Sep 4 12:16:21 bastion LinuxCommandsWazuh: User ashish [1025748]: 423 mongo Sep 4 12:16:25 bastion LinuxCommandsWazuh: User ashish [1025807]: 423 mongo Sep 4 12:17:14 bastion LinuxCommandsWazuh: User ashish [1025807]: 424 psql -h 10.94.16.3 -p 5432 -U dbuser -d vortex_v2; Sep 4 12:18:28 bastion LinuxCommandsWazuh: User ashish [1025807]: 425 psql -h 10.94.16.3 -p 5432 -U postgres -d vortex_v2; Sep 4 12:18:28 bastion LinuxCommandsWazuh: User ashish [1025748]: 424 byobu Sep 4 12:18:30 bastion LinuxCommandsWazuh: User ashish [1025748]: 424 byobu Sep 4 12:49:08 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 1998 internal-server Sep 4 12:49:09 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 1999 ls Sep 4 12:49:16 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 2000 kubectl get pod -n loki Sep 4 12:49:32 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 2001 kubectl get cm -n loki Sep 4 12:49:50 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 2002 kubectl get cm grafana -n loki -o yaml Sep 4 12:50:09 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 2003 kubectl get cm -n loki Sep 4 12:50:26 bastion LinuxCommandsWazuh: User abhijeet [1030414]: 2004 kubectl get cm prometheus-alertmanager -n loki -o yaml Sep 4 13:13:11 bastion LinuxCommandsWazuh: User ashish [1032560]: 426 byobu Sep 4 13:13:13 bastion LinuxCommandsWazuh: User ashish [1032617]: 426 byobu Sep 4 13:29:37 bastion LinuxCommandsWazuh: User ashish [1032617]: 427 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Sep 4 13:29:38 bastion LinuxCommandsWazuh: User ashish [1032560]: 426 byobu Sep 4 13:57:56 bastion LinuxCommandsWazuh: User mohtashim [1052975]: 804 exit Sep 4 13:58:02 bastion LinuxCommandsWazuh: User mohtashim [1052975]: 804 exit Sep 4 14:01:14 bastion LinuxCommandsWazuh: User mohtashim [1052975]: 805 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Sep 4 14:16:44 bastion LinuxCommandsWazuh: User ankur [1054815]: 1884 byobu Sep 4 14:16:49 bastion LinuxCommandsWazuh: User ankur [176760]: 1902 k get hpa Sep 4 14:36:42 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 1998 exit Sep 4 14:36:43 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 1999 ls Sep 4 14:36:45 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 1999 ls Sep 4 14:36:47 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 1999 ls Sep 4 14:36:55 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2000 kubectl get cm -n loki Sep 4 14:37:18 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2001 kubectl get cm prometheus-alertmanager -o yaml Sep 4 14:37:42 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2001 kubectl get cm prometheus-alertmanager -o yaml Sep 4 14:37:52 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2002 kubectl get cm prometheus-alertmanager -n loki -o yaml Sep 4 14:37:57 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2003 kubectl get cm -n loki Sep 4 14:37:59 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2004 kubectl get cm prometheus-alertmanager -n loki -o yaml Sep 4 14:42:37 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2005 kubectl get pods -n loki Sep 4 14:42:58 bastion LinuxCommandsWazuh: User abhijeet [1067399]: 2006 kubectl exec -it prometheus-alertmanager-0 -n loki -- bash Sep 4 14:56:19 bastion LinuxCommandsWazuh: User aman [1069896]: 194 exit Sep 4 14:56:23 bastion LinuxCommandsWazuh: User aman [1069896]: 195 clear Sep 4 14:56:26 bastion LinuxCommandsWazuh: User aman [1069896]: 196 mongo Sep 4 14:58:53 bastion LinuxCommandsWazuh: User mohtashim [1070038]: 806 exit Sep 4 15:05:07 bastion LinuxCommandsWazuh: User aman [1070392]: 196 mongo Sep 4 15:05:09 bastion LinuxCommandsWazuh: User aman [1070392]: 197 clear Sep 4 15:05:12 bastion LinuxCommandsWazuh: User aman [1070392]: 198 mongo Sep 4 15:05:23 bastion LinuxCommandsWazuh: User aman [1070392]: 199 clear Sep 4 15:05:36 bastion LinuxCommandsWazuh: User aman [1070392]: 200 exiut Sep 4 15:28:41 bastion LinuxCommandsWazuh: User mohtashim [1070038]: 807 mongo pixel_v1 Sep 4 15:46:32 bastion LinuxCommandsWazuh: User mohtashim [1074439]: 808 exit Sep 4 15:47:27 bastion LinuxCommandsWazuh: User mohtashim [1074439]: 809 mongo pixel_v1 Sep 4 15:51:06 bastion LinuxCommandsWazuh: User mohtashim [1074696]: 810 exit Sep 4 15:51:07 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 1998 kubectl exec -it prometheus-alertmanager-0 -n loki -- sh Sep 4 15:51:19 bastion LinuxCommandsWazuh: User mohtashim [1074696]: 811 mongo pixel_v1 Sep 4 15:51:24 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 1999 kubectl get cm -n nitrox-production Sep 4 15:51:41 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2000 kubectl get cm -n nitrox-production big-o-cookie-cutter-config -o yaml Sep 4 15:52:04 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2001 nslookup big-o-cookie-cutter-redis Sep 4 15:52:09 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2002 nslookup redis Sep 4 15:52:44 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2003 kubectl get deployment -n nitrox-produciton Sep 4 15:52:49 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2004 kubectl get deployment -n nitrox-production Sep 4 15:58:43 bastion LinuxCommandsWazuh: User venky [1075732]: 1998 kubectl edit hpa cookie-cutter Sep 4 15:58:48 bastion LinuxCommandsWazuh: User venky [1075732]: 1999 kubectl get po Sep 4 15:58:58 bastion LinuxCommandsWazuh: User venky [1075732]: 2000 kubectl get po | grep xlr Sep 4 15:59:05 bastion LinuxCommandsWazuh: User venky [1075732]: 2000 kubectl get po | grep xlr Sep 4 15:59:08 bastion LinuxCommandsWazuh: User venky [1075732]: 2000 kubectl get po | grep xlr Sep 4 15:59:19 bastion LinuxCommandsWazuh: User venky [1075732]: 2001 kubectl get hpa Sep 4 15:59:37 bastion LinuxCommandsWazuh: User venky [1075732]: 2001 kubectl get hpa Sep 4 15:59:47 bastion LinuxCommandsWazuh: User venky [1075732]: 2002 kubectl get po | grep xlr Sep 4 16:02:48 bastion LinuxCommandsWazuh: User venky [1075732]: 2003 kubectl edit deploy xlr8 Sep 4 16:05:30 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 812 exit Sep 4 16:05:32 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 813 clear Sep 4 16:05:41 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 814 stern cookie-cutter Sep 4 16:05:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 814 stern cookie-cutter] Sep 4 16:08:24 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2005 kubectl get pods | grep cookie Sep 4 16:08:34 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 814 stern cookie-cutter Sep 4 16:08:34 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 814 stern cookie-cutter] Sep 4 16:08:35 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 815 clear Sep 4 16:08:43 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 816 k get pods | grep "cookie-cutter" Sep 4 16:08:47 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2006 kubectl logs cookie-cutter-594798f469-vv74c -n nitrox-production Sep 4 16:10:15 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2007 kubectl get pods | grep cookie Sep 4 16:10:46 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2007 kubectl get pods | grep cookie Sep 4 16:11:56 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 817 clear Sep 4 16:11:58 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter" Sep 4 16:12:02 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter" Sep 4 16:12:16 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter" Sep 4 16:12:26 bastion LinuxCommandsWazuh: message repeated 5 times: [ User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter"] Sep 4 16:12:30 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter" Sep 4 16:12:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 818 k get pods | grep "cookie-cutter"] Sep 4 16:12:40 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 819 k logs -f cookie-cutter-queues-68679d9447-57cb8 Sep 4 16:12:41 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [1076240]: 819 k logs -f cookie-cutter-queues-68679d9447-57cb8] Sep 4 16:12:57 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 820 clear Sep 4 16:13:00 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:13:06 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:13:19 bastion LinuxCommandsWazuh: message repeated 7 times: [ User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter"] Sep 4 16:13:21 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:13:22 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:13:36 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:13:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter"] Sep 4 16:14:48 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter" Sep 4 16:14:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 821 k get pods | grep "cookie-cutter"] Sep 4 16:14:49 bastion LinuxCommandsWazuh: User abhijeet [1074782]: 2007 kubectl get pods | grep cookie Sep 4 16:42:53 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 822 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:42:53 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 822 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:50:49 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 822 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:50:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1076240]: 822 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a"] Sep 4 16:50:52 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 823 clear Sep 4 16:51:40 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 824 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:51:40 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 824 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:53:57 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 824 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" Sep 4 16:53:57 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [1076240]: 824 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a"] Sep 4 16:54:21 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 825 clear Sep 4 16:54:45 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 826 stern cookie-cutter | grep "ShopifyCustomerExporter -- Exporting contact" Sep 4 16:54:45 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 826 stern cookie-cutter | grep "ShopifyCustomerExporter -- Exporting contact" Sep 4 16:55:03 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 827 stern cookie-cutter | grep "7e49f2b4-7e90-4bfb-bc4c-2c3094ce3876" Sep 4 16:55:29 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 828 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" | grep "ShopifyCustomerExporter -- Exporting contact" Sep 4 16:55:29 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 828 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" | grep "ShopifyCustomerExporter -- Exporting contact" Sep 4 16:57:11 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 828 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" | grep "ShopifyCustomerExporter -- Exporting contact" Sep 4 16:58:31 bastion LinuxCommandsWazuh: User ankur [1082146]: 1884 byobu Sep 4 16:58:38 bastion LinuxCommandsWazuh: User ankur [176760]: 1902 k get hpa Sep 4 16:58:47 bastion LinuxCommandsWazuh: User ankur [1082146]: 1884 byobu Sep 4 16:59:21 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 829 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" | grep "ShopifyCustomerExporter" Sep 4 16:59:22 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [1076240]: 829 stern cookie-cutter | grep "f79207ba-469e-4265-b267-9e390e3f126a" | grep "ShopifyCustomerExporter"] Sep 4 16:59:24 bastion LinuxCommandsWazuh: User mohtashim [1076240]: 830 clear Sep 4 17:53:36 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 1998 kubectl get pods | grep cookie Sep 4 17:54:33 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 1999 kubectl get pods | grep big Sep 4 17:54:46 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2000 kubectl logs big-o-cookie-cutter-7d45c88844-dvxjp -n nitrox-productino Sep 4 17:54:49 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2001 kubectl logs big-o-cookie-cutter-7d45c88844-dvxjp -n nitrox-production Sep 4 17:54:55 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2002 kubectl logs big-o-cookie-cutter-7d45c88844-dvxjp -n nitrox-production -f Sep 4 17:54:55 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2003 ls Sep 4 17:55:05 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2004 kubectl get ingress Sep 4 17:55:32 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2005 kubectl get ingress nitrox-production -o yaml Sep 4 17:56:16 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2006 ls Sep 4 17:57:56 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2007 kubectl get pods -n loki Sep 4 17:59:13 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2008 kubectl exec -it prometheus-alertmanager-0 -n loki -- sh Sep 4 17:59:31 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2009 kubectl get cm prometheus-alertmanager -n loki -o yaml Sep 4 18:20:17 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2010 kubectl exec -it prometheus-alertmanager-0 -n loki -- sh Sep 4 18:20:23 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2011 kubectl exec -it -u roor prometheus-alertmanager-0 -n loki -- sh Sep 4 18:20:29 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2012 kubectl exec -it -u root prometheus-alertmanager-0 -n loki -- sh Sep 4 18:20:34 bastion LinuxCommandsWazuh: User abhijeet [1087218]: 2013 kubectl exec -it -U root prometheus-alertmanager-0 -n loki -- sh Sep 4 18:41:09 bastion LinuxCommandsWazuh: User ankur [1092114]: 1885 exit Sep 4 18:41:15 bastion LinuxCommandsWazuh: User ankur [176760]: 1902 k get hpa Sep 4 18:47:22 bastion LinuxCommandsWazuh: User ankur [176760]: 1902 k get hpa Sep 4 18:48:01 bastion LinuxCommandsWazuh: User ankur [2755510]: 1614 k exec -it nitrox-dj-6cbb8d9d94-djw88 bash Sep 4 19:44:45 bastion LinuxCommandsWazuh: User ankur [1156374]: 1896 exit Sep 4 20:24:53 bastion LinuxCommandsWazuh: User ashish [1212899]: 427 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Sep 4 20:24:59 bastion LinuxCommandsWazuh: User ashish [1212899]: 428 ls