Jul 31 00:06:00 bastion LinuxCommandsWazuh: User ankur [3578959]: 1147 exit Jul 31 00:06:36 bastion LinuxCommandsWazuh: User ankur [3578959]: 1148 byobu Jul 31 09:02:39 bastion LinuxCommandsWazuh: User ankur [3630478]: 1149 exit Jul 31 09:03:15 bastion LinuxCommandsWazuh: User ankur [3630478]: 1150 byobu Jul 31 11:29:14 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1245 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq | grep "CSV files to be sent" Jul 31 11:29:16 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1246 ls Jul 31 11:29:31 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1247 kubectl get pods -n loki Jul 31 11:29:44 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1248 kubectl logs prometheus-server-78dd47668b-gmv8r Jul 31 11:29:49 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1249 kubectl logs prometheus-server-78dd47668b-gmv8r -n loki Jul 31 11:29:54 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1249 kubectl logs prometheus-server-78dd47668b-gmv8r -n loki Jul 31 11:30:37 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1250 kubectl get deployment -n loki Jul 31 11:31:06 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1251 kubectl rollout restart deployment prometheus-server -n loki Jul 31 11:31:26 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1245 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq | grep "CSV files to be sent" Jul 31 11:31:31 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1246 kubectl get pods -n loki Jul 31 11:32:01 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1246 kubectl get pods -n loki Jul 31 11:32:11 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1252 kubectl rollout status deployment prometheus-server -n loki Jul 31 11:32:14 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1252 kubectl rollout status deployment prometheus-server -n loki Jul 31 11:32:54 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1247 kubectl describe prometheus-server-7946fdc84b-hvtmr -n loki Jul 31 11:33:11 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1248 ls Jul 31 11:33:13 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1249 cd K8s-tools/ Jul 31 11:33:14 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1250 ls Jul 31 11:33:16 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1250 ls Jul 31 11:33:31 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1251 ./kubeScrib.sh Jul 31 11:33:57 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1252 kubectl logs prometheus-server-7946fdc84b-hvtmr_loki Jul 31 11:34:00 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1253 kubectl logs prometheus-server-7946fdc84b-hvtmr_loki -n loki Jul 31 11:36:08 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1254 kubectl describe pod prometheus-server-7946fdc84b-hvtmr -n loki Jul 31 11:36:39 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1255 kubectl logs prometheus-server-7946fdc84b-hvtmr -n loki -c prometheus-server Jul 31 11:37:32 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1256 kubectl get pods -n loki Jul 31 11:37:39 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1257 kubectl get pods -n loki -o wide Jul 31 11:37:54 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1258 kubectl top node gke-nitrox-production-micro-services-d8b0070b-wk8f Jul 31 11:42:50 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1253 kubectl logs -f prometheus-server-7946fdc84b-hvtmr -n loki Jul 31 11:42:50 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1259 kubectl delete pod prometheus-server-7946fdc84b-hvtmr -n loki Jul 31 11:42:54 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1260 kubectl get pods -n loki -o wide Jul 31 11:43:02 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [3646028]: 1260 kubectl get pods -n loki -o wide] Jul 31 11:47:41 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1260 kubectl get pods -n loki -o wide Jul 31 11:50:35 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1261 kubectl get pods -n nitrox-production Jul 31 11:50:40 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1262 kubectl get pods -n nitrox-production | grep gke-nitrox-production-micro-services-d8b0070b-wk8f Jul 31 11:50:52 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1263 kubectl get ns Jul 31 11:51:45 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1264 #kubectl get pods -n loki -o wide| grep gke-nitrox-production-micro-services-d8b0070b-wk8f Jul 31 11:51:52 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1265 kubectl get pods -n nitrox-production -o wide | grep gke-nitrox-production-micro-services-d8b0070b-wk8f Jul 31 11:56:43 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1266 kubectl get cm -n loki Jul 31 11:56:59 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1267 kubectl describe prometheus-server -n loki Jul 31 11:57:05 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1268 kubectl describe cm prometheus-server -n loki Jul 31 11:57:12 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1269 kubectl describe cm prometheus-server -n loki | grep reten Jul 31 11:57:18 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1270 ls Jul 31 12:01:38 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1271 internal-server Jul 31 12:02:03 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1272 kubectl describe deployment prometheus-server -n loki Jul 31 12:02:13 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1273 kubectl describe deployment prometheus-server -n loki -oyaml Jul 31 12:02:21 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1274 kubectl describe deployment prometheus-server -n loki -o yaml Jul 31 12:02:46 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1275 kubectl get pods -n loki Jul 31 12:03:01 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1276 kubectl e deployment prometheus-server -n loki Jul 31 12:04:12 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1277 kubectl edit deployment prometheus-server -n loki Jul 31 12:04:17 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1278 #kubectl edit deployment prometheus-server -n loki Jul 31 12:05:01 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1279 kubectl logs loki-ingester-2 -n loki | grep error Jul 31 12:05:10 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1280 kubectl logs loki-ingester-2 -n loki | grep restart Jul 31 12:05:31 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1281 date Jul 31 12:06:46 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1282 kubectl logs loki-ingester-2 -n loki | grep ts=2025-07-31T10: Jul 31 12:06:55 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1283 kubectl logs loki-ingester-2 -n loki | grep "ts=2025-07-31T10:*" Jul 31 12:07:02 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1284 kubectl logs loki-ingester-2 -n loki | grep "ts=2025-07-31T10" Jul 31 12:07:07 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1285 kubectl logs loki-ingester-2 -n loki | grep "ts=2025-07-31" Jul 31 12:11:55 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1286 kubectl get pods -n loki Jul 31 12:13:50 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1254 kubectl get pods -n loki Jul 31 12:14:17 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1287 kubectl logs loki-ingester-2 -n loki -f Jul 31 12:14:29 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1288 kubectl logs loki-querier-1 -n loki -f Jul 31 12:15:59 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1289 kubectl get pods -n loki -o wide | grep 10.84.19.14 Jul 31 12:18:12 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1290 ls Jul 31 12:18:24 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1291 kubectl get pods -n loki Jul 31 12:19:54 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1292 kubectl get deployment -n loki Jul 31 12:20:11 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1293 kubectl get pods -n nitrox-production Jul 31 12:21:25 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1294 kubectl get deployment -n loki Jul 31 12:21:46 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1295 kubectl get pods -n loki Jul 31 12:22:47 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1296 kubectl describe deployment loki-distributor -n loki Jul 31 12:23:11 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1297 kubectl get all -n loki Jul 31 12:24:56 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1298 kubectl rollout restart statefulset.apps/loki-querier -n loki Jul 31 12:25:23 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1254 kubectl get pods -n loki Jul 31 12:26:14 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1299 kubectl rollout status statefulset.apps/loki-querier -n loki Jul 31 12:26:35 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1300 kubectl get all -n loki Jul 31 12:30:02 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1301 kubectl logs -f loki-querier-0 -n loki Jul 31 12:30:04 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1302 kubectl get all -n loki Jul 31 12:30:23 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1255 watch "kubectl get pods -n loki" Jul 31 12:30:24 bastion LinuxCommandsWazuh: User abhijeet [3645652]: 1256 ls Jul 31 12:34:57 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1303 kubectl get pod -o wide Jul 31 12:35:06 bastion LinuxCommandsWazuh: User abhijeet [3646028]: 1304 kubectl get pod -o wide -n loki Jul 31 12:47:16 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1317 exit Jul 31 12:47:28 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1318 kubectl get pods -n nitrox-production Jul 31 12:48:47 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1545 stern cookie-cutter | grep "NETCORE" Jul 31 12:48:52 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1546 k get pods Jul 31 12:48:58 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1319 kubectl logs cookie-cutter-7bd7dd957f-82gjk -n nitrox-production Jul 31 12:49:11 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1320 kubectl get pods -n nitrox-production Jul 31 12:49:47 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1547 k logs -f cookie-cutter-7bd7dd957f-mg6pl Jul 31 12:49:56 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1548 clear Jul 31 12:49:58 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1549 k get pods Jul 31 12:50:03 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1550 clear Jul 31 12:50:06 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1551 k get pods cookie-cutter Jul 31 12:50:07 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1551 k get pods cookie-cutter Jul 31 12:50:09 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1321 kubectl get pods -n loki Jul 31 12:50:15 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1552 k get pods | grep "cookie-cutter" Jul 31 12:50:43 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1553 k logs -f cookie-cutter-queues-otel-78d47569f-rgdjd Jul 31 12:50:50 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1554 clear Jul 31 13:17:43 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1322 kubectl get pods -n nitrox-production Jul 31 13:17:56 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1323 kubectl get pods -n loki Jul 31 13:18:03 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1555 CLEAR Jul 31 13:18:04 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3656175]: 1555 CLEAR] Jul 31 13:19:30 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1324 kubectl get pods -n nitrox-production Jul 31 13:21:31 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1325 kubectl get pods -n nitrox-production | grep dramatiq Jul 31 13:21:57 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1326 kubectl get pods -n nitrox-production -o wide| grep dramatiq Jul 31 13:22:13 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1327 kubectl get pods -n loki | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:22:32 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1327 kubectl get pods -n loki | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:23:03 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1328 kubectl get pods -n loki -o wide| grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:23:52 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1329 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production Jul 31 13:23:59 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1329 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production Jul 31 13:24:28 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1330 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production | grep "Exporting inmarket" Jul 31 13:26:10 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1331 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production | grep -B2 -A2 "Exporting inmarket" Jul 31 13:26:38 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1331 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production | grep -B2 -A2 "Exporting inmarket" Jul 31 13:27:36 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1556 stern cookie-cutter | grep "ORDER_JOURNEY" Jul 31 13:27:50 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1331 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production | grep -B2 -A2 "Exporting inmarket" Jul 31 13:28:47 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1331 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production | grep -B2 -A2 "Exporting inmarket" Jul 31 13:30:00 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1332 kubectl logs nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production -f Jul 31 13:30:14 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1556 stern cookie-cutter | grep "ORDER_JOURNEY" Jul 31 13:30:19 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1557 clear Jul 31 13:32:35 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1333 kubectl exec -it nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production -- bash Jul 31 13:32:36 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1334 ls Jul 31 13:32:44 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1335 kubectl get cm Jul 31 13:33:12 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1336 kubectl get cm -n loki Jul 31 13:33:33 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1337 kubectl descibe loki -n loki Jul 31 13:33:39 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1338 kubectl describe loki -n loki Jul 31 13:33:47 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1339 kubectl describe cm loki -n loki Jul 31 13:33:55 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1340 kubectl get cm -n loki Jul 31 13:34:07 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1341 kubectl get pods Jul 31 13:34:10 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1342 kubectl get pods -n loki Jul 31 13:34:22 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1343 kubectl get pods -n loki -o wide Jul 31 13:34:33 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1344 kubectl get pods -n nitrox-production -o wide Jul 31 13:35:02 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1345 kubectl get pods -n loki -o wide | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:35:33 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1346 kubectl logs -n loki promtail-v8hv9 Jul 31 13:35:56 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1347 kubectl get pods -n loki -o wide | grep 10.84.26.180 Jul 31 13:36:09 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1348 kubectl get pods -n loki Jul 31 13:36:25 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1349 kubectl get all -n loki Jul 31 13:36:41 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1350 kubectl rollout restart statefulset.apps/loki-ingester -n loki Jul 31 13:40:37 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1317 exit Jul 31 13:40:38 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1318 ls Jul 31 13:40:46 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1319 kubectl pods -n loki Jul 31 13:40:53 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1320 kubectl get pods -n loki Jul 31 13:41:21 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1321 kubectl logs loki-ingester-0 -n loki Jul 31 13:41:27 bastion LinuxCommandsWazuh: User mohtashim [3662547]: 1545 stern cookie-cutter | grep "NETCORE" Jul 31 13:41:30 bastion LinuxCommandsWazuh: User mohtashim [3662547]: 1546 k hpa Jul 31 13:41:33 bastion LinuxCommandsWazuh: User mohtashim [3662547]: 1547 clea Jul 31 13:41:34 bastion LinuxCommandsWazuh: User mohtashim [3662547]: 1548 clear Jul 31 13:41:36 bastion LinuxCommandsWazuh: User mohtashim [3662547]: 1549 k get hpa Jul 31 13:42:40 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1351 kubectl rollout status statefulset.apps/loki-ingester -n loki Jul 31 13:49:17 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1322 kubectl logs loki-ingester-0 -n loki -f Jul 31 13:50:17 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1323 kubectl logs loki-ingester-0 -n loki -f | grep dramatic Jul 31 13:50:38 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1352 kubectl get pods -n loki Jul 31 13:50:45 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1324 kubectl logs loki-ingester-0 -n loki -f | grep drama Jul 31 13:50:58 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1353 kubectl get pods -n nitrox-production -o wide Jul 31 13:51:52 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1354 kubectl get pods -n loki -o wide | gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:51:57 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1355 kubectl get pods -n loki -o wide | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 13:52:21 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1325 kubectl logs promtail-v8hv9-n loki Jul 31 13:52:38 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1326 kubectl logs promtail-v8hv9 -n loki Jul 31 13:52:56 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1327 kubectl logs promtail-v8hv9 -n loki -f Jul 31 13:53:26 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1327 kubectl logs promtail-v8hv9 -n loki -f Jul 31 13:54:30 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1328 kubectl exec -it promtail-v8hv9 -- bash Jul 31 13:54:35 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1329 kubectl exec -it promtail-v8hv9 -n loki -- Jul 31 13:59:53 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1330 kubectl exec -it promtail-v8hv9 -n loki -- bash Jul 31 14:01:02 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1331 kubectl get pods -n loki Jul 31 14:01:24 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1332 kubectl logs promtail-v8hv9 -n loki Jul 31 14:02:18 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1333 kubectl delete pod promtail-v8hv9 -n loki Jul 31 14:02:21 bastion LinuxCommandsWazuh: User abhijeet [3662378]: 1334 kubectl get pods -n loki Jul 31 14:03:03 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1356 kubectl get pods -n loki | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 14:03:13 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1357 kubectl get pods -n loki -o wide| grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 14:05:22 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1358 kubectl logs promtail-hv6cf -n loki -f Jul 31 14:05:47 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1359 kubectl get pods -n nitrox-production Jul 31 14:06:17 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1360 kubectl get pods -n nitrox-production | grep cookie-cutter-queues-54fddd9696-8zlgj Jul 31 14:06:20 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1361 ls Jul 31 14:06:29 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1362 kubectl get pods -n loki Jul 31 15:39:08 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1363 kubectl exec -it promtail-hv6cf -n loki -- bash Jul 31 15:39:15 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1364 kubectl get pods -n loki Jul 31 15:40:22 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1365 kubectl get pods -n nitrox-production | grep cookie-cutter-queues-54fddd9696-8zlgj Jul 31 15:41:03 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1366 kubectl get pod -n loki -o wide Jul 31 15:41:14 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1367 kubectl get pod -n nitrox-production -o wide Jul 31 15:41:56 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1368 kubectl exec -it nitrox-dramatiq-68db4ffddb-ph8vq -n nitrox-production -- bash Jul 31 15:42:00 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1369 kubectl get pod -n nitrox-production -o wide Jul 31 15:42:25 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1370 kubectl get pods -n loki -o wide | grep gke-nitrox-production-nitro-services-fafd95c3-2yym Jul 31 15:49:37 bastion LinuxCommandsWazuh: User rihan [3675191]: 1195 mongo Jul 31 15:54:57 bastion LinuxCommandsWazuh: User rihan [3675191]: 1195 mongo Jul 31 16:01:42 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1317 exit Jul 31 16:01:43 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1318 lsc Jul 31 16:03:01 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1319 kubectl logs -f promtail-hv6cf -n loki Jul 31 16:03:10 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1320 kubectl get pods -n loki Jul 31 16:03:24 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1321 kubectl get logs loki-gateway-5855788648-sdfr8 -n loki Jul 31 16:03:31 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1322 kubectl logs loki-gateway-5855788648-sdfr8 -n loki Jul 31 16:03:41 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1323 kubectl logs loki-gateway-5855788648-sdfr8 -n loki -f Jul 31 16:04:15 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1371 kubectl exec -it promtail-hv6cf -n loki -- bash Jul 31 16:04:25 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1372 kubectl get pods -n loki -o wide Jul 31 16:05:07 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1373 kubectl get pods -n loki -o wide | grep 10.84.29.2 Jul 31 16:05:33 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1374 kubectl get pods -n loki -o wide | grep promtail-hv6cf Jul 31 16:05:56 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1324 kubectl logs loki-gateway-5855788648-sdfr8 -n loki | grep 10.84.19.31 Jul 31 16:06:14 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1375 kubectl get pods -n loki Jul 31 16:06:45 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1375 kubectl get pods -n loki Jul 31 16:07:10 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1376 kubectl get pods -n loki -o wide Jul 31 16:11:22 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1325 kubectl logs -f promtail-hv6cf -n loki Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1326 kubectl logs -f promtail-hv6cf -n lokilevel=warn ts=2025-07-31T09:14:04.09372056Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:39746->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1327 level=warn ts=2025-07-31T09:14:10.023583403Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1328 level=warn ts=2025-07-31T09:16:04.09553533Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:37398->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1329 level=warn ts=2025-07-31T09:17:50.806953417Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1330 level=warn ts=2025-07-31T09:17:56.638063209Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1331 level=warn ts=2025-07-31T09:18:02.862587691Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1332 level=warn ts=2025-07-31T09:19:04.09681246Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:41594->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1333 level=warn ts=2025-07-31T09:21:19.001369088Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1334 level=warn ts=2025-07-31T09:22:19.095039451Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:39432->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1335 level=warn ts=2025-07-31T09:22:34.094768683Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:34700->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1336 level=warn ts=2025-07-31T09:24:04.093649084Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:53830->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1337 level=info ts=2025-07-31T09:24:05.827998512Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log.20250729-125705.tmp op=CREATE Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1338 level=info ts=2025-07-31T09:24:06.096782912Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log.20250729-125705.gz op=CREATE Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1339 level=info ts=2025-07-31T09:24:06.100159944Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log.20250731-092406 op=CREATE Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1340 level=info ts=2025-07-31T09:24:06.101132107Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log op=CREATE Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1341 ts=2025-07-31T09:24:06.12821864Z caller=log.go:168 level=info msg="Re-opening moved/deleted file /var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log ..." Jul 31 16:11:26 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1342 ts=2025-07-31T09:24:06.128384169Z caller=log.go:168 level=info msg="Successfully reopened /var/log/pods/loki_loki-distributor-787d5bd67c-wx645_b22bc78a-93cf-4b57-8001-211e8dc0cd85/distributor/0.log" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1343 level=warn ts=2025-07-31T09:24:19.095663794Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:47314->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1344 level=warn ts=2025-07-31T09:25:54.901685447Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1345 level=warn ts=2025-07-31T09:26:04.09475102Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:56182->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1346 level=warn ts=2025-07-31T09:26:19.702519249Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1347 level=warn ts=2025-07-31T09:29:04.092364792Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:44686->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1348 level=warn ts=2025-07-31T09:32:09.401836408Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1349 level=warn ts=2025-07-31T09:35:04.100160977Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:48918->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1350 level=warn ts=2025-07-31T09:36:34.092883784Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:33548->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1351 level=warn ts=2025-07-31T09:38:04.094209943Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:41218->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1352 level=warn ts=2025-07-31T09:38:49.098786377Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:58902->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1353 level=warn ts=2025-07-31T09:39:49.093745737Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:60368->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1354 level=warn ts=2025-07-31T09:40:04.094297656Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:57956->10.84.26.218:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1355 level=warn ts=2025-07-31T09:43:23.50223667Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1356 level=warn ts=2025-07-31T09:46:49.094171138Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:39042->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1357 level=warn ts=2025-07-31T09:47:34.093345118Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:36586->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1358 level=warn ts=2025-07-31T09:48:03.00217122Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1359 level=warn ts=2025-07-31T09:48:04.093188228Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:59642->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1360 level=warn ts=2025-07-31T09:50:04.099203126Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:54830->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1361 level=warn ts=2025-07-31T09:51:58.601783822Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1362 level=warn ts=2025-07-31T09:52:04.092598794Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:52914->10.84.27.209:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1363 level=info ts=2025-07-31T09:59:46.267703831Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/nitrox-production_vortex-dramatiq-655dc699d4-kpww6_4f3149ae-c050-44ea-9108-69b3cfdbe98f/dramatiq-vortex/0.log.20250731-095946 op=CREATE Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1364 level=info ts=2025-07-31T09:59:46.268730227Z caller=filetargetmanager.go:193 msg="received file watcher event" name=/var/log/pods/nitrox-production_vortex-dramatiq-655dc699d4-kpww6_4f3149ae-c050-44ea-9108-69b3cfdbe98f/dramatiq-vortex/0.log op=CREATE Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1365 ts=2025-07-31T09:59:46.422122989Z caller=log.go:168 level=info msg="Re-opening moved/deleted file /var/log/pods/nitrox-production_vortex-dramatiq-655dc699d4-kpww6_4f3149ae-c050-44ea-9108-69b3cfdbe98f/dramatiq-vortex/0.log ..." Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1366 ts=2025-07-31T09:59:46.422242133Z caller=log.go:168 level=info msg="Successfully reopened /var/log/pods/nitrox-production_vortex-dramatiq-655dc699d4-kpww6_4f3149ae-c050-44ea-9108-69b3cfdbe98f/dramatiq-vortex/0.log" Jul 31 16:11:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1367 level=warn ts=2025-07-31T10:08:19.093156885Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:54568->10.84.26.218:9095: use of closed network connection" Jul 31 16:11:27 bastion LinuxCommandsWazuh: message repeated 6 times: [ User abhijeet [3676438]: 1367 level=warn ts=2025-07-31T10:08:19.093156885Z caller=client.go:419 component=client host=loki-gateway msg="error sending batch, will retry" status=500 tenant= error="server returned HTTP status 500 Internal Server Error (500): rpc error: code = Unavailable desc = error reading from server: read tcp 10.84.19.6:54568->10.84.26.218:9095: use of closed network connection"] Jul 31 16:18:46 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1377 kubectl exec -it promtail-hv6cf -n loki -- bash Jul 31 16:24:25 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1368 kubectl cp loki/promtail-hv6cf:/var/log/pods/nitrox-production_nitrox-dramatiq-68db4ffddb-ph8vq_12d8de57-8f52-4fe9-9e6f-b784b7e166a3/nitrox-dramatiq/0.log nitrox-dramatic.log Jul 31 16:25:38 bastion LinuxCommandsWazuh: User ashish [3678896]: 252 redis Jul 31 16:26:14 bastion LinuxCommandsWazuh: User ashish [3678896]: 253 kubectl get pods Jul 31 16:26:30 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1369 kubectl cp loki/promtail-hv6cf:/var/log/pods/nitrox-production_nitrox-dramatiq-68db4ffddb-ph8vq_12d8de57-8f52-4fe9-9e6f-b784b7e166a3/nitrox-dramatiq/0.log nitrox-dramatiq.log Jul 31 16:26:45 bastion LinuxCommandsWazuh: User ashish [3678896]: 254 kubectl get pods | nitrox Jul 31 16:27:01 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1370 kubectl cp -n loki promtail-hv6cf:/var/log/pods/nitrox-production_nitrox-dramatiq-68db4ffddb-ph8vq_12d8de57-8f52-4fe9-9e6f-b784b7e166a3/nitrox-dramatiq/0.log nitrox-dramatiq.log Jul 31 16:27:07 bastion LinuxCommandsWazuh: User ashish [3678896]: 255 kubectl get pods | grep "nitrox" Jul 31 16:27:12 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1371 kubectl cp -n loki promtail-hv6cf:/var/log/pods/nitrox-production_nitrox-dramatiq-68db4ffddb-ph8vq_12d8de57-8f52-4fe9-9e6f-b784b7e166a3/nitrox-dramatiq/0.log . Jul 31 16:27:15 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1372 ls Jul 31 16:27:27 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1373 cat nitrox-dramatic.log Jul 31 16:28:12 bastion LinuxCommandsWazuh: User ashish [3678896]: 256 kubectl logs -f nitrox-dramatiq-68db4ffddb-ph8vq Jul 31 16:28:13 bastion LinuxCommandsWazuh: User ashish [3678896]: 257 ls Jul 31 16:28:23 bastion LinuxCommandsWazuh: User ashish [3678896]: 258 kubectl get pods | nitrox Jul 31 16:28:29 bastion LinuxCommandsWazuh: User ashish [3678896]: 259 kubectl get pods | grep nitrox Jul 31 16:32:10 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1374 vim nitrox-dramatic.log Jul 31 16:32:21 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1375 kubectl get pods -n loki Jul 31 16:32:47 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1376 kubectl get pods -n loki | grep promtail-hv6cf Jul 31 16:33:17 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1377 kubectl logs -f promtail-hv6cf Jul 31 16:35:26 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1377 kubectl exec -it promtail-hv6cf -n loki -- bash Jul 31 16:35:27 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1378 ls Jul 31 16:35:34 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1379 cat nitrox-dramatiq.log Jul 31 16:36:09 bastion LinuxCommandsWazuh: User abhijeet [3656051]: 1380 cat nitrox-dramatiq.log | more Jul 31 16:38:36 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1378 kubectl logs -f promtail-hv6cf -n loki Jul 31 16:38:40 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1379 ls Jul 31 16:38:53 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1380 cat nitrox-dramatiq.log Jul 31 16:39:25 bastion LinuxCommandsWazuh: User abhijeet [3676438]: 1381 cat nitrox-dramatiq.log | more Jul 31 16:44:35 bastion LinuxCommandsWazuh: User ashish [3678896]: 260 kubectl restart Jul 31 16:44:45 bastion LinuxCommandsWazuh: User ashish [3678896]: 261 kubectl logs -f nitrox-dramatiq Jul 31 16:44:54 bastion LinuxCommandsWazuh: User ashish [3678896]: 261 kubectl logs -f nitrox-dramatiq Jul 31 16:45:00 bastion LinuxCommandsWazuh: User ashish [3678896]: 262 kubectl get pods Jul 31 16:45:04 bastion LinuxCommandsWazuh: User ashish [3678896]: 263 kubectl get pods | grep nitrox Jul 31 16:45:25 bastion LinuxCommandsWazuh: User ashish [3678896]: 264 kubectl pod log -f nitrox-dramatiq-68db4ffddb-ph8vq Jul 31 16:45:35 bastion LinuxCommandsWazuh: User ashish [3678896]: 265 kubectl logs -f nitrox-dramatiq-68db4ffddb-ph8vq Jul 31 16:48:38 bastion LinuxCommandsWazuh: User ashish [3678896]: 266 kubectl logs -f nitrox-dramatiq-ff47c8bdc-cmrrq Jul 31 16:48:49 bastion LinuxCommandsWazuh: User ashish [3678896]: 267 kubectl get pods | grep nitrox Jul 31 16:54:42 bastion LinuxCommandsWazuh: User ashish [3678896]: 268 kubectl logs -f nitrox-dramatiq-ff47c8bdc-wpmch Jul 31 16:57:26 bastion LinuxCommandsWazuh: User ashish [3678896]: 268 kubectl logs -f nitrox-dramatiq-ff47c8bdc-wpmch Jul 31 16:57:30 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ashish [3678896]: 268 kubectl logs -f nitrox-dramatiq-ff47c8bdc-wpmch] Jul 31 16:57:38 bastion LinuxCommandsWazuh: User ashish [3682983]: 268 kubectl logs -f nitrox-dramatiq-ff47c8bdc-wpmch Jul 31 16:57:40 bastion LinuxCommandsWazuh: User ashish [3682983]: 269 kubectl get pods | grep nitrox Jul 31 17:06:55 bastion LinuxCommandsWazuh: User ashish [3682983]: 270 kubectl logs -f nitrox-dramatiq-649d5756b4-sjbln Jul 31 17:07:16 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ashish [3682983]: 270 kubectl logs -f nitrox-dramatiq-649d5756b4-sjbln] Jul 31 17:07:20 bastion LinuxCommandsWazuh: User ashish [3682983]: 271 kubectl get pods | grep nitrox Jul 31 17:08:11 bastion LinuxCommandsWazuh: message repeated 10 times: [ User ashish [3682983]: 271 kubectl get pods | grep nitrox] Jul 31 17:08:12 bastion LinuxCommandsWazuh: User ashish [3682983]: 271 kubectl get pods | grep nitrox Jul 31 17:08:16 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [3682983]: 271 kubectl get pods | grep nitrox] Jul 31 17:32:22 bastion LinuxCommandsWazuh: User ashish [3682983]: 272 kubectl logs -f nitrox-dramatiq-649d5756b4-99j8b Jul 31 17:32:26 bastion LinuxCommandsWazuh: User ashish [3682983]: 273 kubectl get pods | grep nitrox Jul 31 17:33:18 bastion LinuxCommandsWazuh: User ashish [3682983]: 274 kubectl logs -f nitrox-dramatiq-649d5756b4-99j8b Jul 31 17:33:20 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [3682983]: 274 kubectl logs -f nitrox-dramatiq-649d5756b4-99j8b] Jul 31 17:55:42 bastion LinuxCommandsWazuh: User rihan [3687775]: 1195 mongo Jul 31 18:05:56 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1558 stern cookie-cutter | grep "ORDER_JOURNEY" Jul 31 18:05:56 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1558 stern cookie-cutter | grep "ORDER_JOURNEY" Jul 31 18:06:02 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1559 stern cookie-cutter Jul 31 18:13:44 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1559 stern cookie-cutter Jul 31 18:13:44 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1559 stern cookie-cutter Jul 31 18:18:47 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1560 stern cookie-cutter | grep "/v1/sdk/track" Jul 31 18:18:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3656175]: 1560 stern cookie-cutter | grep "/v1/sdk/track"] Jul 31 18:18:55 bastion LinuxCommandsWazuh: User ankur [3690656]: 1151 exit Jul 31 18:18:55 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1561 k get hpa Jul 31 18:19:21 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1562 clear Jul 31 18:19:21 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1562 clear Jul 31 18:19:23 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1563 k get hpa Jul 31 18:19:39 bastion LinuxCommandsWazuh: User ankur [3690656]: 1152 byobu Jul 31 18:23:48 bastion LinuxCommandsWazuh: User rihan [3687775]: 1195 mongo Jul 31 18:52:54 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1564 mongo pixel_v1 Jul 31 18:53:13 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1565 byobu Jul 31 18:53:16 bastion LinuxCommandsWazuh: User mohtashim [3656175]: 1565 byobu Jul 31 19:23:45 bastion LinuxCommandsWazuh: User ankur [3697259]: 1153 exit Jul 31 19:28:17 bastion LinuxCommandsWazuh: User ankur [1892869]: 1153 stern deploy/cookie-cutter-queues | grep -i "DEBUG_VORTEX:57300e14-b736-4d77-b1f9-74444fdcf1f0" Jul 31 19:28:29 bastion LinuxCommandsWazuh: User ankur [1892869]: 1154 k get pods | grep nitrox Jul 31 19:28:59 bastion LinuxCommandsWazuh: User ankur [3752953]: 519 elk-server Jul 31 19:29:05 bastion LinuxCommandsWazuh: User ankur [4105649]: 1172 mongo Jul 31 19:29:10 bastion LinuxCommandsWazuh: User ankur [3903947]: 1145 redis Jul 31 19:29:14 bastion LinuxCommandsWazuh: User ankur [1985096]: 1094 psql Jul 31 19:29:22 bastion LinuxCommandsWazuh: User ankur [4040848]: 1084 psql -U postgres Jul 31 19:29:29 bastion LinuxCommandsWazuh: User ankur [2890783]: 1061 psql -U postgres -d vortex_v2 Jul 31 19:29:34 bastion LinuxCommandsWazuh: User ankur [2152106]: 1450 psql -U postgres Jul 31 19:29:36 bastion LinuxCommandsWazuh: User ankur [2152106]: 1451 exit Jul 31 19:29:48 bastion LinuxCommandsWazuh: User ankur [1892869]: 1155 k logs -f nitrox-dramatiq-649d5756b4-99j8b Jul 31 19:29:59 bastion LinuxCommandsWazuh: User ankur [3703874]: 1205 exit Jul 31 19:44:36 bastion LinuxCommandsWazuh: User ankur [3718270]: 1205 exit Jul 31 19:45:16 bastion LinuxCommandsWazuh: User ankur [3718270]: 1206 clickhouse-ssh Jul 31 19:45:30 bastion LinuxCommandsWazuh: User ankur [3719099]: 1207 exit Jul 31 19:45:32 bastion LinuxCommandsWazuh: User ankur [3697259]: 1154 byobu Jul 31 19:51:01 bastion LinuxCommandsWazuh: User ankur [3719956]: 1209 exit Jul 31 19:51:12 bastion LinuxCommandsWazuh: User ankur [3719099]: 1208 k get pods | grep nitrox Jul 31 19:51:21 bastion LinuxCommandsWazuh: User ankur [3719099]: 1209 k logs -f nitrox-dramatiq-649d5756b4-99j8b Jul 31 19:51:26 bastion LinuxCommandsWazuh: User ankur [3719099]: 1210 k get pods | grep vortex Jul 31 19:51:31 bastion LinuxCommandsWazuh: User abhijeet [3720636]: 1462 cat nitrox-dramatiq.log | more Jul 31 19:51:48 bastion LinuxCommandsWazuh: User abhijeet [3720636]: 1463 kubectl get pods -n nitrox-production Jul 31 19:52:25 bastion LinuxCommandsWazuh: User ankur [3719099]: 1211 k logs -f vortex-dramatiq-655dc699d4-cpnkw Jul 31 19:52:55 bastion LinuxCommandsWazuh: User abhijeet [3720636]: 1463 kubectl get pods -n nitrox-production Jul 31 20:01:45 bastion LinuxCommandsWazuh: User ankur [3730913]: 1209 exit Jul 31 20:12:26 bastion LinuxCommandsWazuh: User abhijeet [3720636]: 1464 kubectl get pods -n loki