Jul 18 11:35:20 bastion LinuxCommandsWazuh: User ankur [2301022]: 19 byobu Jul 18 11:35:45 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2301022]: 19 byobu] Jul 18 11:49:34 bastion LinuxCommandsWazuh: User ankur [2303215]: 20 exit Jul 18 11:49:37 bastion LinuxCommandsWazuh: User ankur [2303215]: 21 byb Jul 18 11:49:38 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2303215]: 21 byb] Jul 18 12:42:59 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 785 internal-server Jul 18 12:42:59 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 786 ls Jul 18 12:43:44 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 787 internal-server Jul 18 12:43:45 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 788 ls Jul 18 12:43:50 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 789 ssh ubuntu@stge Jul 18 12:43:55 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 790 ssh ubuntu@stage Jul 18 12:44:03 bastion LinuxCommandsWazuh: User abhijeet [2354756]: 790 ssh ubuntu@stage Jul 18 12:53:42 bastion LinuxCommandsWazuh: User mohtashim [2355712]: 1329 exit Jul 18 12:53:44 bastion LinuxCommandsWazuh: User mohtashim [2355712]: 1330 clear Jul 18 12:53:53 bastion LinuxCommandsWazuh: User mohtashim [2355712]: 1331 kubectl get pods Jul 18 12:55:14 bastion LinuxCommandsWazuh: User mohtashim [2355712]: 1332 kubectl logs -f nitrox-dj-f5cc598ff-jkflp Jul 18 12:55:14 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2355712]: 1332 kubectl logs -f nitrox-dj-f5cc598ff-jkflp] Jul 18 12:56:14 bastion LinuxCommandsWazuh: User venky [2356617]: 1450 byobu Jul 18 12:56:20 bastion LinuxCommandsWazuh: User venky [3480480]: 1503 kubectl get hpa Jul 18 12:56:31 bastion LinuxCommandsWazuh: User venky [3480480]: 1504 kubectl get po | grep cooki Jul 18 12:56:44 bastion LinuxCommandsWazuh: User venky [3480480]: 1504 kubectl get po | grep cooki Jul 18 12:56:58 bastion LinuxCommandsWazuh: User venky [3480480]: 1504 kubectl get po | grep cooki Jul 18 12:56:59 bastion LinuxCommandsWazuh: User venky [3480480]: 1504 kubectl get po | grep cooki Jul 18 13:04:56 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 791 exit Jul 18 13:04:56 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 792 ;s Jul 18 13:04:57 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 793 ls Jul 18 13:05:00 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 794 cd K8s-tools/ Jul 18 13:05:00 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 795 ls Jul 18 13:05:36 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 796 ./kubeScrib.sh Jul 18 13:07:11 bastion LinuxCommandsWazuh: User venky [3480480]: 1504 kubectl get po | grep cooki Jul 18 13:07:14 bastion LinuxCommandsWazuh: User venky [3480480]: 1505 kubectl get hpa Jul 18 13:07:21 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 797 internal-server Jul 18 13:07:22 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 798 ls Jul 18 13:07:51 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 799 ./kubeScrib.sh Jul 18 13:08:18 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 800 kubectl get pods -n loki Jul 18 13:08:24 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [2365019]: 800 kubectl get pods -n loki] Jul 18 13:08:34 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 801 kubectl get demonsets -n loki Jul 18 13:08:47 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 802 kubectl get --help Jul 18 13:09:10 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 803 kubectl get ds Jul 18 13:09:15 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 804 kubectl get ds -n loki Jul 18 13:09:22 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 805 kubectl get ds promtail -n loki Jul 18 13:09:25 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 806 kubectl get ds promtail -o wide -n loki Jul 18 13:09:28 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 806 kubectl get ds promtail -o wide -n loki Jul 18 13:09:30 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 807 lsd Jul 18 13:09:33 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 808 kubectl get pods -n loki Jul 18 13:09:41 bastion LinuxCommandsWazuh: User abhijeet [2365019]: 808 kubectl get pods -n loki Jul 18 13:18:20 bastion LinuxCommandsWazuh: User mohtashim [2355712]: 1332 kubectl logs -f nitrox-dj-f5cc598ff-jkflp Jul 18 13:41:42 bastion LinuxCommandsWazuh: User abhijeet [2402875]: 809 exit Jul 18 13:42:47 bastion LinuxCommandsWazuh: User abhijeet [2402875]: 810 ls Jul 18 14:08:38 bastion LinuxCommandsWazuh: User ankur [2430131]: 22 byobu Jul 18 14:57:39 bastion LinuxCommandsWazuh: User ubuntu [2520215]: 1729 exit Jul 18 14:57:48 bastion LinuxCommandsWazuh: User ubuntu [2520215]: 1730 crontab -e Jul 18 15:00:03 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1731 exit Jul 18 15:00:06 bastion LinuxCommandsWazuh: User ak [2522640]: 269 exit Jul 18 15:00:08 bastion LinuxCommandsWazuh: User ak [2522640]: 270 cd Jul 18 15:00:09 bastion LinuxCommandsWazuh: User ak [2522640]: 271 ls Jul 18 15:00:11 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1732 sudo su ak Jul 18 15:00:11 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1733 ls Jul 18 15:00:16 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1734 cd bin/ Jul 18 15:00:16 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1735 ls Jul 18 15:00:19 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1736 cd Jul 18 15:00:21 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1737 cd toilet/ Jul 18 15:00:23 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1738 lsl Jul 18 15:00:24 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1739 ls Jul 18 15:00:28 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1740 cd Jul 18 15:00:28 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1741 ls Jul 18 15:00:33 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1742 car debug.sh Jul 18 15:00:37 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1743 cat debug.sh Jul 18 15:00:48 bastion LinuxCommandsWazuh: User ubuntu [2522576]: 1744 ls Jul 18 15:30:58 bastion LinuxCommandsWazuh: User ankur [2553892]: 22 byobu Jul 18 15:32:20 bastion LinuxCommandsWazuh: User ankur [2556504]: 22 byobu Jul 18 15:32:22 bastion LinuxCommandsWazuh: User ankur [2556504]: 23 ls Jul 18 15:32:44 bastion LinuxCommandsWazuh: User ankur [2556504]: 24 k get pods | grep urlbird Jul 18 15:32:56 bastion LinuxCommandsWazuh: User ankur [2556504]: 25 k logs -f urlbird-6b8d59b6db-kcw2r Jul 18 15:33:00 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [2556504]: 25 k logs -f urlbird-6b8d59b6db-kcw2r] Jul 18 15:33:29 bastion LinuxCommandsWazuh: User ankur [2556504]: 26 k exec -it urlbird-6b8d59b6db-kcw2r bash Jul 18 15:34:30 bastion LinuxCommandsWazuh: User ankur [2556504]: 26 k exec -it urlbird-6b8d59b6db-kcw2r bash Jul 18 15:40:28 bastion LinuxCommandsWazuh: User ashish [2572412]: 151 mongo Jul 18 15:43:56 bastion LinuxCommandsWazuh: User ashish [2572412]: 151 mongo Jul 18 15:43:58 bastion LinuxCommandsWazuh: User ashish [2572412]: 152 ls Jul 18 15:44:01 bastion LinuxCommandsWazuh: User ashish [2572412]: 153 ls 0lah Jul 18 15:44:04 bastion LinuxCommandsWazuh: User ashish [2572412]: 154 ls -lah Jul 18 15:51:16 bastion LinuxCommandsWazuh: User ashish [2594774]: 155 byobu Jul 18 15:51:33 bastion LinuxCommandsWazuh: User ashish [3889718]: 79 ls -lah Jul 18 15:52:04 bastion LinuxCommandsWazuh: User ashish [3889718]: 79 ls -lah Jul 18 15:52:06 bastion LinuxCommandsWazuh: User ashish [2594774]: 155 byobu Jul 18 15:53:04 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [2594774]: 155 byobu] Jul 18 15:53:07 bastion LinuxCommandsWazuh: User ashish [2598912]: 156 ls -lah Jul 18 15:53:55 bastion LinuxCommandsWazuh: User ashish [2598912]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 15:54:04 bastion LinuxCommandsWazuh: User ashish [2598912]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 15:54:04 bastion LinuxCommandsWazuh: User ashish [2594774]: 155 byobu Jul 18 15:57:43 bastion LinuxCommandsWazuh: User rihan [2609083]: 1132 kubectl exec -it forever-7664768ccc-9s55b bash Jul 18 15:58:13 bastion LinuxCommandsWazuh: User rihan [2610110]: 1132 kubectl exec -it forever-7664768ccc-9s55b bash Jul 18 16:10:01 bastion LinuxCommandsWazuh: User ubuntu [2632707]: 1745 exit Jul 18 16:12:19 bastion LinuxCommandsWazuh: User abhijeet [2402875]: 811 internal-server Jul 18 16:19:14 bastion LinuxCommandsWazuh: User ankur [2650503]: 27 exit Jul 18 16:19:18 bastion LinuxCommandsWazuh: User ankur [2650503]: 28 k get pods | grep urlbird Jul 18 16:19:28 bastion LinuxCommandsWazuh: message repeated 12 times: [ User ankur [2650503]: 28 k get pods | grep urlbird] Jul 18 16:19:43 bastion LinuxCommandsWazuh: User ankur [2650503]: 29 k logs -f urlbird-855d664878-kdfzm Jul 18 16:20:31 bastion LinuxCommandsWazuh: User ankur [2650503]: 29 k logs -f urlbird-855d664878-kdfzm Jul 18 16:20:36 bastion LinuxCommandsWazuh: User ubuntu [2653532]: 1745 exit Jul 18 16:20:37 bastion LinuxCommandsWazuh: User ankur [2650503]: 29 k logs -f urlbird-855d664878-kdfzm Jul 18 16:21:23 bastion LinuxCommandsWazuh: User ankur [2650503]: 30 k logs -f urlbird-855d664878-kdfzm | grep "clickhouse" Jul 18 16:21:27 bastion LinuxCommandsWazuh: User ankur [2650503]: 31 k logs -f urlbird-855d664878-kdfzm Jul 18 16:22:09 bastion LinuxCommandsWazuh: User ankur [2650503]: 31 k logs -f urlbird-855d664878-kdfzm Jul 18 16:23:20 bastion LinuxCommandsWazuh: User ankur [2650503]: 32 k get pods | grep urlbird Jul 18 16:24:24 bastion LinuxCommandsWazuh: User ankur [2650503]: 33 kubetail -f urlbird | grep "ClickHouse" Jul 18 16:24:45 bastion LinuxCommandsWazuh: User ankur [2650503]: 33 kubetail -f urlbird | grep "ClickHouse" Jul 18 16:24:45 bastion LinuxCommandsWazuh: User ankur [2650503]: 33 kubetail -f urlbird | grep "ClickHouse" Jul 18 16:29:20 bastion LinuxCommandsWazuh: User abhijeet [2689154]: 812 exit Jul 18 16:29:39 bastion LinuxCommandsWazuh: User abhijeet [2689154]: 813 kubectl get configmap -n loki Jul 18 16:30:05 bastion LinuxCommandsWazuh: User rihan [2610110]: 1133 mongo Jul 18 16:30:18 bastion LinuxCommandsWazuh: User abhijeet [2689154]: 814 kubectl describe configmap grafana -n loki Jul 18 17:19:51 bastion LinuxCommandsWazuh: User ubuntu [2787959]: 1745 exit Jul 18 17:28:55 bastion LinuxCommandsWazuh: User ankur [2650503]: 34 k get pods | grep urlbird Jul 18 17:29:08 bastion LinuxCommandsWazuh: User ankur [2650503]: 35 k logs -f urlbird-76c78bb59f-ls4bw | grep "clickhouse" Jul 18 17:33:36 bastion LinuxCommandsWazuh: User ankur [2650503]: 36 k logs -f urlbird-76c78bb59f-ls4bw | grep -i "clickhouse" Jul 18 17:42:39 bastion LinuxCommandsWazuh: User ankur [2650503]: 36 k logs -f urlbird-76c78bb59f-ls4bw | grep -i "clickhouse" Jul 18 17:42:42 bastion LinuxCommandsWazuh: User ankur [2650503]: 37 k get pods | grep urlbird Jul 18 17:43:01 bastion LinuxCommandsWazuh: User ankur [2650503]: 38 k logs -f urlbird-7dbbf9c94d-cwstq | grep -i "clickhouse" Jul 18 17:43:02 bastion LinuxCommandsWazuh: User ankur [2650503]: 39 k get pods | grep urlbird Jul 18 17:43:20 bastion LinuxCommandsWazuh: User ankur [2650503]: 40 k logs -f urlbird-7dbbf9c94d-2h2ks | grep -i "clickhouse" Jul 18 17:43:22 bastion LinuxCommandsWazuh: User ankur [2650503]: 41 k get pods | grep urlbird Jul 18 17:43:31 bastion LinuxCommandsWazuh: User ankur [2650503]: 42 k logs -f urlbird-7dbbf9c94d-w7ckp | grep -i "clickhouse" Jul 18 18:37:57 bastion LinuxCommandsWazuh: User ankur [2650503]: 43 k get pods | grep urlbird Jul 18 18:38:07 bastion LinuxCommandsWazuh: User ankur [2650503]: 44 k logs -f urlbird-75bfbb7778-v4lrt | grep -i "clickhouse" Jul 18 18:38:11 bastion LinuxCommandsWazuh: User ankur [2650503]: 45 k logs -f urlbird-75bfbb7778-v4lrt Jul 18 18:41:25 bastion LinuxCommandsWazuh: User ankur [2650503]: 45 k logs -f urlbird-75bfbb7778-v4lrt Jul 18 18:41:29 bastion LinuxCommandsWazuh: User ankur [2650503]: 45 k logs -f urlbird-75bfbb7778-v4lrt Jul 18 18:41:49 bastion LinuxCommandsWazuh: User ankur [2650503]: 45 k logs -f urlbird-75bfbb7778-v4lrt Jul 18 18:41:50 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2650503]: 45 k logs -f urlbird-75bfbb7778-v4lrt ] Jul 18 19:10:07 bastion LinuxCommandsWazuh: User ankur [2985184]: 27 exit Jul 18 19:10:24 bastion LinuxCommandsWazuh: User ankur [2985586]: 27 exit Jul 18 19:10:26 bastion LinuxCommandsWazuh: User ankur [2985586]: 28 byb Jul 18 19:11:01 bastion LinuxCommandsWazuh: User ankur [2650503]: 46 k get pods | grep vortex Jul 18 19:11:22 bastion LinuxCommandsWazuh: User ankur [2650503]: 47 k logs -f vortex-8c8ff87d8-l25q8 Jul 18 19:11:23 bastion LinuxCommandsWazuh: User ankur [2650503]: 48 k get pods | grep vortex Jul 18 19:11:31 bastion LinuxCommandsWazuh: User ankur [2650503]: 49 k logs -f vortex-dramatiq-5db6fcfb4c-4wcr2 Jul 18 19:11:31 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2650503]: 49 k logs -f vortex-dramatiq-5db6fcfb4c-4wcr2] Jul 18 19:12:13 bastion LinuxCommandsWazuh: User ankur [2989028]: 49 exit Jul 18 19:12:17 bastion LinuxCommandsWazuh: User ankur [2989028]: 50 k get pods | grep vortex Jul 18 19:14:43 bastion LinuxCommandsWazuh: User ankur [2989028]: 51 k logs -f vortex-8c8ff87d8-l25q8 Jul 18 19:14:45 bastion LinuxCommandsWazuh: User ankur [2989028]: 52 k get pods | grep vortex Jul 18 19:15:04 bastion LinuxCommandsWazuh: User ankur [2989028]: 53 k logs -f vortex-dramatiq-5db6fcfb4c-4wcr2 Jul 18 19:15:04 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2989028]: 53 k logs -f vortex-dramatiq-5db6fcfb4c-4wcr2] Jul 18 19:15:05 bastion LinuxCommandsWazuh: User ankur [2989028]: 54 k get pods | grep vortex Jul 18 19:15:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2989028]: 54 k get pods | grep vortex ] Jul 18 19:15:24 bastion LinuxCommandsWazuh: User ankur [2989028]: 55 k logs -f vortex-8c8ff87d8-l25q8 Jul 18 19:15:24 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [2989028]: 55 k logs -f vortex-8c8ff87d8-l25q8] Jul 18 19:15:32 bastion LinuxCommandsWazuh: User ankur [2995295]: 56 exit Jul 18 19:31:51 bastion LinuxCommandsWazuh: User ankur [2985586]: 29 byobu Jul 18 19:36:07 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 814 kubectl describe configmap grafana -n loki Jul 18 19:36:25 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 815 kubectl get pods -n nitrox-production Jul 18 19:36:36 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 815 kubectl get pods -n nitrox-production Jul 18 19:36:48 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 816 kubectl get deployment -n nitrox-production Jul 18 19:36:57 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 816 kubectl get deployment -n nitrox-production Jul 18 19:37:00 bastion LinuxCommandsWazuh: User abhijeet [3031695]: 817 kubectl get pods -n nitrox-production Jul 18 19:57:10 bastion LinuxCommandsWazuh: User ankur [3052945]: 59 exit Jul 18 19:57:12 bastion LinuxCommandsWazuh: User ankur [3052945]: 60 bybo Jul 18 19:57:36 bastion LinuxCommandsWazuh: User ankur [2995295]: 57 k get hpa Jul 18 20:00:47 bastion LinuxCommandsWazuh: User ankur [2995295]: 57 k get hpa Jul 18 20:00:47 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2995295]: 57 k get hpa ] Jul 18 20:01:05 bastion LinuxCommandsWazuh: User ankur [3052945]: 61 byobu Jul 18 20:36:26 bastion LinuxCommandsWazuh: User ashish [3096332]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:36:35 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3096332]: 157 psql -h 10.94.16.3 -p 5432 -U postgres] Jul 18 20:37:36 bastion LinuxCommandsWazuh: User ashish [3096332]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:37:52 bastion LinuxCommandsWazuh: User ashish [3097732]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:37:57 bastion LinuxCommandsWazuh: User ashish [3097732]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:39:06 bastion LinuxCommandsWazuh: User ashish [3097732]: 157 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:39:20 bastion LinuxCommandsWazuh: User ashish [3097732]: 158 psql Jul 18 20:39:23 bastion LinuxCommandsWazuh: User ashish [3097732]: 159 ls Jul 18 20:39:28 bastion LinuxCommandsWazuh: User ashish [3097732]: 160 psql Jul 18 20:39:41 bastion LinuxCommandsWazuh: User ashish [3097732]: 161 psql -h 10.94.16.3 -p 5432 -U dbuser Jul 18 20:40:12 bastion LinuxCommandsWazuh: User ashish [3097732]: 162 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:41:24 bastion LinuxCommandsWazuh: User ashish [3097732]: 162 psql -h 10.94.16.3 -p 5432 -U postgres Jul 18 20:41:49 bastion LinuxCommandsWazuh: User ashish [3097732]: 163 psql -h 10.94.16.3 -p 5432 -U postgres -d nitrox_v2 Jul 18 20:42:13 bastion LinuxCommandsWazuh: User ashish [3097732]: 164 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Jul 18 20:42:49 bastion LinuxCommandsWazuh: User ashish [3097732]: 164 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Jul 18 20:42:50 bastion LinuxCommandsWazuh: User ashish [3096332]: 158 byobu Jul 18 20:56:03 bastion LinuxCommandsWazuh: User ashish [3121183]: 165 byobu Jul 18 20:56:07 bastion LinuxCommandsWazuh: User ashish [3121300]: 165 byobu Jul 18 20:56:28 bastion LinuxCommandsWazuh: User ashish [3121300]: 165 byobu Jul 18 20:56:28 bastion LinuxCommandsWazuh: User ashish [3121183]: 165 byobu