Oct 7 04:32:09 bastion LinuxCommandsWazuh: User ping-pong [1216208]: 207 mongo Oct 7 04:32:10 bastion LinuxCommandsWazuh: User ping-pong [1216208]: 208 ls Oct 7 04:36:32 bastion LinuxCommandsWazuh: User ping-pong [1216208]: 209 mongo Oct 7 09:12:19 bastion LinuxCommandsWazuh: User ankur [1238707]: 501 exit Oct 7 09:12:24 bastion LinuxCommandsWazuh: User ankur [648837]: 2002 stern house-of-click | grep Inserted Oct 7 09:25:19 bastion LinuxCommandsWazuh: User ankur [648837]: 2003 clickhouse- Oct 7 10:20:33 bastion LinuxCommandsWazuh: User abhijeet [1275104]: 1997 cat .bashrc Oct 7 10:29:56 bastion LinuxCommandsWazuh: User abhijeet [1275104]: 1998 mongo-ssh Oct 7 10:30:14 bastion LinuxCommandsWazuh: User abhijeet [1275104]: 1999 kubectl get pods -o wide | grep spot Oct 7 12:16:41 bastion LinuxCommandsWazuh: User ashish [1284754]: 536 byobu Oct 7 12:16:42 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1284754]: 536 byobu] Oct 7 12:16:50 bastion LinuxCommandsWazuh: User ashish [1081032]: 541 stern cookie-cutter | grep "Ashish I am in contacts_table" Oct 7 12:21:22 bastion LinuxCommandsWazuh: User ashish [1081032]: 542 clickhouse-ssh Oct 7 12:21:23 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1081032]: 542 clickhouse-ssh ] Oct 7 12:21:32 bastion LinuxCommandsWazuh: User ashish [1081032]: 543 kubectl get pods Oct 7 12:22:44 bastion LinuxCommandsWazuh: User ashish [1081032]: 544 kubectl get pods | grep "house" Oct 7 12:24:04 bastion LinuxCommandsWazuh: User ashish [1081032]: 545 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash Oct 7 12:28:03 bastion LinuxCommandsWazuh: User ashish [1296253]: 536 byobu Oct 7 12:28:08 bastion LinuxCommandsWazuh: User ashish [1081032]: 546 clickhouse-ssh Oct 7 12:29:26 bastion LinuxCommandsWazuh: User ankur [1298567]: 502 byobu Oct 7 12:30:27 bastion LinuxCommandsWazuh: User ankur [1300392]: 503 exit Oct 7 12:30:28 bastion LinuxCommandsWazuh: User ankur [1300392]: 504 ls Oct 7 12:30:49 bastion LinuxCommandsWazuh: User ankur [1300392]: 505 k get pods | grep vortex Oct 7 12:30:55 bastion LinuxCommandsWazuh: User ashish [1081032]: 547 mongo pixel_v1; Oct 7 12:30:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1081032]: 547 mongo pixel_v1;] Oct 7 12:31:04 bastion LinuxCommandsWazuh: User ankur [1300392]: 506 ls Oct 7 12:32:49 bastion LinuxCommandsWazuh: User ankur [1300392]: 506 ls Oct 7 12:32:49 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 683 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 7 12:33:47 bastion LinuxCommandsWazuh: User ankur [1300392]: 506 ls Oct 7 12:33:47 bastion LinuxCommandsWazuh: User ankur [1300392]: 506 ls Oct 7 12:33:48 bastion LinuxCommandsWazuh: User ankur [1300392]: 506 ls Oct 7 12:33:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1300392]: 506 ls] Oct 7 12:35:57 bastion LinuxCommandsWazuh: User ankur [1309778]: 507 exit Oct 7 12:36:03 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 683 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 7 12:36:05 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 684 clear Oct 7 12:36:37 bastion LinuxCommandsWazuh: User ankur [1309778]: 508 ls Oct 7 12:36:46 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1309778]: 508 ls] Oct 7 12:38:30 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 1997 kubectl get pods -o wide | grep spot Oct 7 12:38:37 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 1998 kubectl get hpa Oct 7 12:40:16 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 685 stern vortex | grep '5976aa7c-eda3-4dd4-acfc-1d5fc051c4f5' Oct 7 12:40:16 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1310029]: 685 stern vortex | grep '5976aa7c-eda3-4dd4-acfc-1d5fc051c4f5'] Oct 7 12:40:29 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 686 k get configmap Oct 7 12:42:47 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 687 k edit configmap vortex-config Oct 7 12:42:55 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 688 k get deploy Oct 7 12:43:23 bastion LinuxCommandsWazuh: User mohtashim [1310029]: 689 k rollout restart deploy vortex vortex-dramatiq Oct 7 12:45:20 bastion LinuxCommandsWazuh: User ubuntu [1326834]: 1999 exit Oct 7 12:49:58 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 684 clickhouse-ssh Oct 7 12:50:16 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 1999 kubectl get pod -o wide | grep vor Oct 7 12:51:08 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 1999 kubectl get pod -o wide | grep vor Oct 7 12:51:30 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2000 kubectl get pod -o wide --watch | grep vor Oct 7 12:51:32 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2001 kubectl get pod -o wide | grep vor Oct 7 12:52:32 bastion LinuxCommandsWazuh: User ankur [3507036]: 2004 stern house-of-click Oct 7 12:52:33 bastion LinuxCommandsWazuh: User ankur [3507036]: 2004 stern house-of-click Oct 7 12:52:56 bastion LinuxCommandsWazuh: User ankur [3507036]: 2005 stern house-of-click | grep inserted Oct 7 12:52:59 bastion LinuxCommandsWazuh: User ankur [3507036]: 2006 stern house-of-click | grep Inserted Oct 7 12:53:38 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2001 kubectl get pod -o wide | grep vor Oct 7 12:54:04 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2001 kubectl get pod -o wide | grep vor Oct 7 12:54:15 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2002 kubectl logs vortex-9c95978f8-mwr45 Oct 7 12:54:17 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2003 kubectl get pod -o wide | grep vor Oct 7 12:54:23 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2003 kubectl get pod -o wide | grep vor Oct 7 12:54:25 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2004 kubectl get pod -o wide | grep vorw Oct 7 12:54:28 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2004 kubectl get pod -o wide | grep vorw Oct 7 12:54:30 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2005 kubectl get pod -o wide | grep vor Oct 7 12:54:38 bastion LinuxCommandsWazuh: message repeated 5 times: [ User abhijeet [1314550]: 2005 kubectl get pod -o wide | grep vor] Oct 7 12:54:53 bastion LinuxCommandsWazuh: User ankur [1332700]: 507 exit Oct 7 12:54:59 bastion LinuxCommandsWazuh: User ankur [1332700]: 508 k get pods | xlr Oct 7 12:55:02 bastion LinuxCommandsWazuh: User ankur [1332700]: 509 k get pods | grpe xlr Oct 7 12:55:02 bastion LinuxCommandsWazuh: User ankur [1332700]: 509 k get pods | grpe xlr Oct 7 12:55:05 bastion LinuxCommandsWazuh: User ankur [1332700]: 510 k get pods | grep xlr Oct 7 12:55:13 bastion LinuxCommandsWazuh: User ankur [1332700]: 511 stern xlr8 Oct 7 12:55:37 bastion LinuxCommandsWazuh: User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience" Oct 7 12:55:49 bastion LinuxCommandsWazuh: User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience" Oct 7 12:55:49 bastion LinuxCommandsWazuh: User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience" Oct 7 12:58:00 bastion LinuxCommandsWazuh: User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience" Oct 7 12:58:12 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 685 psql Oct 7 12:58:13 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2006 kubectl get hpa Oct 7 12:58:16 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 12:58:42 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2007 kubectl get pod -o wide | grep url Oct 7 12:59:44 bastion LinuxCommandsWazuh: User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience" Oct 7 12:59:44 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1332700]: 512 stern xlr8 | grep "v1/services/audience"] Oct 7 13:01:43 bastion LinuxCommandsWazuh: User ashish [1081032]: 548 clickhouse-ssh Oct 7 13:01:46 bastion LinuxCommandsWazuh: User rihan [1343442]: 1403 exit Oct 7 13:01:59 bastion LinuxCommandsWazuh: User ashish [1081032]: 549 kubectl get pds Oct 7 13:02:01 bastion LinuxCommandsWazuh: User ashish [1081032]: 550 kubectl get pods Oct 7 13:03:12 bastion LinuxCommandsWazuh: User ashish [1081032]: 551 stern house-of-click Oct 7 13:05:27 bastion LinuxCommandsWazuh: User rihan [1343442]: 1404 psql -d tasdeeq -U postgres Oct 7 13:06:58 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2008 kubectl get pod -o wide | grep vor Oct 7 13:07:06 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2009 kubectl logs vortex-dramatiq-86664b59c6-m4d6r Oct 7 13:07:15 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2010 kubectl logs vortex-dramatiq-86664b59c6-m4d6r -f Oct 7 13:07:17 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2011 kubectl get pod -o wide | grep vor Oct 7 13:07:26 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2012 kubectl logs vortex-dramatiq-86664b59c6-cmg6h Oct 7 13:07:29 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2013 kubectl logs vortex-dramatiq-86664b59c6-cmg6h -f Oct 7 13:07:31 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2014 ls Oct 7 13:11:03 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2015 kubectl get pod -o wide | grep vor Oct 7 13:17:34 bastion LinuxCommandsWazuh: User ashish [1081032]: 552 stern house-of-click tails Oct 7 13:17:35 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [1081032]: 552 stern house-of-click tails] Oct 7 13:17:36 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 13:23:58 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2016 kubectl get pods -o wide | grep url Oct 7 13:24:46 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 1997 kubectl get pods -o wide | grep spot Oct 7 13:24:47 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 1998 ls Oct 7 13:24:49 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 1998 ls Oct 7 13:25:45 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 1999 rm helm-v3.18.3-linux-amd64.tar.gz nitrox-dramatic.log nitrox-dramatiq.log prometheus-server-cm-backup-20250903_123519.yaml prometheus-server-configmap.yaml test.json test.txt wordpress-configmap.yaml Oct 7 13:25:46 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2000 ls Oct 7 13:25:47 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2000 ls Oct 7 13:25:50 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2001 cd JK Oct 7 13:25:51 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2002 cd K8s-tools/ Oct 7 13:25:51 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2003 ls Oct 7 13:26:07 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2004 ./kubeScrib.sh Oct 7 13:26:08 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2005 ls Oct 7 13:26:10 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2005 ls Oct 7 13:26:14 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2006 cd .. Oct 7 13:26:14 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2007 l Oct 7 13:26:22 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2008 mkdir k8s Oct 7 13:26:23 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2009 cd k8s/ Oct 7 13:26:45 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2010 wget https://github.com/bakito/kubexporter/releases/latest/download/kubexporter-linux-amd64 Oct 7 13:27:32 bastion LinuxCommandsWazuh: User ankur [1332700]: 513 k rollout restart deployment/big-o-cookie-cutter Oct 7 13:27:55 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2011 wget https://github.com/bakito/kubexporter/releases/download/v0.7.0/kubexporter_0.7.0_darwin_amd64.tar.gz Oct 7 13:27:56 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2012 ls Oct 7 13:27:57 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2012 ls Oct 7 13:28:07 bastion LinuxCommandsWazuh: User ankur [1332700]: 514 k rollout restart deployment/house-of-click Oct 7 13:28:14 bastion LinuxCommandsWazuh: User ankur [1332700]: 515 k get pods | grep house Oct 7 13:29:44 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2013 tar -xvf kubexporter_0.7.0_darwin_amd64.tar.gz Oct 7 13:29:46 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2014 ls Oct 7 13:30:22 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2015 ./kubexporter -n loki --target /home/ubuntu/loki/ Oct 7 13:30:34 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2016 ls Oct 7 13:30:40 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2017 rm ./) Oct 7 13:30:49 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2018 rm ./* Oct 7 13:30:49 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 13:30:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [1336742]: 536 byobu] Oct 7 13:30:49 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2019 ls Oct 7 13:30:50 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 13:30:59 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2020 https://github.com/bakito/kubexporter/releases/download/v0.7.0/kubexporter_0.7.0_linux_amd64.tar.gz Oct 7 13:31:12 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2021 wget https://github.com/bakito/kubexporter/releases/download/v0.7.0/kubexporter_0.7.0_linux_amd64.tar.gz Oct 7 13:31:16 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2022 ls Oct 7 13:31:23 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2023 tar -xvf kubexporter_0.7.0_linux_amd64.tar.gz Oct 7 13:31:24 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2024 l Oct 7 13:31:56 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2025 ./kubexporter -n loki --target /home/ubuntu/loki/ Oct 7 13:35:34 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2026 ls Oct 7 13:35:43 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [1381363]: 2026 ls] Oct 7 13:35:52 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2027 cd /home/ Oct 7 13:35:52 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2028 ls Oct 7 13:35:55 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2029 cd ubuntu/ Oct 7 13:35:55 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2030 ls Oct 7 13:35:57 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2031 cd l Oct 7 13:36:09 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2032 cd /home/ubuntu/loki/ Oct 7 13:36:10 bastion LinuxCommandsWazuh: User abhijeet [1381363]: 2033 ls Oct 7 13:36:34 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 13:36:34 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1336742]: 536 byobu] Oct 7 13:36:37 bastion LinuxCommandsWazuh: User ashish [1394303]: 552 stern house-of-click tails Oct 7 13:36:42 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2017 cd k8s/ Oct 7 13:36:43 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2018 ls Oct 7 13:36:45 bastion LinuxCommandsWazuh: User ashish [1394303]: 553 clickhouse-ssh Oct 7 13:36:48 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1394303]: 553 clickhouse-ssh ] Oct 7 13:36:49 bastion LinuxCommandsWazuh: User ashish [1336742]: 536 byobu Oct 7 13:36:58 bastion LinuxCommandsWazuh: User ashish [1336742]: 537 kubectl get pds Oct 7 13:37:00 bastion LinuxCommandsWazuh: User ashish [1395076]: 553 clickhouse-ssh Oct 7 13:37:04 bastion LinuxCommandsWazuh: User ashish [1395076]: 554 kubectl get pods Oct 7 13:37:15 bastion LinuxCommandsWazuh: User ashish [1395076]: 555 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash Oct 7 13:37:23 bastion LinuxCommandsWazuh: User ashish [1395076]: 555 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash Oct 7 13:38:01 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [1395076]: 555 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash] Oct 7 13:39:08 bastion LinuxCommandsWazuh: User ankur [1399111]: 507 exit Oct 7 13:39:13 bastion LinuxCommandsWazuh: User ankur [1399111]: 508 psql Oct 7 13:41:01 bastion LinuxCommandsWazuh: User ashish [1395076]: 555 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash Oct 7 13:41:01 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1395076]: 555 kubectl exec -it house-of-click-6857c6b7fc-54gdp bash] Oct 7 13:41:09 bastion LinuxCommandsWazuh: User ashish [1395076]: 556 kubectl get pds Oct 7 13:41:11 bastion LinuxCommandsWazuh: User ashish [1395076]: 557 kubectl get pods Oct 7 13:42:15 bastion LinuxCommandsWazuh: User ashish [1395076]: 557 kubectl get pods Oct 7 13:42:17 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1395076]: 557 kubectl get pods] Oct 7 13:43:13 bastion LinuxCommandsWazuh: User ashish [1395076]: 558 kubectl get pods | grep "house" Oct 7 13:45:54 bastion LinuxCommandsWazuh: User ashish [1395076]: 559 kubectl exec -it house-of-click-5db6bb79b6-595m9 bash Oct 7 13:45:56 bastion LinuxCommandsWazuh: User ashish [1395076]: 559 kubectl exec -it house-of-click-5db6bb79b6-595m9 bash Oct 7 13:46:06 bastion LinuxCommandsWazuh: User ashish [1395076]: 560 byobu Oct 7 13:47:36 bastion LinuxCommandsWazuh: User ashish [1395076]: 561 clickhouse-ssh Oct 7 13:51:56 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2019 kubectl get pods -o wide | grep coo Oct 7 13:52:24 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2019 kubectl get pods -o wide | grep coo Oct 7 13:54:19 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 686 clickhouse-ssh Oct 7 13:54:23 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 687 k get pods Oct 7 13:54:39 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 688 k logs -f cookie-cutter-spot-5b95c48f7c-lt87k Oct 7 13:54:39 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 688 k logs -f cookie-cutter-spot-5b95c48f7c-lt87k Oct 7 13:55:31 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 689 clear Oct 7 13:55:34 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 690 k get pods Oct 7 14:00:29 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2020 kubectl get serivce Oct 7 14:00:34 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2021 kubectl get service Oct 7 14:01:02 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2022 kubectl describe service cookie-cutter Oct 7 14:06:19 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:06:45 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:07:04 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:07:45 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:08:39 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:09:12 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2023 kubectl get pods -o wide | grep coo Oct 7 14:10:06 bastion LinuxCommandsWazuh: User ankur [1450605]: 507 exit Oct 7 14:10:10 bastion LinuxCommandsWazuh: User ankur [1450605]: 508 k get pods Oct 7 14:10:26 bastion LinuxCommandsWazuh: User ankur [1450605]: 509 k get pods | grep cookie Oct 7 14:11:14 bastion LinuxCommandsWazuh: User ankur [1450605]: 510 k logs -f cookie-cutter-spot-78998498c4-m7fjk Oct 7 14:11:16 bastion LinuxCommandsWazuh: User ankur [1450605]: 511 k get pods | grep cookie Oct 7 14:13:19 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 691 clear\ Oct 7 14:13:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [1304182]: 691 clear\] Oct 7 14:13:21 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 692 clear Oct 7 14:14:45 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 693 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT' Oct 7 14:15:29 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 694 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT" Oct 7 14:15:29 bastion LinuxCommandsWazuh: User mohtashim [1304182]: 694 stern cookie-cutter | grep "TABOOLA_CAMPAIGN_REPORT_EXPORT" Oct 7 14:30:15 bastion LinuxCommandsWazuh: User ankur [1309778]: 509 byobu Oct 7 14:30:23 bastion LinuxCommandsWazuh: User ankur [1471028]: 510 exit Oct 7 14:41:32 bastion LinuxCommandsWazuh: User ankur [3507036]: 2006 stern house-of-click | grep Inserted Oct 7 14:59:21 bastion LinuxCommandsWazuh: User ping-pong [1500674]: 209 mongo Oct 7 15:35:04 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2024 ls Oct 7 15:35:19 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2025 kubectl get pods -o wide | grep coo Oct 7 15:40:05 bastion LinuxCommandsWazuh: User ping-pong [1541799]: 209 mongo Oct 7 15:40:06 bastion LinuxCommandsWazuh: User ping-pong [1541799]: 210 ls Oct 7 15:40:54 bastion LinuxCommandsWazuh: User ashish [1542700]: 555 byobu Oct 7 15:47:15 bastion LinuxCommandsWazuh: User ashish [1555364]: 555 byobu Oct 7 15:47:21 bastion LinuxCommandsWazuh: User ashish [1395076]: 561 clickhouse-ssh Oct 7 15:49:50 bastion LinuxCommandsWazuh: User ashish [1395076]: 562 mongo pixel_v1; Oct 7 15:53:35 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 1997 htop -d 2 Oct 7 15:54:20 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 1998 stage Oct 7 15:54:28 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 1999 k get pods | grep exp Oct 7 15:54:32 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 2000 k get pods | grep khar Oct 7 16:00:01 bastion LinuxCommandsWazuh: User ping-pong [1541799]: 211 vim Makefile Oct 7 16:01:32 bastion LinuxCommandsWazuh: User ayush [1593268]: 476 exit Oct 7 16:01:43 bastion LinuxCommandsWazuh: User ayush [1593268]: 477 cool-server Oct 7 16:01:44 bastion LinuxCommandsWazuh: User ayush [1593268]: 477 cool-server Oct 7 16:15:06 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 212 make cookie-cutter-logs Oct 7 16:15:58 bastion LinuxCommandsWazuh: User ashish [1633299]: 555 byobu Oct 7 16:25:57 bastion LinuxCommandsWazuh: User ashish [1395076]: 563 clickhouse-ssh Oct 7 16:25:57 bastion LinuxCommandsWazuh: User ashish [1633299]: 555 byobu Oct 7 16:25:57 bastion LinuxCommandsWazuh: User ashish [1542700]: 555 byobu Oct 7 16:25:59 bastion LinuxCommandsWazuh: User ashish [1633299]: 555 byobu Oct 7 16:26:08 bastion LinuxCommandsWazuh: User ashish [1542700]: 555 byobu Oct 7 16:26:11 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [1542700]: 555 byobu] Oct 7 16:31:08 bastion LinuxCommandsWazuh: User mohtashim [1663681]: 695 exit Oct 7 16:37:32 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 213 mongo Oct 7 16:37:33 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ping-pong [1630292]: 213 mongo] Oct 7 16:37:35 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 214 clear Oct 7 16:39:03 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2025 kubectl get pods -o wide | grep coo Oct 7 16:39:28 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:39:28 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:39:48 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2026 kubectl logs cookie-cutter-spot-799f94bc85-f6w4b -f Oct 7 16:39:58 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 695 exit Oct 7 16:40:53 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:41:48 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 696 stern vortex | grep "6392f3f0-3cdf-403b-9df7-5f577051b46d" Oct 7 16:41:48 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 696 stern vortex | grep "6392f3f0-3cdf-403b-9df7-5f577051b46d" Oct 7 16:41:52 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 697 make cookie-bash Oct 7 16:41:57 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 698 ls Oct 7 16:42:04 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 699 docker ps Oct 7 16:42:07 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 700 clear Oct 7 16:42:10 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 701 k get pods Oct 7 16:45:18 bastion LinuxCommandsWazuh: User ashish [1678029]: 565 clickhouse-ssh Oct 7 16:48:03 bastion LinuxCommandsWazuh: User mohtashim [1681324]: 695 exit Oct 7 16:48:12 bastion LinuxCommandsWazuh: User abhijeet [1314550]: 2027 kubectl get deployment Oct 7 16:48:18 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:49:34 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 1998 ls Oct 7 16:49:37 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 1998 ls Oct 7 16:49:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 1999 cd k8s/ Oct 7 16:49:41 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2000 s Oct 7 16:49:42 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2001 ls Oct 7 16:50:13 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 702 k exec -it cookie-cutter-spot-799f94bc85-c78b9 bash Oct 7 16:50:16 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 703 clear Oct 7 16:50:17 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2002 ./kubexporter -n loki --target ./loki Oct 7 16:50:22 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2003 ls Oct 7 16:50:23 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 704 k get pods | grep "cookie" Oct 7 16:50:24 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2004 cat loki/ Oct 7 16:50:24 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2005 l Oct 7 16:50:27 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2006 cat loki/ Oct 7 16:50:29 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2007 cd loki/ Oct 7 16:50:31 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2008 ls Oct 7 16:50:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2009 cd loki/ Oct 7 16:50:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2010 ls Oct 7 16:50:57 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2011 kubectl get all -n loki Oct 7 16:52:43 bastion LinuxCommandsWazuh: User ankur [1332700]: 516 k rollout restart deployment/house-of-click Oct 7 16:53:44 bastion LinuxCommandsWazuh: User mohtashim [1681324]: 696 mongo pixel_v1 Oct 7 16:53:50 bastion LinuxCommandsWazuh: User mohtashim [1681324]: 697 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 7 16:57:09 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:57:09 bastion LinuxCommandsWazuh: User ping-pong [1630292]: 215 mongo Oct 7 16:57:24 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 216 exit Oct 7 16:57:28 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 217 clear Oct 7 16:57:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2012 lsa\ Oct 7 16:57:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2013 l Oct 7 16:57:50 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2014 kubectl get pod -n loki Oct 7 16:59:36 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2015 kubectl get deployment -n loki Oct 7 16:59:41 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2016 ls Oct 7 16:59:54 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2017 kubectl get deployment -n loki Oct 7 17:01:24 bastion LinuxCommandsWazuh: User ashish [1695556]: 565 clickhouse-ssh Oct 7 17:01:27 bastion LinuxCommandsWazuh: User ashish [1695656]: 565 clickhouse-ssh Oct 7 17:03:09 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2018 kubectl get pods -o wide loki Oct 7 17:03:14 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2019 kubectl get pods -o wide -n loki Oct 7 17:04:02 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2020 kubectl get deamonset Oct 7 17:04:07 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2021 kubectl get demonset Oct 7 17:04:14 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2022 cd .. Oct 7 17:04:15 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2023 ls Oct 7 17:04:16 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2024 cd .. Oct 7 17:04:20 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2025 cd K Oct 7 17:04:23 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2026 cd K8 Oct 7 17:04:27 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2027 ls Oct 7 17:04:29 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2028 cd.. Oct 7 17:04:30 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2029 cd .. Oct 7 17:04:30 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2030 ls Oct 7 17:04:32 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2031 cd K8s-tools/ Oct 7 17:04:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2032 ls Oct 7 17:05:35 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2033 ./kubeScrib.sh Oct 7 17:05:36 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2034 lsc Oct 7 17:05:38 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2035 ls Oct 7 17:05:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2036 cd .. Oct 7 17:05:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2037 ls Oct 7 17:05:42 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2038 cd k8s/ Oct 7 17:05:43 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2039 ls Oct 7 17:05:45 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2039 ls Oct 7 17:05:48 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2040 cd loki/ Oct 7 17:05:49 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2041 ls Oct 7 17:05:51 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2042 cd loki/ Oct 7 17:06:46 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2043 ls Oct 7 17:06:52 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2044 ks Oct 7 17:06:54 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2045 ls Oct 7 17:08:37 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2046 ls | more Oct 7 17:08:56 bastion LinuxCommandsWazuh: User ashish [1695656]: 566 mongo pixel_v1; Oct 7 17:08:57 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [1695656]: 566 mongo pixel_v1;] Oct 7 17:13:24 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2047 vim apps.Deployment.grafana.yaml Oct 7 17:14:04 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2048 kubectl apply -f apps.Deployment.grafana.yaml -n loki Oct 7 17:14:44 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2049 kubectl get pods -o wide Oct 7 17:14:53 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:41 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:43 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:45 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:46 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:47 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:15:50 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:16:01 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:16:02 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2050 kubectl get pods -o wide -n loki Oct 7 17:16:12 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2051 kubectl logs grafana-85d8b9874-bmxkq -n loki -f Oct 7 17:16:17 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2052 kubectl get pods -o wide -n loki Oct 7 17:16:28 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2052 kubectl get pods -o wide -n loki Oct 7 17:16:32 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2053 kubectl logs grafana-85d8b9874-bmxkq -n loki -f Oct 7 17:16:36 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2054 kubectl logs grafana-85d8b9874-bmxkq Oct 7 17:16:58 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2054 kubectl logs grafana-85d8b9874-bmxkq Oct 7 17:17:02 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2055 kubectl get pods -o wide -n loki Oct 7 17:17:20 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2056 kubectl describe pod grafana-85d8b9874-bmxkq Oct 7 17:17:26 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2057 kubectl describe pod grafana-85d8b9874-bmxkq -n loki Oct 7 17:18:00 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2058 kubectl get deployment -n loki Oct 7 17:18:15 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2059 kubectl rollout restart deployment grafana -n loki Oct 7 17:18:23 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2060 kubectl get pods -o wide -n loki Oct 7 17:18:48 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2060 kubectl get pods -o wide -n loki Oct 7 17:19:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2061 kubectl delete pod grafana-769c7b685f-kzgxd Oct 7 17:19:38 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2062 kubectl delete pod grafana-769c7b685f-kzgxd -n loki Oct 7 17:19:42 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2063 kubectl rollout restart deployment grafana -n loki Oct 7 17:19:45 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2064 kubectl get pods -o wide -n loki Oct 7 17:19:48 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2064 kubectl get pods -o wide -n loki Oct 7 17:20:19 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2065 kubectl get pods -o wide -n loki Oct 7 17:20:22 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2065 kubectl get pods -o wide -n loki Oct 7 17:20:33 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2066 ls Oct 7 17:23:05 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2067 vim apps.Deployment.loki-distributor.yaml Oct 7 17:25:13 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2067 vim apps.Deployment.loki-distributor.yaml Oct 7 17:25:14 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2068 ls Oct 7 17:25:24 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2068 ls Oct 7 17:26:38 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2069 cp apps.Deployment.loki-distributor.yaml ../distributor.yaml Oct 7 17:27:40 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2070 vim apps.Deployment.loki-distributor.yaml Oct 7 17:28:05 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2071 kubectl apply -f apps.Deployment.loki-distributor.yaml -n loki Oct 7 17:28:13 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2072 kubectl get pods -n loki Oct 7 17:28:23 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2073 kubectl get pods -n loki -o wide Oct 7 17:28:42 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2073 kubectl get pods -n loki -o wide Oct 7 17:28:53 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2074 kubectl get pods -n loki -o widew Oct 7 17:28:56 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2075 kubectl get pods -n loki -o wide Oct 7 17:30:16 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 705 k exec -it cookie-cutter-common-task-55bd5f59d8-ds5f5 bash Oct 7 17:30:16 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2076 vim apps.Deployment.loki-gateway.yaml Oct 7 17:30:19 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 706 clear Oct 7 17:30:23 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 707 k get pods Oct 7 17:30:34 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2077 kubectl apply -f apps.Deployment.loki-gateway.yaml -n loki Oct 7 17:30:37 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 218 mongo Oct 7 17:30:37 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [1691595]: 218 mongo] Oct 7 17:30:38 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2078 kubectl get pods -n loki -o wide Oct 7 17:30:52 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2078 kubectl get pods -n loki -o wide Oct 7 17:30:56 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2078 kubectl get pods -n loki -o wide Oct 7 17:31:01 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2078 kubectl get pods -n loki -o wide Oct 7 17:31:53 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2078 kubectl get pods -n loki -o wide Oct 7 17:32:15 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 218 mongo Oct 7 17:32:15 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ping-pong [1691595]: 218 mongo] Oct 7 17:33:30 bastion LinuxCommandsWazuh: User abhijeet [1682984]: 2079 vim apps.Deployment.loki-query-frontend.yaml Oct 7 17:33:58 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 218 mongo Oct 7 17:33:58 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 218 mongo Oct 7 17:53:15 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 218 mongo Oct 7 18:00:59 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 1998 vim apps.Deployment.loki-query-frontend.yaml Oct 7 18:01:24 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 1999 ls Oct 7 18:01:26 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 1999 ls Oct 7 18:01:29 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2000 cd k8s/ Oct 7 18:01:29 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2001 ls Oct 7 18:01:31 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2002 cd loki/ Oct 7 18:01:31 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2003 ls Oct 7 18:01:34 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2004 cd loki/ Oct 7 18:01:35 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2005 ls Oct 7 18:01:36 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2005 ls Oct 7 18:02:10 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2006 kubectl get pods -n loki -o wide Oct 7 18:02:42 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2007 vim apps.Deployment.loki-query-frontend.yaml Oct 7 18:03:06 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2008 kubectl apply -f apps.Deployment.loki-query-frontend.yaml -n loki Oct 7 18:03:46 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2009 kubectl get pods -n loki -o wide --watch Oct 7 18:04:31 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2010 kubectl get pods -n loki -o wide Oct 7 18:05:09 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2011 vim apps.Deployment.prometheus-kube-state-metrics.yaml Oct 7 18:06:38 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2011 vim apps.Deployment.prometheus-kube-state-metrics.yaml Oct 7 18:06:51 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 708 stern vortex Oct 7 18:06:55 bastion LinuxCommandsWazuh: User mohtashim [1672749]: 709 clear Oct 7 18:07:41 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2012 kubectl apply -f apps.Deployment.prometheus-kube-state-metrics.yaml -n loki Oct 7 18:07:44 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2013 kubectl get pods -n loki -o wide Oct 7 18:07:48 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2013 kubectl get pods -n loki -o wide Oct 7 18:07:52 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2013 kubectl get pods -n loki -o wide Oct 7 18:07:56 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2013 kubectl get pods -n loki -o wide Oct 7 18:09:40 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2014 vim apps.Deployment.prometheus-prometheus-pushgateway.yaml Oct 7 18:09:55 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2015 kubectl apply -f apps.Deployment.prometheus-prometheus-pushgateway.yaml -n loki Oct 7 18:10:00 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2016 kubectl get pods -n loki -o wide Oct 7 18:10:04 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2016 kubectl get pods -n loki -o wide Oct 7 18:10:07 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2016 kubectl get pods -n loki -o wide Oct 7 18:10:13 bastion LinuxCommandsWazuh: message repeated 5 times: [ User abhijeet [1761623]: 2016 kubectl get pods -n loki -o wide ] Oct 7 18:10:50 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2017 vim apps.Deployment.prometheus-server.yaml Oct 7 18:11:19 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2018 kubectl apply -f apps.Deployment.prometheus-server.yaml -n loki Oct 7 18:11:22 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2019 kubectl get pods -n loki -o wide Oct 7 18:12:08 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2020 kubectl get daemonset -n loki Oct 7 18:13:14 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2020 kubectl get daemonset -n loki Oct 7 18:13:38 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2021 ls | grep loki Oct 7 18:14:06 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2022 kubectl get all -n loki Oct 7 18:15:33 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2023 ls | grep stat Oct 7 18:20:46 bastion LinuxCommandsWazuh: User ping-pong [1691595]: 219 clear Oct 7 18:21:21 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2024 ls | grep prom Oct 7 18:22:00 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2025 kubectl get pods -n loki Oct 7 18:22:03 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2026 kubectl get pods -n loki -o wide Oct 7 18:23:14 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2027 ls Oct 7 18:23:26 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2028 ls | gerp state Oct 7 18:23:32 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2029 ls | grep state Oct 7 18:23:38 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2030 ls | grep stateful Oct 7 18:23:41 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2031 ls | grep set Oct 7 18:23:48 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2032 ls | grep loki Oct 7 18:26:01 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2033 vim apps.StatefulSet.loki-compactor.yaml Oct 7 18:26:18 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2034 kubectl apply -f apps.StatefulSet.loki-compactor.yaml -n loki Oct 7 18:26:22 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2035 kubectl get pods -n loki -o wide Oct 7 18:26:56 bastion LinuxCommandsWazuh: message repeated 8 times: [ User abhijeet [1761623]: 2035 kubectl get pods -n loki -o wide] Oct 7 18:27:33 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2036 vim apps.StatefulSet.loki-ingester.yaml Oct 7 18:27:44 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2037 kubectl apply -f apps.StatefulSet.loki-ingester.yaml -n loki Oct 7 18:27:49 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2038 kubectl get pods -n loki -o wide Oct 7 18:29:44 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2039 kubectl get pods -n loki -o wide --watch Oct 7 18:29:50 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2040 kubectl get hpa Oct 7 18:30:08 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2041 kubectl get pods | grep cookie Oct 7 18:30:21 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2042 kubectl get pods -o wide| grep cookie Oct 7 18:30:40 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2042 kubectl get pods -o wide| grep cookie Oct 7 18:30:50 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2043 kubectl get hpa Oct 7 18:31:29 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2044 kubectl get pods -o wide| grep cookie Oct 7 18:32:16 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2044 kubectl get pods -o wide| grep cookie Oct 7 18:33:30 bastion LinuxCommandsWazuh: User ankur [1765524]: 528 byobu Oct 7 18:33:59 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2044 kubectl get pods -o wide| grep cookie Oct 7 18:34:46 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2045 ls Oct 7 18:34:57 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2046 kubectl get pods -o wide -n loki Oct 7 18:36:04 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2047 vim apps.StatefulSet.loki-querier.yaml Oct 7 18:36:18 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2048 kubectl apply -f apps.StatefulSet.loki-querier.yaml -n loki Oct 7 18:36:21 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2049 vim apps.StatefulSet.loki-querier.yaml Oct 7 18:36:24 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2050 kubectl get pods -o wide -n loki Oct 7 18:37:11 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2051 vim apps.StatefulSet.loki-querier.yaml Oct 7 18:37:15 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2052 kubectl apply -f apps.StatefulSet.loki-querier.yaml -n loki Oct 7 18:37:20 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2053 kubectl get pods -o wide -n loki Oct 7 18:37:26 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2053 kubectl get pods -o wide -n loki Oct 7 18:39:00 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2054 kubectl get pods -o wide -n loki --watch Oct 7 18:39:09 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2055 kubectl get pods -o wide -n loki Oct 7 18:39:37 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2056 ls | grep alert Oct 7 18:40:16 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2057 vim apps.StatefulSet.prometheus-alertmanager.yaml Oct 7 18:40:34 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2058 kubectl apply -f apps.StatefulSet.prometheus-alertmanager.yaml -n loki Oct 7 18:40:37 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2059 kubectl get pods -o wide -n loki Oct 7 18:40:44 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2059 kubectl get pods -o wide -n loki Oct 7 18:40:46 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2059 kubectl get pods -o wide -n loki Oct 7 18:40:47 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2060 kubectl get pods -o wide -n lokiw Oct 7 18:40:49 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2061 kubectl get pods -o wide -n loki Oct 7 18:40:51 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2061 kubectl get pods -o wide -n loki Oct 7 18:41:18 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2062 kubectl get pods -o wide -n loki --watch Oct 7 18:42:07 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2063 vim apps.DaemonSet.promtail.yaml Oct 7 18:42:11 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2064 ls Oct 7 18:42:13 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2064 ls Oct 7 18:42:26 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2065 cat Event.prometheus-prometheus-node-exporter-hg2vc.186c30694f665fa8.yaml Oct 7 18:42:33 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 2001 internal Oct 7 18:42:33 bastion LinuxCommandsWazuh: User shamailtayyab [1571084]: 2001 internal Oct 7 18:42:35 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2066 kubectl get pods -o wide -n loki Oct 7 18:42:56 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2067 kubectl get node Oct 7 18:44:29 bastion LinuxCommandsWazuh: User ping-pong [1777181]: 220 exit Oct 7 18:45:12 bastion LinuxCommandsWazuh: User ping-pong [1777181]: 221 make cookie-cutter-logs Oct 7 18:45:13 bastion LinuxCommandsWazuh: User ping-pong [1777181]: 221 make cookie-cutter-logs Oct 7 18:48:27 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 221 make cookie-cutter-logs Oct 7 18:48:34 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2068 kubectl get node --watch Oct 7 18:48:37 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2069 kubectl get node Oct 7 18:49:05 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 222 vim Makefile Oct 7 18:49:08 bastion LinuxCommandsWazuh: User abhijeet [1761623]: 2069 kubectl get node Oct 7 18:49:33 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 223 kubectl logs -f deployment.apps/cookie-cutter | grep kubectl logs -f deployment.apps/cookie-cutter Oct 7 18:49:48 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 223 kubectl logs -f deployment.apps/cookie-cutter | grep kubectl logs -f deployment.apps/cookie-cutter Oct 7 18:50:28 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 224 vim Makefile Oct 7 18:51:09 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 224 vim Makefile Oct 7 18:51:21 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 225 kubectl logs -f service/cookie-cutter Oct 7 18:52:03 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 226 kubectl logs -f deployment.apps/cookie-cutter | grep LUCIRA DEBUG FOR WEBENGAGE STEP_20: ORG_ID: 1bb4d9ae-f94b-4d25-8707-60951061c1ff Oct 7 18:52:15 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 227 kubectl logs -f deployment.apps/cookie-cutter Oct 7 18:52:20 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 228 kubectl logs -f service/cookie-cutter Oct 7 18:52:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ping-pong [1781689]: 228 kubectl logs -f service/cookie-cutter] Oct 7 18:52:30 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 229 kubectl logs -f service/cookie-cutter | grep LUCIRA DEBUG FOR WEBENGAGE STEP_20: ORG_ID: 1bb4d9ae-f94b-4d25-8707-60951061c1ff Oct 7 18:54:54 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 230 kubectl logs -f service/cookie-cutter | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_20: ORG_ID: 1bb4d9ae-f94b-4d25-8707-60951061c1ff" Oct 7 18:55:46 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 231 kubectl logs -f service/cookie-cutter | grep -i "lucira debug for webengage step_20: org_id: 1bb4d9ae-f94b-4d25-8707-60951061c1ff" Oct 7 18:56:56 bastion LinuxCommandsWazuh: User ping-pong [1781689]: 232 kubectl get pods -o name | while read pod; do echo "=== $pod ==="; kubectl logs "$pod" | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_20: ORG_ID: 1bb4d9ae-f94b-4d25-8707-60951061c1ff"; done Oct 7 19:30:37 bastion LinuxCommandsWazuh: User abhijeet [1826263]: 1997 kubectl get node Oct 7 19:30:43 bastion LinuxCommandsWazuh: User abhijeet [1826263]: 1997 kubectl get node Oct 7 21:39:43 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 1997 kubectl get node Oct 7 21:39:54 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 1998 kubectl get pods | grep rewa Oct 7 21:39:58 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 1998 kubectl get pods | grep rewa Oct 7 21:40:42 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 1998 kubectl get pods | grep rewa Oct 7 21:40:51 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 1999 kubectl get pods Oct 7 21:41:02 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 2000 kubectl get pods -o wide | grep rewa Oct 7 21:47:18 bastion LinuxCommandsWazuh: User abhijeet [1867852]: 2001 kubectl get pods -o wide | grep for Oct 7 23:15:53 bastion LinuxCommandsWazuh: User ankur [1876014]: 528 byobu Oct 7 23:17:53 bastion LinuxCommandsWazuh: User ankur [1876014]: 528 byobu