Aug 7 09:23:25 bastion LinuxCommandsWazuh: User ankur [130331]: 1334 byobu Aug 7 11:46:57 bastion LinuxCommandsWazuh: User ankur [152464]: 1334 byobu Aug 7 11:48:01 bastion LinuxCommandsWazuh: User ankur [152464]: 1334 byobu Aug 7 12:00:24 bastion LinuxCommandsWazuh: User ayush [154871]: 338 cool-server Aug 7 12:05:19 bastion LinuxCommandsWazuh: User ankur [154996]: 1335 exit Aug 7 12:10:55 bastion LinuxCommandsWazuh: User abhijeet [161002]: 1999 kubectl edit cm house-of-click-config Aug 7 12:11:00 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2000 ls Aug 7 12:11:09 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2001 kubectl get pods -n loki Aug 7 12:11:28 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2002 kubectl get deployment -n loki Aug 7 12:11:46 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2003 kubectl logs prometheus-server -n loki Aug 7 12:11:59 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2004 kubectl logs prometheus-server-6bd6b89df7-g8m29 -n loki Aug 7 12:12:21 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2005 kubectl logs prometheus-server-6bd6b89df7-d9g79 -n loki Aug 7 12:12:47 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2006 kubectl get deployment -n loki Aug 7 12:13:06 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2007 kubectl rollout restart deployment prometheus-server -n loki Aug 7 12:13:29 bastion LinuxCommandsWazuh: User abhijeet [163630]: 1999 kubectl edit cm house-of-click-config Aug 7 12:13:30 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2000 ls Aug 7 12:14:44 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2001 kubectl get pods -n loki Aug 7 12:16:33 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2001 kubectl get pods -n loki Aug 7 12:16:44 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2002 kubectl logs prometheus-server-5b486f5dd9-2dln2 Aug 7 12:16:48 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2003 kubectl logs prometheus-server-5b486f5dd9-2dln2 -n loki Aug 7 12:19:24 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2003 kubectl logs prometheus-server-5b486f5dd9-2dln2 -n loki Aug 7 12:19:32 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2004 kubectl get pods -n loki Aug 7 12:19:37 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2005 kubectl get pods -n loki -o wide Aug 7 12:20:17 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2008 kubectl rollout status deployment prometheus-server -n loki Aug 7 12:20:23 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2009 kubectl get pod -n loki Aug 7 12:20:48 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2010 kubectl delete pod prometheus-server-5b486f5dd9-2dln2 -n loki Aug 7 12:20:54 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2011 kubectl delete pod prometheus-server-6bd6b89df7-d9g79 -n loki Aug 7 12:20:57 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:21:53 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [161002]: 2012 kubectl get pod -n loki] Aug 7 12:21:58 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:22:03 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2006 kubectl logs -f prometheus-server-5b486f5dd9-9nqvm -n loki Aug 7 12:22:06 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2007 kubectl logs prometheus-server-5b486f5dd9-9nqvm Aug 7 12:22:10 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2008 kubectl logs prometheus-server-5b486f5dd9-9nqvm -n loki Aug 7 12:22:17 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:22:37 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2009 kubectl delete pod prometheus-server-5b486f5dd9-9nqvm -n loki Aug 7 12:22:41 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:22:45 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:22:50 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:23:00 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2010 kubectl logs prometheus-server-5b486f5dd9-s8lwb -n loki Aug 7 12:23:36 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2011 kubectl logs prometheus-server-5b486f5dd9-s8lwb -n loki -c prometheus-server Aug 7 12:24:19 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2012 kubectl get pod -n loki Aug 7 12:24:38 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2011 kubectl logs prometheus-server-5b486f5dd9-s8lwb -n loki -c prometheus-server Aug 7 12:24:53 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2012 kubectl get pods -n loki -o wide Aug 7 12:24:57 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2013 kubectl get pods -n loki Aug 7 12:25:12 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2014 kubectl logs prometheus-server-5b486f5dd9-s8lwb -n loki Aug 7 12:25:19 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2015 kubectl get pods -n loki Aug 7 12:26:22 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2016 kubectl logs prometheus-server-5b486f5dd9-s8lwb -n loki -c prometheus-server --previous Aug 7 12:27:45 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2013 kubectl get pods -n loki -o wide Aug 7 12:28:02 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2014 kubectl top node gke-nitrox-production-cookie-cutter-49a2022e-7zmr Aug 7 12:29:32 bastion LinuxCommandsWazuh: User abhijeet [161002]: 2015 ls Aug 7 12:29:42 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2017 kubectl get cm -n loki Aug 7 12:30:04 bastion LinuxCommandsWazuh: User abhijeet [163630]: 2018 kubectl describe cm prometheus-server -n loki Aug 7 12:39:59 bastion LinuxCommandsWazuh: User ashish [191012]: 325 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 7 12:40:05 bastion LinuxCommandsWazuh: User ashish [191012]: 326 ls Aug 7 12:40:12 bastion LinuxCommandsWazuh: User ashish [191012]: 327 bybobu Aug 7 12:40:21 bastion LinuxCommandsWazuh: User ashish [191511]: 325 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 7 12:42:19 bastion LinuxCommandsWazuh: User ashish [191511]: 325 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Aug 7 12:42:20 bastion LinuxCommandsWazuh: User ashish [191012]: 328 byobu Aug 7 12:55:45 bastion LinuxCommandsWazuh: User mohtashim [208637]: 1729 exit Aug 7 12:55:47 bastion LinuxCommandsWazuh: User mohtashim [208637]: 1730 clear Aug 7 12:57:06 bastion LinuxCommandsWazuh: User mohtashim [208637]: 1731 psql -h 10.94.16.3 -U postgres -d vortex_v1 Aug 7 12:57:22 bastion LinuxCommandsWazuh: User mohtashim [210880]: 1729 exit Aug 7 12:58:10 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1729 exit Aug 7 12:58:15 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1730 clear Aug 7 12:58:18 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1731 mongo pixel_v12 Aug 7 13:00:43 bastion LinuxCommandsWazuh: User abhijeet [214356]: 1999 kubectl describe cm prometheus-server -n loki Aug 7 13:00:45 bastion LinuxCommandsWazuh: User abhijeet [214356]: 2000 ls Aug 7 13:00:57 bastion LinuxCommandsWazuh: User abhijeet [214356]: 2001 kubectl get pods | grep cookie-cutter Aug 7 13:01:13 bastion LinuxCommandsWazuh: User abhijeet [214356]: 2002 kubectl top pods | grep cookie-cutter Aug 7 13:08:34 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1732 mongo pixel_v1 Aug 7 13:08:36 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1733 clear Aug 7 13:10:05 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1734 mongo pixel_v1 Aug 7 13:10:05 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [211726]: 1734 mongo pixel_v1] Aug 7 13:10:06 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1735 clear Aug 7 13:13:01 bastion LinuxCommandsWazuh: User abhijeet [214356]: 2003 ls Aug 7 13:13:04 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [214356]: 2003 ls] Aug 7 13:17:13 bastion LinuxCommandsWazuh: User shamailtayyab [231179]: 1998 k logs -f cookie-cutter-queues-75757c87c9-tj9q7 Aug 7 13:24:28 bastion LinuxCommandsWazuh: User mohtashim [211726]: 1736 mongo pixel_v1 Aug 7 13:24:36 bastion LinuxCommandsWazuh: User mohtashim [238210]: 1737 exit Aug 7 13:39:44 bastion LinuxCommandsWazuh: User rihan [253875]: 1244 redis-url Aug 7 13:48:56 bastion LinuxCommandsWazuh: User rihan [263227]: 1244 redis-url Aug 7 13:55:22 bastion LinuxCommandsWazuh: User abhijeet [269363]: 1999 exit Aug 7 13:55:23 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2000 ls Aug 7 13:55:29 bastion LinuxCommandsWazuh: User ankur [2917173]: 1427 k get hpa Aug 7 13:55:38 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2001 kubectl get hpa -n nitrox-production Aug 7 13:56:21 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2002 kubectl edit hpa house-of-click -n nitrox-production Aug 7 13:56:24 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2003 kubectl get hpa -n nitrox-production Aug 7 13:56:40 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [269363]: 2003 kubectl get hpa -n nitrox-production] Aug 7 13:56:48 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2004 kubectl get pods | grep house Aug 7 13:56:49 bastion LinuxCommandsWazuh: User ankur [2917173]: 1428 k get pods | grep house Aug 7 13:56:54 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1428 k get pods | grep house] Aug 7 13:56:54 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2004 kubectl get pods | grep house Aug 7 13:56:55 bastion LinuxCommandsWazuh: User ankur [2917173]: 1428 k get pods | grep house Aug 7 13:56:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2917173]: 1428 k get pods | grep house] Aug 7 13:56:58 bastion LinuxCommandsWazuh: User ankur [2917173]: 1428 k get pods | grep house Aug 7 13:57:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2917173]: 1428 k get pods | grep house] Aug 7 13:57:02 bastion LinuxCommandsWazuh: User ankur [2917173]: 1428 k get pods | grep house Aug 7 13:57:05 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 13:57:40 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 13:58:06 bastion LinuxCommandsWazuh: message repeated 17 times: [ User abhijeet [269363]: 2005 kubectl top pods | grep house] Aug 7 13:58:06 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 13:58:09 bastion LinuxCommandsWazuh: message repeated 6 times: [ User abhijeet [269363]: 2005 kubectl top pods | grep house] Aug 7 13:58:37 bastion LinuxCommandsWazuh: User ankur [2917173]: 1428 k get pods | grep house Aug 7 13:58:42 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:58:47 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:58:49 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:59:01 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 13:59:05 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [269363]: 2005 kubectl top pods | grep house] Aug 7 13:59:15 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:59:16 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:59:52 bastion LinuxCommandsWazuh: User ankur [2917173]: 1429 k top pods | grep house Aug 7 13:59:57 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 13:59:58 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 13:59:59 bastion LinuxCommandsWazuh: User abhijeet [269363]: 2005 kubectl top pods | grep house Aug 7 14:00:00 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 14:00:02 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 14:00:08 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ankur [2917173]: 1430 k get pods | grep house] Aug 7 14:00:10 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 14:00:11 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 14:00:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2917173]: 1430 k get pods | grep house] Aug 7 14:00:13 bastion LinuxCommandsWazuh: User ankur [2917173]: 1430 k get pods | grep house Aug 7 14:00:16 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [2917173]: 1430 k get pods | grep house] Aug 7 14:06:02 bastion LinuxCommandsWazuh: User mohtashim [210880]: 1730 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 14:23:22 bastion LinuxCommandsWazuh: User mohtashim [299266]: 1739 exit Aug 7 14:28:49 bastion LinuxCommandsWazuh: User mohtashim [299266]: 1740 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 14:34:38 bastion LinuxCommandsWazuh: User mohtashim [238210]: 1738 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 14:34:43 bastion LinuxCommandsWazuh: User mohtashim [299266]: 1740 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 14:43:51 bastion LinuxCommandsWazuh: User mohtashim [320629]: 1743 exit Aug 7 14:46:10 bastion LinuxCommandsWazuh: User mohtashim [320629]: 1744 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 14:50:14 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1745 exit Aug 7 14:50:28 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1746 psql -h 10.94.16.3 -U postgres -d datapulse_v2' Aug 7 14:50:33 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1747 psql -h 10.94.16.3 -U postgres -d datapulse_v2 Aug 7 15:11:43 bastion LinuxCommandsWazuh: User ping-pong [349052]: 17 byobu Aug 7 15:47:14 bastion LinuxCommandsWazuh: User ping-pong [353989]: 17 byobu Aug 7 15:47:51 bastion LinuxCommandsWazuh: User ping-pong [353989]: 18 mongo Aug 7 15:47:52 bastion LinuxCommandsWazuh: User ping-pong [353989]: 18 mongo Aug 7 15:55:49 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1748 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Aug 7 15:55:50 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1749 clear Aug 7 16:05:52 bastion LinuxCommandsWazuh: User mohtashim [327366]: 1750 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 16:07:42 bastion LinuxCommandsWazuh: User abhijeet [355895]: 1999 kubectl top pods | grep house Aug 7 16:08:01 bastion LinuxCommandsWazuh: User abhijeet [355895]: 2000 kubectl top pods | grep cookie-cutter Aug 7 16:12:26 bastion LinuxCommandsWazuh: User abhijeet [355895]: 2000 kubectl top pods | grep cookie-cutter Aug 7 16:12:53 bastion LinuxCommandsWazuh: User abhijeet [355895]: 2001 kubectl get pods | grep cookie-cutter Aug 7 16:13:41 bastion LinuxCommandsWazuh: User abhijeet [355895]: 2001 kubectl get pods | grep cookie-cutter Aug 7 16:23:13 bastion LinuxCommandsWazuh: User abhijeet [357146]: 1999 exit Aug 7 16:23:33 bastion LinuxCommandsWazuh: User abhijeet [357146]: 2000 kubectl get pod | grep cookie-cutter Aug 7 16:23:43 bastion LinuxCommandsWazuh: User abhijeet [357146]: 2001 kubectl top pod | grep cookie-cutter Aug 7 16:44:59 bastion LinuxCommandsWazuh: User mohtashim [358948]: 1751 exit Aug 7 16:45:04 bastion LinuxCommandsWazuh: User mohtashim [358948]: 1752 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 16:46:06 bastion LinuxCommandsWazuh: User mohtashim [358948]: 1752 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 16:46:55 bastion LinuxCommandsWazuh: User mohtashim [359711]: 1751 exit Aug 7 16:46:59 bastion LinuxCommandsWazuh: User mohtashim [359711]: 1752 k get pods Aug 7 16:47:49 bastion LinuxCommandsWazuh: User mohtashim [359711]: 1753 stern vortex-598bc6ddff-p5whr Aug 7 16:50:49 bastion LinuxCommandsWazuh: User abhijeet [357146]: 2001 kubectl top pod | grep cookie-cutter Aug 7 17:33:51 bastion LinuxCommandsWazuh: User abhijeet [363371]: 1999 exit Aug 7 17:33:51 bastion LinuxCommandsWazuh: User abhijeet [363371]: 2000 ls Aug 7 17:34:11 bastion LinuxCommandsWazuh: User ayush [363399]: 338 cool-server Aug 7 17:34:12 bastion LinuxCommandsWazuh: User ayush [363399]: 339 cd Aug 7 17:54:04 bastion LinuxCommandsWazuh: User ashish [365320]: 328 byobu Aug 7 17:54:09 bastion LinuxCommandsWazuh: User ashish [365376]: 328 byobu Aug 7 18:03:07 bastion LinuxCommandsWazuh: User ashish [365376]: 329 mongo Aug 7 18:03:09 bastion LinuxCommandsWazuh: User ashish [365320]: 328 byobu Aug 7 18:07:32 bastion LinuxCommandsWazuh: User ayush [363399]: 340 cool-server Aug 7 18:45:15 bastion LinuxCommandsWazuh: User mohtashim [378949]: 1757 stern vortex- Aug 7 18:47:17 bastion LinuxCommandsWazuh: User mohtashim [379714]: 1757 stern vortex- Aug 7 18:47:31 bastion LinuxCommandsWazuh: User mohtashim [379714]: 1757 stern vortex- Aug 7 18:50:03 bastion LinuxCommandsWazuh: User mohtashim [379714]: 1758 psql -h 10.94.16.3 -U postgres -d vortex_v2 Aug 7 20:01:28 bastion LinuxCommandsWazuh: User rihan [263227]: 1245 mongo Aug 7 20:01:28 bastion LinuxCommandsWazuh: User rihan [263227]: 1245 mongo Aug 7 20:18:02 bastion LinuxCommandsWazuh: User ankur [388217]: 1336 byobu Aug 7 20:18:05 bastion LinuxCommandsWazuh: User ankur [388339]: 1336 byobu Aug 7 20:18:14 bastion LinuxCommandsWazuh: User ankur [388339]: 1337 k get pods | grep urlbird Aug 7 20:18:26 bastion LinuxCommandsWazuh: User ankur [388339]: 1338 k get pods | vortex Aug 7 20:18:31 bastion LinuxCommandsWazuh: User ankur [388339]: 1339 k get pods | grep vortex