Aug 3 23:56:16 bastion LinuxCommandsWazuh: User venky [2376146]: 1824 byobu Aug 3 23:56:43 bastion LinuxCommandsWazuh: User venky [324213]: 1876 stern cookie-cutter-queues-beanie- | grep "SHADOW_VAL" Aug 3 23:57:17 bastion LinuxCommandsWazuh: User venky [324213]: 1876 stern cookie-cutter-queues-beanie- | grep "SHADOW_VAL" Aug 3 23:57:24 bastion LinuxCommandsWazuh: User venky [324213]: 1877 kubectl get po | grep cooki Aug 3 23:57:44 bastion LinuxCommandsWazuh: User venky [324213]: 1878 stern cookie-cutter-queues-beanie- | grep -E "(🔧.*Shadow|MAPPING_VALIDATION|📋.*Shadow)" Aug 3 23:57:44 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1878 stern cookie-cutter-queues-beanie- | grep -E "(🔧.*Shadow|MAPPING_VALIDATION|📋.*Shadow)"] Aug 3 23:59:17 bastion LinuxCommandsWazuh: User venky [324213]: 1878 stern cookie-cutter-queues-beanie- | grep -E "(🔧.*Shadow|MAPPING_VALIDATION|📋.*Shadow)" Aug 3 23:59:18 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1878 stern cookie-cutter-queues-beanie- | grep -E "(🔧.*Shadow|MAPPING_VALIDATION|📋.*Shadow)"] Aug 3 23:59:27 bastion LinuxCommandsWazuh: User venky [324213]: 1879 stern cookie-cutter-queues-beanie- Aug 4 00:00:14 bastion LinuxCommandsWazuh: User venky [324213]: 1879 stern cookie-cutter-queues-beanie- Aug 4 00:00:14 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [324213]: 1879 stern cookie-cutter-queues-beanie- ] Aug 4 00:00:36 bastion LinuxCommandsWazuh: User venky [324213]: 1880 stern cookie-cutter-queues-beanie- | grep SHADOW_VAL Aug 4 00:02:20 bastion LinuxCommandsWazuh: User venky [324213]: 1880 stern cookie-cutter-queues-beanie- | grep SHADOW_VAL Aug 4 00:02:34 bastion LinuxCommandsWazuh: message repeated 5 times: [ User venky [324213]: 1880 stern cookie-cutter-queues-beanie- | grep SHADOW_VAL] Aug 4 00:02:41 bastion LinuxCommandsWazuh: User venky [324213]: 1881 kubectl get po | grep cooki Aug 4 00:02:48 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1881 kubectl get po | grep cooki] Aug 4 00:03:09 bastion LinuxCommandsWazuh: User venky [324213]: 1882 stern cookie-cutter-queues-6758c546c9-rp428 | grep SHADOW_VAL Aug 4 00:07:41 bastion LinuxCommandsWazuh: User venky [324213]: 1883 stern cookie-cutter-queues-6758c546c9-rp428 | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:08:31 bastion LinuxCommandsWazuh: User venky [324213]: 1883 stern cookie-cutter-queues-6758c546c9-rp428 | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:08:49 bastion LinuxCommandsWazuh: User venky [324213]: 1884 stern cookie-cutter-queue | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:09:12 bastion LinuxCommandsWazuh: User venky [324213]: 1885 stern cookie-cutter-queue-b | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:09:22 bastion LinuxCommandsWazuh: User venky [324213]: 1886 stern cookie-cutter-queues-b | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:09:33 bastion LinuxCommandsWazuh: User venky [324213]: 1887 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:10:08 bastion LinuxCommandsWazuh: User venky [324213]: 1887 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_SKIPPED Aug 4 00:10:27 bastion LinuxCommandsWazuh: User venky [324213]: 1888 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION Aug 4 00:11:28 bastion LinuxCommandsWazuh: User venky [324213]: 1889 # Look for any validation mismatches or issues Aug 4 00:11:32 bastion LinuxCommandsWazuh: User venky [324213]: 1890 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|ERROR|WARNING|Failed)" Aug 4 00:11:33 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1890 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|ERROR|WARNING|Failed)"] Aug 4 00:11:34 bastion LinuxCommandsWazuh: User venky [324213]: 1891 # Look for any validation mismatches or issues Aug 4 00:11:35 bastion LinuxCommandsWazuh: User venky [324213]: 1892 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|ERROR|WARNING|Failed)" Aug 4 00:11:56 bastion LinuxCommandsWazuh: User venky [324213]: 1893 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|ERROR|Failed)" Aug 4 00:12:07 bastion LinuxCommandsWazuh: User venky [324213]: 1894 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|Failed)" Aug 4 00:12:19 bastion LinuxCommandsWazuh: User venky [324213]: 1895 stern cookie-cutter-queues-beanie | grep -E "(MISMATCH|Faileds)" Aug 4 00:12:35 bastion LinuxCommandsWazuh: User venky [324213]: 1896 stern cookie-cutter-queues-beanie | grep -E "(Beanie.*initialized|MongoDB.*connected)" Aug 4 00:13:12 bastion LinuxCommandsWazuh: User venky [324213]: 1897 kubectl exec deployment/cookie-cutter-queues-beanie -- env | grep BEANIE Aug 4 00:14:35 bastion LinuxCommandsWazuh: User venky [324213]: 1897 kubectl exec deployment/cookie-cutter-queues-beanie -- env | grep BEANIE Aug 4 00:14:45 bastion LinuxCommandsWazuh: User venky [324213]: 1898 stern cookie-cutter-queues-beanie | grep MAPPING_SUCCESS Aug 4 00:15:00 bastion LinuxCommandsWazuh: User venky [324213]: 1899 stern cookie-cutter-queues-beanie | grep MAPPING_FIELD_MISMATCH Aug 4 00:22:07 bastion LinuxCommandsWazuh: User venky [324213]: 1899 stern cookie-cutter-queues-beanie | grep MAPPING_FIELD_MISMATCH Aug 4 00:22:13 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1899 stern cookie-cutter-queues-beanie | grep MAPPING_FIELD_MISMATCH] Aug 4 00:23:37 bastion LinuxCommandsWazuh: User venky [324213]: 1900 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION Aug 4 00:25:06 bastion LinuxCommandsWazuh: User venky [324213]: 1901 stern cookie-cutter-queues-beanie | grep Beanie Aug 4 00:25:15 bastion LinuxCommandsWazuh: User venky [324213]: 1902 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_STARTING Aug 4 00:25:42 bastion LinuxCommandsWazuh: User venky [324213]: 1903 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 00:25:45 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [324213]: 1903 stern cookie-cutter-queues-beanie | grep SHADOW_VAL] Aug 4 00:25:49 bastion LinuxCommandsWazuh: User venky [324213]: 1903 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 00:25:51 bastion LinuxCommandsWazuh: User venky [2408443]: 1910 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 00:25:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2408443]: 1910 stern cookie-cutter-queues-beanie | grep SHADOW_VAL] Aug 4 00:26:14 bastion LinuxCommandsWazuh: User venky [2408443]: 1911 stern cookie-cutter-queues-beanie | grep Beanie Aug 4 00:26:20 bastion LinuxCommandsWazuh: User venky [2408443]: 1911 stern cookie-cutter-queues-beanie | grep Beanie Aug 4 00:26:22 bastion LinuxCommandsWazuh: User venky [2408443]: 1912 tern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_STARTING Aug 4 00:26:32 bastion LinuxCommandsWazuh: User venky [2408443]: 1913 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_STARTING Aug 4 00:26:37 bastion LinuxCommandsWazuh: User venky [2408443]: 1914 stern cookie-cutter-queues-beanie | grep Beanie Aug 4 00:26:41 bastion LinuxCommandsWazuh: User venky [2408443]: 1915 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_STARTING Aug 4 00:26:52 bastion LinuxCommandsWazuh: User venky [2408443]: 1915 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION_STARTING Aug 4 00:26:59 bastion LinuxCommandsWazuh: User venky [2408443]: 1916 stern cookie-cutter-queues-beanie | grep MAPPING_VALIDATION Aug 4 00:27:41 bastion LinuxCommandsWazuh: User venky [2408443]: 1917 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION_SKIPPED" Aug 4 01:13:36 bastion LinuxCommandsWazuh: User venky [2408443]: 1917 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION_SKIPPED" Aug 4 01:13:45 bastion LinuxCommandsWazuh: User venky [2408443]: 1918 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION" Aug 4 01:13:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2408443]: 1918 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION"] Aug 4 01:14:13 bastion LinuxCommandsWazuh: User venky [2408443]: 1918 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION" Aug 4 01:14:14 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2408443]: 1918 stern cookie-cutter-queues-beanie | grep "MAPPING_VALIDATION"] Aug 4 01:14:17 bastion LinuxCommandsWazuh: User venky [2408443]: 1919 # Watch all shadow validation logs Aug 4 01:26:02 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:26:55 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:26:55 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:26:58 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:26:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)"] Aug 4 01:26:59 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:26:59 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:29:23 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:29:25 bastion LinuxCommandsWazuh: User venky [2472053]: 1910 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 01:29:28 bastion LinuxCommandsWazuh: User venky [2472053]: 1910 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 01:29:29 bastion LinuxCommandsWazuh: User venky [2472053]: 1910 stern cookie-cutter-queues-beanie | grep SHADOW_VAL Aug 4 01:29:48 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:30:12 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:30:35 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:31:39 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:31:49 bastion LinuxCommandsWazuh: User venky [2408443]: 1920 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:31:56 bastion LinuxCommandsWazuh: User venky [2408443]: 1921 kubectl get po |grep cooki Aug 4 01:31:56 bastion LinuxCommandsWazuh: User venky [2408443]: 1921 kubectl get po |grep cooki Aug 4 01:32:12 bastion LinuxCommandsWazuh: User venky [2408443]: 1921 kubectl get po |grep cooki Aug 4 01:34:29 bastion LinuxCommandsWazuh: User venky [2408443]: 1922 stern cookie-cutter-queues-beanie- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:34:48 bastion LinuxCommandsWazuh: User venky [2408443]: 1923 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:43:24 bastion LinuxCommandsWazuh: User venky [2408443]: 1923 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:43:42 bastion LinuxCommandsWazuh: User venky [2408443]: 1923 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:52:13 bastion LinuxCommandsWazuh: User venky [2408443]: 1923 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:52:51 bastion LinuxCommandsWazuh: User venky [2408443]: 1924 stern cookie-cutter-queue-b | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:56:28 bastion LinuxCommandsWazuh: User venky [2408443]: 1924 stern cookie-cutter-queue-b | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 01:56:58 bastion LinuxCommandsWazuh: User venky [2408443]: 1925 stern cookie-cutter-queue-b Aug 4 01:57:04 bastion LinuxCommandsWazuh: User venky [2408443]: 1926 stern cookie-cutter-queue Aug 4 01:57:29 bastion LinuxCommandsWazuh: User venky [2408443]: 1926 stern cookie-cutter-queue Aug 4 01:58:27 bastion LinuxCommandsWazuh: User venky [2408443]: 1926 stern cookie-cutter-queue Aug 4 01:58:42 bastion LinuxCommandsWazuh: User venky [2408443]: 1926 stern cookie-cutter-queue Aug 4 02:03:16 bastion LinuxCommandsWazuh: User venky [2408443]: 1927 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 02:28:53 bastion LinuxCommandsWazuh: User venky [2530655]: 1911 byobu Aug 4 02:29:38 bastion LinuxCommandsWazuh: User venky [2408443]: 1927 stern cookie-cutter- | grep -E "(MAPPING_|CONTACTS_|🔧.*Shadow)" Aug 4 02:29:47 bastion LinuxCommandsWazuh: User venky [2408443]: 1928 stern cookie-cutter-queue Aug 4 02:30:31 bastion LinuxCommandsWazuh: User venky [2408443]: 1928 stern cookie-cutter-queue Aug 4 02:32:19 bastion LinuxCommandsWazuh: User venky [2408443]: 1928 stern cookie-cutter-queue Aug 4 02:34:41 bastion LinuxCommandsWazuh: User venky [2408443]: 1928 stern cookie-cutter-queue Aug 4 09:59:04 bastion LinuxCommandsWazuh: User ankur [2578381]: 1252 exit Aug 4 09:59:10 bastion LinuxCommandsWazuh: User ankur [2578468]: 1252 exit Aug 4 09:59:44 bastion LinuxCommandsWazuh: User ankur [2578468]: 1253 byobu Aug 4 12:26:00 bastion LinuxCommandsWazuh: User mohtashim [2590410]: 1611 k logs -f cookie-cutter-queues-58c88464f8-fmx2n | grep "fnp_events_helper.py" Aug 4 12:26:28 bastion LinuxCommandsWazuh: User mohtashim [2590410]: 1612 mongo pixel_v1 Aug 4 13:12:50 bastion LinuxCommandsWazuh: User ankur [2593402]: 1254 exit Aug 4 13:34:18 bastion LinuxCommandsWazuh: User mohtashim [2615160]: 1612 mongo pixel_v1 Aug 4 13:49:59 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1612 mongo pixel_v1 Aug 4 13:50:16 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1612 mongo pixel_v1 Aug 4 13:55:11 bastion LinuxCommandsWazuh: User abhijeet [2636283]: 1833 kubectl get pods | grep cookie Aug 4 13:55:16 bastion LinuxCommandsWazuh: User abhijeet [2636283]: 1834 cat .bashrc Aug 4 13:55:27 bastion LinuxCommandsWazuh: User abhijeet [2636283]: 1835 ssh -p 12222 devops@34.131.103.89 Aug 4 13:55:33 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1612 mongo pixel_v1 Aug 4 13:57:15 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1612 mongo pixel_v1 Aug 4 13:57:17 bastion LinuxCommandsWazuh: User ayush [2639089]: 294 exit Aug 4 13:57:18 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1613 clear Aug 4 13:59:14 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1806 exit Aug 4 13:59:17 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1807 cd Aug 4 13:59:27 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1808 cd .. Aug 4 13:59:27 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1809 ls Aug 4 13:59:31 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1810 cd ayush/ Aug 4 13:59:31 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1811 ls Aug 4 13:59:59 bastion LinuxCommandsWazuh: User ayush [2641699]: 294 exit Aug 4 14:00:00 bastion LinuxCommandsWazuh: User ayush [2641699]: 295 cd Aug 4 14:03:20 bastion LinuxCommandsWazuh: User abhijeet [2645065]: 1833 kubectl get pods | grep cookie Aug 4 14:10:19 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 14:10:19 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 14:20:24 bastion LinuxCommandsWazuh: User ayush [2641699]: 296 cool-server Aug 4 14:20:24 bastion LinuxCommandsWazuh: User ubuntu [2640971]: 1812 sudo su ayush Aug 4 14:23:38 bastion LinuxCommandsWazuh: User abhijeet [2665357]: 1836 sudo su ubuntu Aug 4 14:23:38 bastion LinuxCommandsWazuh: User abhijeet [2665357]: 1837 ls Aug 4 14:24:01 bastion LinuxCommandsWazuh: User ayush [2665739]: 296 cool-server Aug 4 14:24:03 bastion LinuxCommandsWazuh: User ayush [2665739]: 297 cd Aug 4 14:24:03 bastion LinuxCommandsWazuh: User ayush [2665739]: 298 ls Aug 4 14:24:13 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1836 sudo su ubuntu Aug 4 14:24:18 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1837 cat .ssh/id_rsa.pub Aug 4 14:25:57 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1838 cool-server Aug 4 14:26:08 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1839 cat .bashrc Aug 4 14:26:24 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1836 sudo su ubuntu Aug 4 14:26:24 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1837 ls Aug 4 14:26:26 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1837 ls Aug 4 14:26:30 bastion LinuxCommandsWazuh: User ayush [2668974]: 296 cool-server Aug 4 14:26:31 bastion LinuxCommandsWazuh: User ayush [2668974]: 297 cd Aug 4 14:26:31 bastion LinuxCommandsWazuh: User ayush [2668974]: 298 ;ls Aug 4 14:26:34 bastion LinuxCommandsWazuh: User ayush [2668974]: 299 ls Aug 4 14:26:41 bastion LinuxCommandsWazuh: User ayush [2668974]: 300 cat .ssh/yes.pub Aug 4 14:27:20 bastion LinuxCommandsWazuh: User ayush [2668974]: 301 cat .bashrc Aug 4 14:27:57 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1840 vim .bashrc Aug 4 14:28:00 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1841 cool-server Aug 4 14:28:16 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1842 source .bashrc Aug 4 14:28:20 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1843 cool-server Aug 4 14:30:26 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1844 vim .bashrc Aug 4 14:30:31 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1845 cool-server -vv Aug 4 14:30:49 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1846 cat .ssh/id_rsa Aug 4 14:30:53 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1847 cat .ssh/id_rsa.pub Aug 4 14:31:21 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1848 cool-server -vvv Aug 4 14:31:35 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1849 clear Aug 4 14:31:36 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1850 cool-server -vvv Aug 4 14:35:37 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1851 cat ~/.ssh/id_rsa.pub Aug 4 14:35:46 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1852 chmod 700 ~/.ssh Aug 4 14:35:46 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1853 chmod 600 ~/.ssh/authorized_keys Aug 4 14:35:48 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1854 chown abhijeet:abhijeet ~/.ssh ~/.ssh/authorized_keys Aug 4 14:35:52 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1855 cool-server -vvv Aug 4 14:36:08 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1856 ssh-keygen -lf ~/.ssh/id_rsa.pub Aug 4 14:37:23 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1857 ssh-copy-id -p 12222 abhijeet@34.131.103.89 Aug 4 14:38:08 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1858 cat ~/.ssh/id_rsa.pub Aug 4 14:40:07 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1838 sudo su ayush Aug 4 14:40:08 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1839 ls Aug 4 14:40:10 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1839 ls Aug 4 14:40:28 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1840 cat ~/.ssh/id_rsa.pub Aug 4 14:41:10 bastion LinuxCommandsWazuh: User ayush [2639089]: 295 mongo Aug 4 14:41:40 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1841 vim .bashrc Aug 4 14:41:47 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1842 source .bashrc Aug 4 14:41:50 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1843 cool-server Aug 4 14:42:38 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1612 mongo pixel_v1 Aug 4 14:47:33 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1844 internal-server Aug 4 14:47:34 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1845 ls Aug 4 14:47:55 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1846 ssh abhijeet@10.8.0.9 Aug 4 14:47:59 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1847 cat .bashrc Aug 4 14:48:51 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1848 vim .bashrc Aug 4 14:49:03 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1849 source .bashrc Aug 4 14:49:17 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1850 cool-ssh Aug 4 14:49:46 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1851 vim .bashrc Aug 4 14:49:50 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1852 cat .bashrc Aug 4 14:55:08 bastion LinuxCommandsWazuh: User abhijeet [2665998]: 1859 ssh abhijeet@34.131.103.89 Aug 4 14:56:03 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1853 kubectl get pods -n loki Aug 4 14:56:26 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1854 kubectl logs prometheus-server-6bd6b89df7-cmj5t -n loki --tail 300 Aug 4 15:14:38 bastion LinuxCommandsWazuh: User venky [2717161]: 1911 byobu Aug 4 15:14:56 bastion LinuxCommandsWazuh: User venky [2717161]: 1912 mongo Aug 4 15:16:04 bastion LinuxCommandsWazuh: User venky [2719212]: 1911 byobu Aug 4 15:16:11 bastion LinuxCommandsWazuh: User venky [2719212]: 1911 byobu Aug 4 15:20:11 bastion LinuxCommandsWazuh: User venky [2719212]: 1912 mongo-server Aug 4 15:20:13 bastion LinuxCommandsWazuh: User venky [2723470]: 1912 mongo-server Aug 4 15:27:29 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1855 kubectl get hpa -n nitrox-production Aug 4 15:28:46 bastion LinuxCommandsWazuh: User abhijeet [2732161]: 1860 exit Aug 4 15:28:46 bastion LinuxCommandsWazuh: User abhijeet [2732161]: 1861 l;s Aug 4 15:28:47 bastion LinuxCommandsWazuh: User abhijeet [2732161]: 1862 cls Aug 4 15:28:48 bastion LinuxCommandsWazuh: User abhijeet [2732161]: 1863 ls Aug 4 15:29:42 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1612 mongo pixel_v1 Aug 4 15:29:43 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1613 clear Aug 4 15:34:12 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1614 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 4 15:35:01 bastion LinuxCommandsWazuh: User mohtashim [2631272]: 1615 mongo pixel_v1 Aug 4 15:44:38 bastion LinuxCommandsWazuh: User ashish [2747832]: 285 byobu Aug 4 15:44:45 bastion LinuxCommandsWazuh: User ashish [424595]: 301 kubectl get pods Aug 4 15:44:45 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [424595]: 301 kubectl get pods] Aug 4 15:44:46 bastion LinuxCommandsWazuh: User ashish [424595]: 302 clear Aug 4 15:45:27 bastion LinuxCommandsWazuh: User ashish [424595]: 302 clear Aug 4 15:45:36 bastion LinuxCommandsWazuh: User ashish [424595]: 303 history | grep "psql" Aug 4 15:46:21 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 15:46:24 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1615 k get pods Aug 4 15:47:33 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1856 kubectl get pods | grep cookie-cutter-queues-6d7db8df6c-ntpcs Aug 4 15:47:49 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1857 kubectl logs cookie-cutter-queues-6d7db8df6c-ntpcs -f Aug 4 15:48:06 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1858 stern cookie-cutter-queues-6d7db8df6c-ntpcs Aug 4 15:48:11 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1859 stern cookie-cutter-queues-6d7db8df6c-ntpcs --help Aug 4 15:49:02 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1860 kubectl logs cookie-cutter-queues-6d7db8df6c-ntpcs | grep error Aug 4 15:49:16 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1861 kubectl get pods | grep cookie-cutter-queue Aug 4 15:49:30 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1862 kubectl logs cookie-cutter-queues-6d7db8df6c-pb9m7 | grep error Aug 4 15:50:02 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1863 date Aug 4 15:50:08 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1616 stern cookie-cutter-queues-6d7db8df6c-ntpcs Aug 4 15:50:14 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1617 clear Aug 4 15:50:14 bastion LinuxCommandsWazuh: User ashish [424595]: 304 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 4 15:50:26 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1864 kubectl get pods -n loki Aug 4 15:50:44 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1865 kubectl get pods -n loki -o wide Aug 4 15:50:56 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1866 kubectl top node V Aug 4 15:50:58 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1867 kubectl top node gke-nitrox-production-cookie-cutter-49a2022e-8j5q Aug 4 15:51:18 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1868 kubectl logs grafana-769c7b685f-6hh79 -n loki -f Aug 4 15:51:24 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1868 kubectl logs grafana-769c7b685f-6hh79 -n loki -f Aug 4 15:51:40 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1869 kubectl describe grafana-769c7b685f-6hh79 -n loki Aug 4 15:51:45 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1870 kubectl describe pod grafana-769c7b685f-6hh79 -n loki Aug 4 15:52:05 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1870 kubectl describe pod grafana-769c7b685f-6hh79 -n loki Aug 4 15:52:06 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1870 kubectl describe pod grafana-769c7b685f-6hh79 -n loki Aug 4 15:52:18 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1871 kubectl get deployment -n loki Aug 4 15:53:16 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1618 mongo pixel_v1 Aug 4 15:53:17 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1872 kubectl get pods -n loki -o wide Aug 4 15:53:55 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1873 kubectl get pod -n loki grafana-769c7b685f-mvm7s Aug 4 15:54:11 bastion LinuxCommandsWazuh: User ashish [424595]: 304 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 4 15:54:12 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1874 kubectl get pod -n loki grafana-769c7b685f-6hh79 Aug 4 15:54:12 bastion LinuxCommandsWazuh: User ashish [2747832]: 285 byobu Aug 4 15:54:41 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1875 kubectl delete pod -n loki grafana-769c7b685f-6hh79 Aug 4 15:54:45 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1876 kubectl get pods -n loki -o wide Aug 4 15:54:47 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1877 kubectl get pods -n loki Aug 4 15:54:54 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1877 kubectl get pods -n loki Aug 4 15:55:08 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1878 kubectl describe pod grafana-769c7b685f-8s6zm -n loki Aug 4 15:55:11 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1878 kubectl describe pod grafana-769c7b685f-8s6zm -n loki Aug 4 15:55:16 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1879 kubectl get pods -n loki Aug 4 15:55:20 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1880 kubectl describe pod grafana-769c7b685f-8s6zm -n loki Aug 4 15:55:24 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1880 kubectl describe pod grafana-769c7b685f-8s6zm -n loki Aug 4 15:55:41 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1881 kubectl exec -it pod grafana-769c7b685f-8s6zm -- bash Aug 4 15:55:46 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1882 kubectl exec -it grafana-769c7b685f-8s6zm -- bash Aug 4 15:55:57 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1883 kubectl get pods -n loki Aug 4 15:56:19 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1884 kubectl get pods | grep cookie-cutter Aug 4 16:34:01 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1618 mongo pixel_v1 Aug 4 16:34:01 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1618 mongo pixel_v1 Aug 4 16:34:45 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 16:34:45 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2636730]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 16:39:01 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 16:39:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2636730]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 16:39:02 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1620 clear Aug 4 16:39:39 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1621 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 16:39:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2636730]: 1621 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 16:39:41 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1622 clear Aug 4 16:43:48 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1612 mongo pixel_v1 Aug 4 16:45:14 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1623 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 16:45:15 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1624 clear Aug 4 16:45:34 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1613 stern cookie-cutter | grep "validate_journey_with_utm_type" Aug 4 16:45:57 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 16:45:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2786371]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 16:48:24 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1885 kubectl get pods -n loki Aug 4 17:01:57 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1625 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:01:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2636730]: 1625 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 17:01:59 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1626 clear Aug 4 17:02:31 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1627 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:19:49 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1627 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:25:06 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1627 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:25:17 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:26:51 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1886 kubectl get hpa -n nitrox-production Aug 4 17:27:08 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1886 kubectl get hpa -n nitrox-production Aug 4 17:27:43 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1887 kubectl describe hpa house-of-click -n nitrox-production Aug 4 17:28:01 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1887 kubectl describe hpa house-of-click -n nitrox-production Aug 4 17:28:42 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1628 stern cookie-cutter-queues-6c9b997947-79kxt | grep "FNP_ORDER_JOURNEY" Aug 4 17:28:43 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1628 stern cookie-cutter-queues-6c9b997947-79kxt | grep "FNP_ORDER_JOURNEY" Aug 4 17:29:41 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1614 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:29:48 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:29:49 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:30:17 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1888 kubectl edit hpa house-of-click -n nitrox-production Aug 4 17:30:25 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:30:28 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1615 stern cookie-cutter-queues-6c9b997947-l5mqj | grep "FNP_ORDER_JOURNEY" Aug 4 17:30:29 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1889 kubectl get pods | grep house Aug 4 17:30:34 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1615 stern cookie-cutter-queues-6c9b997947-l5mqj | grep "FNP_ORDER_JOURNEY" Aug 4 17:30:37 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1890 kubectl get pods -o wide | grep house Aug 4 17:30:46 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 17:31:07 bastion LinuxCommandsWazuh: User ashish [2791258]: 304 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 4 17:32:50 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1891 kubectl get hpa -n nitrox-production Aug 4 17:36:42 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1892 kubectl get pod | grep house Aug 4 17:36:47 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1893 kubectl get pod -o wide | grep house Aug 4 17:36:54 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1894 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 17:44:09 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1895 cd .. Aug 4 17:44:09 bastion LinuxCommandsWazuh: User abhijeet [2668874]: 1896 l Aug 4 17:44:22 bastion LinuxCommandsWazuh: User venky [2792286]: 1915 vim .bashrc Aug 4 17:44:23 bastion LinuxCommandsWazuh: User venky [2792286]: 1916 cd Aug 4 17:44:24 bastion LinuxCommandsWazuh: User venky [2792286]: 1917 ls Aug 4 17:44:25 bastion LinuxCommandsWazuh: User venky [2792286]: 1917 ls Aug 4 17:44:41 bastion LinuxCommandsWazuh: User venky [2792286]: 1917 ls Aug 4 17:55:02 bastion LinuxCommandsWazuh: User abhijeet [2793252]: 1860 exit Aug 4 17:57:04 bastion LinuxCommandsWazuh: User venky [2793908]: 1915 vim .bashrc Aug 4 17:57:05 bastion LinuxCommandsWazuh: User venky [2793908]: 1916 cd Aug 4 17:57:05 bastion LinuxCommandsWazuh: User venky [2793908]: 1917 ls Aug 4 17:57:14 bastion LinuxCommandsWazuh: User venky [2793908]: 1918 cat .bashrc Aug 4 17:57:31 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1860 exit Aug 4 17:57:31 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1861 ls Aug 4 17:57:34 bastion LinuxCommandsWazuh: User ankur [2794120]: 1255 byobu Aug 4 17:57:43 bastion LinuxCommandsWazuh: User ankur [2794359]: 1255 byobu Aug 4 17:57:50 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1862 kubectl get hpa -n nitrox-proxucation Aug 4 17:57:53 bastion LinuxCommandsWazuh: User ankur [2794359]: 1256 k get pods | grep house Aug 4 17:57:53 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1863 kubectl get hpa -n nitrox-proxuction Aug 4 17:57:58 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1864 kubectl get hpa -n nitrox-production Aug 4 17:57:58 bastion LinuxCommandsWazuh: User ankur [2794359]: 1256 k get pods | grep house Aug 4 17:58:04 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2794359]: 1256 k get pods | grep house] Aug 4 17:58:09 bastion LinuxCommandsWazuh: User ankur [2794359]: 1256 k get pods | grep house Aug 4 17:58:35 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2794359]: 1256 k get pods | grep house] Aug 4 17:58:41 bastion LinuxCommandsWazuh: User ankur [2794359]: 1256 k get pods | grep house Aug 4 17:58:44 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2794359]: 1256 k get pods | grep house] Aug 4 17:58:59 bastion LinuxCommandsWazuh: User ankur [2794359]: 1257 k logs -f house-of-click-799cb7f599-c6rrl Aug 4 17:59:10 bastion LinuxCommandsWazuh: User venky [2792286]: 1918 mongo-server Aug 4 17:59:30 bastion LinuxCommandsWazuh: User ankur [2794359]: 1258 k logs -f house-of-click-799cb7f599-c6rrl | more Aug 4 17:59:31 bastion LinuxCommandsWazuh: User ankur [2794359]: 1258 k logs -f house-of-click-799cb7f599-c6rrl | more Aug 4 17:59:34 bastion LinuxCommandsWazuh: User ankur [2794359]: 1259 git status Aug 4 17:59:39 bastion LinuxCommandsWazuh: User ankur [2794359]: 1260 k get pods | grep house Aug 4 17:59:39 bastion LinuxCommandsWazuh: User ayush [2665739]: 299 cool-server Aug 4 17:59:58 bastion LinuxCommandsWazuh: User ashish [2791258]: 305 mongo Aug 4 18:00:19 bastion LinuxCommandsWazuh: User ankur [2794359]: 1260 k get pods | grep house Aug 4 18:08:22 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1865 kubectl get pods Aug 4 18:08:42 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1866 kubectl top pod house-of-click-799cb7f599-c6rrl Aug 4 18:08:58 bastion LinuxCommandsWazuh: User abhijeet [2794029]: 1867 kubectl top pod house-of-click-799cb7f599-zz6nb Aug 4 18:09:56 bastion LinuxCommandsWazuh: User ankur [271390]: 1237 ls Aug 4 18:10:36 bastion LinuxCommandsWazuh: User abhijeet [2808043]: 1927 sudo su ayush Aug 4 18:10:39 bastion LinuxCommandsWazuh: User ayush [2808106]: 307 cool-server Aug 4 18:13:50 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 18:13:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2636730]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY"] Aug 4 18:15:15 bastion LinuxCommandsWazuh: User mohtashim [2332801]: 1507 mongo pixel_v1 Aug 4 18:15:17 bastion LinuxCommandsWazuh: User mohtashim [99239]: 1061 clear Aug 4 18:15:21 bastion LinuxCommandsWazuh: User mohtashim [2813768]: 1613 exit Aug 4 18:15:23 bastion LinuxCommandsWazuh: User mohtashim [2813829]: 1613 exit Aug 4 18:16:05 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1630 byobu Aug 4 18:16:09 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1631 clear Aug 4 18:39:01 bastion LinuxCommandsWazuh: User ayush [2838565]: 307 cool-server Aug 4 18:39:10 bastion LinuxCommandsWazuh: User ayush [2838565]: 308 mongo Aug 4 18:39:48 bastion LinuxCommandsWazuh: User ankur [271390]: 1238 mongo Aug 4 18:39:51 bastion LinuxCommandsWazuh: User ankur [1306219]: 1231 psql Aug 4 18:39:56 bastion LinuxCommandsWazuh: User ankur [2794359]: 1260 k get pods | grep house Aug 4 18:40:02 bastion LinuxCommandsWazuh: User ankur [3890533]: 1267 k get pods | grep vortex Aug 4 18:40:14 bastion LinuxCommandsWazuh: User ankur [3719099]: 1212 redis Aug 4 18:45:02 bastion LinuxCommandsWazuh: User ankur [2794359]: 1261 k get configmaps Aug 4 18:45:36 bastion LinuxCommandsWazuh: User ankur [2794359]: 1262 k edit configmaps house-of-click-config Aug 4 18:46:27 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1615 stern cookie-cutter-queues-6c9b997947-l5mqj | grep "FNP_ORDER_JOURNEY" Aug 4 18:46:28 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1615 stern cookie-cutter-queues-6c9b997947-l5mqj | grep "FNP_ORDER_JOURNEY" Aug 4 18:49:05 bastion LinuxCommandsWazuh: User rihan [2848929]: 1217 redis-url Aug 4 18:49:16 bastion LinuxCommandsWazuh: User rihan [2848929]: 1218 make cookie-bash Aug 4 18:51:03 bastion LinuxCommandsWazuh: User ayush [2808106]: 307 cool-server Aug 4 18:52:23 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1631 clear Aug 4 18:52:23 bastion LinuxCommandsWazuh: User mohtashim [2636730]: 1631 clear Aug 4 18:54:49 bastion LinuxCommandsWazuh: User rihan [2848929]: 1219 make nitrox-bash Aug 4 18:54:56 bastion LinuxCommandsWazuh: User rihan [2854727]: 1217 redis-url Aug 4 18:55:58 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1812 sudo su ayush Aug 4 18:56:00 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1813 ls Aug 4 18:57:16 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1813 ls Aug 4 18:57:17 bastion LinuxCommandsWazuh: message repeated 11 times: [ User ubuntu [2857551]: 1813 ls] Aug 4 18:57:18 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1814 cd .. Aug 4 18:57:19 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1815 ls Aug 4 18:57:45 bastion LinuxCommandsWazuh: User ubuntu [2857551]: 1815 ls Aug 4 19:03:34 bastion LinuxCommandsWazuh: User ayush [2838565]: 309 mongo Aug 4 19:04:09 bastion LinuxCommandsWazuh: User ping-pong [2873382]: Aug 4 19:05:01 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 1 exit Aug 4 19:06:59 bastion LinuxCommandsWazuh: User abhijeet [2879448]: 1935 sudo su venky Aug 4 19:07:19 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 1 exit Aug 4 19:07:21 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 2 cd Aug 4 19:07:22 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 3 ls Aug 4 19:07:43 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 4 cat .ssh/authorized_keys Aug 4 19:07:43 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1616 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:07:44 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1616 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:07:45 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 5 ls Aug 4 19:07:46 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 5 ls Aug 4 19:07:46 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1617 CLEAR Aug 4 19:07:46 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1617 CLEAR Aug 4 19:07:47 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1618 clear Aug 4 19:07:49 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 6 cd .ssh/ Aug 4 19:07:49 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 7 ls Aug 4 19:08:07 bastion LinuxCommandsWazuh: User abhijeet [2882411]: 1935 sudo su venky Aug 4 19:08:07 bastion LinuxCommandsWazuh: User abhijeet [2882411]: 1936 ;ls Aug 4 19:08:09 bastion LinuxCommandsWazuh: User abhijeet [2882411]: 1937 ks Aug 4 19:08:12 bastion LinuxCommandsWazuh: User abhijeet [2882411]: 1938 ls Aug 4 19:08:21 bastion LinuxCommandsWazuh: User venky [2882891]: 1921 cat .bashrc Aug 4 19:08:24 bastion LinuxCommandsWazuh: User venky [2882891]: 1922 cd Aug 4 19:08:25 bastion LinuxCommandsWazuh: User venky [2882891]: 1923 ls Aug 4 19:08:27 bastion LinuxCommandsWazuh: User venky [2882891]: 1923 ls Aug 4 19:08:42 bastion LinuxCommandsWazuh: User venky [2882891]: 1924 cat .bashrc Aug 4 19:08:52 bastion LinuxCommandsWazuh: User venky [2882891]: 1925 mongo-server Aug 4 19:09:08 bastion LinuxCommandsWazuh: User venky [2882891]: 1926 mongo Aug 4 19:09:20 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 8 cd .. Aug 4 19:09:21 bastion LinuxCommandsWazuh: User ping-pong [2880707]: l Aug 4 19:10:04 bastion LinuxCommandsWazuh: User ping-pong [2880707]: 10 vim .bashrc Aug 4 19:10:06 bastion LinuxCommandsWazuh: User abhijeet [2879448]: 1936 sudo su ping-pong Aug 4 19:10:32 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 2 mongo Aug 4 19:10:48 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 3 cat .bashrc Aug 4 19:11:03 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:11:05 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 4 source .bashrc Aug 4 19:11:17 bastion LinuxCommandsWazuh: User venky [2888619]: 1921 cat .bashrc Aug 4 19:11:18 bastion LinuxCommandsWazuh: User ankur [2888675]: 1325 exit Aug 4 19:11:21 bastion LinuxCommandsWazuh: User venky [2888619]: 1921 cat .bashrc Aug 4 19:11:21 bastion LinuxCommandsWazuh: User venky [2888619]: 1921 cat .bashrc Aug 4 19:11:30 bastion LinuxCommandsWazuh: User venky [2888619]: 1922 kubectl get hpa Aug 4 19:11:40 bastion LinuxCommandsWazuh: User abhijeet [2882411]: 1939 sudo su venky Aug 4 19:12:50 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:12:51 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1619 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:12:59 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1620 k logs -f cookie-cutter-queues-7c499ff54b-jhzt6 Aug 4 19:14:03 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1621 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:14:11 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1622 k logs -f cookie-cutter-queues-7c499ff54b-jhzt6 Aug 4 19:18:50 bastion LinuxCommandsWazuh: User rihan [2848929]: 1220 byobu Aug 4 19:20:09 bastion LinuxCommandsWazuh: User venky [2888619]: 1922 kubectl get hpa Aug 4 19:20:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2888619]: 1922 kubectl get hpa ] Aug 4 19:21:30 bastion LinuxCommandsWazuh: User venky [2888619]: 1923 mongo-server Aug 4 19:21:35 bastion venky: root@ [2906157]: exit [0] Aug 4 19:21:40 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1623 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:21:40 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1623 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:21:41 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1624 clear Aug 4 19:22:05 bastion LinuxCommandsWazuh: User abhijeet [2906756]: 1942 exit Aug 4 19:22:11 bastion LinuxCommandsWazuh: User ayush [2906854]: 310 exit Aug 4 19:22:13 bastion LinuxCommandsWazuh: User ayush [2906854]: 311 cd Aug 4 19:22:14 bastion LinuxCommandsWazuh: User ayush [2906854]: 312 ls Aug 4 19:22:16 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1625 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 19:22:36 bastion venky: root@ [2906157]: vim /home/venky/.bashrc [0] Aug 4 19:22:51 bastion venky: root@ [2906157]: ssh @34.131.172.123 [255] Aug 4 19:22:57 bastion venky: root@ [2906157]: ssh 34.131.172.123 [255] Aug 4 19:23:02 bastion venky: root@ [2906157]: ssh 34.131.172.123 [255] Aug 4 19:23:09 bastion venky: root@ [2906157]: ssh ubuntu@34.131.172.123 [255] Aug 4 19:23:10 bastion venky: root@ [2906157]: ssh ubuntu@34.131.172.123 [255] Aug 4 19:23:11 bastion LinuxCommandsWazuh: User venky [2888619]: 1924 sudo su - root Aug 4 19:23:43 bastion LinuxCommandsWazuh: User venky [2888619]: 1924 sudo su - root Aug 4 19:24:39 bastion LinuxCommandsWazuh: User abhijeet [2909283]: 1942 exit Aug 4 19:24:40 bastion LinuxCommandsWazuh: User abhijeet [2909283]: 1943 ls Aug 4 19:24:42 bastion LinuxCommandsWazuh: User abhijeet [2909283]: 1943 ls Aug 4 19:24:45 bastion LinuxCommandsWazuh: User abhijeet [2909283]: 1943 ls Aug 4 19:28:07 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 5 mongo Aug 4 19:28:07 bastion LinuxCommandsWazuh: User ping-pong [2875104]: 5 mongo Aug 4 19:32:19 bastion LinuxCommandsWazuh: User ankur [2917173]: 1325 exit Aug 4 19:32:29 bastion LinuxCommandsWazuh: User ankur [2917173]: 1326 k get pods | grep house Aug 4 19:32:45 bastion LinuxCommandsWazuh: User venky [2888619]: 1924 sudo su - root Aug 4 19:32:46 bastion LinuxCommandsWazuh: User venky [2888619]: 1924 sudo su - root Aug 4 19:33:20 bastion LinuxCommandsWazuh: User ankur [2917173]: 1327 k get deployment Aug 4 19:34:34 bastion LinuxCommandsWazuh: User ankur [2917173]: 1328 k rollout restart deployment/house-of-click Aug 4 19:34:39 bastion LinuxCommandsWazuh: User ankur [2917173]: 1329 k get pods | grep house Aug 4 19:34:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1329 k get pods | grep house] Aug 4 19:35:23 bastion LinuxCommandsWazuh: User ankur [2917173]: 1330 k logs -f house-of-click-5b77487d87-nwdnk | more Aug 4 19:35:23 bastion LinuxCommandsWazuh: User ankur [2917173]: 1331 qq Aug 4 19:35:23 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1331 qq] Aug 4 19:35:31 bastion LinuxCommandsWazuh: User ankur [2917173]: 1332 k logs -f house-of-click-5b77487d87-nwdnk Aug 4 19:35:34 bastion LinuxCommandsWazuh: User ankur [2917173]: 1333 k get pods | grep house Aug 4 19:37:22 bastion LinuxCommandsWazuh: User rihan [2922920]: 1220 byobu Aug 4 19:48:25 bastion LinuxCommandsWazuh: User ayush [2906854]: 313 cool-server Aug 4 19:48:29 bastion LinuxCommandsWazuh: User abhijeet [2906756]: 1943 sudo su ayush Aug 4 19:48:30 bastion LinuxCommandsWazuh: User abhijeet [2906756]: 1944 ls Aug 4 19:57:38 bastion LinuxCommandsWazuh: User ayush [2943242]: 314 exit Aug 4 20:02:04 bastion LinuxCommandsWazuh: User ankur [2917173]: 1333 k get pods | grep house Aug 4 20:02:43 bastion LinuxCommandsWazuh: User ankur [2917173]: 1334 k logs -f house-of-click-57676ccd89-tpbbp | more Aug 4 20:02:44 bastion LinuxCommandsWazuh: User ankur [2917173]: 1334 k logs -f house-of-click-57676ccd89-tpbbp | more Aug 4 20:03:18 bastion LinuxCommandsWazuh: User ankur [2917173]: 1335 k get pods | grep house Aug 4 20:03:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2917173]: 1335 k get pods | grep house] Aug 4 20:04:35 bastion LinuxCommandsWazuh: User ankur [2917173]: 1336 k logs -f house-of-click-57676ccd89-tpbbp Aug 4 20:04:38 bastion LinuxCommandsWazuh: User ankur [2917173]: 1337 k get pods | grep house Aug 4 20:11:30 bastion LinuxCommandsWazuh: User ankur [2917173]: 1337 k get pods | grep house Aug 4 20:11:32 bastion LinuxCommandsWazuh: User ankur [2917173]: 1337 k get pods | grep house Aug 4 20:12:06 bastion LinuxCommandsWazuh: User ankur [2917173]: 1338 k logs -f house-of-click-57676ccd89-zw6wr Aug 4 20:12:08 bastion LinuxCommandsWazuh: User ankur [2917173]: 1339 k get pods | grep house Aug 4 20:12:27 bastion LinuxCommandsWazuh: User ankur [2917173]: 1340 k logs -f house-of-click-57676ccd89-zw6wr Aug 4 20:13:14 bastion LinuxCommandsWazuh: User ankur [2917173]: 1341 k logs -f house-of-click-57676ccd89-zw6wr | more Aug 4 20:13:17 bastion LinuxCommandsWazuh: User ankur [2917173]: 1342 k get pods | grep Aug 4 20:13:21 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:07 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:38 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:50 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:51 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:52 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:53 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:20:54 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:22 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:23 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:25 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:26 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:27 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:33 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [2917173]: 1343 k get pods | grep house] Aug 4 20:22:35 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:41 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2917173]: 1343 k get pods | grep house] Aug 4 20:22:46 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:48 bastion LinuxCommandsWazuh: User ankur [2917173]: 1343 k get pods | grep house Aug 4 20:22:53 bastion LinuxCommandsWazuh: User ankur [2917173]: 1344 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:23:11 bastion LinuxCommandsWazuh: User ankur [2917173]: 1344 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:23:11 bastion LinuxCommandsWazuh: User ankur [2917173]: 1344 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:23:28 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:23:29 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:23:30 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:23:32 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:23:35 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2917173]: 1345 k get pods | grep house] Aug 4 20:24:01 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:24:03 bastion LinuxCommandsWazuh: User ankur [2917173]: 1345 k get pods | grep house Aug 4 20:24:22 bastion LinuxCommandsWazuh: User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:24:23 bastion LinuxCommandsWazuh: User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:24:24 bastion LinuxCommandsWazuh: User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:24:24 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99] Aug 4 20:30:01 bastion LinuxCommandsWazuh: User venky [2976914]: 1927 exit Aug 4 20:30:10 bastion LinuxCommandsWazuh: User venky [2976914]: 1927 exit Aug 4 20:30:14 bastion LinuxCommandsWazuh: User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:30:18 bastion LinuxCommandsWazuh: User venky [2408443]: 1928 stern cookie-cutter-queue Aug 4 20:30:35 bastion LinuxCommandsWazuh: User venky [2408443]: 1929 stern cookie-cutter-queue | grep _PERF Aug 4 20:30:51 bastion LinuxCommandsWazuh: User venky [2408443]: 1930 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:31:55 bastion LinuxCommandsWazuh: User venky [2408443]: 1930 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:32:36 bastion LinuxCommandsWazuh: User venky [2408443]: 1931 stern cookie-cutter-queue | grep _PERF Aug 4 20:33:27 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1625 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 20:33:28 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1625 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 20:33:30 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1626 clear Aug 4 20:35:33 bastion LinuxCommandsWazuh: User ankur [2917173]: 1346 k logs -f house-of-click-7b8d89b4bd-t4v99 Aug 4 20:35:37 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:35:42 bastion LinuxCommandsWazuh: User venky [2408443]: 1931 stern cookie-cutter-queue | grep _PERF Aug 4 20:35:49 bastion LinuxCommandsWazuh: User venky [2408443]: 1932 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:35:50 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1945 exit Aug 4 20:35:51 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1946 ls Aug 4 20:36:06 bastion LinuxCommandsWazuh: User venky [2408443]: 1932 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:36:12 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1947 kubectl get hpa -n nitrox-production Aug 4 20:36:13 bastion LinuxCommandsWazuh: User venky [2408443]: 1932 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:37:30 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1948 kubectl edit hpa house-of-click -n nitrox-production Aug 4 20:37:32 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1949 kubectl get hpa -n nitrox-production Aug 4 20:37:37 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:37:38 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:37:58 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1949 kubectl get hpa -n nitrox-production Aug 4 20:38:08 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1949 kubectl get hpa -n nitrox-production Aug 4 20:38:17 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:38:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1347 k get pods | grep house] Aug 4 20:38:30 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:38:32 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:38:46 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1950 kubectl get pod | grep house Aug 4 20:38:56 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1951 kubectl get pod -o wide | grep house Aug 4 20:39:12 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:39:14 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1952 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 20:39:23 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1952 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 20:39:35 bastion LinuxCommandsWazuh: User venky [2408443]: 1932 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:40:02 bastion LinuxCommandsWazuh: User venky [2408443]: 1932 stern cookie-cutter-queues-7867f84bb5-djwhd | grep _PERF Aug 4 20:40:23 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:42:05 bastion LinuxCommandsWazuh: User ankur [2917173]: 1347 k get pods | grep house Aug 4 20:42:53 bastion LinuxCommandsWazuh: User ankur [2917173]: 1348 k logs -f house-of-click-7b8d89b4bd-kzmp5 Aug 4 20:43:36 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1953 kubectl get pod | grep grafa Aug 4 20:43:37 bastion LinuxCommandsWazuh: User ankur [2917173]: 1349 k logs -f house-of-click-7b8d89b4bd-kzmp5 | grep -i "Processing message" Aug 4 20:43:38 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1954 kubectl get pod | grep graf Aug 4 20:43:44 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1955 kubectl get pod -n loki Aug 4 20:44:01 bastion LinuxCommandsWazuh: User abhijeet [2988861]: 1956 ls Aug 4 20:46:24 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1957 exit Aug 4 20:46:30 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1958 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 20:49:07 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:12 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2917173]: 1350 k get pods | grep house] Aug 4 20:49:30 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:35 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [2917173]: 1350 k get pods | grep house] Aug 4 20:49:36 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:37 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:45 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:46 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:49:47 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:57:30 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1959 kubectl get pods | grep house Aug 4 20:57:33 bastion LinuxCommandsWazuh: User ankur [2917173]: 1350 k get pods | grep house Aug 4 20:57:42 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1960 docker logs house-of-click-79479b6c67-w8zz9 Aug 4 20:57:50 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1961 kubectl logs house-of-click-79479b6c67-w8zz9 Aug 4 20:58:09 bastion LinuxCommandsWazuh: User ankur [2917173]: 1351 k logs -f house-of-click-79479b6c67-d6jmj Aug 4 20:58:44 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1957 exit Aug 4 20:58:53 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1958 kubectl get pods | grep house Aug 4 20:59:11 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1959 kubectl get pods -o wide | grep house Aug 4 20:59:38 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1960 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 21:01:26 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1962 kubectl logs house-of-click-79479b6c67-w8zz9 -f Aug 4 21:02:39 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1960 kubectl top node gke-nitrox-production-collab-services-187eb03f-7td1 Aug 4 21:02:48 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1961 kubectl get pods -o wide | grep house Aug 4 21:03:27 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1961 kubectl get pods -o wide | grep house Aug 4 21:03:29 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1961 kubectl get pods -o wide | grep house Aug 4 21:03:46 bastion LinuxCommandsWazuh: User ankur [2917173]: 1352 k get pods | grep house Aug 4 21:04:00 bastion LinuxCommandsWazuh: User ankur [2917173]: 1353 k logs -f house-of-click-5fd95799cd-h2c42 Aug 4 21:05:42 bastion LinuxCommandsWazuh: User ankur [2917173]: 1354 k logs -f house-of-click-5fd95799cd-h2c42 | more Aug 4 21:05:44 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1961 kubectl get pods -o wide | grep house Aug 4 21:05:45 bastion LinuxCommandsWazuh: User ankur [2917173]: 1355 k logs -f house-of-click-5fd95799cd-h2c42 Aug 4 21:05:48 bastion LinuxCommandsWazuh: User ankur [2917173]: 1356 k get pods | grep house Aug 4 21:05:51 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1961 kubectl get pods -o wide | grep house Aug 4 21:05:55 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1962 kubectl get pods | grep house Aug 4 21:06:02 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1963 kubectl logs house-of-click-5fd95799cd-rrhpt Aug 4 21:08:20 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1964 kubectl logs house-of-click-5fd95799cd-rrhpt -f Aug 4 21:08:43 bastion LinuxCommandsWazuh: User ankur [2917173]: 1356 k get pods | grep house Aug 4 21:08:52 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [2917173]: 1356 k get pods | grep house] Aug 4 21:08:52 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1963 kubectl get hpa Aug 4 21:08:53 bastion LinuxCommandsWazuh: User ankur [2917173]: 1356 k get pods | grep house Aug 4 21:08:55 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1356 k get pods | grep house] Aug 4 21:09:59 bastion LinuxCommandsWazuh: User ankur [2917173]: 1356 k get pods | grep house Aug 4 21:10:10 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [2917173]: 1356 k get pods | grep house] Aug 4 21:10:16 bastion LinuxCommandsWazuh: User ankur [2917173]: 1356 k get pods | grep house Aug 4 21:10:48 bastion LinuxCommandsWazuh: message repeated 11 times: [ User ankur [2917173]: 1356 k get pods | grep house] Aug 4 21:11:19 bastion LinuxCommandsWazuh: User ankur [2917173]: 1357 k logs -f house-of-click-7ff8c65fdd-7dng4 | more Aug 4 21:11:20 bastion LinuxCommandsWazuh: User ankur [2917173]: 1357 k logs -f house-of-click-7ff8c65fdd-7dng4 | more Aug 4 21:15:28 bastion LinuxCommandsWazuh: User ankur [3066242]: 1325 exit Aug 4 21:22:03 bastion LinuxCommandsWazuh: User ankur [2917173]: 1358 k get pods | grep house Aug 4 21:23:15 bastion LinuxCommandsWazuh: User ankur [2917173]: 1358 k get pods | grep house Aug 4 21:23:25 bastion LinuxCommandsWazuh: User ankur [2917173]: 1359 k get hpa Aug 4 21:28:54 bastion LinuxCommandsWazuh: User abhijeet [3009876]: 1964 ls Aug 4 21:29:55 bastion LinuxCommandsWazuh: User ankur [2917173]: 1360 k get pods | grep house Aug 4 21:29:57 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1360 k get pods | grep house] Aug 4 21:30:05 bastion LinuxCommandsWazuh: User ankur [2917173]: 1361 k logs -f house-of-click-f764d49b9-c9x4c Aug 4 21:31:31 bastion LinuxCommandsWazuh: User abhijeet [3033802]: 1965 ls Aug 4 21:44:25 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1627 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 21:44:29 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1628 k get hpa Aug 4 21:47:42 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 21:49:45 bastion LinuxCommandsWazuh: User mohtashim [2786371]: 1629 stern cookie-cutter | grep "FNP_ORDER_JOURNEY" Aug 4 21:50:26 bastion LinuxCommandsWazuh: User abhijeet [3114782]: 1976 internal-server Aug 4 21:50:27 bastion LinuxCommandsWazuh: User abhijeet [3114782]: 1977 ls Aug 4 21:50:38 bastion LinuxCommandsWazuh: User abhijeet [3114782]: 1978 kubectl get pods Aug 4 21:53:50 bastion LinuxCommandsWazuh: User abhijeet [3114782]: 1978 kubectl get pods