Oct 6 08:53:00 bastion LinuxCommandsWazuh: User ankur [549824]: 1995 exit Oct 6 11:14:52 bastion LinuxCommandsWazuh: User ashish [573713]: 524 byobu Oct 6 11:18:23 bastion LinuxCommandsWazuh: User ashish [577995]: 524 byobu Oct 6 11:18:37 bastion LinuxCommandsWazuh: User ashish [4143440]: 527 clickhouse-ssh Oct 6 11:18:38 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [4143440]: 527 clickhouse-ssh] Oct 6 11:23:34 bastion LinuxCommandsWazuh: User ashish [4143440]: 528 mongo pixel_v1; Oct 6 11:23:35 bastion LinuxCommandsWazuh: User ashish [577995]: 524 byobu Oct 6 11:23:35 bastion LinuxCommandsWazuh: User ashish [573713]: 524 byobu Oct 6 11:23:38 bastion LinuxCommandsWazuh: User ashish [587043]: 529 mongo pixel_v1; Oct 6 11:44:33 bastion LinuxCommandsWazuh: User ashish [577995]: 524 byobu Oct 6 11:44:34 bastion LinuxCommandsWazuh: User ashish [577995]: 524 byobu Oct 6 11:44:38 bastion LinuxCommandsWazuh: User ashish [587043]: 530 clickhouse-ssh Oct 6 11:45:01 bastion LinuxCommandsWazuh: User ashish [587043]: 531 mongo pixel_v1; Oct 6 11:53:50 bastion LinuxCommandsWazuh: User ankur [623117]: 1995 byobu Oct 6 12:03:55 bastion LinuxCommandsWazuh: User ankur [648837]: 1995 byobu Oct 6 12:04:15 bastion LinuxCommandsWazuh: User ankur [648837]: 1996 k rollout restart deployment/house-of-click Oct 6 12:05:32 bastion LinuxCommandsWazuh: User ankur [648837]: 1997 stern house-of-click Oct 6 12:23:30 bastion LinuxCommandsWazuh: User abhijeet [701723]: 1998 internal-server Oct 6 12:33:13 bastion LinuxCommandsWazuh: User abhijeet [701723]: 1999 kubectl get pods Oct 6 12:33:35 bastion LinuxCommandsWazuh: User abhijeet [701723]: 2000 kubectl get pods -o wide Oct 6 12:36:43 bastion LinuxCommandsWazuh: User abhijeet [701723]: 2001 kubectl get pods -o wide | grep coll Oct 6 12:36:54 bastion LinuxCommandsWazuh: User ayush [715866]: 476 exit Oct 6 12:39:49 bastion LinuxCommandsWazuh: User abhijeet [701723]: 2001 kubectl get pods -o wide | grep coll Oct 6 12:40:40 bastion LinuxCommandsWazuh: User abhijeet [701723]: 2002 kubectl get pods -o wide Oct 6 12:40:42 bastion LinuxCommandsWazuh: User abhijeet [701723]: 2003 kubectl get pods Oct 6 12:49:33 bastion LinuxCommandsWazuh: User abhijeet [728447]: 1998 kubectl get pods Oct 6 12:49:41 bastion LinuxCommandsWazuh: User abhijeet [728447]: 1998 kubectl get pods Oct 6 12:49:46 bastion LinuxCommandsWazuh: User abhijeet [728447]: 1999 kubectl get pods -o wided Oct 6 12:49:49 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2000 kubectl get pods -o wide Oct 6 12:50:39 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2001 kubectl get service Oct 6 12:51:43 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2002 kubectl get service urlbird -o wide Oct 6 12:53:11 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2003 kubectl edit service urlbird Oct 6 12:53:17 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2004 kubectl get service Oct 6 12:53:29 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2005 kubectl edit service urlbird Oct 6 12:53:32 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2006 kubectl get service Oct 6 12:55:23 bastion LinuxCommandsWazuh: User ubuntu [734256]: 1999 exit Oct 6 12:55:32 bastion LinuxCommandsWazuh: User ubuntu [734256]: 2000 ls Oct 6 12:55:34 bastion LinuxCommandsWazuh: User ubuntu [734256]: 2001 cd .. Oct 6 12:55:34 bastion LinuxCommandsWazuh: User ubuntu [734256]: 2002 ls Oct 6 12:55:37 bastion LinuxCommandsWazuh: User ubuntu [734256]: 2003 sudo su ping-pong/ Oct 6 12:55:39 bastion LinuxCommandsWazuh: User ping-pong [734554]: 76 mongo Oct 6 12:55:40 bastion LinuxCommandsWazuh: User ping-pong [734554]: 77 ls Oct 6 12:55:40 bastion LinuxCommandsWazuh: User ping-pong [734554]: 78 cd Oct 6 12:55:43 bastion LinuxCommandsWazuh: User ping-pong [734554]: 79 cd .ssh/ Oct 6 12:55:43 bastion LinuxCommandsWazuh: User ping-pong [734554]: 80 ls Oct 6 12:55:48 bastion LinuxCommandsWazuh: User ping-pong [734554]: 81 sudo vi authorized_keys Oct 6 12:55:50 bastion LinuxCommandsWazuh: User ubuntu [734256]: 2004 sudo su ping-pong Oct 6 12:59:38 bastion LinuxCommandsWazuh: User ayush [715866]: 476 exit Oct 6 13:03:01 bastion LinuxCommandsWazuh: User ping-pong [742236]: 82 exit Oct 6 13:20:05 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2007 kubectl get pods -o wide Oct 6 13:22:42 bastion LinuxCommandsWazuh: User ping-pong [742236]: 83 mongo Oct 6 13:22:44 bastion LinuxCommandsWazuh: message repeated 9 times: [ User ping-pong [742236]: 83 mongo] Oct 6 13:22:46 bastion LinuxCommandsWazuh: User ping-pong [742236]: 84 clear Oct 6 13:23:42 bastion LinuxCommandsWazuh: User mohtashim [763014]: 639 psql Oct 6 13:23:42 bastion LinuxCommandsWazuh: User ping-pong [742236]: 85 mongo Oct 6 13:23:43 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [742236]: 85 mongo] Oct 6 13:23:43 bastion LinuxCommandsWazuh: User mohtashim [763014]: 640 clear Oct 6 13:26:13 bastion LinuxCommandsWazuh: User mohtashim [763014]: 641 psql Oct 6 13:34:25 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2007 kubectl get pods -o wide Oct 6 13:53:18 bastion LinuxCommandsWazuh: User ankur [648837]: 1997 stern house-of-click Oct 6 13:53:18 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [648837]: 1997 stern house-of-click] Oct 6 13:53:56 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 13:54:28 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 13:54:28 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [648837]: 1998 k get pods | grep house] Oct 6 14:06:29 bastion LinuxCommandsWazuh: User ubuntu [806753]: 1999 exit Oct 6 14:06:45 bastion LinuxCommandsWazuh: User ping-pong [807000]: 82 exit Oct 6 14:06:47 bastion LinuxCommandsWazuh: User ping-pong [807000]: 83 ls Oct 6 14:06:48 bastion LinuxCommandsWazuh: User ping-pong [807000]: 84 cd Oct 6 14:06:48 bastion LinuxCommandsWazuh: User ping-pong [807000]: 85 ls Oct 6 14:06:52 bastion LinuxCommandsWazuh: User ping-pong [807000]: 86 kubectl get pods Oct 6 14:07:02 bastion LinuxCommandsWazuh: User ping-pong [807000]: 86 kubectl get pods Oct 6 14:07:03 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [807000]: 86 kubectl get pods] Oct 6 14:07:05 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2000 sudo su ping-pong Oct 6 14:08:11 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2000 sudo su ping-pong Oct 6 14:08:12 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ubuntu [806753]: 2000 sudo su ping-pong] Oct 6 14:08:14 bastion LinuxCommandsWazuh: User ping-pong [808473]: 87 exit Oct 6 14:08:18 bastion LinuxCommandsWazuh: User ping-pong [808473]: 88 gcloud auth activate-service-account --key-file=/home/service.json Oct 6 14:08:24 bastion LinuxCommandsWazuh: User ping-pong [808473]: 88 gcloud auth activate-service-account --key-file=/home/service.json Oct 6 14:08:50 bastion LinuxCommandsWazuh: User ping-pong [808473]: 89 cd Oct 6 14:08:54 bastion LinuxCommandsWazuh: User ping-pong [808473]: kubectl get pods Oct 6 14:09:50 bastion LinuxCommandsWazuh: User ping-pong [808473]: 1 kubectl config set-context --current --namespace= Oct 6 14:10:01 bastion LinuxCommandsWazuh: User ping-pong [808473]: 2 kubectl config set-context --current --namespace=nitrox-production Oct 6 14:10:04 bastion LinuxCommandsWazuh: User ping-pong [808473]: 3 kubectl get pods Oct 6 14:10:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 14:10:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 14:10:55 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2008 kubectl get hpa Oct 6 14:11:14 bastion LinuxCommandsWazuh: User mohtashim [811630]: 642 exit Oct 6 14:11:18 bastion LinuxCommandsWazuh: User mohtashim [811630]: 643 k get pods Oct 6 14:11:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 14:11:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 14:11:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 14:11:20 bastion LinuxCommandsWazuh: User ping-pong [808473]: 4 k describe pod datapulse-web-77b78bb8dc-7nkmn Oct 6 14:11:27 bastion LinuxCommandsWazuh: User mohtashim [811630]: 644 k logs datapulse-web-77b78bb8dc-ph4l6 Oct 6 14:11:28 bastion LinuxCommandsWazuh: User ping-pong [808473]: 5 kubectl describe pod datapulse-web-77b78bb8dc-7nkmn Oct 6 14:11:38 bastion LinuxCommandsWazuh: User ping-pong [808473]: 6 kubectl get pods Oct 6 14:11:43 bastion LinuxCommandsWazuh: User mohtashim [811630]: 645 clear Oct 6 14:12:07 bastion LinuxCommandsWazuh: User mohtashim [811630]: 645 clear Oct 6 14:12:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [811630]: 645 clear] Oct 6 14:18:55 bastion LinuxCommandsWazuh: User ping-pong [808473]: 6 kubectl get pods Oct 6 14:18:57 bastion LinuxCommandsWazuh: User ping-pong [808473]: 7 kubectl config set-context --current --namespace=nitrox-production Oct 6 14:18:58 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ping-pong [808473]: 7 kubectl config set-context --current --namespace=nitrox-production] Oct 6 14:26:11 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2009 kubectl get pods -o wide | grep data Oct 6 14:26:30 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2009 kubectl get pods -o wide | grep data Oct 6 14:26:38 bastion LinuxCommandsWazuh: User ping-pong [808473]: 8 ls Oct 6 14:26:42 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2000 sudo su ping-pong Oct 6 14:26:42 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2001 ls Oct 6 14:26:55 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2009 kubectl get pods -o wide | grep data Oct 6 14:27:10 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2009 kubectl get pods -o wide | grep data Oct 6 14:27:23 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2010 kubectl get hpa Oct 6 14:27:54 bastion LinuxCommandsWazuh: User mohtashim [829185]: 645 clear Oct 6 14:27:57 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2010 kubectl get hpa Oct 6 14:28:00 bastion LinuxCommandsWazuh: User mohtashim [829185]: 646 k get hpa Oct 6 14:30:33 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2002 vi .bashrc Oct 6 14:30:36 bastion LinuxCommandsWazuh: User ping-pong [831760]: exit Oct 6 14:30:37 bastion LinuxCommandsWazuh: User ping-pong [831760]: 100 cd Oct 6 14:30:55 bastion LinuxCommandsWazuh: User ping-pong [831760]: 101 vi .bashrc Oct 6 14:31:05 bastion LinuxCommandsWazuh: User ping-pong [831760]: 102 source .bashrx Oct 6 14:31:06 bastion LinuxCommandsWazuh: User ping-pong [831760]: 103 source .bashrc Oct 6 14:31:21 bastion LinuxCommandsWazuh: User ping-pong [831760]: 104 vi .bashrc Oct 6 14:31:29 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2003 sudo su ping-pong Oct 6 14:31:30 bastion LinuxCommandsWazuh: User ping-pong [832659]: 105 exit Oct 6 14:31:32 bastion LinuxCommandsWazuh: User ping-pong [832659]: 106 cd Oct 6 14:31:38 bastion LinuxCommandsWazuh: User ping-pong [832659]: 107 stren cookie-cutter Oct 6 14:31:54 bastion LinuxCommandsWazuh: User ping-pong [832659]: 108 vi .bashrc Oct 6 14:32:00 bastion LinuxCommandsWazuh: User ping-pong [832659]: 109 stern cookie-cutter Oct 6 14:32:14 bastion LinuxCommandsWazuh: User ping-pong [832659]: 110 vi .bashrc Oct 6 14:32:15 bastion LinuxCommandsWazuh: User ping-pong [832659]: 111 kubectl stern --max-log-requests=200000 Oct 6 14:32:17 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2003 sudo su ping-pong Oct 6 14:32:19 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2004 kubectl stern --max-log-requests=200000 Oct 6 14:33:19 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2011 kubectl get hpa Oct 6 14:33:54 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2005 kubectl krew install stern Oct 6 14:33:57 bastion LinuxCommandsWazuh: User ping-pong [835096]: 112 exit Oct 6 14:33:59 bastion LinuxCommandsWazuh: User ping-pong [835096]: 113 kubectl krew install stern Oct 6 14:34:00 bastion LinuxCommandsWazuh: User ping-pong [835096]: 114 cd Oct 6 14:34:16 bastion LinuxCommandsWazuh: User ping-pong [835096]: 115 set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "[https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz](https://github.com/kubernetes-sigs/krew/releases/latest/download/$%7BKREW%7D.tar.gz)" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew Oct 6 14:34:16 bastion LinuxCommandsWazuh: User ping-pong [835096]: 115 set -x; cd "$(mktemp -d)" && OS="$(uname | tr '[:upper:]' '[:lower:]')" && ARCH="$(uname -m | sed -e 's/x86_64/amd64/' -e 's/arm.*$/arm/')" && KREW="krew-${OS}_${ARCH}" && curl -fsSLO "[https://github.com/kubernetes-sigs/krew/releases/latest/download/${KREW}.tar.gz](https://github.com/kubernetes-sigs/krew/releases/latest/download/$%7BKREW%7D.tar.gz)" && tar zxvf "${KREW}.tar.gz" && ./"${KREW}" install krew Oct 6 14:34:16 bastion LinuxCommandsWazuh: User ping-pong [835096]: 116 ) Oct 6 14:34:43 bastion LinuxCommandsWazuh: User ping-pong [835096]: 117 export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH" Oct 6 14:34:50 bastion LinuxCommandsWazuh: User ping-pong [835096]: 118 kubectl krew install stern Oct 6 14:34:57 bastion LinuxCommandsWazuh: User ping-pong [835096]: 119 cd Oct 6 14:34:57 bastion LinuxCommandsWazuh: User ping-pong [835096]: 120 ls Oct 6 14:34:59 bastion LinuxCommandsWazuh: User ping-pong [835096]: 121 kubectl krew install stern Oct 6 14:35:19 bastion LinuxCommandsWazuh: User ping-pong [835096]: 122 kubectl get all Oct 6 14:35:25 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2012 kubectl get pods -o wide | grep data Oct 6 14:35:26 bastion LinuxCommandsWazuh: User ping-pong [835096]: 122 kubectl get all Oct 6 14:35:33 bastion LinuxCommandsWazuh: User ping-pong [835096]: 123 ls Oct 6 14:35:34 bastion LinuxCommandsWazuh: User ping-pong [835096]: 124 cd .. Oct 6 14:35:34 bastion LinuxCommandsWazuh: User ping-pong [835096]: 125 ls Oct 6 14:35:35 bastion LinuxCommandsWazuh: User ping-pong [835096]: 126 cd Oct 6 14:35:35 bastion LinuxCommandsWazuh: User ping-pong [835096]: 127 ls Oct 6 14:35:39 bastion LinuxCommandsWazuh: User ping-pong [835096]: 128 cd .. Oct 6 14:35:39 bastion LinuxCommandsWazuh: User ping-pong [835096]: 129 ls Oct 6 14:35:43 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ping-pong [835096]: 129 ls] Oct 6 14:35:44 bastion LinuxCommandsWazuh: User ping-pong [835096]: 130 cd Oct 6 14:35:46 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2006 sudo su ping-pong Oct 6 14:35:46 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2007 ls Oct 6 14:36:03 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2008 cp Makefile README.md /home/ping-pong/ Oct 6 14:36:08 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2013 kubectl get pods -o wide --watch | grep data Oct 6 14:36:12 bastion LinuxCommandsWazuh: User ubuntu [806753]: 2009 sudo cp Makefile README.md /home/ping-pong/ Oct 6 14:36:24 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2014 kubectl logs datapulse-web-5bcdd887c-7ll62 Oct 6 14:36:30 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2015 kubectl get pods -o wide | grep data Oct 6 14:36:50 bastion LinuxCommandsWazuh: User ubuntu [838845]: 1999 exit Oct 6 14:36:53 bastion LinuxCommandsWazuh: User ping-pong [838907]: 131 exit Oct 6 14:36:54 bastion LinuxCommandsWazuh: User ping-pong [838907]: 132 cd Oct 6 14:36:55 bastion LinuxCommandsWazuh: User ping-pong [838907]: 133 ls Oct 6 14:36:56 bastion LinuxCommandsWazuh: User ping-pong [838907]: 134 ll Oct 6 14:37:05 bastion LinuxCommandsWazuh: User ping-pong [838907]: 135 sudo chmod +x Makefile README.md Oct 6 14:37:11 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2016 kubectl get pods -o wide --watch | grep data Oct 6 14:37:14 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2017 kubectl get pods -o wide | grep data Oct 6 14:37:32 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2018 kubectl get hpa Oct 6 14:38:12 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2019 kubectl get hpa Oct 6 14:38:23 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2020 kubectl get service Oct 6 14:39:09 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2021 kubectl edit service datapulse-web-service Oct 6 14:39:13 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2022 kubectl get pods -o wide | grep data Oct 6 14:39:16 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2022 kubectl get pods -o wide | grep data Oct 6 14:39:33 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2023 kubectl logs datapulse-celery-spot-5db44c6699-ggpks -f Oct 6 14:39:38 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2024 kubectl get pods -o wide | grep data Oct 6 14:41:18 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2025 kubectl get pods -o wide --watch | grep data Oct 6 14:41:20 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:42:06 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:42:38 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:42:49 bastion LinuxCommandsWazuh: User ping-pong [838907]: 136 sudo chown ping-pong:ping-pong Makefile README.md Oct 6 14:43:04 bastion LinuxCommandsWazuh: User ping-pong [838907]: 137 make cookie-cutter-logs Oct 6 14:43:09 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ping-pong [838907]: 137 make cookie-cutter-logs ] Oct 6 14:43:11 bastion LinuxCommandsWazuh: User ping-pong [838907]: 138 cat Makefile Oct 6 14:43:13 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:43:28 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:43:50 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:43:51 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:44:18 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:44:35 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data Oct 6 14:44:39 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [728447]: 2026 kubectl get pods -o wide | grep data] Oct 6 14:44:55 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2027 kubectl logs datapulse-web-spot-758979cd7c-lfv68 Oct 6 14:44:59 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2028 kubectl get pods -o wide | grep data Oct 6 14:45:32 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2028 kubectl get pods -o wide | grep data Oct 6 14:45:42 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2028 kubectl get pods -o wide | grep data Oct 6 14:45:57 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2029 kubectl get pods -o wide | grep dataw Oct 6 14:46:00 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2029 kubectl get pods -o wide | grep dataw Oct 6 14:46:02 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2030 kubectl get pods -o wide | grep data Oct 6 14:46:07 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2030 kubectl get pods -o wide | grep data Oct 6 14:46:12 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2031 ls Oct 6 14:46:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [728447]: 2031 ls] Oct 6 14:46:50 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2032 kubectl get pods -o wide | grep data Oct 6 14:47:02 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2032 kubectl get pods -o wide | grep data Oct 6 14:47:12 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2033 kubectl logs datapulse-web-spot-758979cd7c-lfv68 Oct 6 14:48:03 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2033 kubectl logs datapulse-web-spot-758979cd7c-lfv68 Oct 6 14:48:07 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2034 kubectl get pods -o wide | grep data Oct 6 15:17:27 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2034 kubectl get pods -o wide | grep data Oct 6 15:24:23 bastion LinuxCommandsWazuh: User ubuntu [886518]: 1999 sudo su ping-pong Oct 6 15:24:30 bastion LinuxCommandsWazuh: User ping-pong [886646]: 138 cat Makefile Oct 6 15:24:31 bastion LinuxCommandsWazuh: User ping-pong [886646]: 139 ls Oct 6 15:24:32 bastion LinuxCommandsWazuh: User ping-pong [886646]: 140 cd Oct 6 15:24:32 bastion LinuxCommandsWazuh: User ping-pong [886646]: 141 ls Oct 6 15:24:48 bastion LinuxCommandsWazuh: User ping-pong [886646]: 142 stern cookie-cutter Oct 6 15:25:15 bastion LinuxCommandsWazuh: User ping-pong [886646]: 143 curl -L https://github.com/stern/stern/releases/latest/download/stern_linux_amd64 -o stern Oct 6 15:25:15 bastion LinuxCommandsWazuh: User ping-pong [886646]: 144 chmod +x stern Oct 6 15:25:15 bastion LinuxCommandsWazuh: User ping-pong [886646]: 145 sudo mv stern /usr/local/bin/ Oct 6 15:25:32 bastion LinuxCommandsWazuh: User ping-pong [886646]: 146 stern cookie-cutter Oct 6 15:25:49 bastion LinuxCommandsWazuh: User venky [888602]: 1998 kubectl rollout restart deploy chatbot Oct 6 15:26:04 bastion LinuxCommandsWazuh: User venky [888602]: 1999 kubectl get po -owide Oct 6 15:26:08 bastion LinuxCommandsWazuh: User venky [888602]: 2000 kubectl get po Oct 6 15:26:17 bastion LinuxCommandsWazuh: User venky [888602]: 2000 kubectl get po Oct 6 15:26:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 147 sudo apt install -y curl Oct 6 15:26:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 148 curl -L https://github.com/stern/stern/releases/latest/download/stern_linux_amd64 -o stern Oct 6 15:26:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 149 chmod +x stern Oct 6 15:26:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 150 sudo mv stern /usr/local/bin/ Oct 6 15:26:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 150 sudo mv stern /usr/local/bin/ Oct 6 15:26:50 bastion LinuxCommandsWazuh: User venky [888602]: 2001 kubectl exec deployment/urlbird-jobs-spot-ondemand-7b76555bf9-tvbx8 -- bash Oct 6 15:26:51 bastion LinuxCommandsWazuh: User ping-pong [886646]: 151 stern --version Oct 6 15:27:04 bastion LinuxCommandsWazuh: User venky [888602]: 2002 kubectl exec -it deployment/urlbird-jobs-spot-ondemand-7b76555bf9-tvbx8 -- bash Oct 6 15:27:09 bastion LinuxCommandsWazuh: User ping-pong [886646]: 152 # 1. Download the latest release Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 153 curl -L -o stern.tar.gz https://github.com/stern/stern/releases/latest/download/stern_linux_amd64.tar.gz Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 153 curl -L -o stern.tar.gz https://github.com/stern/stern/releases/latest/download/stern_linux_amd64.tar.gz Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 154 # 2. Extract the binary Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 155 tar -xzf stern.tar.gz Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 155 tar -xzf stern.tar.gz Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 156 # 3. Move to your PATH Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 157 sudo mv stern /usr/local/bin/ Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 157 sudo mv stern /usr/local/bin/ Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 158 # 4. Make it executable Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 159 sudo chmod +x /usr/local/bin/stern Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 159 sudo chmod +x /usr/local/bin/stern Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 160 # 5. Verify installation Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 161 stern --version Oct 6 15:27:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 161 stern --version Oct 6 15:27:13 bastion LinuxCommandsWazuh: User venky [888602]: 2003 kubectl exec -it deployment/urlbird-jobs-spot-ondemand-7b76555bf9-tvbx8 /bin/bash Oct 6 15:28:03 bastion LinuxCommandsWazuh: User ping-pong [886646]: 162 which stern Oct 6 15:28:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 163 echo 'export PATH=$PATH:/usr/local/bin' >> ~/.bashrc Oct 6 15:28:10 bastion LinuxCommandsWazuh: User ping-pong [886646]: 164 source ~/.bashrc Oct 6 15:28:11 bastion LinuxCommandsWazuh: User ping-pong [886646]: 164 source ~/.bashrc Oct 6 15:28:15 bastion LinuxCommandsWazuh: User ping-pong [886646]: 165 stern --version Oct 6 15:28:16 bastion LinuxCommandsWazuh: User ping-pong [886646]: 165 stern --version Oct 6 15:28:44 bastion LinuxCommandsWazuh: User ping-pong [886646]: 166 stern cookie-cutter Oct 6 15:28:51 bastion LinuxCommandsWazuh: User ping-pong [886646]: 167 stern cookie-cutter -n nitrox-production Oct 6 15:29:06 bastion LinuxCommandsWazuh: User ping-pong [886646]: 168 stern --version Oct 6 15:29:26 bastion LinuxCommandsWazuh: User ping-pong [886646]: 169 unalias stern Oct 6 15:29:26 bastion LinuxCommandsWazuh: User ping-pong [886646]: 169 unalias stern Oct 6 15:29:31 bastion LinuxCommandsWazuh: User ping-pong [886646]: 170 type stern Oct 6 15:29:38 bastion LinuxCommandsWazuh: User ping-pong [886646]: 171 stern --version Oct 6 15:29:53 bastion LinuxCommandsWazuh: User ping-pong [886646]: 172 stern cookie-cutter -n nitrox-production Oct 6 15:30:09 bastion LinuxCommandsWazuh: User ping-pong [886646]: 173 vi .bashrc Oct 6 15:30:11 bastion LinuxCommandsWazuh: User ubuntu [886518]: 1999 sudo su ping-pong Oct 6 15:30:13 bastion LinuxCommandsWazuh: User ping-pong [893257]: 174 exit Oct 6 15:30:15 bastion LinuxCommandsWazuh: User ping-pong [893257]: 175 stern cookie-cutter -n nitrox-production Oct 6 15:30:25 bastion LinuxCommandsWazuh: User ping-pong [893257]: 175 stern cookie-cutter -n nitrox-production Oct 6 15:30:46 bastion LinuxCommandsWazuh: User ping-pong [893257]: 176 curl -L -o stern.tar.gz https://github.com/stern/stern/releases/download/v1.30.0/stern_1.30.0_linux_amd64.tar.gz Oct 6 15:30:46 bastion LinuxCommandsWazuh: User ping-pong [893257]: 176 curl -L -o stern.tar.gz https://github.com/stern/stern/releases/download/v1.30.0/stern_1.30.0_linux_amd64.tar.gz Oct 6 15:30:53 bastion LinuxCommandsWazuh: User ping-pong [893257]: 177 sudo curl -L -o stern.tar.gz https://github.com/stern/stern/releases/download/v1.30.0/stern_1.30.0_linux_amd64.tar.gz Oct 6 15:30:59 bastion LinuxCommandsWazuh: User ping-pong [893257]: 178 tar -xzf stern.tar.gz Oct 6 15:31:03 bastion LinuxCommandsWazuh: User ping-pong [893257]: 179 sudo tar -xzf stern.tar.gz Oct 6 15:31:09 bastion LinuxCommandsWazuh: User ping-pong [893257]: 180 sudo mv stern /usr/local/bin/ Oct 6 15:31:13 bastion LinuxCommandsWazuh: User ping-pong [893257]: 180 sudo mv stern /usr/local/bin/ Oct 6 15:31:21 bastion LinuxCommandsWazuh: User ping-pong [893257]: 181 sudo chmod +x /usr/local/bin/stern Oct 6 15:31:25 bastion LinuxCommandsWazuh: User ping-pong [893257]: 182 stern --version Oct 6 15:31:36 bastion LinuxCommandsWazuh: User ping-pong [893257]: 183 stern cookie-cutter -n nitrox-production Oct 6 15:32:09 bastion LinuxCommandsWazuh: User ping-pong [893257]: 184 vi .bashrc Oct 6 15:32:11 bastion LinuxCommandsWazuh: User ping-pong [893257]: 185 cd Oct 6 15:32:11 bastion LinuxCommandsWazuh: User ping-pong [893257]: 186 ;s Oct 6 15:32:25 bastion LinuxCommandsWazuh: User ping-pong [893257]: 187 vi .bashrc Oct 6 15:32:26 bastion LinuxCommandsWazuh: User ping-pong [893257]: 188 kubectl stern --max-log-requests=200000 Oct 6 15:32:54 bastion LinuxCommandsWazuh: User ping-pong [893257]: 189 ( set -x; cd "$(mktemp -d)" && curl -fsSLO "https://github.com/kubernetes-sigs/krew/releases/latest/download/krew-linux_amd64.tar.gz" && tar zxvf krew-linux_amd64.tar.gz && ./krew-linux_amd64 install krew; ) Oct 6 15:32:57 bastion LinuxCommandsWazuh: User ping-pong [893257]: 190 echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc Oct 6 15:32:57 bastion LinuxCommandsWazuh: User ping-pong [893257]: 191 source ~/.bashrc Oct 6 15:32:58 bastion LinuxCommandsWazuh: User ping-pong [893257]: 192 echo 'export PATH="${KREW_ROOT:-$HOME/.krew}/bin:$PATH"' >> ~/.bashrc Oct 6 15:32:58 bastion LinuxCommandsWazuh: User ping-pong [893257]: 193 source ~/.bashrc Oct 6 15:33:08 bastion LinuxCommandsWazuh: User ping-pong [893257]: 194 kubectl krew install stern Oct 6 15:33:11 bastion LinuxCommandsWazuh: User ping-pong [893257]: 195 kubectl stern cookie-cutter -n nitrox-production Oct 6 15:33:22 bastion LinuxCommandsWazuh: User ping-pong [893257]: 196 vi .bashrc Oct 6 15:36:36 bastion LinuxCommandsWazuh: User ping-pong [893257]: 196 vi .bashrc Oct 6 15:36:37 bastion LinuxCommandsWazuh: User ping-pong [893257]: 197 sudo rm -f /usr/local/bin/stern Oct 6 15:36:37 bastion LinuxCommandsWazuh: User ping-pong [893257]: 197 sudo rm -f /usr/local/bin/stern Oct 6 15:36:45 bastion LinuxCommandsWazuh: User ubuntu [886518]: 1999 sudo su ping-pong Oct 6 15:36:46 bastion LinuxCommandsWazuh: User ping-pong [900426]: 198 exit Oct 6 15:36:47 bastion LinuxCommandsWazuh: User ping-pong [900426]: 199 cd Oct 6 15:36:57 bastion LinuxCommandsWazuh: User ping-pong [900426]: 200 stern cookie-cutter Oct 6 15:37:04 bastion LinuxCommandsWazuh: User ping-pong [900426]: 201 kubectl get pods Oct 6 15:44:25 bastion LinuxCommandsWazuh: User ubuntu [886518]: 1999 sudo su ping-pong Oct 6 15:47:05 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2035 kubectl get hpa Oct 6 15:48:23 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2036 kubectl get pods | grep cookie Oct 6 15:48:41 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2037 kubectl get deployment Oct 6 15:49:12 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2038 kubectl get deployment cookie-cutter -o yaml Oct 6 15:50:43 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2039 kubectl get deployment cookie-cutter-queue -o yaml Oct 6 15:50:47 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2040 kubectl get deployment cookie-cutter-queu -o yaml Oct 6 15:50:52 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2041 kubectl get deployment Oct 6 15:50:58 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2042 kubectl get deployment cookie-cutter-queues -o yaml Oct 6 15:53:25 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2043 kubectl get hpa Oct 6 16:02:12 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2044 kubectl get pods -o wide | grep cookie Oct 6 16:06:38 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2045 kubectl get pvc Oct 6 16:07:25 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2046 kubectl get pods -o wide | grep cookie Oct 6 16:08:08 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2047 kubectl get service Oct 6 16:08:48 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2048 kubectl get service -o wide Oct 6 16:09:00 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2049 kubectl get service cookie-cutter -o wide Oct 6 16:09:04 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2050 kubectl get service cookie-cutter -o yaml Oct 6 16:10:22 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2051 kubectl edit service cookie-cutter Oct 6 16:10:38 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2052 kubectl get pods -o wide | grep cookie Oct 6 16:10:46 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2053 kubectl logs cookie-cutter-spot-6f65c7f565-hkhn8 Oct 6 16:10:51 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2054 kubectl logs cookie-cutter-spot-6f65c7f565-hkhn8 -f Oct 6 16:10:55 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2055 kubectl get pods -o wide | grep cookie Oct 6 16:11:45 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2056 kubectl get pods -o wide --watch | grep cookie Oct 6 16:11:48 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2057 kubectl get pods -o wide | grep cookie Oct 6 16:12:56 bastion LinuxCommandsWazuh: User abhijeet [728447]: 2057 kubectl get pods -o wide | grep cookie Oct 6 16:15:39 bastion LinuxCommandsWazuh: User venky [939471]: 1998 kubectl exec -it urlbird-jobs-spot-ondemand-7b76555bf9-tvbx8 /bin/bash Oct 6 16:15:48 bastion LinuxCommandsWazuh: User venky [939471]: 1999 kubectl get po | grep coo Oct 6 16:16:01 bastion LinuxCommandsWazuh: User venky [939471]: 2000 k get logs cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:16:06 bastion LinuxCommandsWazuh: User venky [939471]: 2001 kubectl get logs cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:16:11 bastion LinuxCommandsWazuh: User venky [939471]: 2002 kubectl get log cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:16:17 bastion LinuxCommandsWazuh: User venky [939471]: 2003 kubectl log cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:16:55 bastion LinuxCommandsWazuh: User venky [939471]: 2004 kubectl logs -f cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:17:18 bastion LinuxCommandsWazuh: User venky [939471]: 2004 kubectl logs -f cookie-cutter-spot-6f65c7f565-t2zj4 Oct 6 16:17:22 bastion LinuxCommandsWazuh: User venky [939471]: 2005 kubectl get po | grep coo Oct 6 16:19:48 bastion LinuxCommandsWazuh: User venky [939471]: 2006 kubectl get po | grep coo | grep queue Oct 6 16:20:37 bastion LinuxCommandsWazuh: User venky [939471]: 2007 kubectl logs -f cookie-cutter-queues-spot-66f88ccf86-bx7pq Oct 6 16:20:40 bastion LinuxCommandsWazuh: User venky [939471]: 2008 kubectl get po | grep coo Oct 6 16:21:05 bastion LinuxCommandsWazuh: User ping-pong [742236]: 85 mongo Oct 6 16:21:06 bastion LinuxCommandsWazuh: User ping-pong [742236]: 85 mongo Oct 6 16:21:29 bastion LinuxCommandsWazuh: User venky [946066]: 1998 kubectl exec -it urlbird-jobs-spot-ondemand-7b76555bf9-tvbx8 /bin/bash Oct 6 16:21:46 bastion LinuxCommandsWazuh: User venky [946066]: 1999 kubectl get po | grep que Oct 6 16:22:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [946066]: 1999 kubectl get po | grep que] Oct 6 16:22:09 bastion LinuxCommandsWazuh: User venky [946066]: 2000 kubectl get hpa Oct 6 16:22:40 bastion LinuxCommandsWazuh: User venky [946066]: 2001 kubectl get po | grep que Oct 6 16:22:42 bastion LinuxCommandsWazuh: User venky [946066]: 2001 kubectl get po | grep que Oct 6 16:23:14 bastion LinuxCommandsWazuh: User abhijeet [947931]: 1998 kubectl get pods Oct 6 16:23:37 bastion LinuxCommandsWazuh: User venky [946066]: 2001 kubectl get po | grep que Oct 6 16:23:43 bastion LinuxCommandsWazuh: User venky [946066]: 2002 kubectl get po | grep coo Oct 6 16:24:28 bastion LinuxCommandsWazuh: User ankur [949237]: 1995 byobu Oct 6 16:24:41 bastion LinuxCommandsWazuh: User abhijeet [947931]: 1999 kubectl get pods -o wide Oct 6 16:25:06 bastion LinuxCommandsWazuh: User abhijeet [947931]: 1999 kubectl get pods -o wide Oct 6 16:25:41 bastion LinuxCommandsWazuh: User ankur [949237]: 1995 byobu Oct 6 16:25:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [949237]: 1995 byobu] Oct 6 16:30:39 bastion LinuxCommandsWazuh: User abhijeet [947931]: 1999 kubectl get pods -o wide Oct 6 16:37:26 bastion LinuxCommandsWazuh: User venky [946066]: 2002 kubectl get po | grep coo Oct 6 16:37:29 bastion LinuxCommandsWazuh: User venky [946066]: 2002 kubectl get po | grep coo Oct 6 16:37:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [946066]: 2002 kubectl get po | grep coo] Oct 6 16:37:43 bastion LinuxCommandsWazuh: User venky [946066]: 2003 kubectl get po | grep coo | wc -l Oct 6 16:38:09 bastion LinuxCommandsWazuh: User venky [946066]: 2003 kubectl get po | grep coo | wc -l Oct 6 16:38:12 bastion LinuxCommandsWazuh: User venky [946066]: 2004 kubectl get po | grep coo Oct 6 16:42:19 bastion LinuxCommandsWazuh: User ankur [648837]: 1998 k get pods | grep house Oct 6 16:42:35 bastion LinuxCommandsWazuh: User ankur [648837]: 1999 stern house-of-click Oct 6 16:42:52 bastion LinuxCommandsWazuh: User ankur [648837]: 1999 stern house-of-click Oct 6 16:43:33 bastion LinuxCommandsWazuh: message repeated 7 times: [ User ankur [648837]: 1999 stern house-of-click] Oct 6 16:44:39 bastion LinuxCommandsWazuh: User ankur [648837]: 2000 stern house-of-click | grep Inserted Oct 6 16:45:51 bastion LinuxCommandsWazuh: User ankur [648837]: 2000 stern house-of-click | grep Inserted Oct 6 16:46:40 bastion LinuxCommandsWazuh: User venky [946066]: 2004 kubectl get po | grep coo Oct 6 16:46:48 bastion LinuxCommandsWazuh: message repeated 4 times: [ User venky [946066]: 2004 kubectl get po | grep coo] Oct 6 16:46:56 bastion LinuxCommandsWazuh: User venky [946066]: 2005 kubectl get deploy Oct 6 16:50:12 bastion LinuxCommandsWazuh: User venky [946066]: 2005 kubectl get deploy Oct 6 16:50:12 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [946066]: 2005 kubectl get deploy ] Oct 6 16:58:53 bastion LinuxCommandsWazuh: User ashish [985894]: 529 mongo pixel_v1; Oct 6 16:58:54 bastion LinuxCommandsWazuh: User ashish [985894]: 530 clear Oct 6 16:58:56 bastion LinuxCommandsWazuh: User ashish [985894]: 531 git status Oct 6 16:59:03 bastion LinuxCommandsWazuh: User ashish [587043]: 532 clickhouse-ssh Oct 6 17:06:34 bastion LinuxCommandsWazuh: User ankur [1000919]: 1995 byobu Oct 6 17:06:56 bastion LinuxCommandsWazuh: User aman [1001700]: 286 exit Oct 6 17:06:59 bastion LinuxCommandsWazuh: User aman [1001700]: 287 clear Oct 6 17:11:03 bastion LinuxCommandsWazuh: User ankur [648837]: 2000 stern house-of-click | grep Inserted Oct 6 17:11:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [648837]: 2000 stern house-of-click | grep Inserted] Oct 6 17:11:58 bastion LinuxCommandsWazuh: User venky [946066]: 2005 kubectl get deploy Oct 6 17:11:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [946066]: 2005 kubectl get deploy ] Oct 6 17:20:51 bastion LinuxCommandsWazuh: User ashish [587043]: 533 mongo pixel_v1; Oct 6 17:20:52 bastion LinuxCommandsWazuh: User ashish [985894]: 532 byobu Oct 6 17:20:54 bastion LinuxCommandsWazuh: User ashish [985894]: 532 byobu Oct 6 17:26:58 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 1997 kubectl get pods -o wide Oct 6 17:26:59 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 1998 ls Oct 6 17:27:04 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 1999 kubectl get pods Oct 6 17:27:11 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2000 kubectl get pods -o wide Oct 6 17:28:07 bastion LinuxCommandsWazuh: User aman [1001700]: 288 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Oct 6 17:28:08 bastion LinuxCommandsWazuh: User aman [1001700]: 289 clear Oct 6 17:31:46 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2001 kubectl get pods -n loki -o wide Oct 6 17:39:38 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2001 kubectl get pods -n loki -o wide Oct 6 17:42:59 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2002 kubectl top pods -n loki -o wide Oct 6 17:43:02 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2003 kubectl top pods -n loki Oct 6 17:43:56 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2004 kubectl get pods -n loki -o wide Oct 6 17:44:12 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2005 kubectl get pods | grep big Oct 6 17:44:18 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2006 kubectl get pods | grep house Oct 6 17:44:28 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2007 kubectl get pods -o wide | grep house Oct 6 17:52:50 bastion LinuxCommandsWazuh: User mohtashim [1060584]: 647 exit Oct 6 17:52:56 bastion LinuxCommandsWazuh: User mohtashim [1060584]: 648 k get hpa Oct 6 17:54:26 bastion LinuxCommandsWazuh: User ankur [648837]: 2001 k rollout restart deployment/house-of-click Oct 6 17:55:57 bastion LinuxCommandsWazuh: User ankur [648837]: 2001 k rollout restart deployment/house-of-click Oct 6 17:55:57 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [648837]: 2001 k rollout restart deployment/house-of-click] Oct 6 17:55:58 bastion LinuxCommandsWazuh: User ankur [648837]: 2001 k rollout restart deployment/house-of-click Oct 6 17:55:58 bastion LinuxCommandsWazuh: User ankur [648837]: 2001 k rollout restart deployment/house-of-click Oct 6 17:55:58 bastion LinuxCommandsWazuh: User ankur [648837]: 2001 k rollout restart deployment/house-of-click Oct 6 17:55:59 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ankur [648837]: 2001 k rollout restart deployment/house-of-click] Oct 6 17:56:39 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2008 kubectl get hpa ' Oct 6 17:56:41 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2009 kubectl get hpa Oct 6 18:02:33 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2010 kubectl get pods -o wide Oct 6 18:08:47 bastion LinuxCommandsWazuh: User ankur [1077386]: 1995 byobu Oct 6 18:09:50 bastion LinuxCommandsWazuh: User ankur [1077386]: 1995 byobu Oct 6 18:12:13 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2011 kubectl get pods -o wide --watch Oct 6 18:12:27 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2012 kubectl get pods -o wide | grep coo Oct 6 18:17:54 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2012 kubectl get pods -o wide | grep coo Oct 6 18:18:01 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2013 kubectl get pods -o wide | grep gke-nitrox-production-cookie-cutter-49a2022e-lqpr Oct 6 18:19:45 bastion LinuxCommandsWazuh: User abhijeet [1079410]: 1997 kubectl get pods -o wide Oct 6 18:19:47 bastion LinuxCommandsWazuh: User abhijeet [1079410]: 1998 ls Oct 6 18:19:59 bastion LinuxCommandsWazuh: User ankur [1079528]: 1995 exit Oct 6 18:20:02 bastion LinuxCommandsWazuh: User ankur [1079528]: 1996 byobu Oct 6 18:23:45 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2014 kubectl get pods -o wide | grep common Oct 6 18:24:46 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2015 kubectl get pods -o wide | grep gke-nitrox-productio-cookie-cutter-qu-164056e1-jl4q Oct 6 18:25:20 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 1999 exit Oct 6 18:25:37 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ubuntu [1079913]: 1999 exit] Oct 6 18:26:10 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2000 stern cookie-cutter | grep "GK_Ident' Oct 6 18:26:16 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2001 stern cookie-cutter | grep "GK_Ident" Oct 6 18:26:28 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2002 stern cookie-cutter Oct 6 18:26:32 bastion LinuxCommandsWazuh: User rihan [1080637]: 1399 mongo Oct 6 18:26:32 bastion LinuxCommandsWazuh: User rihan [1080637]: 1400 cd Oct 6 18:26:38 bastion LinuxCommandsWazuh: User rihan [1080637]: 1401 stern cookie-cutter Oct 6 18:26:39 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [1080637]: 1401 stern cookie-cutter] Oct 6 18:30:37 bastion LinuxCommandsWazuh: User ashish [1080973]: 536 byobu Oct 6 18:30:40 bastion LinuxCommandsWazuh: User ashish [1081032]: 536 byobu Oct 6 18:30:50 bastion LinuxCommandsWazuh: User ashish [1081032]: 537 kubectl get pods Oct 6 18:31:01 bastion LinuxCommandsWazuh: User ankur [1081632]: 1995 exit Oct 6 18:31:02 bastion LinuxCommandsWazuh: User ashish [1081032]: 538 kubectl get logs -f cookie-cutter Oct 6 18:31:56 bastion LinuxCommandsWazuh: User ankur [1081632]: 1996 byobu Oct 6 18:32:02 bastion LinuxCommandsWazuh: User ashish [1081032]: 539 stern cookie-cutter Oct 6 18:32:02 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1081032]: 539 stern cookie-cutter] Oct 6 18:32:13 bastion LinuxCommandsWazuh: User ashish [1081032]: 540 stern cookie-cutter | grep "Ashish" Oct 6 18:33:01 bastion LinuxCommandsWazuh: User abhijeet [1079410]: 1999 psql Oct 6 18:35:31 bastion LinuxCommandsWazuh: User mohtashim [1086229]: 649 exit Oct 6 18:35:48 bastion LinuxCommandsWazuh: User mohtashim [1086229]: 650 clickhouse-ssh Oct 6 18:35:52 bastion LinuxCommandsWazuh: User mohtashim [1086229]: 651 k get pods Oct 6 18:36:08 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 652 exit Oct 6 18:36:15 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 653 k get pods | grep "house" Oct 6 18:36:35 bastion LinuxCommandsWazuh: User rihan [1080637]: 1402 stern cookie-cutter | grep "GK_Ident" Oct 6 18:36:36 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [1080637]: 1402 stern cookie-cutter | grep "GK_Ident"] Oct 6 18:36:38 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2003 sudo su rihan Oct 6 18:36:42 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2004 exir Oct 6 18:36:43 bastion LinuxCommandsWazuh: User ubuntu [1079913]: 2004 exir Oct 6 18:36:49 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 654 k exec -it house-of-click-c85757d44-4dx2r bash Oct 6 18:36:51 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 654 k exec -it house-of-click-c85757d44-4dx2r bash Oct 6 18:37:07 bastion LinuxCommandsWazuh: User ashish [1081032]: 541 stern cookie-cutter | grep "Ashish I am in contacts_table" Oct 6 18:37:15 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 1999 exit Oct 6 18:37:32 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2000 htop Oct 6 18:37:38 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2016 kubectl get pods -o wide | grep house Oct 6 18:38:01 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 655 clickhouse-ssh Oct 6 18:38:25 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2016 kubectl get pods -o wide | grep house Oct 6 18:38:28 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 656 stern house-of-click Oct 6 18:38:28 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [1087612]: 656 stern house-of-click] Oct 6 18:39:09 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2016 kubectl get pods -o wide | grep house Oct 6 18:41:25 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2017 kubectl get pods -o wide | grep vor Oct 6 18:42:06 bastion LinuxCommandsWazuh: User ankur [1093703]: 1995 exit Oct 6 18:42:16 bastion LinuxCommandsWazuh: User ankur [1094085]: 1995 exit Oct 6 18:42:29 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 657 clickhouse-ssh Oct 6 18:42:38 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 658 k get pods | grep "kafka" Oct 6 18:42:42 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 659 k get pods Oct 6 18:45:01 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2001 cd .. Oct 6 18:45:05 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 652 exit Oct 6 18:45:06 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 653 cd Oct 6 18:45:06 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 654 ls Oct 6 18:45:07 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 655 cd .ssh/ Oct 6 18:45:07 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 656 ls Oct 6 18:45:09 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 657 cat id_rsa.pub Oct 6 18:45:15 bastion LinuxCommandsWazuh: User mohtashim [1099344]: 658 cd Oct 6 18:45:16 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2002 sudo su mohtashim Oct 6 18:45:20 bastion LinuxCommandsWazuh: User ankur [1099848]: 1995 exit Oct 6 18:45:20 bastion LinuxCommandsWazuh: User ankur [1099848]: 1996 cd Oct 6 18:45:40 bastion LinuxCommandsWazuh: User ankur [1099848]: 1997 kafka-ssh Oct 6 18:45:45 bastion LinuxCommandsWazuh: User ankur [1099848]: 1998 cat .bashrc Oct 6 18:45:54 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2003 sudo su ankur Oct 6 18:45:55 bastion LinuxCommandsWazuh: User mohtashim [1101610]: 659 exit Oct 6 18:45:56 bastion LinuxCommandsWazuh: User mohtashim [1101610]: 660 cd Oct 6 18:46:17 bastion LinuxCommandsWazuh: User mohtashim [1101610]: 661 vi .bashrc Oct 6 18:46:19 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2004 sudo su mohtashim Oct 6 18:46:20 bastion LinuxCommandsWazuh: User mohtashim [1102406]: 662 exit Oct 6 18:46:21 bastion LinuxCommandsWazuh: User mohtashim [1102406]: 663 cd Oct 6 18:46:26 bastion LinuxCommandsWazuh: User mohtashim [1102406]: 664 kafka-ssh Oct 6 18:46:33 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 660 clickhouse-ssh Oct 6 18:46:35 bastion LinuxCommandsWazuh: User mohtashim [1087612]: 661 kafka-ssh Oct 6 18:46:52 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 672 exit Oct 6 18:47:26 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 673 kafka-ssh Oct 6 18:47:32 bastion LinuxCommandsWazuh: User ubuntu [1088859]: 2004 sudo su mohtashim Oct 6 18:47:39 bastion LinuxCommandsWazuh: User ping-pong [742236]: 85 mongo Oct 6 18:47:39 bastion LinuxCommandsWazuh: User ping-pong [742236]: 85 mongo Oct 6 18:47:42 bastion LinuxCommandsWazuh: User ping-pong [742236]: 86 clear Oct 6 18:47:57 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2018 kubectl get pdb Oct 6 18:48:33 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2019 ls Oct 6 18:49:59 bastion LinuxCommandsWazuh: User mohtashim [1106684]: 675 exit Oct 6 18:52:11 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2020 kubectl get hpa Oct 6 18:52:20 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 673 kafka-ssh Oct 6 19:00:22 bastion LinuxCommandsWazuh: User ankur [1117228]: 1995 byobu Oct 6 19:00:59 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2021 kubectl get pods -o wide | grep vor Oct 6 19:01:36 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 674 kafka-ssh Oct 6 19:01:46 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2022 ls Oct 6 19:01:51 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2023 mkdir psql Oct 6 19:01:52 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2024 cd psql/ Oct 6 19:01:54 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2025 sklcd Oct 6 19:01:58 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2026 python Oct 6 19:02:04 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2027 python3 Oct 6 19:02:32 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2028 vim app.py Oct 6 19:02:57 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2029 vim app.py Oct 6 19:04:56 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2030 vim requirement.txt Oct 6 19:05:19 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2031 pip install -r requirement.txt Oct 6 19:05:31 bastion LinuxCommandsWazuh: User abhijeet [1122275]: 1997 kubectl get pods -o wide Oct 6 19:05:35 bastion LinuxCommandsWazuh: User abhijeet [1122275]: 1998 cat .bashrc Oct 6 19:07:28 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2032 vim app.py Oct 6 19:07:35 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 675 clickhouse-ssh Oct 6 19:07:40 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 676 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 6 19:08:00 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2033 python3 app.py Oct 6 19:08:02 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2034 ls Oct 6 19:08:04 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2034 ls Oct 6 19:08:07 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2035 cat app.py Oct 6 19:08:32 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2036 ls Oct 6 19:11:15 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2036 ls Oct 6 19:11:16 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2037 ll Oct 6 19:11:29 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 676 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 6 19:12:56 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2038 > app.py Oct 6 19:13:29 bastion LinuxCommandsWazuh: User mohtashim [1103583]: 677 stern vortex | grep "sales_conclude >>>>>> data:" Oct 6 19:13:29 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1103583]: 677 stern vortex | grep "sales_conclude >>>>>> data:"] Oct 6 19:14:19 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2039 vim app.py Oct 6 19:14:20 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2040 ls Oct 6 19:14:25 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2041 python3 app.py Oct 6 19:14:28 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2042 ls Oct 6 19:14:31 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2043 cat core_organisation_export_20251006_191425.csv Oct 6 19:14:33 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2044 ls Oct 6 19:14:40 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2045 pwd Oct 6 19:16:29 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2046 ls Oct 6 19:16:33 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2047 rm core_organisation_export_20251006_191425.csv Oct 6 19:16:33 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2048 ls Oct 6 19:18:01 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2049 vim app.py Oct 6 19:18:09 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2050 python3 app.py Oct 6 19:18:10 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2051 ls Oct 6 19:18:14 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2051 ls Oct 6 19:18:46 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2052 mkdir core_org Oct 6 19:19:00 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2053 mv core_organisation_* core_org/ Oct 6 19:19:01 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2054 ls Oct 6 19:19:11 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2055 tar -cvf core_org.tar core_org/ Oct 6 19:19:12 bastion LinuxCommandsWazuh: User abhijeet [1034656]: 2056 ls Oct 6 19:19:17 bastion LinuxCommandsWazuh: User mohtashim [1106684]: 676 clickhouse-ssh Oct 6 19:20:07 bastion LinuxCommandsWazuh: User mohtashim [1106684]: 676 clickhouse-ssh Oct 6 19:20:07 bastion LinuxCommandsWazuh: User mohtashim [1106684]: 676 clickhouse-ssh Oct 6 19:21:25 bastion LinuxCommandsWazuh: User mohtashim [1106684]: 677 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 6 19:34:50 bastion LinuxCommandsWazuh: User ankur [1117228]: 1995 byobu Oct 6 19:47:20 bastion LinuxCommandsWazuh: User ankur [1094085]: 1996 clickhouse-ssh Oct 6 19:48:05 bastion LinuxCommandsWazuh: User ankur [648837]: 2002 stern house-of-click | grep Inserted Oct 6 19:48:12 bastion LinuxCommandsWazuh: User ankur [648837]: 2002 stern house-of-click | grep Inserted