Sep 12 07:06:11 bastion LinuxCommandsWazuh: User ankur [1013887]: 1991 byobu Sep 12 07:07:40 bastion LinuxCommandsWazuh: User ankur [393014]: 1994 redis-secondary Sep 12 07:07:44 bastion LinuxCommandsWazuh: User ankur [393014]: 1994 redis-secondary Sep 12 07:08:47 bastion LinuxCommandsWazuh: User ankur [394602]: 2050 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:08:58 bastion LinuxCommandsWazuh: User ankur [394602]: 2051 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:09:00 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:09:04 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:09:06 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:29:23 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:29:25 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:29:31 bastion LinuxCommandsWazuh: User ankur [394602]: 2051 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:38:13 bastion LinuxCommandsWazuh: User ankur [394602]: 2051 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:38:22 bastion LinuxCommandsWazuh: User ankur [394602]: 2052 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:38:58 bastion LinuxCommandsWazuh: User ankur [394602]: 2052 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:39:38 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [394602]: 2052 stern vortex | grep -i "DMP_EXPORTS:"] Sep 12 07:39:41 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:39:46 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [448841]: 2026 k get hpa | grep vortex] Sep 12 07:39:51 bastion LinuxCommandsWazuh: User ankur [394602]: 2052 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:40:20 bastion LinuxCommandsWazuh: User ankur [394602]: 2053 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:50:13 bastion LinuxCommandsWazuh: User ankur [394602]: 2053 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:50:26 bastion LinuxCommandsWazuh: User ankur [394602]: 2054 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:50:28 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:50:30 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:52:57 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:52:58 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:52:59 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 07:53:26 bastion LinuxCommandsWazuh: User ankur [394602]: 2054 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:55:05 bastion LinuxCommandsWazuh: User ankur [394602]: 2055 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:55:27 bastion LinuxCommandsWazuh: User ankur [394602]: 2056 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:55:39 bastion LinuxCommandsWazuh: User ankur [394602]: 2057 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 07:56:11 bastion LinuxCommandsWazuh: User ankur [394602]: 2058 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 07:56:22 bastion LinuxCommandsWazuh: User ankur [394602]: 2059 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 08:07:48 bastion LinuxCommandsWazuh: User ankur [394602]: 2059 stern vortex | grep -i "DRAMATIQ_TASK: Finished" Sep 12 08:07:53 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ankur [394602]: 2059 stern vortex | grep -i "DRAMATIQ_TASK: Finished"] Sep 12 08:09:24 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:09:27 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:11:26 bastion LinuxCommandsWazuh: User ankur [394602]: 2060 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:14:34 bastion LinuxCommandsWazuh: User ankur [394602]: 2061 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 08:14:53 bastion LinuxCommandsWazuh: User ankur [394602]: 2062 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:15:04 bastion LinuxCommandsWazuh: User ankur [394602]: 2062 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:15:06 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:15:07 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:15:08 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:15:09 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:15:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [448841]: 2026 k get hpa | grep vortex] Sep 12 08:15:12 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:36:27 bastion LinuxCommandsWazuh: User ankur [1093205]: 1991 byobu Sep 12 08:36:29 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:36:30 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:36:35 bastion LinuxCommandsWazuh: User ankur [394602]: 2062 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:36:38 bastion LinuxCommandsWazuh: User ankur [394602]: 2063 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 08:36:42 bastion LinuxCommandsWazuh: User ankur [394602]: 2064 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:37:42 bastion LinuxCommandsWazuh: User ankur [394602]: 2064 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:37:44 bastion LinuxCommandsWazuh: User ankur [448841]: 2026 k get hpa | grep vortex Sep 12 08:37:53 bastion LinuxCommandsWazuh: User ankur [448841]: 2027 k top pods | grep vortex Sep 12 08:37:55 bastion LinuxCommandsWazuh: User ankur [448841]: 2027 k top pods | grep vortex Sep 12 08:39:35 bastion LinuxCommandsWazuh: User ankur [448841]: 2027 k top pods | grep vortex Sep 12 08:39:37 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 08:39:38 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 08:39:44 bastion LinuxCommandsWazuh: User ankur [394602]: 2064 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:39:56 bastion LinuxCommandsWazuh: User ankur [394602]: 2064 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 08:40:04 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 08:40:14 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 08:40:22 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 08:40:30 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 08:40:32 bastion LinuxCommandsWazuh: User ankur [1093205]: 1991 byobu Sep 12 11:34:18 bastion LinuxCommandsWazuh: User ankur [1110519]: 1991 exit Sep 12 11:34:27 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 11:34:28 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 11:42:14 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 11:59:37 bastion LinuxCommandsWazuh: User rihan [1136599]: 1344 make cookie-bash Sep 12 11:59:47 bastion LinuxCommandsWazuh: User rihan [2131021]: 1298 mongo Sep 12 12:10:45 bastion LinuxCommandsWazuh: User abhijeet [1158380]: 1998 kubectl get pods -n loki Sep 12 12:10:46 bastion LinuxCommandsWazuh: User ubuntu [1158474]: 1999 mongo-ssh Sep 12 12:10:53 bastion LinuxCommandsWazuh: User ayush [1158729]: 457 exit Sep 12 12:10:55 bastion LinuxCommandsWazuh: User ayush [1158729]: 458 cd Sep 12 12:10:55 bastion LinuxCommandsWazuh: User ayush [1158729]: 459 ls Sep 12 12:11:29 bastion LinuxCommandsWazuh: User ayush [1158729]: 460 cool-server Sep 12 12:11:38 bastion LinuxCommandsWazuh: User ubuntu [1158474]: 2000 redis-secondary-ssh Sep 12 12:12:05 bastion LinuxCommandsWazuh: User ayush [1161069]: 457 exit Sep 12 12:12:22 bastion LinuxCommandsWazuh: User ayush [1161069]: 458 cool-server Sep 12 12:12:22 bastion LinuxCommandsWazuh: User ayush [1161069]: 458 cool-server Sep 12 12:12:27 bastion LinuxCommandsWazuh: User ubuntu [1158474]: 2001 redis-url-ssh Sep 12 12:15:40 bastion LinuxCommandsWazuh: User ayush [1158729]: 460 cool-server Sep 12 12:18:38 bastion LinuxCommandsWazuh: User rihan [1173863]: 1344 make cookie-bash Sep 12 12:19:35 bastion LinuxCommandsWazuh: User ayush [1175694]: 459 exit Sep 12 12:19:35 bastion LinuxCommandsWazuh: User ayush [1175694]: 459 exit Sep 12 12:23:36 bastion LinuxCommandsWazuh: User ayush [1183247]: 460 exit Sep 12 12:23:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [1183247]: 460 exit] Sep 12 12:23:40 bastion LinuxCommandsWazuh: User ayush [1183247]: 461 coo Sep 12 12:23:42 bastion LinuxCommandsWazuh: User ayush [1183247]: 461 coo Sep 12 12:30:37 bastion LinuxCommandsWazuh: User abhijeet [1197159]: 1998 kubectl get pods -n loki Sep 12 12:30:39 bastion LinuxCommandsWazuh: User abhijeet [1197159]: 1999 ls Sep 12 12:31:19 bastion LinuxCommandsWazuh: User abhijeet [1197159]: 2000 redis-secondary-ssh Sep 12 12:32:17 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 12:32:19 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 12:33:48 bastion LinuxCommandsWazuh: User abhijeet [1203189]: 1998 sudo su ayush Sep 12 12:34:40 bastion LinuxCommandsWazuh: User abhijeet [1197159]: 2001 dragonflydb-volatile-ssh Sep 12 12:50:48 bastion LinuxCommandsWazuh: User abhijeet [1197159]: 2002 redis-secondary-ssh Sep 12 12:50:50 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 1998 exit Sep 12 12:50:52 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 1999 ls Sep 12 12:50:56 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2000 sudo su ayu Sep 12 12:50:58 bastion LinuxCommandsWazuh: User ayush [1236462]: 465 cool-server Sep 12 12:50:59 bastion LinuxCommandsWazuh: User ayush [1236462]: 466 cd Sep 12 12:50:59 bastion LinuxCommandsWazuh: User ayush [1236462]: 467 ls Sep 12 12:51:38 bastion LinuxCommandsWazuh: User abhijeet [1203189]: 1999 redis-url-ssh Sep 12 13:15:49 bastion LinuxCommandsWazuh: User rihan [2131021]: 1299 make cookie-bash Sep 12 13:15:55 bastion LinuxCommandsWazuh: User rihan [1136599]: 1345 byobu Sep 12 13:20:50 bastion LinuxCommandsWazuh: User abhijeet [1289658]: 1998 exit Sep 12 13:20:51 bastion LinuxCommandsWazuh: User abhijeet [1289658]: 1999 lsc Sep 12 13:20:52 bastion LinuxCommandsWazuh: User abhijeet [1289658]: 2000 ls Sep 12 13:28:25 bastion LinuxCommandsWazuh: User ayush [1236462]: 468 cool-server Sep 12 13:28:27 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2001 sudo su ayush Sep 12 13:28:30 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2002 ls Sep 12 13:28:38 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2003 nslookup mongo Sep 12 13:28:51 bastion LinuxCommandsWazuh: User rihan [1297866]: 1349 byobu Sep 12 13:29:07 bastion LinuxCommandsWazuh: User rihan [1298211]: 1349 byobu Sep 12 13:29:28 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2004 cat .bashrc Sep 12 13:29:46 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2005 curl http://10.190.0.29:20202/metrics Sep 12 13:32:22 bastion LinuxCommandsWazuh: User mohtashim [1304600]: 28 exit Sep 12 13:44:28 bastion LinuxCommandsWazuh: User mohtashim [1304600]: 29 mongo pixel_v1 Sep 12 13:44:34 bastion LinuxCommandsWazuh: User mohtashim [1304600]: 30 clear Sep 12 13:46:22 bastion LinuxCommandsWazuh: User mohtashim [1332150]: 28 exit Sep 12 13:48:26 bastion LinuxCommandsWazuh: User mohtashim [1336077]: 28 exit Sep 12 13:49:10 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2005 curl http://10.190.0.29:20202/metrics Sep 12 13:51:03 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 13:51:18 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 1999 exit Sep 12 13:51:26 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2000 cat .bashrc Sep 12 13:51:42 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2001 curl http://10.190.0.29:20202 Sep 12 13:51:48 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2002 curl http://10.190.0.29:20202/metrics Sep 12 13:51:52 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2003 curl http://10.190.0.29:20202/ Sep 12 13:51:58 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2004 curl http://10.190.0.29:20202/fluent Sep 12 13:52:04 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2005 curl http://10.190.0.29:20202/logs Sep 12 13:52:07 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2006 curl http://10.190.0.29:20202/network Sep 12 13:52:55 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2007 curl http://10.190.0.29:20202/metrics | grep cpu Sep 12 13:52:56 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2007 curl http://10.190.0.29:20202/metrics | grep cpu Sep 12 13:53:00 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2008 curl http://10.190.0.29:20202/metrics | grep "cpu" Sep 12 13:53:11 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2009 curl http://10.190.0.29:20202/metrics Sep 12 13:54:31 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2009 curl http://10.190.0.29:20202/metrics Sep 12 13:54:32 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2010 cat /etc/google-fluentd/google-fluentd.conf Sep 12 13:54:39 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2011 cd /etc/google-cloud-ops-agent/ Sep 12 13:54:40 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2012 ls Sep 12 13:58:23 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2013 sudo vi config.yaml Sep 12 13:58:47 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2013 sudo vi config.yaml Sep 12 13:58:48 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2014 curl -s http://10.190.0.29:20202/metrics | grep cpu Sep 12 13:59:23 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2015 curl -s http://10.190.0.29:20201/metrics | grep cpu Sep 12 13:59:52 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2016 curl -s http://10.190.0.29:20201/metrics Sep 12 14:00:41 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2017 curl -s http://10.190.0.29:20201/metrics | grep network Sep 12 14:01:10 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2018 curl -s http://10.190.0.29:20201/metrics | grep cpu Sep 12 14:02:59 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 14:03:05 bastion LinuxCommandsWazuh: User ankur [394602]: 2065 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 14:03:19 bastion LinuxCommandsWazuh: User ankur [393014]: 1994 redis-secondary Sep 12 14:14:18 bastion LinuxCommandsWazuh: User ankur [394602]: 2066 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 15:13:33 bastion LinuxCommandsWazuh: User mohtashim [1336077]: 29 make cookie-bash Sep 12 15:13:37 bastion LinuxCommandsWazuh: User mohtashim [1332150]: 29 mongo pixel_v1 Sep 12 15:13:41 bastion LinuxCommandsWazuh: User mohtashim [1304600]: 31 make cookie-bash Sep 12 15:13:42 bastion LinuxCommandsWazuh: User mohtashim [1304600]: 32 xit Sep 12 15:18:08 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2005 curl http://10.190.0.29:20202/metrics Sep 12 15:18:11 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2006 curl http://10.190.0.29:20201/metrics Sep 12 15:18:31 bastion LinuxCommandsWazuh: User ankur [1469028]: 1991 byobu Sep 12 15:18:45 bastion LinuxCommandsWazuh: User ankur [1469028]: 1991 byobu Sep 12 15:18:48 bastion LinuxCommandsWazuh: User ankur [1469028]: 1992 wxir Sep 12 15:20:33 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2007 curl http://10.190.0.29:20203/metrics Sep 12 15:20:38 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2008 curl http://10.190.0.29:20201/metrics Sep 12 15:21:15 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2009 curl http://10.190.0.29:20203/metrics Sep 12 15:21:18 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2010 curl http://10.190.0.29:20201/metrics Sep 12 15:21:28 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2011 curl http://10.190.0.29:20203/metrics Sep 12 15:21:30 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2012 curl http://10.190.0.29:20201/metrics Sep 12 15:21:49 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2013 curl http://10.190.0.29:20200/metrics Sep 12 15:21:51 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2014 curl http://10.190.0.29:20201/metrics Sep 12 15:22:36 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2015 curl http://10.190.0.29:20201/metrics | more Sep 12 15:22:42 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2016 curl http://10.190.0.29:20201/metrics Sep 12 15:22:58 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2017 curl http://10.190.0.29:20202/metrics Sep 12 15:23:13 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2018 ps -ef | grep flune Sep 12 15:23:16 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2019 ps -ef | grep flu Sep 12 15:23:45 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2020 cat /run/google-cloud-ops-agent-fluent-bit/fluent_bit_main.conf Sep 12 15:24:41 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2021 curl http://10.190.0.29:20201/metrics Sep 12 15:24:46 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2022 curl http://10.190.0.29:20201/metrics | grep Sep 12 15:26:54 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2023 curl http://10.190.0.29:20201/metrics | more Sep 12 15:27:02 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2024 curl http://10.190.0.29:20201/metrics | grep cpu Sep 12 15:27:32 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2025 kubectl get cm -n loki Sep 12 15:31:23 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2026 kubectl edit cm prometheus-server -n loki Sep 12 15:31:32 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2026 kubectl edit cm prometheus-server -n loki Sep 12 15:31:55 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2027 kubectl get deployment -n loki Sep 12 15:32:12 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2028 kubectl rollout restart deployment prometheus-server -n loki Sep 12 15:32:26 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2029 kubectl rollout status deployment prometheus-server -n loki Sep 12 15:32:31 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2030 kubectl get pods -n loki Sep 12 15:32:34 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2030 kubectl get pods -n loki Sep 12 15:32:37 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [1236190]: 2030 kubectl get pods -n loki] Sep 12 15:33:26 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2030 kubectl get pods -n loki Sep 12 15:34:58 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2031 kubectl edit cm prometheus-server -n loki Sep 12 15:35:04 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2032 curl http://10.190.0.29:20201/metrics Sep 12 15:35:07 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2032 curl http://10.190.0.29:20201/metrics Sep 12 15:35:10 bastion LinuxCommandsWazuh: User ashish [1486316]: 461 redis Sep 12 15:35:11 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2033 curl http://10.190.0.29:20201/metrics | grep cpu Sep 12 15:35:16 bastion LinuxCommandsWazuh: User ashish [675008]: 463 mongo Sep 12 15:35:24 bastion LinuxCommandsWazuh: User ashish [675008]: 464 kubectl get pods Sep 12 15:36:03 bastion LinuxCommandsWazuh: User ashish [675008]: 464 kubectl get pods Sep 12 15:36:13 bastion LinuxCommandsWazuh: User ashish [675008]: 465 kubectl get logs -f nitrox-ui-54f69747bd-bvkvr Sep 12 15:40:51 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2034 kubectl edit cm prometheus-server -n loki Sep 12 15:40:55 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2035 curl http://10.190.0.29:20201/metrics Sep 12 15:43:08 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2036 curl http://10.190.0.29:20202/metrics Sep 12 15:43:14 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2037 curl http://10.190.0.29:20202/metrics | grep fluen Sep 12 15:43:18 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2038 curl http://10.190.0.29:20202/metrics | grep cpu Sep 12 15:43:22 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2039 curl http://10.190.0.29:20202/metrics | grep proc Sep 12 15:44:03 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2040 kubectl get pods -n loki Sep 12 15:44:14 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2041 kubectl exec -it prometheus-server-846678bcf-z4xdh -n loki -- bash Sep 12 15:49:26 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2042 kubectl exec -it prometheus-server-846678bcf-z4xdh -n loki -- sh Sep 12 15:49:27 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2043 ls Sep 12 15:52:18 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2044 kubectl edit cm prometheus-server -n loki Sep 12 15:52:28 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2045 kubectl rollout restart deployment prometheus-server -n loki Sep 12 15:53:33 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2046 kubectl rollout status deployment prometheus-server -n loki Sep 12 15:54:29 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2047 curl http://10.190.0.29:20202/metrics Sep 12 15:54:41 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2048 curl http://10.190.0.29:20202/node_exporter Sep 12 16:00:33 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2049 ls Sep 12 16:00:40 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2050 which cat Sep 12 16:00:44 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2051 which ccdsa Sep 12 16:16:50 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2052 internal-server Sep 12 16:16:58 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2053 kubectl get pods -n loki Sep 12 16:17:06 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2054 kubectl get pods -n loki -o wode Sep 12 16:17:09 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2055 kubectl get pods -n loki -o wide Sep 12 16:18:28 bastion LinuxCommandsWazuh: User abhijeet [1236190]: 2056 ssh ubuntu@10.190.15.211 Sep 12 16:20:47 bastion LinuxCommandsWazuh: User rihan [1575083]: 1349 byobu Sep 12 16:27:14 bastion LinuxCommandsWazuh: User mohtashim [1587767]: 37 exit Sep 12 16:27:16 bastion LinuxCommandsWazuh: User mohtashim [1587767]: 38 clear Sep 12 16:32:09 bastion LinuxCommandsWazuh: User ubuntu [1341660]: 2019 x Sep 12 16:32:09 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [1341660]: 2019 x] Sep 12 16:46:31 bastion LinuxCommandsWazuh: User rihan [1625148]: 1349 byobu Sep 12 16:55:00 bastion LinuxCommandsWazuh: User ashish [675008]: 465 kubectl get logs -f nitrox-ui-54f69747bd-bvkvr Sep 12 16:55:01 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [675008]: 465 kubectl get logs -f nitrox-ui-54f69747bd-bvkvr] Sep 12 16:55:02 bastion LinuxCommandsWazuh: User ashish [675008]: 466 \ Sep 12 16:55:03 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [675008]: 466 \] Sep 12 16:55:14 bastion LinuxCommandsWazuh: User ashish [1641762]: 461 redis Sep 12 17:14:55 bastion LinuxCommandsWazuh: User rihan [1575083]: 1350 make cookie-bash Sep 12 17:17:41 bastion LinuxCommandsWazuh: User rihan [1575083]: 1350 make cookie-bash Sep 12 17:34:07 bastion LinuxCommandsWazuh: User rihan [1575083]: 1350 make cookie-bash Sep 12 17:39:30 bastion LinuxCommandsWazuh: User rihan [1575083]: 1350 make cookie-bash Sep 12 17:39:34 bastion LinuxCommandsWazuh: User rihan [1298211]: 1349 byobu Sep 12 17:44:12 bastion LinuxCommandsWazuh: User rihan [1770600]: 1349 byobu Sep 12 18:02:14 bastion LinuxCommandsWazuh: User ankur [1790209]: 1991 exit Sep 12 18:02:28 bastion LinuxCommandsWazuh: User ankur [448841]: 2028 k get hpa | grep vortex Sep 12 18:03:20 bastion LinuxCommandsWazuh: User ankur [448841]: 2029 k get pods | grep -i nitrox Sep 12 18:03:33 bastion LinuxCommandsWazuh: User ankur [448841]: 2030 k logs -f nitrox-dramatiq-778d94b468-hdmbz Sep 12 18:03:42 bastion LinuxCommandsWazuh: User ankur [448841]: 2031 k rollout restart deployment/nitrox-dramatiq Sep 12 18:03:47 bastion LinuxCommandsWazuh: User ankur [448841]: 2032 k logs -f nitrox-dramatiq-778d94b468-hdmbz Sep 12 18:03:50 bastion LinuxCommandsWazuh: User ankur [448841]: 2033 k get pods | grep -i nitrox Sep 12 18:04:19 bastion LinuxCommandsWazuh: User ankur [448841]: 2034 k logs -f nitrox-dramatiq-5fc4ffdfc6-b6xtj Sep 12 18:04:21 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [448841]: 2034 k logs -f nitrox-dramatiq-5fc4ffdfc6-b6xtj] Sep 12 18:04:23 bastion LinuxCommandsWazuh: User ankur [448841]: 2035 k get pods | grep -i nitrox Sep 12 18:04:31 bastion LinuxCommandsWazuh: User ankur [448841]: 2036 k logs -f nitrox-dramatiq-5fc4ffdfc6-b6xtj Sep 12 18:05:54 bastion LinuxCommandsWazuh: User ankur [448841]: 2036 k logs -f nitrox-dramatiq-5fc4ffdfc6-b6xtj Sep 12 18:05:57 bastion LinuxCommandsWazuh: User ankur [448841]: 2037 k get pods | grep -i nitrox Sep 12 18:11:32 bastion LinuxCommandsWazuh: User ankur [448841]: 2038 k get hpa | grep vortex Sep 12 18:11:35 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [448841]: 2038 k get hpa | grep vortex] Sep 12 18:12:05 bastion LinuxCommandsWazuh: User ankur [394602]: 2066 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 18:12:09 bastion LinuxCommandsWazuh: User ankur [394602]: 2067 stern vortex | grep -i "DMP_EXPORTS: time" Sep 12 18:12:12 bastion LinuxCommandsWazuh: User ankur [394602]: 2068 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 18:12:41 bastion LinuxCommandsWazuh: User ankur [394602]: 2068 stern vortex | grep -i "DMP_EXPORTS:" Sep 12 18:14:46 bastion LinuxCommandsWazuh: User ankur [393014]: 1994 redis-secondary Sep 12 23:21:17 bastion LinuxCommandsWazuh: User rihan [1575083]: 1350 make cookie-bash