Aug  3 01:08:54 bastion LinuxCommandsWazuh: User ubuntu [1745617]:  1802  exit
Aug  3 01:08:59 bastion LinuxCommandsWazuh: User ayush [1745630]:   289  cool-server 
Aug  3 01:09:00 bastion LinuxCommandsWazuh: User ayush [1745630]:   290  cd
Aug  3 01:09:02 bastion LinuxCommandsWazuh: User ayush [1745630]:   291  ls
Aug  3 01:10:10 bastion LinuxCommandsWazuh: User ayush [1745630]:   292  cool-server 
Aug  3 01:11:02 bastion LinuxCommandsWazuh: User ayush [1745630]:   293  ssh -p 22 shamail@ollama.nitrocommerce.ai
Aug  3 01:11:07 bastion LinuxCommandsWazuh: User ubuntu [1745617]:  1803  sudo su ayush
Aug  3 01:11:10 bastion LinuxCommandsWazuh: User ubuntu [1745617]:  1803  sudo su ayush
Aug  3 07:15:08 bastion LinuxCommandsWazuh: User venky [1773263]:  1824  byobu
Aug  3 07:15:08 bastion LinuxCommandsWazuh: User venky [1773263]:  1824  byobu
Aug  3 08:25:15 bastion LinuxCommandsWazuh: User venky [1778426]:  1824  byobu
Aug  3 08:25:22 bastion LinuxCommandsWazuh: User venky [799341]:  1942  kubectl get hpa 
Aug  3 08:25:22 bastion LinuxCommandsWazuh: User venky [799341]:  1942  kubectl get hpa 
Aug  3 09:54:14 bastion LinuxCommandsWazuh: User ankur [1867687]:  1250  exit
Aug  3 09:54:38 bastion LinuxCommandsWazuh: User ankur [1867687]:  1251  byobu
Aug  3 10:09:37 bastion LinuxCommandsWazuh: User venky [1883807]:  1824  byobu
Aug  3 11:20:37 bastion LinuxCommandsWazuh: User ubuntu [1957252]:  1804  exit
Aug  3 11:20:40 bastion LinuxCommandsWazuh: User rihan [1957318]:  1209  exit
Aug  3 11:20:41 bastion LinuxCommandsWazuh: User rihan [1957318]:  1210  cd
Aug  3 11:20:41 bastion LinuxCommandsWazuh: User rihan [1957318]:  1211  ls
Aug  3 11:20:42 bastion LinuxCommandsWazuh: User rihan [1957318]:  1212  cd .ssh/
Aug  3 11:20:43 bastion LinuxCommandsWazuh: User rihan [1957318]:  1213  ls
Aug  3 11:21:19 bastion LinuxCommandsWazuh: User rihan [1957318]:  1214  sudo vi authorized_keys 
Aug  3 11:22:12 bastion LinuxCommandsWazuh: User ubuntu [1957252]:  1805  sudo su rihan
Aug  3 11:23:23 bastion LinuxCommandsWazuh: User rihan [1959969]:  1215  exit
Aug  3 11:25:13 bastion LinuxCommandsWazuh: User rihan [1961786]:  1215  exit
Aug  3 12:27:56 bastion LinuxCommandsWazuh: User rihan [1961786]:  1216  redis
Aug  3 13:52:14 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 14:01:31 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 14:03:42 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 14:25:18 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 14:26:08 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 14:26:24 bastion LinuxCommandsWazuh: User rihan [2108610]:  1216  redis
Aug  3 19:06:27 bastion LinuxCommandsWazuh: User rihan [2168544]:  1216  redis
Aug  3 19:08:23 bastion LinuxCommandsWazuh: User rihan [2168544]:  1217  redis-url 
Aug  3 19:08:29 bastion LinuxCommandsWazuh: User rihan [2168680]:  1217  redis-url 
Aug  3 19:17:36 bastion LinuxCommandsWazuh: User rihan [2169491]:  1217  redis-url 
Aug  3 20:36:25 bastion LinuxCommandsWazuh: User venky [2175461]:  1824  byobu
Aug  3 20:36:34 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2175461]:  1824  byobu]
Aug  3 20:36:44 bastion LinuxCommandsWazuh: User venky [324213]:  1822  stern cookie-cutter-newrelic-6bd74b77fc-hqsrq | grep "BG_EVENT_TRACKER Called"
Aug  3 20:36:48 bastion LinuxCommandsWazuh: User venky [324213]:  1822  stern cookie-cutter-newrelic-6bd74b77fc-hqsrq | grep "BG_EVENT_TRACKER Called"
Aug  3 20:36:54 bastion LinuxCommandsWazuh: User venky [324213]:  1823  kubectl get po | grep cookie-cutter-que | wc -l 
Aug  3 20:36:57 bastion LinuxCommandsWazuh: User venky [324213]:  1824  kubectl get po | grep cookie-cutter-que
Aug  3 20:37:03 bastion LinuxCommandsWazuh: User venky [324213]:  1824  kubectl get po | grep cookie-cutter-que
Aug  3 20:37:07 bastion LinuxCommandsWazuh: User venky [324213]:  1825  kubectl get po | grep cookie-cutter
Aug  3 20:37:18 bastion LinuxCommandsWazuh: User venky [324213]:  1825  kubectl get po | grep cookie-cutter
Aug  3 20:38:34 bastion LinuxCommandsWazuh: User venky [324213]:  1825  kubectl get po | grep cookie-cutter
Aug  3 20:38:48 bastion LinuxCommandsWazuh: User venky [324213]:  1826  kubectl get po | grep cookie-cutter-que
Aug  3 20:39:02 bastion LinuxCommandsWazuh: User venky [324213]:  1826  kubectl get po | grep cookie-cutter-que
Aug  3 20:39:17 bastion LinuxCommandsWazuh: User venky [324213]:  1827  stern cookie-cutter-queues-b45487774 | grep "shadow"
Aug  3 20:39:36 bastion LinuxCommandsWazuh: User venky [324213]:  1828  stern cookie-cutter-queues-b45487774 | grep "shad"
Aug  3 20:40:02 bastion LinuxCommandsWazuh: User venky [324213]:  1829  stern cookie-cutter-queues-b45487774 | grep "MAPPING_SUCCESS"
Aug  3 20:40:28 bastion LinuxCommandsWazuh: User venky [324213]:  1830  stern cookie-cutter-queues-b45487774 
Aug  3 20:40:51 bastion LinuxCommandsWazuh: User venky [2175461]:  1824  byobu
Aug  3 20:41:01 bastion LinuxCommandsWazuh: User venky [324213]:  1830  stern cookie-cutter-queues-b45487774 
Aug  3 20:41:04 bastion LinuxCommandsWazuh: User venky [324213]:  1831  kubectl get po | grep cookie-cutter-que
Aug  3 20:41:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [324213]:  1831  kubectl get po | grep cookie-cutter-que]
Aug  3 20:41:36 bastion LinuxCommandsWazuh: User venky [324213]:  1832  stern cookie-cutter-queues-b45487774 
Aug  3 20:41:49 bastion LinuxCommandsWazuh: User venky [324213]:  1832  stern cookie-cutter-queues-b45487774 
Aug  3 20:41:57 bastion LinuxCommandsWazuh: User venky [324213]:  1833  kubectl get po | cookie
Aug  3 20:42:00 bastion LinuxCommandsWazuh: User venky [324213]:  1834  kubectl get po | grep cookie
Aug  3 20:42:41 bastion LinuxCommandsWazuh: User venky [324213]:  1835  stern cookie-cutter-queues-b45487774-zt6xd
Aug  3 20:43:12 bastion LinuxCommandsWazuh: User venky [324213]:  1835  stern cookie-cutter-queues-b45487774-zt6xd
Aug  3 20:43:16 bastion LinuxCommandsWazuh: User venky [324213]:  1836  kubectl get po | grep cookie
Aug  3 20:45:51 bastion LinuxCommandsWazuh: User venky [324213]:  1837  stern cookie-cutter-77669695d7-2kp6m
Aug  3 20:48:16 bastion LinuxCommandsWazuh: User venky [324213]:  1838  kubectl get po | grep cookie
Aug  3 20:48:38 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [324213]:  1838  kubectl get po | grep cookie]
Aug  3 20:51:15 bastion LinuxCommandsWazuh: User venky [324213]:  1838  kubectl get po | grep cookie
Aug  3 20:51:17 bastion LinuxCommandsWazuh: User venky [324213]:  1838  kubectl get po | grep cookie
Aug  3 20:51:32 bastion LinuxCommandsWazuh: User venky [324213]:  1839  stern cookie-cutter-7d5db7f95b-phtx6
Aug  3 21:01:36 bastion LinuxCommandsWazuh: User venky [324213]:  1840  stern cookie-cutter-queue
Aug  3 21:02:54 bastion LinuxCommandsWazuh: User venky [324213]:  1840  stern cookie-cutter-queue
Aug  3 21:02:54 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [324213]:  1840  stern cookie-cutter-queue]
Aug  3 21:42:22 bastion LinuxCommandsWazuh: User venky [324213]:  1840  stern cookie-cutter-queue
Aug  3 21:42:25 bastion LinuxCommandsWazuh: User venky [324213]:  1841  kubectl get po | grep cookie
Aug  3 21:42:28 bastion LinuxCommandsWazuh: User venky [324213]:  1841  kubectl get po | grep cookie
Aug  3 21:42:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [324213]:  1841  kubectl get po | grep cookie]
Aug  3 21:42:33 bastion LinuxCommandsWazuh: User venky [324213]:  1841  kubectl get po | grep cookie
Aug  3 21:42:49 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [324213]:  1841  kubectl get po | grep cookie]
Aug  3 21:43:01 bastion LinuxCommandsWazuh: User venky [324213]:  1842  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq
Aug  3 21:43:18 bastion LinuxCommandsWazuh: User venky [324213]:  1843  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep "shad"
Aug  3 21:43:27 bastion LinuxCommandsWazuh: User venky [324213]:  1844  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep "shado"
Aug  3 21:43:53 bastion LinuxCommandsWazuh: User venky [324213]:  1845  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep "MAPPING_VALIDATION"
Aug  3 21:43:57 bastion LinuxCommandsWazuh: User venky [324213]:  1845  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep "MAPPING_VALIDATION"
Aug  3 21:44:07 bastion LinuxCommandsWazuh: User venky [324213]:  1846  stern cookie-cutter-beanie | grep "MAPPING_VALIDATION"
Aug  3 21:44:27 bastion LinuxCommandsWazuh: User venky [324213]:  1847  stern cookie-cutter-queues-beanie- | grep "MAPPING_VALIDATION"
Aug  3 21:44:30 bastion LinuxCommandsWazuh: User venky [324213]:  1848  kubectl get po | grep cookie
Aug  3 21:44:52 bastion LinuxCommandsWazuh: User venky [324213]:  1849  stern cookie-cutter-65f9b6465f-494ss
Aug  3 21:44:56 bastion LinuxCommandsWazuh: User venky [324213]:  1850  stern cookie-cutter-65f9b6465f-
Aug  3 21:45:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]:  1850  stern cookie-cutter-65f9b6465f-]
Aug  3 21:45:05 bastion LinuxCommandsWazuh: User venky [324213]:  1850  stern cookie-cutter-65f9b6465f-
Aug  3 21:46:25 bastion LinuxCommandsWazuh: User venky [324213]:  1851  stern cookie-cutter-queues-beanie- | grep "MAPPING_VALIDATION"
Aug  3 21:47:27 bastion LinuxCommandsWazuh: User venky [324213]:  1851  stern cookie-cutter-queues-beanie- | grep "MAPPING_VALIDATION"
Aug  3 21:47:32 bastion LinuxCommandsWazuh: User venky [324213]:  1852  stern cookie-cutter-queues-beanie- | grep "shadow_validation"
Aug  3 21:47:39 bastion LinuxCommandsWazuh: User venky [324213]:  1853  stern cookie-cutter-beanie- | grep "shadow_validation"
Aug  3 21:55:05 bastion LinuxCommandsWazuh: User venky [324213]:  1853  stern cookie-cutter-beanie- | grep "shadow_validation"
Aug  3 21:55:54 bastion LinuxCommandsWazuh: User venky [324213]:  1854  stern cookie-cutter-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:56:05 bastion LinuxCommandsWazuh: User venky [324213]:  1854  stern cookie-cutter-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:56:07 bastion LinuxCommandsWazuh: User venky [324213]:  1855  stern cookie-cutter-beanie- | grep "MAPPING_VALIDATION"
Aug  3 21:56:15 bastion LinuxCommandsWazuh: User venky [324213]:  1856  stern cookie-cutter-queue-beanie- | grep "MAPPING_VALIDATION"
Aug  3 21:56:25 bastion LinuxCommandsWazuh: User venky [324213]:  1857  stern cookie-cutter-queue-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:56:40 bastion LinuxCommandsWazuh: User venky [324213]:  1858  stern cookie-cutter-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:56:59 bastion LinuxCommandsWazuh: User venky [324213]:  1859  stern cookie-cutter-queue-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:58:04 bastion LinuxCommandsWazuh: User venky [324213]:  1859  stern cookie-cutter-queue-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:58:56 bastion LinuxCommandsWazuh: User venky [324213]:  1860  stern cookie-cutter-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:59:01 bastion LinuxCommandsWazuh: User venky [324213]:  1861  stern cookie-cutter-queue-beanie- | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 21:59:17 bastion LinuxCommandsWazuh: User venky [324213]:  1862  stern cookie-cutter-queue-beanie- | grep "MAPPING_VALIDATION"
Aug  3 22:01:55 bastion LinuxCommandsWazuh: User venky [324213]:  1862  stern cookie-cutter-queue-beanie- | grep "MAPPING_VALIDATION"
Aug  3 22:01:57 bastion LinuxCommandsWazuh: User venky [324213]:  1862  stern cookie-cutter-queue-beanie- | grep "MAPPING_VALIDATION"
Aug  3 22:05:55 bastion LinuxCommandsWazuh: User venky [324213]:  1863  stern cookie-cutter-queue-beanie- 
Aug  3 22:06:02 bastion LinuxCommandsWazuh: User venky [324213]:  1864  kubectl get po | grep cookie
Aug  3 22:06:35 bastion LinuxCommandsWazuh: User venky [324213]:  1865  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq
Aug  3 22:07:02 bastion LinuxCommandsWazuh: User venky [324213]:  1865  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq
Aug  3 22:07:02 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [324213]:  1865  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq]
Aug  3 22:08:44 bastion LinuxCommandsWazuh: User venky [324213]:  1865  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq
Aug  3 22:08:57 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [324213]:  1865  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq]
Aug  3 22:09:05 bastion LinuxCommandsWazuh: User venky [324213]:  1866  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep "MAPPING_VALIDATION"
Aug  3 22:09:14 bastion LinuxCommandsWazuh: User venky [324213]:  1867  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:09:17 bastion LinuxCommandsWazuh: User venky [324213]:  1867  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep -E "(Beanie|beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:09:30 bastion LinuxCommandsWazuh: User venky [324213]:  1868  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep -E "(Beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:30:24 bastion LinuxCommandsWazuh: User venky [324213]:  1868  stern cookie-cutter-queues-beanie-55c97ccfc7-r7hdq | grep -E "(Beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:38:26 bastion LinuxCommandsWazuh: User venky [324213]:  1869  stern cookie-cutter-queues-beanie- | grep -E "(Beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:38:51 bastion LinuxCommandsWazuh: User venky [324213]:  1870  stern cookie-cutter-beanie- | grep -E "(Beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:52:55 bastion LinuxCommandsWazuh: User venky [324213]:  1871  stern cookie-cutter-queues-beanie- | grep -E "(Beanie|🔄|✅|❌|🔗|🔍)"
Aug  3 22:53:12 bastion LinuxCommandsWazuh: User venky [324213]:  1872  stern cookie-cutter-queues-beanie- | grep -E "(Beanie|🚀|🔗|🔍|✅|❌)"
Aug  3 22:53:12 bastion LinuxCommandsWazuh: User venky [324213]:  1872  stern cookie-cutter-queues-beanie- | grep -E "(Beanie|🚀|🔗|🔍|✅|❌)"
Aug  3 22:53:22 bastion LinuxCommandsWazuh: User venky [324213]:  1873  stern cookie-cutter-queues-beanie- | grep "MAPPING_VALIDATION"
Aug  3 22:53:23 bastion LinuxCommandsWazuh: User venky [324213]:  1873  stern cookie-cutter-queues-beanie- | grep "MAPPING_VALIDATION"
Aug  3 22:53:24 bastion LinuxCommandsWazuh: User venky [324213]:  1874  stern cookie-cutter-queues-beanie- | grep "Queue worker starting"
Aug  3 23:23:48 bastion LinuxCommandsWazuh: User venky [324213]:  1875  stern cookie-cutter-queues-beanie- | grep -E "(🔧.*Shadow|MAPPING_VALIDATION|📋.*Shadow)"