:11 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 660 kubectl get deamonset -n loki Jul 16 16:34:15 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 661 kubectl get ds -n loki Jul 16 16:35:25 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 662 kubectl edit ds -n loki Jul 16 16:36:08 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 663 ./helm --help Jul 16 17:06:37 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 664 ./helm env promtail -n loki Jul 16 17:07:31 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 665 kubectl get configmap -n nitrox-production Jul 16 17:08:08 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 666 kubectl describe configmap urlbird-config -n nitrox-production Jul 16 17:16:12 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 667 #kubectl describe configmap urlbird-config -n nitrox-production Jul 16 17:17:30 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 668 kubectl describe configmap nitrox-ck-config -n nitrox-production Jul 16 17:27:13 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 669 kubectl edit configmap nitrox-ck-config -n nitrox-production Jul 16 17:27:26 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 670 kubectl describe configmap nitrox-ck-config -n nitrox-production Jul 16 17:28:18 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 671 ls Jul 16 17:28:46 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 672 ./helm get value promtail -n loki Jul 16 17:29:00 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 673 #./helm get values promtail -n loki Jul 16 17:29:05 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 674 clear Jul 16 17:29:10 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 675 ./helm get values promtail -n loki Jul 16 17:30:33 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 676 ./helm --help Jul 16 17:35:05 bastion LinuxCommandsWazuh: User venky [1226856]: 1450 byobu Jul 16 17:35:12 bastion LinuxCommandsWazuh: User venky [3480480]: 1497 kubectl get hpa Jul 16 17:35:41 bastion LinuxCommandsWazuh: message repeated 18 times: [ User venky [3480480]: 1497 kubectl get hpa ] Jul 16 17:36:17 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 17:39:47 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 677 ls Jul 16 17:39:49 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 677 ls Jul 16 17:40:02 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 678 helm list -n loki Jul 16 17:40:14 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 679 ./helm list -n loki Jul 16 17:41:38 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 17:41:45 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 679 ./helm list -n loki Jul 16 17:42:10 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 680 ./helm upgrade promtail -n loki --set "config.clients[1].url=http://34.131.22.255:80/loki/api/v1/push" promtail Jul 16 17:42:19 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 681 ./helm list -n loki Jul 16 17:43:37 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 682 ./helm upgrade promtail -n loki --set "config.clients[1].url=http://34.131.22.255:80/loki/api/v1/push" grafana/promtail Jul 16 17:43:51 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 683 ./helm list repo Jul 16 17:44:04 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 684 ./helm repo --help Jul 16 17:44:12 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 685 ./helm repo list Jul 16 17:44:28 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 686 ./helm --help Jul 16 17:45:03 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 687 ./helm search promtail Jul 16 17:45:18 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 688 ./helm search repo loki Jul 16 17:45:40 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 689 ./helm get values promtail -n loki | grep repo Jul 16 17:45:56 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 17:46:01 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 690 ./helm upgrade promtail -n loki --set "config.clients[1].url=http://34.131.22.255:80/loki/api/v1/push" grafana/promtail Jul 16 17:50:29 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 17:51:25 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 17:51:39 bastion LinuxCommandsWazuh: User venky [3480480]: 1498 kubectl get po | grep cooki Jul 16 18:06:31 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 691 ls Jul 16 18:06:45 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1712 clickhouse Jul 16 18:06:47 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1713 cd Jul 16 18:06:51 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1714 cd toilet/ Jul 16 18:06:52 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1715 l Jul 16 18:06:54 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1716 ;s Jul 16 18:06:55 bastion LinuxCommandsWazuh: User ubuntu [1259971]: 1717 ls Jul 16 18:07:01 bastion LinuxCommandsWazuh: User abhijeet [1217714]: 692 sudo su ubuntu Jul 16 18:18:50 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 638 exit Jul 16 18:18:54 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 639 ls Jul 16 18:19:01 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 640 ./helm list Jul 16 18:19:05 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 641 ./helm list -n loki Jul 16 18:26:57 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 642 ./helm get values -n loki -o yaml Jul 16 18:27:09 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 643 ./helm get values promtail -n loki -o yaml Jul 16 18:27:37 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 644 ./helm get values promtail -n loki -o yaml > loki-values.yaml Jul 16 18:27:41 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 645 cat loki-values.yaml Jul 16 18:29:25 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 646 cat loki-values.yaml Jul 16 18:29:32 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 647 cat loki-values.yaml | grep chart Jul 16 18:29:36 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 648 cat loki-values.yaml | grep repo Jul 16 18:30:12 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 649 kubectl get configmap -n loki Jul 16 18:49:10 bastion LinuxCommandsWazuh: User rihan [1219547]: 1129 mongo Jul 16 18:50:51 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 650 vim loki-values.yaml Jul 16 18:50:54 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 651 ls Jul 16 18:50:56 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 652 cd K8s-tools/ Jul 16 18:50:56 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 653 ;s Jul 16 18:51:10 bastion LinuxCommandsWazuh: User abhijeet [1271951]: 654 ./kubeScrib.sh Jul 16 19:15:44 bastion LinuxCommandsWazuh: User ankur [1325323]: 12 exit Jul 16 19:16:26 bastion LinuxCommandsWazuh: User ankur [1325323]: 13 byobu Jul 16 19:52:01 bastion LinuxCommandsWazuh: User mohtashim [1329738]: 1310 exit Jul 16 19:52:10 bastion LinuxCommandsWazuh: User mohtashim [1329738]: 1311 kubectl get pods Jul 16 19:52:29 bastion LinuxCommandsWazuh: User mohtashim [1329738]: 1312 psql -h 10.94.16.3 -U postgres -d vortex_v2 Jul 16 19:52:53 bastion LinuxCommandsWazuh: User mohtashim [1329738]: 1313 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Jul 16 19:54:12 bastion LinuxCommandsWazuh: User mohtashim [1329738]: 1313 psql -h 10.94.16.3 -U postgres -d datapulse_v1