Sep 21 20:02:08 bastion LinuxCommandsWazuh: User ping-pong [3116296]: 58 mongo Sep 21 20:41:10 bastion LinuxCommandsWazuh: User ankur [3119644]: 1990 byobu Sep 21 20:41:18 bastion LinuxCommandsWazuh: User ankur [2078183]: 2017 k top pods -A | grep big Sep 21 20:41:23 bastion LinuxCommandsWazuh: User ankur [2078183]: 2018 k get hpa Sep 21 20:41:55 bastion LinuxCommandsWazuh: User ankur [2078183]: 2019 k exec -it big-o-cookie-cutter bash.sh Sep 21 20:41:57 bastion LinuxCommandsWazuh: User ankur [2078183]: 2020 k exec -it big-o-cookie-cutter bash Sep 21 20:42:02 bastion LinuxCommandsWazuh: User ankur [2078183]: 2021 k exec -it big-o-cookie-cutter /bin/sh Sep 21 20:42:17 bastion LinuxCommandsWazuh: User ankur [2078183]: 2022 k get pods | grep big Sep 21 20:42:29 bastion LinuxCommandsWazuh: User ankur [2078183]: 2023 k get pods -o wide | grep big Sep 21 20:47:42 bastion LinuxCommandsWazuh: User ankur [2078183]: 2024 k exec -it big-o-cookie-cutter-d65598bcc-4cr4k bash Sep 21 20:47:46 bastion LinuxCommandsWazuh: User ankur [3119644]: 1990 byobu Sep 21 20:50:00 bastion LinuxCommandsWazuh: User ankur [3126786]: 1990 exit Sep 21 20:50:04 bastion LinuxCommandsWazuh: User ankur [2078183]: 2024 k exec -it big-o-cookie-cutter-d65598bcc-4cr4k bash Sep 21 20:50:04 bastion LinuxCommandsWazuh: User ankur [2078183]: 2024 k exec -it big-o-cookie-cutter-d65598bcc-4cr4k bash Sep 21 20:50:05 bastion LinuxCommandsWazuh: User ankur [2078183]: 2025 kubectl top pod big-o-cookie-cutter -n nitrox-production Sep 21 20:50:11 bastion LinuxCommandsWazuh: User ankur [2078183]: 2026 kubectl top pods big-o-cookie-cutter -n nitrox-production Sep 21 20:50:20 bastion LinuxCommandsWazuh: User ankur [2078183]: 2027 kubectl top pod -n nitrox-production | grep big Sep 21 20:52:05 bastion LinuxCommandsWazuh: User ankur [2078183]: 2028 kubectl describe pod big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:52:17 bastion LinuxCommandsWazuh: User ankur [2078183]: 2029 k get pods | grep big Sep 21 20:53:58 bastion LinuxCommandsWazuh: User ankur [2078183]: 2030 kubectl logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:54:16 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [2078183]: 2030 kubectl logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production] Sep 21 20:54:30 bastion LinuxCommandsWazuh: User ankur [2078183]: 2031 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:54:40 bastion LinuxCommandsWazuh: User ankur [2078183]: 2031 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:55:03 bastion LinuxCommandsWazuh: User ankur [2078183]: 2031 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:55:04 bastion LinuxCommandsWazuh: User ankur [2078183]: 2032 kubectl get pod big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production -o yaml Sep 21 20:55:30 bastion LinuxCommandsWazuh: User ankur [2078183]: 2033 kubectl get pod big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production -o yaml | more Sep 21 20:55:30 bastion LinuxCommandsWazuh: message repeated 13 times: [ User ankur [2078183]: 2033 kubectl get pod big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production -o yaml | more] Sep 21 20:56:02 bastion LinuxCommandsWazuh: User ankur [2078183]: 2033 kubectl get pod big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production -o yaml | more Sep 21 20:56:39 bastion LinuxCommandsWazuh: User ankur [2078183]: 2034 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:56:49 bastion LinuxCommandsWazuh: User ankur [2078183]: 2035 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | more Sep 21 20:56:56 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2078183]: 2035 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | more] Sep 21 20:57:05 bastion LinuxCommandsWazuh: User ankur [2078183]: 2036 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | tai Sep 21 20:57:07 bastion LinuxCommandsWazuh: User ankur [2078183]: 2037 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | tail Sep 21 20:57:13 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2078183]: 2037 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | tail] Sep 21 20:57:25 bastion LinuxCommandsWazuh: User ankur [2078183]: 2038 k logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:57:36 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [2078183]: 2038 k logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production] Sep 21 20:57:56 bastion LinuxCommandsWazuh: User ankur [2078183]: 2038 k logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:58:42 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [2078183]: 2038 k logs big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production] Sep 21 20:58:48 bastion LinuxCommandsWazuh: User ankur [2078183]: 2039 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:58:53 bastion LinuxCommandsWazuh: User ankur [2078183]: 2039 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production Sep 21 20:58:59 bastion LinuxCommandsWazuh: User ankur [2078183]: 2040 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | more Sep 21 20:58:59 bastion LinuxCommandsWazuh: User ankur [2078183]: 2040 k logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | more Sep 21 20:59:00 bastion LinuxCommandsWazuh: User ankur [2078183]: 2041 ls Sep 21 20:59:35 bastion LinuxCommandsWazuh: User ankur [2078183]: 2042 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=100 Sep 21 20:59:44 bastion LinuxCommandsWazuh: User ankur [2078183]: 2042 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=100 Sep 21 21:00:16 bastion LinuxCommandsWazuh: User ankur [2078183]: 2043 kubectl get events -n nitrox-production --field-selector involvedObject.name=big-o-cookie-cutter-d65598bcc-4cr4k --sort-by='.lastTimestamp' Sep 21 21:00:43 bastion LinuxCommandsWazuh: User ankur [2078183]: 2044 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | less Sep 21 21:00:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2078183]: 2044 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | less] Sep 21 21:00:53 bastion LinuxCommandsWazuh: User ankur [2078183]: 2045 #kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production > prev_logs.txt Sep 21 21:01:07 bastion LinuxCommandsWazuh: User ankur [2078183]: 2046 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production > big_o_prev_logs.txt Sep 21 21:01:10 bastion LinuxCommandsWazuh: User ankur [2078183]: 2047 ls Sep 21 21:01:15 bastion LinuxCommandsWazuh: User ankur [2078183]: 2048 cat big_o_prev_logs.txt Sep 21 21:01:19 bastion LinuxCommandsWazuh: User ankur [2078183]: 2048 cat big_o_prev_logs.txt Sep 21 21:01:25 bastion LinuxCommandsWazuh: User ankur [2078183]: 2049 cat big_o_prev_logs.txt | more Sep 21 21:01:34 bastion LinuxCommandsWazuh: User ankur [2078183]: 2050 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k Sep 21 21:02:39 bastion LinuxCommandsWazuh: User ankur [2078183]: 2051 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=500 | strings | tail -n 200 Sep 21 21:02:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2078183]: 2051 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=500 | strings | tail -n 200] Sep 21 21:02:54 bastion LinuxCommandsWazuh: User ankur [2078183]: 2052 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=500 | tr -cd '\11\12\15\40-\176' | tail -n 200 Sep 21 21:02:57 bastion LinuxCommandsWazuh: User ankur [2078183]: 2052 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=500 | tr -cd '\11\12\15\40-\176' | tail -n 200 Sep 21 21:03:09 bastion LinuxCommandsWazuh: User ankur [2078183]: 2052 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=500 | tr -cd '\11\12\15\40-\176' | tail -n 200 Sep 21 21:03:10 bastion LinuxCommandsWazuh: User ankur [2078183]: 2053 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=1000 | strings | egrep -i "error|exception|traceback|fatal|panic|oomkilled|killed" -n || echo "no error-like lines in last 1000 lines" Sep 21 21:03:35 bastion LinuxCommandsWazuh: User ankur [2078183]: 2054 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production | strings | less Sep 21 21:03:41 bastion LinuxCommandsWazuh: User ankur [2078183]: 2055 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --timestamps | strings | tail -n 200 Sep 21 21:04:26 bastion LinuxCommandsWazuh: User ankur [2078183]: 2056 # show human-readable lines mentioning grpc / common network errors Sep 21 21:04:27 bastion LinuxCommandsWazuh: User ankur [2078183]: 2057 kubectl logs -p big-o-cookie-cutter-d65598bcc-4cr4k -n nitrox-production --tail=1000 | strings | egrep -i "grpc|unavailable|deadline exceeded|ECONNREFUSED|ECONNRESET|ENOTFOUND|permission denied|error|panic|exception" -n || echo "no grpc-like lines in last 1000 lines" Sep 21 22:09:20 bastion LinuxCommandsWazuh: User ankur [3126786]: 1991 byobu