Sep 2 11:58:07 bastion LinuxCommandsWazuh: User ayush [3491493]: 392 exit Sep 2 12:03:12 bastion LinuxCommandsWazuh: User ankur [3492011]: 1606 exit Sep 2 12:03:24 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 12:28:10 bastion LinuxCommandsWazuh: User mohtashim [3517503]: 749 stern cookie-cutter | grep "ORDER_JOURNEY" Sep 2 12:28:12 bastion LinuxCommandsWazuh: User mohtashim [3517503]: 750 clear Sep 2 12:28:19 bastion LinuxCommandsWazuh: User mohtashim [3517503]: 751 psql -h 10.94.16.3 -U postgres -d datapulse_v2 Sep 2 12:57:22 bastion LinuxCommandsWazuh: User venky [3546946]: 1998 redis-server Sep 2 12:57:34 bastion LinuxCommandsWazuh: User venky [3546946]: 1999 kubectl get deploy Sep 2 12:57:43 bastion LinuxCommandsWazuh: User venky [3546946]: 1999 kubectl get deploy Sep 2 12:57:56 bastion LinuxCommandsWazuh: User venky [3546946]: 2000 kubectl scale --replicas=0 deployment/cookie-cutter-queues-beanie -n nitrox-production Sep 2 13:01:57 bastion LinuxCommandsWazuh: User venky [3546946]: 2000 kubectl scale --replicas=0 deployment/cookie-cutter-queues-beanie -n nitrox-production Sep 2 13:02:03 bastion LinuxCommandsWazuh: message repeated 7 times: [ User venky [3546946]: 2000 kubectl scale --replicas=0 deployment/cookie-cutter-queues-beanie -n nitrox-production] Sep 2 13:02:57 bastion LinuxCommandsWazuh: User abhijeet [3552457]: 1998 sudo su ayush Sep 2 13:03:17 bastion LinuxCommandsWazuh: User ayush [3552780]: 392 exit Sep 2 13:05:30 bastion LinuxCommandsWazuh: User ayush [3552780]: 393 cool-server Sep 2 13:07:56 bastion LinuxCommandsWazuh: User abhijeet [3557850]: 1998 sudo su ayush Sep 2 13:07:57 bastion LinuxCommandsWazuh: User ayush [3557902]: 393 cool-server Sep 2 13:21:06 bastion LinuxCommandsWazuh: User mohtashim [3517503]: 752 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Sep 2 13:37:09 bastion LinuxCommandsWazuh: User mohtashim [3587121]: 753 exit Sep 2 13:43:06 bastion LinuxCommandsWazuh: User mohtashim [3587121]: 754 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 13:44:16 bastion LinuxCommandsWazuh: User ayush [3557902]: 393 cool-server Sep 2 13:53:31 bastion LinuxCommandsWazuh: User mohtashim [3597264]: 753 exit Sep 2 13:53:35 bastion LinuxCommandsWazuh: User mohtashim [3597264]: 754 k get hpa Sep 2 13:55:04 bastion LinuxCommandsWazuh: User mohtashim [3597264]: 754 k get hpa Sep 2 13:55:26 bastion LinuxCommandsWazuh: User ankur [3597418]: 1607 byobu Sep 2 13:55:33 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 13:56:23 bastion LinuxCommandsWazuh: User mohtashim [3597264]: 754 k get hpa Sep 2 13:57:41 bastion LinuxCommandsWazuh: User mohtashim [3597264]: 754 k get hpa Sep 2 13:58:39 bastion LinuxCommandsWazuh: User ankur [3599311]: 1607 byobu Sep 2 13:58:48 bastion LinuxCommandsWazuh: User mohtashim [3587121]: 755 stern cookie-cutter | grep ":SSO" Sep 2 13:58:48 bastion LinuxCommandsWazuh: User mohtashim [3587121]: 755 stern cookie-cutter | grep ":SSO" Sep 2 13:59:46 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 13:59:48 bastion LinuxCommandsWazuh: User ankur [3599311]: 1607 byobu Sep 2 13:59:51 bastion LinuxCommandsWazuh: User mohtashim [3600562]: 758 exit Sep 2 13:59:57 bastion LinuxCommandsWazuh: User mohtashim [3600562]: 759 k get hpa Sep 2 14:00:01 bastion LinuxCommandsWazuh: User mohtashim [3600562]: 759 k get hpa Sep 2 14:00:10 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3600562]: 759 k get hpa] Sep 2 14:00:11 bastion LinuxCommandsWazuh: User mohtashim [3600562]: 759 k get hpa Sep 2 14:00:21 bastion LinuxCommandsWazuh: User ankur [3600906]: 1608 exit Sep 2 14:00:25 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:00:52 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:01:09 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 760 exit Sep 2 14:01:11 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:01:14 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:01:48 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:01:51 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:01:53 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:02:10 bastion LinuxCommandsWazuh: message repeated 10 times: [ User ankur [3064868]: 1643 k get hpa] Sep 2 14:02:15 bastion LinuxCommandsWazuh: User ankur [3600906]: 1609 byobu Sep 2 14:02:18 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:06 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:15 bastion LinuxCommandsWazuh: User ayush [3491493]: 393 cool-server Sep 2 14:03:20 bastion LinuxCommandsWazuh: User ankur [3603210]: 1610 exit Sep 2 14:03:23 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:26 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:27 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:27 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:28 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:29 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:29 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:30 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 14:03:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [3064868]: 1643 k get hpa] Sep 2 14:03:33 bastion LinuxCommandsWazuh: User ankur [3603210]: 1611 byobu Sep 2 14:03:34 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:36 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 761 k get hpa Sep 2 14:03:40 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [3601799]: 761 k get hpa] Sep 2 14:15:01 bastion LinuxCommandsWazuh: User abhijeet [3604653]: 1998 sudo su ayush Sep 2 14:15:02 bastion LinuxCommandsWazuh: User abhijeet [3604653]: 1999 ls Sep 2 14:15:06 bastion LinuxCommandsWazuh: User ayush [3604675]: 393 cool-server Sep 2 14:16:17 bastion LinuxCommandsWazuh: User abhijeet [3605407]: 1998 sudo su ayush Sep 2 14:20:14 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 762 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Sep 2 14:23:54 bastion LinuxCommandsWazuh: User rihan [3605697]: 1309 mongo Sep 2 14:24:10 bastion LinuxCommandsWazuh: User rihan [3605697]: 1310 kubectl get pods | grep datapulse Sep 2 14:25:08 bastion LinuxCommandsWazuh: User rihan [3605697]: 1311 kubectl top pod -n datapulse Sep 2 14:26:16 bastion LinuxCommandsWazuh: User rihan [3605697]: 1311 kubectl top pod -n datapulse Sep 2 14:26:17 bastion LinuxCommandsWazuh: User rihan [3605697]: 1312 kubectl top pod | grep '^datapulse-' Sep 2 14:26:35 bastion LinuxCommandsWazuh: User rihan [3605697]: 1313 kubectl top pod -A | grep 'datapulse-' Sep 2 14:26:53 bastion LinuxCommandsWazuh: User ayush [3604675]: 393 cool-server Sep 2 14:26:54 bastion LinuxCommandsWazuh: User abhijeet [3604653]: 2000 sudo su ayush Sep 2 14:27:03 bastion LinuxCommandsWazuh: User abhijeet [3605407]: 1999 internal-server Sep 2 14:47:28 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 763 stern cookie-cutter | grep "DEBUG::SSO>> GOING FOR PREP_LOGIN_RESPONSE" Sep 2 15:02:31 bastion LinuxCommandsWazuh: User ankur [3609325]: 1612 exit Sep 2 15:02:35 bastion LinuxCommandsWazuh: User ankur [3064868]: 1643 k get hpa Sep 2 15:03:09 bastion LinuxCommandsWazuh: User ankur [3064868]: 1644 k get pods | grep nitrox Sep 2 15:03:12 bastion LinuxCommandsWazuh: User ankur [3064868]: 1644 k get pods | grep nitrox Sep 2 15:03:14 bastion LinuxCommandsWazuh: User ankur [3064868]: 1644 k get pods | grep nitrox Sep 2 15:03:23 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [3064868]: 1644 k get pods | grep nitrox] Sep 2 15:03:30 bastion LinuxCommandsWazuh: User ankur [3064868]: 1645 k logs -f nitrox-dj-6567cb9cbc-hzqnv Sep 2 15:03:45 bastion LinuxCommandsWazuh: User ankur [3064868]: 1646 k logs -f nitrox-dj-c4cc58855-vtbp6 Sep 2 15:04:56 bastion LinuxCommandsWazuh: User ankur [3064868]: 1646 k logs -f nitrox-dj-c4cc58855-vtbp6 Sep 2 15:04:59 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:05:12 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 764 stern cookie-cutter | grep "DEBUG::SSO>" Sep 2 15:05:12 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 764 stern cookie-cutter | grep "DEBUG::SSO>" Sep 2 15:05:59 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:06:05 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3064868]: 1647 k get pods | grep nitrox] Sep 2 15:07:57 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 765 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 15:07:57 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 765 stern cookie-cutter | grep "DEBUG::SSO"] Sep 2 15:07:59 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 766 clear Sep 2 15:09:14 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:09:15 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:09:58 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:11:31 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:11:33 bastion LinuxCommandsWazuh: User ankur [3064868]: 1647 k get pods | grep nitrox Sep 2 15:11:38 bastion LinuxCommandsWazuh: User ankur [3064868]: 1648 k logs -f nitrox-dj-6567cb9cbc-hzqnv Sep 2 15:11:44 bastion LinuxCommandsWazuh: User ankur [3064868]: 1649 k logs -f nitrox-dj-c4cc58855-vtbp6 Sep 2 15:16:04 bastion LinuxCommandsWazuh: User ankur [3064868]: 1649 k logs -f nitrox-dj-c4cc58855-vtbp6 Sep 2 15:18:40 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:21:54 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:22:40 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:24:24 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 1998 internal-server Sep 2 15:24:29 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 1999 ls Sep 2 15:24:44 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2000 kubectl get pods -n nitrox-production Sep 2 15:25:07 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2001 kubectl get pods -n nitrox-production -o wide | grep nitrox-dj-6567cb9cbc-hzqnv Sep 2 15:25:16 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2002 kubectl get pods -n nitrox-production -o wide Sep 2 15:25:31 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:25:52 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:25:55 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:25:56 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2003 kubectl describe nitrox-dj-6567cb9cbc-hzqnv -n nitrox-production Sep 2 15:26:17 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:26:19 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2004 kubectl describe pod nitrox-dj-6567cb9cbc-hzqnv -n nitrox-production Sep 2 15:27:17 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:27:49 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:27:55 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [3064868]: 1650 k get pods | grep nitrox] Sep 2 15:27:56 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:28:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3064868]: 1650 k get pods | grep nitrox] Sep 2 15:28:30 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:28:31 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:29:09 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:29:13 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3064868]: 1650 k get pods | grep nitrox] Sep 2 15:29:14 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:29:15 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:29:53 bastion LinuxCommandsWazuh: User ayush [3637837]: 394 exit Sep 2 15:31:14 bastion LinuxCommandsWazuh: User ayush [3637837]: 395 cool-server Sep 2 15:31:17 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2005 sudo su ayush Sep 2 15:31:18 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2006 ls Sep 2 15:31:19 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2006 ls Sep 2 15:31:26 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2007 kubectl get nodes Sep 2 15:31:33 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2008 kubectl get pods -n nitrox-production -o wide | grep nitrox-dj-6567cb9cbc-hzqnv Sep 2 15:31:39 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:31:49 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 15:32:09 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2009 kubectl get pods -n nitrox-production -o wide Sep 2 15:33:00 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2010 kubectl get pods | grep nitrox Sep 2 15:33:18 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2011 kubectl delete pod nitrox-dj-6567cb9cbc-hzqnv -n nitrox-production Sep 2 15:33:21 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2012 kubectl get pods | grep nitrox Sep 2 15:33:23 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2012 kubectl get pods | grep nitrox Sep 2 15:33:25 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2012 kubectl get pods | grep nitrox Sep 2 15:33:35 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2013 kubectl get pods -o wide| grep nitrox Sep 2 15:34:00 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2014 kubectl top nodes Sep 2 15:36:04 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2015 kubectl get hpa Sep 2 15:37:02 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2016 kubectl top pods -A Sep 2 15:38:22 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2017 kubectl get pods | grep nitrox Sep 2 15:39:15 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2018 kubectl logs nitrox-dj-c4cc58855-vtbp6 Sep 2 15:40:15 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2019 kubectl describe pod nitrox-dj-c4cc58855-vtbp6 -n nitrox-production Sep 2 15:46:26 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2020 kubectl get pods | grep nitrox Sep 2 15:47:22 bastion LinuxCommandsWazuh: User ping-pong [3655829]: 51 mongo Sep 2 15:48:12 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2021 kubectl describe nitrox-dj-6567cb9cbc-hzqnv -n nitrox-production Sep 2 15:48:25 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2022 kubectl describe pod nitrox-dj-6567cb9cbc-ncrbr -n nitrox-production Sep 2 15:51:31 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2023 kubectl get pods | grep nitrox Sep 2 15:51:45 bastion LinuxCommandsWazuh: message repeated 7 times: [ User abhijeet [3631632]: 2023 kubectl get pods | grep nitrox] Sep 2 15:51:46 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2023 kubectl get pods | grep nitrox Sep 2 15:51:47 bastion LinuxCommandsWazuh: User abhijeet [3631632]: 2023 kubectl get pods | grep nitrox Sep 2 15:51:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3631632]: 2023 kubectl get pods | grep nitrox] Sep 2 15:58:24 bastion LinuxCommandsWazuh: User ping-pong [3655829]: 51 mongo Sep 2 15:58:25 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [3655829]: 51 mongo] Sep 2 16:02:28 bastion LinuxCommandsWazuh: User ashish [3671041]: 408 byobu Sep 2 16:02:30 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [3671041]: 408 byobu] Sep 2 16:02:36 bastion LinuxCommandsWazuh: User ashish [3671041]: 408 byobu Sep 2 16:02:37 bastion LinuxCommandsWazuh: User ashish [3671041]: 408 byobu Sep 2 16:02:39 bastion LinuxCommandsWazuh: User ashish [3671300]: 408 byobu Sep 2 16:03:18 bastion LinuxCommandsWazuh: User ashish [3671300]: 409 mongo Sep 2 16:12:48 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 767 stern cookie-cutter | grep "DEBUG:SSO>> Step" Sep 2 16:12:48 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 767 stern cookie-cutter | grep "DEBUG:SSO>> Step" Sep 2 16:12:52 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 768 stern cookie-cutter | grep "DEBUG:SSO>>" Sep 2 16:15:08 bastion LinuxCommandsWazuh: User ashish [3688934]: 408 byobu Sep 2 16:15:51 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 1998 internal-server Sep 2 16:15:51 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 1999 ls Sep 2 16:15:54 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2000 cls Sep 2 16:15:55 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2001 ls Sep 2 16:16:09 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2002 kubectl get pods -n nitrox-production Sep 2 16:18:24 bastion LinuxCommandsWazuh: User ashish [3671300]: 410 redis Sep 2 16:18:28 bastion LinuxCommandsWazuh: User ashish [3671300]: 410 redis Sep 2 16:18:29 bastion LinuxCommandsWazuh: User ashish [3671300]: 410 redis Sep 2 16:18:29 bastion LinuxCommandsWazuh: User ashish [3671300]: 410 redis Sep 2 16:22:05 bastion LinuxCommandsWazuh: User ashish [3671300]: 411 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Sep 2 16:22:12 bastion LinuxCommandsWazuh: User ashish [3671300]: 411 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Sep 2 16:22:13 bastion LinuxCommandsWazuh: User ashish [3688934]: 408 byobu Sep 2 16:24:52 bastion LinuxCommandsWazuh: User ashish [3688934]: 408 byobu Sep 2 16:24:53 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [3688934]: 408 byobu] Sep 2 16:24:54 bastion LinuxCommandsWazuh: User ashish [3696511]: 410 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Sep 2 16:29:30 bastion LinuxCommandsWazuh: User ashish [3696511]: 411 redis Sep 2 16:29:30 bastion LinuxCommandsWazuh: User ashish [3688934]: 408 byobu Sep 2 16:33:38 bastion LinuxCommandsWazuh: User rihan [2131021]: 1297 psql -d vortex_v2 -U postgres Sep 2 16:45:17 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 769 stern cookie-cutter | grep "DEBUG:SSO>" Sep 2 16:45:17 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 769 stern cookie-cutter | grep "DEBUG:SSO>" Sep 2 16:45:28 bastion LinuxCommandsWazuh: User ayush [3713681]: 397 cool-server Sep 2 16:46:35 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 770 stern cookie-cutter | grep "DEBUG::SSO>score> customer2" Sep 2 16:48:42 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 771 stern cookie-cutter | grep "DEBUG::SSO>score> customer" Sep 2 16:48:43 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 771 stern cookie-cutter | grep "DEBUG::SSO>score> customer" Sep 2 16:59:46 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 771 stern cookie-cutter | grep "DEBUG::SSO>score> customer" Sep 2 16:59:46 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 771 stern cookie-cutter | grep "DEBUG::SSO>score> customer"] Sep 2 17:00:49 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 772 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 17:00:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 772 stern cookie-cutter | grep "DEBUG::SSO"] Sep 2 17:01:43 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 773 stern cookie-cutter | grep "_select_destination" Sep 2 17:01:43 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 773 stern cookie-cutter | grep "_select_destination" Sep 2 17:04:25 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 774 stern cookie-cutter | grep "DEBUG:SSO>>" Sep 2 17:12:54 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 775 stern cookie-cutter | grep "DEBUG:SSO" Sep 2 17:12:54 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 775 stern cookie-cutter | grep "DEBUG:SSO" Sep 2 17:14:08 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2003 kubectl get pods -o wide | grep vor Sep 2 17:14:58 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2004 kubectl get pods -o wide | grep collab Sep 2 17:16:04 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2005 kubectl top nodes Sep 2 17:16:33 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2006 kubectl top nodes | grep "gke-nitrox-production-nitro-services" Sep 2 17:16:34 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2006 kubectl top nodes | grep "gke-nitrox-production-nitro-services" Sep 2 17:16:51 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2007 watch 'k top nodes | grep "gke-nitrox-production-nitro-services"' Sep 2 17:17:15 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 776 stern cookie-cutter | grep "VRFEMAIL" Sep 2 17:17:15 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 776 stern cookie-cutter | grep "VRFEMAIL" Sep 2 17:17:20 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 777 stern cookie-cutter Sep 2 17:17:37 bastion LinuxCommandsWazuh: User ankur [3747214]: 1613 byobu Sep 2 17:17:55 bastion LinuxCommandsWazuh: User ankur [3064868]: 1650 k get pods | grep nitrox Sep 2 17:19:25 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 1998 kubectl get pods | grep nitrox Sep 2 17:19:33 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 1999 kubectl get nodes Sep 2 17:19:56 bastion LinuxCommandsWazuh: User abhijeet [3752825]: 1998 kubectl get pods | grep nitrox Sep 2 17:20:26 bastion LinuxCommandsWazuh: User abhijeet [3752825]: 1999 watch 'kubectl top nodes | grpe gke-nitrox-productio-cookie-cutter-qu' Sep 2 17:20:49 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2000 kubectl top pods | grpe vortax Sep 2 17:20:54 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2001 kubectl top pods | grep vort Sep 2 17:20:58 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2001 kubectl top pods | grep vort Sep 2 17:21:07 bastion LinuxCommandsWazuh: message repeated 5 times: [ User abhijeet [3751526]: 2001 kubectl top pods | grep vort] Sep 2 17:21:30 bastion LinuxCommandsWazuh: User abhijeet [3757873]: 1998 kubectl get pods | grep nitrox Sep 2 17:22:55 bastion LinuxCommandsWazuh: User ankur [3762511]: 1613 byobu Sep 2 17:23:00 bastion LinuxCommandsWazuh: User ankur [3762511]: 1614 k get hpa Sep 2 17:23:12 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 778 stern cookie-cutter | grep "score is" Sep 2 17:23:13 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 778 stern cookie-cutter | grep "score is"] Sep 2 17:24:19 bastion LinuxCommandsWazuh: User ankur [3762511]: 1615 stern vortex-dramatiq Sep 2 17:24:23 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [3762511]: 1615 stern vortex-dramatiq] Sep 2 17:24:25 bastion LinuxCommandsWazuh: User ankur [3762511]: 1616 k get hpa Sep 2 17:24:35 bastion LinuxCommandsWazuh: User ankur [3762511]: 1617 k get pods | grep vortex Sep 2 17:24:47 bastion LinuxCommandsWazuh: User ankur [3762511]: 1618 k top pods | grep vortex Sep 2 17:25:34 bastion LinuxCommandsWazuh: User ankur [3762511]: 1619 k get hpa Sep 2 17:25:52 bastion LinuxCommandsWazuh: User ankur [3762511]: 1620 k get hpa | grep vortex Sep 2 17:27:11 bastion LinuxCommandsWazuh: User ankur [3762511]: 1620 k get hpa | grep vortex Sep 2 17:27:47 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2008 watch 'kubectl top nodes | grep "gke-nitrox-production-nitro-services"' Sep 2 17:27:48 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2009 ls Sep 2 17:27:53 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2010 kubectl logs vortex-dramatiq-78c8bd856c Sep 2 17:28:01 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2011 kubectl logs vortex-dramatiq-78c8bd856c -n nitrox-production Sep 2 17:28:13 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2012 kubectl describe pod vortex-dramatiq-78c8bd856c Sep 2 17:28:45 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2002 watch 'kubectl top pods | grep vort' Sep 2 17:28:58 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2003 kubectl get pods -n nitrox-production Sep 2 17:29:55 bastion LinuxCommandsWazuh: User abhijeet [3751526]: 2003 kubectl get pods -n nitrox-production Sep 2 17:30:00 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 778 stern cookie-cutter | grep "score is" Sep 2 17:30:00 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 778 stern cookie-cutter | grep "score is"] Sep 2 17:31:57 bastion LinuxCommandsWazuh: User ankur [3762511]: 1620 k get hpa | grep vortex Sep 2 17:32:02 bastion LinuxCommandsWazuh: User ankur [3762511]: 1620 k get hpa | grep vortex Sep 2 17:32:38 bastion LinuxCommandsWazuh: User ankur [3762511]: 1621 sternvortex-dramatiq-exports Sep 2 17:32:39 bastion LinuxCommandsWazuh: User ankur [3796182]: 1613 byobu Sep 2 17:32:40 bastion LinuxCommandsWazuh: User ankur [3796182]: 1614 cd Sep 2 17:32:40 bastion LinuxCommandsWazuh: User ankur [3796182]: 1615 ls Sep 2 17:32:42 bastion LinuxCommandsWazuh: User ankur [3796182]: 1616 cd .ssh/ Sep 2 17:32:43 bastion LinuxCommandsWazuh: User ankur [3796182]: 1617 ls Sep 2 17:32:47 bastion LinuxCommandsWazuh: User ankur [3762511]: 1622 stern vortex-dramatiq-exports Sep 2 17:32:48 bastion LinuxCommandsWazuh: User ankur [3762511]: 1623 sternvortex-dramatiq-exports Sep 2 17:32:48 bastion LinuxCommandsWazuh: User ankur [3796182]: 1618 cat id_rsa.pub Sep 2 17:32:48 bastion LinuxCommandsWazuh: User ankur [3762511]: 1623 sternvortex-dramatiq-exports Sep 2 17:32:51 bastion LinuxCommandsWazuh: User ankur [3762511]: 1624 k get hpa | grep vortex Sep 2 17:33:05 bastion LinuxCommandsWazuh: User ankur [3762511]: 1625 stern vortex-dramatiq-ingest Sep 2 17:33:06 bastion LinuxCommandsWazuh: User ankur [3796182]: 1619 cd Sep 2 17:33:11 bastion LinuxCommandsWazuh: User ankur [3762511]: 1626 stern -f vortex-dramatiq-ingest Sep 2 17:33:16 bastion LinuxCommandsWazuh: User ankur [3796182]: 1620 sudo vi .bashrc Sep 2 17:33:24 bastion ak: root@ [3798936]: exit [0] Sep 2 17:33:27 bastion ak: root@ [3798936]: cd .. [0] Sep 2 17:33:27 bastion ak: root@ [3798936]: ls [0] Sep 2 17:33:29 bastion ak: root@ [3798936]: cd ankur [0] Sep 2 17:33:30 bastion ak: root@ [3798936]: ls [0] Sep 2 17:33:30 bastion LinuxCommandsWazuh: User ankur [3762511]: 1627 k logs -f vortex-dramatiq-ingest Sep 2 17:33:35 bastion ak: root@ [3798936]: cat .bashrc [0] Sep 2 17:33:38 bastion LinuxCommandsWazuh: User ankur [3762511]: 1628 k get pods | grep vortex Sep 2 17:34:18 bastion ak: root@ [3798936]: sudo vi .bashrc [0] Sep 2 17:34:25 bastion LinuxCommandsWazuh: User ankur [3802573]: 1621 exit Sep 2 17:34:25 bastion LinuxCommandsWazuh: User ankur [3802573]: 1622 cd Sep 2 17:34:39 bastion LinuxCommandsWazuh: User ankur [3762511]: 1629 k logs -f vortex-dramatiq-ingest-c5f68996-6b6gw Sep 2 17:34:40 bastion LinuxCommandsWazuh: User ankur [3762511]: 1629 k logs -f vortex-dramatiq-ingest-c5f68996-6b6gw Sep 2 17:34:45 bastion LinuxCommandsWazuh: User ak [3803854]: 282 exit Sep 2 17:34:49 bastion LinuxCommandsWazuh: User ankur [3804048]: 1623 exit Sep 2 17:34:51 bastion LinuxCommandsWazuh: User ankur [3804048]: 1624 cd Sep 2 17:34:57 bastion LinuxCommandsWazuh: User ankur [3804048]: 1624 cd Sep 2 17:35:24 bastion LinuxCommandsWazuh: User ankur [3804048]: 1625 vi .bashrc Sep 2 17:35:25 bastion LinuxCommandsWazuh: User ankur [3762511]: 1630 k get hpa Sep 2 17:35:27 bastion LinuxCommandsWazuh: User ak [3803854]: 283 sudo su ankur Sep 2 17:35:28 bastion LinuxCommandsWazuh: User ankur [3806411]: 1626 exit Sep 2 17:35:29 bastion LinuxCommandsWazuh: User ankur [3806411]: 1627 cd Sep 2 17:35:37 bastion LinuxCommandsWazuh: User ankur [3806411]: 1628 redis-secondary Sep 2 17:36:12 bastion LinuxCommandsWazuh: User ankur [3064868]: 1651 k exec -it nitrox-dj-6567cb9cbc-ncrbr bash Sep 2 17:36:14 bastion LinuxCommandsWazuh: User ak [3803854]: 283 sudo su ankur Sep 2 17:36:17 bastion LinuxCommandsWazuh: User ankur [3762511]: 1631 redis-secondary Sep 2 17:36:22 bastion LinuxCommandsWazuh: User ankur [3810229]: 1676 exit Sep 2 17:36:22 bastion LinuxCommandsWazuh: User abhijeet [3810245]: 1998 kubectl get pods | grep nitrox Sep 2 17:36:26 bastion LinuxCommandsWazuh: User ayush [3810513]: 397 cool-server Sep 2 17:37:42 bastion LinuxCommandsWazuh: User ayush [3814956]: 397 cool-server Sep 2 17:37:43 bastion LinuxCommandsWazuh: User ayush [3814956]: 398 nvidia-smi Sep 2 17:37:57 bastion LinuxCommandsWazuh: User ayush [3814956]: 399 cool-server Sep 2 17:38:29 bastion LinuxCommandsWazuh: User abhijeet [3817770]: 1998 kubectl get pods | grep nitrox Sep 2 17:38:30 bastion LinuxCommandsWazuh: User abhijeet [3817770]: 1999 ls Sep 2 17:39:57 bastion LinuxCommandsWazuh: User ankur [3810229]: 1677 redis-secondary Sep 2 17:46:11 bastion LinuxCommandsWazuh: User ankur [3762511]: 1632 k get hpa Sep 2 17:47:26 bastion LinuxCommandsWazuh: User ayush [3849553]: 400 exit Sep 2 17:47:49 bastion LinuxCommandsWazuh: User ankur [2755510]: 1605 clickhouse-ssh Sep 2 17:47:52 bastion LinuxCommandsWazuh: User ankur [2755510]: 1606 clear Sep 2 17:48:04 bastion LinuxCommandsWazuh: User ankur [2755510]: 1607 k get pods | grep nitrox-dj Sep 2 17:48:04 bastion LinuxCommandsWazuh: User ayush [3810513]: 397 cool-server Sep 2 17:48:05 bastion LinuxCommandsWazuh: User abhijeet [3810245]: 1999 sudo su ayush Sep 2 17:48:24 bastion LinuxCommandsWazuh: User abhijeet [3817770]: 2000 internal-server Sep 2 17:56:03 bastion LinuxCommandsWazuh: User ak [3803854]: 284 k get pods Sep 2 17:57:27 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 779 mongo pixel_v1 Sep 2 17:57:35 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 780 stern cookie-cutter | grep "VRFEMAIL>MERGE1>DEBUG::SSO>" Sep 2 17:58:10 bastion LinuxCommandsWazuh: User ankur [2755510]: 1608 k exec -it nitrox-dj-6567cb9cbc-ncrbr bash Sep 2 17:59:58 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2013 watch 'kubectl top nodes | grep "gke-nitrox-production-nitro-services"' Sep 2 18:00:14 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2014 kubectl get pods | grep nitor Sep 2 18:00:17 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2015 kubectl get pods | grep nitro Sep 2 18:00:40 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2016 kubectl logs nitrox-dj-5bddf989cb-6ckq4 Sep 2 18:00:46 bastion LinuxCommandsWazuh: User abhijeet [3690313]: 2017 kubectl logs nitrox-dj-5bddf989cb-6ckq4 -f Sep 2 18:01:17 bastion LinuxCommandsWazuh: User ankur [2755510]: 1609 k get pods | grep nitrox-dj Sep 2 18:04:16 bastion LinuxCommandsWazuh: User abhijeet [3908630]: 1998 exit Sep 2 18:04:24 bastion LinuxCommandsWazuh: User abhijeet [3908630]: 1999 kubectl get pod -n loki Sep 2 18:04:34 bastion LinuxCommandsWazuh: User abhijeet [3908630]: 2000 kubectl top pod -n loki Sep 2 18:05:44 bastion LinuxCommandsWazuh: User ankur [3762511]: 1633 stern cookie-cutter-queues | grep -i "VortexExporter" Sep 2 18:06:43 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 18:06:44 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO"] Sep 2 18:07:14 bastion LinuxCommandsWazuh: User abhijeet [3908630]: 2000 kubectl top pod -n loki Sep 2 18:07:21 bastion LinuxCommandsWazuh: User ankur [3762511]: 1633 stern cookie-cutter-queues | grep -i "VortexExporter" Sep 2 18:07:44 bastion LinuxCommandsWazuh: User ankur [3762511]: 1634 stern cookie-cutter-queues | grep -i "PxxO: Exporter" Sep 2 18:08:01 bastion LinuxCommandsWazuh: User ankur [3762511]: 1634 stern cookie-cutter-queues | grep -i "PxxO: Exporter" Sep 2 18:08:28 bastion LinuxCommandsWazuh: User ankur [3762511]: 1635 stern cookie-cutter-queues | grep -i "PxxO: Exporter" | grep -i "VortexExporter" Sep 2 18:08:48 bastion LinuxCommandsWazuh: User ashish [3924856]: 411 redis Sep 2 18:08:49 bastion LinuxCommandsWazuh: User ankur [2186371]: 1572 stern cookie-cutter-queues | grep -i "VortexExporter:-" Sep 2 18:08:51 bastion LinuxCommandsWazuh: User ashish [3925123]: 411 redis Sep 2 18:08:55 bastion LinuxCommandsWazuh: User ashish [3925123]: 412 events Sep 2 18:11:33 bastion LinuxCommandsWazuh: User ankur [3762511]: 1635 stern cookie-cutter-queues | grep -i "PxxO: Exporter" | grep -i "VortexExporter" Sep 2 18:13:05 bastion LinuxCommandsWazuh: User ankur [3762511]: 1635 stern cookie-cutter-queues | grep -i "PxxO: Exporter" | grep -i "VortexExporter" Sep 2 18:13:11 bastion LinuxCommandsWazuh: User ankur [3944233]: 1839 exit Sep 2 18:15:05 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 18:15:05 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 18:15:08 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 18:15:09 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 781 stern cookie-cutter | grep "DEBUG::SSO" Sep 2 18:16:38 bastion LinuxCommandsWazuh: User ankur [3959891]: 1839 exit Sep 2 18:16:43 bastion LinuxCommandsWazuh: User ankur [3959891]: 1840 k get hpa Sep 2 18:17:10 bastion LinuxCommandsWazuh: User ankur [3959891]: 1840 k get hpa Sep 2 18:17:18 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3959891]: 1840 k get hpa ] Sep 2 18:17:37 bastion LinuxCommandsWazuh: User ankur [3959891]: 1841 k get pods | vortex Sep 2 18:17:42 bastion LinuxCommandsWazuh: User ankur [3959891]: 1842 k get pods | grep vortex Sep 2 18:17:56 bastion LinuxCommandsWazuh: User ankur [3959891]: 1843 k get pods -o wide | grep vortex Sep 2 18:18:19 bastion LinuxCommandsWazuh: User ankur [3959891]: 1844 k top pods | grep vortex Sep 2 18:27:04 bastion LinuxCommandsWazuh: User ankur [3959891]: 1844 k top pods | grep vortex Sep 2 18:27:06 bastion LinuxCommandsWazuh: User ankur [3959891]: 1845 k get pods -o wide | grep vortex Sep 2 18:27:08 bastion LinuxCommandsWazuh: User ankur [3959891]: 1845 k get pods -o wide | grep vortex Sep 2 18:27:15 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ankur [3959891]: 1845 k get pods -o wide | grep vortex] Sep 2 18:27:17 bastion LinuxCommandsWazuh: User ankur [3959891]: 1845 k get pods -o wide | grep vortex Sep 2 18:27:18 bastion LinuxCommandsWazuh: User ankur [3959891]: 1845 k get pods -o wide | grep vortex Sep 2 18:28:09 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ankur [3959891]: 1845 k get pods -o wide | grep vortex] Sep 2 18:28:14 bastion LinuxCommandsWazuh: User ankur [3959891]: 1846 k top pods | grep vortex Sep 2 18:28:22 bastion LinuxCommandsWazuh: User ankur [3959891]: 1847 k get hpa Sep 2 18:28:28 bastion LinuxCommandsWazuh: User ankur [3959891]: 1848 k get pods -o wide | grep vortex Sep 2 18:29:07 bastion LinuxCommandsWazuh: User ankur [3959891]: 1849 k logs -f vortex-dramatiq-67cc8c9c49-qccf7 Sep 2 18:29:15 bastion LinuxCommandsWazuh: User ankur [3959891]: 1850 k get pods -o wide | grep vortex Sep 2 18:29:52 bastion LinuxCommandsWazuh: User ankur [3959891]: 1851 stern vortex-dramatiq | grep -i "PxxO: Start" Sep 2 18:33:50 bastion LinuxCommandsWazuh: User rihan [3923717]: 1299 mongo Sep 2 18:34:22 bastion LinuxCommandsWazuh: User ankur [3959891]: 1851 stern vortex-dramatiq | grep -i "PxxO: Start Sep 2 18:34:26 bastion LinuxCommandsWazuh: User ankur [3959891]: 1852 stern vortex-dramatiq | grep -i "PxxO: Start" Sep 2 18:34:32 bastion LinuxCommandsWazuh: User ankur [3959891]: 1853 stern vortex-dramatiq | grep -i "PxxO:" Sep 2 18:35:43 bastion LinuxCommandsWazuh: User ankur [3959891]: 1853 stern vortex-dramatiq | grep -i "PxxO:" Sep 2 18:35:50 bastion LinuxCommandsWazuh: User ankur [3959891]: 1854 k get pods -o wide | grep vortex Sep 2 18:38:03 bastion LinuxCommandsWazuh: User ashish [4030292]: 412 byobu Sep 2 18:49:54 bastion LinuxCommandsWazuh: User ayush [3849553]: 401 cool-server Sep 2 18:58:11 bastion LinuxCommandsWazuh: User ankur [3762511]: 1635 stern cookie-cutter-queues | grep -i "PxxO: Exporter" | grep -i "VortexExporter" Sep 2 18:58:15 bastion LinuxCommandsWazuh: User ankur [4087794]: 1839 exit Sep 2 18:58:24 bastion LinuxCommandsWazuh: User ankur [4087794]: 1840 k get pods | grep vortex Sep 2 18:58:31 bastion LinuxCommandsWazuh: User ankur [4087794]: 1841 k get hpa Sep 2 18:58:33 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 782 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Sep 2 18:58:35 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 783 clear Sep 2 18:58:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3601799]: 783 clear] Sep 2 19:02:39 bastion LinuxCommandsWazuh: User ankur [4087794]: 1841 k get hpa Sep 2 19:03:08 bastion LinuxCommandsWazuh: User ankur [4087794]: 1842 k top pods | grep vortex Sep 2 19:03:37 bastion LinuxCommandsWazuh: User ankur [4087794]: 1843 k logs -f vortex-dramatiq-b86c8b7f6-5mq5l Sep 2 19:05:54 bastion LinuxCommandsWazuh: User ankur [4087794]: 1844 k logs -f vortex-dramatiq-b86c8b7f6-5mq5l | grep -i DRAMATIQ_TASK: Sep 2 19:19:42 bastion LinuxCommandsWazuh: User ankur [1219049]: 1498 stern urlbird | grep -i "CHECK_USER_IN_FILTER" Sep 2 19:20:52 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 784 stern cookie-cutter | grep "DEBUG::MERGE" Sep 2 19:20:52 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 784 stern cookie-cutter | grep "DEBUG::MERGE" Sep 2 19:20:53 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 784 stern cookie-cutter | grep "DEBUG::MERGE" Sep 2 19:22:45 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 785 stern cookie-cutter | grep "DynamicMergeStrategy" Sep 2 19:22:45 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 785 stern cookie-cutter | grep "DynamicMergeStrategy" Sep 2 19:22:47 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 786 clear Sep 2 19:23:55 bastion LinuxCommandsWazuh: User ankur [1219049]: 1498 stern urlbird | grep -i "CHECK_USER_IN_FILTER" Sep 2 19:28:38 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 760 exit Sep 2 19:28:43 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 761 k get hpa Sep 2 19:28:57 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 762 k get pods | grep "datapulse" Sep 2 19:29:42 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 762 k get pods | grep "datapulse" Sep 2 19:29:47 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 762 k get pods | grep "datapulse" Sep 2 19:29:49 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 762 k get pods | grep "datapulse" Sep 2 19:29:55 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 763 k logs -f datapulse-web-6c56b9d6bf-5dwl2 Sep 2 19:29:58 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 763 k logs -f datapulse-web-6c56b9d6bf-5dwl2 Sep 2 19:30:00 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 764 k get pods | grep "datapulse" Sep 2 19:30:04 bastion LinuxCommandsWazuh: User ankur [3762511]: 1636 k get pods | grep datapulse Sep 2 19:30:12 bastion LinuxCommandsWazuh: User ankur [3762511]: 1637 k logs -f datapulse-web-6c56b9d6bf-6trnx Sep 2 19:30:16 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 765 k logs -f datapulse-web-6c56b9d6bf-5dwl2 Sep 2 19:30:40 bastion LinuxCommandsWazuh: User ankur [3762511]: 1638 k get pods -o wide | grep datapulse Sep 2 19:30:51 bastion LinuxCommandsWazuh: User ankur [3762511]: 1638 k get pods -o wide | grep datapulse Sep 2 19:30:53 bastion LinuxCommandsWazuh: User ankur [3762511]: 1638 k get pods -o wide | grep datapulse Sep 2 19:31:05 bastion LinuxCommandsWazuh: User ankur [3762511]: 1638 k get pods -o wide | grep datapulse Sep 2 19:31:10 bastion LinuxCommandsWazuh: User ankur [3762511]: 1638 k get pods -o wide | grep datapulse Sep 2 19:31:36 bastion LinuxCommandsWazuh: User ankur [4182560]: 1865 exit Sep 2 19:31:39 bastion LinuxCommandsWazuh: User ankur [4182560]: 1866 k get pods -o wide | grep datapulse Sep 2 19:31:47 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:32:21 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 1998 watch 'kubectl top nodes | grep "gke-nitrox-production-nitro-services"' Sep 2 19:32:34 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:32:34 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 1999 kubectl get pods | grep data Sep 2 19:32:46 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 2000 kubectl get pods -o wide | grep data Sep 2 19:33:14 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:33:52 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 2000 kubectl get pods -o wide | grep data Sep 2 19:33:54 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [4184739]: 2000 kubectl get pods -o wide | grep data ] Sep 2 19:34:05 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 2000 kubectl get pods -o wide | grep data Sep 2 19:34:16 bastion LinuxCommandsWazuh: User abhijeet [4184739]: 2001 kubectl get pods -o wide | grep micro Sep 2 19:34:31 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 1998 watch 'kubectl top nodes | grep "gke-nitrox-production-nitro-services"' Sep 2 19:34:43 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 1999 kubectl get pods -o wide| grep micro Sep 2 19:34:48 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:34:52 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [4174081]: 766 k get pods | grep "datapulse"] Sep 2 19:34:56 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 1999 kubectl get pods -o wide| grep micro Sep 2 19:34:59 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:35:00 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:35:02 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:35:03 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 1999 kubectl get pods -o wide| grep micro Sep 2 19:35:04 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:35:09 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2000 kubectl get pods Sep 2 19:36:17 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:36:20 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:36:22 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:36:45 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2001 kubectl get pods | grep data Sep 2 19:37:01 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:37:07 bastion LinuxCommandsWazuh: message repeated 4 times: [ User mohtashim [4174081]: 766 k get pods | grep "datapulse"] Sep 2 19:37:11 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:37:15 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [4174081]: 766 k get pods | grep "datapulse"] Sep 2 19:37:56 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:37:58 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:38:00 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:38:31 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:38:34 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:38:44 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [4174081]: 766 k get pods | grep "datapulse"] Sep 2 19:38:45 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2001 kubectl get pods | grep data Sep 2 19:38:49 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [4190999]: 2001 kubectl get pods | grep data] Sep 2 19:38:50 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:38:52 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2001 kubectl get pods | grep data Sep 2 19:38:55 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2001 kubectl get pods | grep data Sep 2 19:39:10 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2002 kubectl get pods -o wode | grep data Sep 2 19:39:16 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:39:17 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2003 kubectl get pods -o wide | grep micro Sep 2 19:39:27 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2004 kubectl top pods -o wide | grep micro Sep 2 19:39:30 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2005 kubectl top pod -o wide | grep micro Sep 2 19:39:39 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2006 kubectl top pod | grep data Sep 2 19:39:49 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2007 kubectl get pods | grep data Sep 2 19:40:00 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [4190999]: 2007 kubectl get pods | grep data] Sep 2 19:40:51 bastion LinuxCommandsWazuh: User ankur [16767]: 1867 exit Sep 2 19:41:05 bastion LinuxCommandsWazuh: User ankur [16767]: 1868 k get pods | grep vortex Sep 2 19:41:21 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:41:23 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2008 watch 'kubectl get pods | grep data' Sep 2 19:41:31 bastion LinuxCommandsWazuh: User ankur [16767]: 1869 k logs -f vortex-698fdd49c9-fjjgv Sep 2 19:41:46 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2009 kubectl get deployment -n nitrox-production Sep 2 19:42:01 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:42:19 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2010 kubectl rollout restart deployment datapulse-celery -n nitrox-production Sep 2 19:42:27 bastion LinuxCommandsWazuh: User abhijeet [4190999]: 2011 kubectl rollout restart deployment datapulse-web -n nitrox-production Sep 2 19:43:30 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 766 k get pods | grep "datapulse" Sep 2 19:43:33 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [4174081]: 766 k get pods | grep "datapulse"] Sep 2 19:50:09 bastion LinuxCommandsWazuh: User ankur [3959891]: 1854 k get pods -o wide | grep vortex Sep 2 19:50:14 bastion LinuxCommandsWazuh: User ankur [3959891]: 1855 k get hpa Sep 2 19:52:00 bastion LinuxCommandsWazuh: User ankur [52004]: 1867 exit Sep 2 19:52:08 bastion LinuxCommandsWazuh: User ankur [52004]: 1868 k get pods | grep urlbird Sep 2 19:52:13 bastion LinuxCommandsWazuh: User ankur [52004]: 1869 k get hpa Sep 2 19:52:30 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:53:05 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:54:28 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:54:55 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:55:55 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:55:56 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [52004]: 1870 stern urlbird] Sep 2 19:58:24 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 19:58:27 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [52004]: 1870 stern urlbird] Sep 2 20:01:07 bastion LinuxCommandsWazuh: User ankur [52004]: 1870 stern urlbird Sep 2 20:01:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [52004]: 1870 stern urlbird] Sep 2 20:08:21 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 787 stern cookie-cutter | grep "DynamicMergeStrategy" Sep 2 20:08:21 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 787 stern cookie-cutter | grep "DynamicMergeStrategy" Sep 2 20:10:08 bastion LinuxCommandsWazuh: User ankur [110241]: 1871 exit Sep 2 20:10:15 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 788 stern cookie-cutter | grep "merge_customers" Sep 2 20:10:23 bastion LinuxCommandsWazuh: User ankur [110241]: 1872 k get pods -o wide | grep datapulse Sep 2 20:10:40 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 789 stern cookie-cutter | grep "shubham@ace" Sep 2 20:10:40 bastion LinuxCommandsWazuh: User mohtashim [3601799]: 789 stern cookie-cutter | grep "shubham@ace" Sep 2 20:10:44 bastion LinuxCommandsWazuh: User ankur [110241]: 1873 k top pods | grep datap Sep 2 20:11:04 bastion LinuxCommandsWazuh: User ankur [110241]: 1874 k get pods -o wide | grep datapulse Sep 2 20:11:06 bastion LinuxCommandsWazuh: User ankur [110241]: 1874 k get pods -o wide | grep datapulse Sep 2 20:11:18 bastion LinuxCommandsWazuh: User ankur [110241]: 1875 k logs -f datapulse-web-6cf4878c46-ht7nf Sep 2 20:11:23 bastion LinuxCommandsWazuh: User ankur [110241]: 1876 k logs datapulse-web-6cf4878c46-ht7nf Sep 2 20:11:24 bastion LinuxCommandsWazuh: User ankur [110241]: 1876 k logs datapulse-web-6cf4878c46-ht7nf Sep 2 20:11:28 bastion LinuxCommandsWazuh: User ankur [110241]: 1877 k get pods -o wide | grep datapulse Sep 2 20:25:14 bastion LinuxCommandsWazuh: User ayush [156007]: 402 cool-server Sep 2 20:25:44 bastion LinuxCommandsWazuh: User ayush [156007]: 402 cool-server Sep 2 20:26:17 bastion LinuxCommandsWazuh: User ayush [156007]: 402 cool-server Sep 2 20:26:18 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [156007]: 402 cool-server ] Sep 2 20:27:00 bastion LinuxCommandsWazuh: User ankur [3959891]: 1856 stern vortex-59d6cc676f-6ffh4 Sep 2 20:27:01 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [3959891]: 1856 stern vortex-59d6cc676f-6ffh4] Sep 2 20:27:19 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 767 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Sep 2 20:27:29 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 768 psql -h 10.94.16.3 -U postgres -d nitrox_v1 Sep 2 20:28:07 bastion LinuxCommandsWazuh: User mohtashim [4174081]: 769 psql -h 10.94.16.3 -U postgres -d nitrox_v2 Sep 2 20:30:16 bastion LinuxCommandsWazuh: User ayush [170755]: 403 exit Sep 2 20:30:20 bastion LinuxCommandsWazuh: User ayush [170755]: 404 cool-server Sep 2 20:30:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [170755]: 404 cool-server ] Sep 2 20:32:26 bastion LinuxCommandsWazuh: User ankur [176760]: 1878 exit Sep 2 20:34:19 bastion LinuxCommandsWazuh: User ayush [182056]: 405 exit Sep 2 20:35:11 bastion LinuxCommandsWazuh: User ayush [182056]: 406 cool-server Sep 2 20:35:27 bastion LinuxCommandsWazuh: User ayush [182056]: 406 cool-server Sep 2 20:35:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [182056]: 406 cool-server ] Sep 2 20:37:35 bastion LinuxCommandsWazuh: User ankur [176760]: 1879 stern vortex | grep -i "upsert keys:" Sep 2 20:47:29 bastion LinuxCommandsWazuh: User ankur [176760]: 1879 stern vortex | grep -i "upsert keys:" Sep 2 20:47:38 bastion LinuxCommandsWazuh: User ankur [176760]: 1880 k get pods | grep vortex Sep 2 20:47:42 bastion LinuxCommandsWazuh: User ankur [176760]: 1881 k get hpa Sep 2 20:50:09 bastion LinuxCommandsWazuh: User venky [227604]: 1998 kubectl scale --replicas=0 deployment/cookie-cutter-queues-beanie -n nitrox-production Sep 2 20:50:21 bastion LinuxCommandsWazuh: User venky [227604]: 1999 kubectl get deploy Sep 2 20:50:27 bastion LinuxCommandsWazuh: User venky [227604]: 2000 kubectl get deploy | cooki Sep 2 20:50:43 bastion LinuxCommandsWazuh: User venky [227604]: 2001 kubectl get deploy | grep dfly Sep 2 20:50:48 bastion LinuxCommandsWazuh: User venky [227604]: 2002 kubectl get deploy | grep coo Sep 2 20:50:54 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [227604]: 2002 kubectl get deploy | grep coo] Sep 2 20:50:58 bastion LinuxCommandsWazuh: User venky [227604]: 2003 kubectl get hpa Sep 2 20:51:11 bastion LinuxCommandsWazuh: User venky [227604]: 2003 kubectl get hpa Sep 2 20:51:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [227604]: 2003 kubectl get hpa ] Sep 2 20:51:41 bastion LinuxCommandsWazuh: User ankur [176760]: 1881 k get hpa Sep 2 20:55:27 bastion LinuxCommandsWazuh: User venky [227604]: 2003 kubectl get hpa Sep 2 20:55:45 bastion LinuxCommandsWazuh: User venky [227604]: 2004 kubectl scale --replicas=150 deployment/cookie-cutter-queues -n nitrox-production Sep 2 20:56:01 bastion LinuxCommandsWazuh: User venky [227604]: 2005 kubectl scale --replicas=175 deployment/cookie-cutter -n nitrox-production Sep 2 20:56:23 bastion LinuxCommandsWazuh: User venky [227604]: 2006 kubectl get hpa Sep 2 20:56:28 bastion LinuxCommandsWazuh: User venky [227604]: 2006 kubectl get hpa Sep 2 20:56:33 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [227604]: 2006 kubectl get hpa ] Sep 2 20:56:45 bastion LinuxCommandsWazuh: User venky [227604]: 2006 kubectl get hpa Sep 2 20:56:56 bastion LinuxCommandsWazuh: User venky [227604]: 2007 kubectl get po | grep queue | wc -l Sep 2 20:56:58 bastion LinuxCommandsWazuh: User venky [227604]: 2007 kubectl get po | grep queue | wc -l Sep 2 20:57:05 bastion LinuxCommandsWazuh: User venky [227604]: 2008 kubectl scale --replicas=175 deployment/cookie-cutter -n nitrox-production Sep 2 20:57:08 bastion LinuxCommandsWazuh: User venky [227604]: 2009 kubectl get po | grep queue | wc -l Sep 2 20:57:15 bastion LinuxCommandsWazuh: User venky [227604]: 2010 kubectl scale --replicas=150 deployment/cookie-cutter-queues -n nitrox-production Sep 2 20:57:19 bastion LinuxCommandsWazuh: User venky [227604]: 2011 kubectl get po | grep queue | wc -l Sep 2 20:57:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [227604]: 2011 kubectl get po | grep queue | wc -l ] Sep 2 20:57:26 bastion LinuxCommandsWazuh: User venky [227604]: 2012 kubectl get hpa Sep 2 20:57:54 bastion LinuxCommandsWazuh: User venky [227604]: 2012 kubectl get hpa Sep 2 20:57:56 bastion LinuxCommandsWazuh: User venky [227604]: 2013 kubectl scale --replicas=150 deployment/cookie-cutter-queues -n nitrox-production Sep 2 20:59:12 bastion LinuxCommandsWazuh: User venky [227604]: 2014 kubectl get hpa Sep 2 20:59:49 bastion LinuxCommandsWazuh: User venky [227604]: 2014 kubectl get hpa Sep 2 20:59:49 bastion LinuxCommandsWazuh: User venky [227604]: 2014 kubectl get hpa Sep 2 21:00:13 bastion LinuxCommandsWazuh: User venky [227604]: 2015 kubectl edit hpa cookie-cutter-queues Sep 2 21:00:25 bastion LinuxCommandsWazuh: User venky [227604]: 2016 kubectl edit hpa cookie-cutter Sep 2 21:00:30 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [227604]: 2016 kubectl edit hpa cookie-cutter] Sep 2 22:30:43 bastion LinuxCommandsWazuh: User abhijeet [276921]: 1998 watch 'kubectl get pods | grep data' Sep 2 22:30:51 bastion LinuxCommandsWazuh: User abhijeet [276921]: 1999 kubectl get hpa Sep 2 22:51:49 bastion LinuxCommandsWazuh: User abhijeet [278766]: 1998 kubectl get hpa Sep 2 22:51:55 bastion LinuxCommandsWazuh: User abhijeet [278766]: 1999 ls Sep 2 22:51:59 bastion LinuxCommandsWazuh: User abhijeet [278766]: 1999 ls Sep 2 22:52:06 bastion LinuxCommandsWazuh: User ayush [278799]: 407 exit Sep 2 22:53:18 bastion LinuxCommandsWazuh: User ayush [278799]: 408 cool-server Sep 2 23:01:42 bastion LinuxCommandsWazuh: User abhijeet [279861]: 1998 kubectl get hpa Sep 2 23:02:01 bastion LinuxCommandsWazuh: User ayush [279882]: 407 exit Sep 2 23:02:19 bastion LinuxCommandsWazuh: User ayush [279882]: 408 cool-server Sep 2 23:02:20 bastion LinuxCommandsWazuh: User ayush [279882]: 409 ls Sep 2 23:02:35 bastion LinuxCommandsWazuh: User ayush [279882]: 409 ls Sep 2 23:02:40 bastion LinuxCommandsWazuh: User ayush [279882]: 410 cd Sep 2 23:02:41 bastion LinuxCommandsWazuh: User ayush [279882]: 411 ls Sep 2 23:02:51 bastion LinuxCommandsWazuh: User ayush [279882]: 412 cat .bashrc Sep 2 23:04:07 bastion LinuxCommandsWazuh: User ayush [279882]: 413 cool-server Sep 2 23:04:10 bastion LinuxCommandsWazuh: User ayush [279882]: 413 cool-server Sep 2 23:05:04 bastion LinuxCommandsWazuh: User ayush [279882]: 413 cool-server Sep 2 23:05:36 bastion LinuxCommandsWazuh: User ayush [279882]: 414 ssh -p 12222 nitro@34.131.103.89 -v Sep 2 23:06:37 bastion LinuxCommandsWazuh: User ayush [279882]: 414 ssh -p 12222 nitro@34.131.103.89 -v Sep 2 23:08:58 bastion LinuxCommandsWazuh: User ayush [279882]: 414 ssh -p 12222 nitro@34.131.103.89 -v Sep 2 23:11:23 bastion LinuxCommandsWazuh: User ayush [279882]: 414 ssh -p 12222 nitro@34.131.103.89 -v Sep 2 23:11:34 bastion LinuxCommandsWazuh: User ayush [278799]: 408 cool-server Sep 2 23:17:59 bastion LinuxCommandsWazuh: User ayush [279882]: 414 ssh -p 12222 nitro@34.131.103.89 -v