Oct 8 08:54:08 bastion LinuxCommandsWazuh: User ankur [1923698]: 529 exit Oct 8 09:16:44 bastion LinuxCommandsWazuh: User ankur [1332700]: 516 k rollout restart deployment/house-of-click Oct 8 09:16:47 bastion LinuxCommandsWazuh: User ankur [1332700]: 517 k get pods | grep house Oct 8 09:24:02 bastion LinuxCommandsWazuh: User ankur [1953438]: 529 exit Oct 8 09:30:14 bastion LinuxCommandsWazuh: User ankur [1923698]: 530 byobu Oct 8 09:49:58 bastion LinuxCommandsWazuh: User ankur [1961750]: 531 exit Oct 8 09:51:38 bastion LinuxCommandsWazuh: User ankur [1961750]: 532 byobu Oct 8 10:07:56 bastion LinuxCommandsWazuh: User ankur [1965052]: 533 exit Oct 8 10:08:11 bastion LinuxCommandsWazuh: User ankur [1965052]: 534 byobu Oct 8 11:36:15 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 1997 kubectl get pods -o wide | grep for Oct 8 11:36:16 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 1998 ls Oct 8 11:36:29 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 1999 kubectl get pods | grep cool-server.ovpn Oct 8 11:36:34 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2000 kubectl get pods | grep coo Oct 8 11:36:49 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2001 kubectl get pods -o wide | grep coo Oct 8 11:37:11 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2002 kubectl top node Oct 8 11:48:08 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2003 kubectl get pods -o wide | grep url Oct 8 11:48:37 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2004 kubectl get pods -n loki Oct 8 11:50:59 bastion LinuxCommandsWazuh: User aman [1973107]: 290 exit Oct 8 11:52:26 bastion LinuxCommandsWazuh: User aman [1973107]: 291 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2 Oct 8 11:52:27 bastion LinuxCommandsWazuh: User aman [1973107]: 292 clear Oct 8 11:53:45 bastion LinuxCommandsWazuh: User ashish [1973945]: 567 byobu Oct 8 11:55:46 bastion LinuxCommandsWazuh: User ashish [1976036]: 567 byobu Oct 8 11:55:51 bastion LinuxCommandsWazuh: User ashish [1695656]: 566 mongo pixel_v1; Oct 8 12:00:18 bastion LinuxCommandsWazuh: User ankur [1984141]: 535 exit Oct 8 12:00:33 bastion LinuxCommandsWazuh: User ankur [1953438]: 530 clickhouse-ssh Oct 8 12:01:18 bastion LinuxCommandsWazuh: User ankur [1984141]: 536 byobu Oct 8 12:25:56 bastion LinuxCommandsWazuh: User ashish [2007824]: 567 byobu Oct 8 12:27:59 bastion LinuxCommandsWazuh: User ashish [1695656]: 567 clickhouse-ssh Oct 8 12:30:26 bastion LinuxCommandsWazuh: User ashish [1695656]: 568 mongo pixel_v1; Oct 8 12:30:27 bastion LinuxCommandsWazuh: User ashish [2007824]: 567 byobu Oct 8 12:30:30 bastion LinuxCommandsWazuh: User ashish [2007824]: 567 byobu Oct 8 12:30:34 bastion LinuxCommandsWazuh: User ashish [2012278]: 570 mongo pixel_v1; Oct 8 12:30:40 bastion LinuxCommandsWazuh: User ashish [2012334]: 570 mongo pixel_v1; Oct 8 12:30:52 bastion LinuxCommandsWazuh: User ashish [2012334]: 570 mongo pixel_v1; Oct 8 12:33:53 bastion LinuxCommandsWazuh: User ashish [2012334]: 571 clickhouse-ssh Oct 8 12:33:54 bastion LinuxCommandsWazuh: User ashish [2012278]: 571 byobu Oct 8 12:33:57 bastion LinuxCommandsWazuh: User ashish [2012278]: 572 mongo pixel_v1; Oct 8 12:33:58 bastion LinuxCommandsWazuh: User ashish [2015486]: 571 clickhouse-ssh Oct 8 12:41:40 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 1997 kubectl get pods -o wide | grep for Oct 8 12:41:41 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 1998 ls Oct 8 12:41:42 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 1998 ls Oct 8 12:41:44 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 1999 cd psql/ Oct 8 12:41:45 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2000 lds Oct 8 12:41:46 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2001 ls Oct 8 12:42:41 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 1997 kubectl get pods -o wide | grep for Oct 8 12:42:42 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 1998 ls Oct 8 12:45:41 bastion LinuxCommandsWazuh: User ankur [2027626]: 539 exit Oct 8 12:52:34 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2002 vim app.py Oct 8 12:53:02 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 1999 psql Oct 8 12:53:05 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 1999 psql Oct 8 12:53:06 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 2000 ls Oct 8 12:53:13 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 2001 cd k8s/ Oct 8 12:53:15 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 2002 lsc Oct 8 12:53:15 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 2002 lsc Oct 8 12:53:26 bastion LinuxCommandsWazuh: User abhijeet [2024693]: 2003 kubectl top node | grep app Oct 8 12:53:50 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2003 cd .. Oct 8 12:53:50 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2004 ls Oct 8 12:53:55 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2005 klsc Oct 8 12:53:56 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2006 ls Oct 8 12:53:57 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2006 ls Oct 8 12:57:06 bastion LinuxCommandsWazuh: User ankur [2027626]: 540 byobu Oct 8 12:58:02 bastion LinuxCommandsWazuh: User mohtashim [2051399]: 718 clear Oct 8 12:58:16 bastion LinuxCommandsWazuh: User mohtashim [2051399]: 719 make cookie-bash Oct 8 12:58:35 bastion LinuxCommandsWazuh: User mohtashim [2051399]: 720 clear Oct 8 12:58:41 bastion LinuxCommandsWazuh: User mohtashim [2051399]: 721 k get pods Oct 8 13:04:22 bastion LinuxCommandsWazuh: User mohtashim [2057560]: 718 clear Oct 8 13:05:08 bastion LinuxCommandsWazuh: User mohtashim [2057560]: 719 redis-cli Oct 8 13:05:10 bastion LinuxCommandsWazuh: User mohtashim [2057560]: 720 clear Oct 8 13:05:15 bastion LinuxCommandsWazuh: User mohtashim [3199051]: 13 mongo pixel_v1 Oct 8 13:08:16 bastion LinuxCommandsWazuh: User mohtashim [3182267]: 11 redis-cli Oct 8 13:08:18 bastion LinuxCommandsWazuh: User mohtashim [3182267]: 12 make redis Oct 8 13:08:24 bastion LinuxCommandsWazuh: User mohtashim [3182267]: 13 cat Makefile Oct 8 13:08:39 bastion LinuxCommandsWazuh: User mohtashim [3182267]: 14 clear Oct 8 13:08:49 bastion LinuxCommandsWazuh: User mohtashim [3182267]: 15 redis-cli Oct 8 13:08:50 bastion LinuxCommandsWazuh: User mohtashim [2057560]: 721 byobu Oct 8 13:08:52 bastion LinuxCommandsWazuh: User mohtashim [2057560]: 722 clear Oct 8 13:12:02 bastion LinuxCommandsWazuh: User ankur [2069045]: 541 exit Oct 8 13:12:07 bastion LinuxCommandsWazuh: User ankur [2069045]: 542 byobu Oct 8 13:15:07 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2007 kubectl get pods -o wide | grep url Oct 8 13:15:45 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2008 kubectl get pods -o wide | grep urlw Oct 8 13:15:48 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2009 kubectl get pods -o wide | grep url Oct 8 13:15:55 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2009 kubectl get pods -o wide | grep url Oct 8 13:16:00 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2009 kubectl get pods -o wide | grep url Oct 8 13:16:14 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2010 kubectl get service Oct 8 13:16:56 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2011 kubectl edit service urlbird Oct 8 13:17:04 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2012 kubectl get pods -o wide | grep url Oct 8 13:17:13 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2013 kubectl logs urlbird-57fc8c8597-hpckt Oct 8 13:17:16 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2014 kubectl logs urlbird-57fc8c8597-hpckt -f\ Oct 8 13:17:20 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2014 kubectl logs urlbird-57fc8c8597-hpckt -f\ Oct 8 13:17:24 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2015 kubectl logs urlbird-57fc8c8597-hpckt -f Oct 8 13:17:32 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2016 kubectl get pods -o wide | grep url Oct 8 13:26:38 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2017 kubectl get pods -o wide --watch | grep url Oct 8 13:27:01 bastion LinuxCommandsWazuh: User mohtashim [2085130]: 744 k exec -it cookie-cutter-common-task-5f65f8645-pwzq5 bash Oct 8 13:28:14 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2005 kubectl get pods -n loki Oct 8 13:28:24 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2006 kubectl logs loki-ingester-0 -f Oct 8 13:28:29 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2007 kubectl logs loki-ingester-0 -n loki Oct 8 13:28:48 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2008 kubectl logs loki-ingester-0 -n loki -f Oct 8 13:28:56 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2009 kubectl get pods -n loki Oct 8 13:29:12 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2010 kubectl logs loki-query-frontend-67d9898bcc-jsfhm -n loki Oct 8 13:29:16 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2011 kubectl logs loki-query-frontend-67d9898bcc-jsfhm -n loki -f Oct 8 13:30:11 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2012 kubectl top pods -n loki Oct 8 13:30:52 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2013 kubectl get pods -n loki Oct 8 13:32:36 bastion LinuxCommandsWazuh: User mohtashim [2085130]: 745 redis-cli Oct 8 13:32:38 bastion LinuxCommandsWazuh: User mohtashim [2085130]: 746 clear Oct 8 13:34:49 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2017 kubectl get pods -o wide --watch | grep url Oct 8 13:34:55 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2018 kubectl get pods -o wide | grep url Oct 8 13:35:25 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2019 kubectl logs urlbird-jobs-spot-ondemand-7b76555bf9-qx78x -f Oct 8 13:35:39 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2020 kubectl logs urlbird-jobs-spot-ondemand-7b76555bf9-qx78x --tail 100 -f Oct 8 13:35:41 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2021 ls Oct 8 13:35:58 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2022 kubectl get deployment -n nitrox-production Oct 8 13:36:23 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2023 kubectl get pods -o wide | grep url Oct 8 13:36:42 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2024 kubectl logs urlbird-57fc8c8597-vgl8m --tail 100 -f Oct 8 13:36:44 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2025 kubectl get pods -o wide | grep url \ Oct 8 13:36:46 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2026 kubectl get pods -o wide | grep url Oct 8 13:37:05 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2027 kubectl logs urlbird-spot-ondemand-7ccb5888d9-8smxc -tail -100 -f Oct 8 13:37:13 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2028 kubectl logs urlbird-spot-ondemand-7ccb5888d9-8smxc -tail 100 -f Oct 8 13:37:21 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2029 kubectl logs urlbird-spot-ondemand-7ccb5888d9-8smxc --tail 100 -f Oct 8 13:37:27 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2030 kubectl get pods -o wide | grep url Oct 8 13:37:43 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2031 kubectl get deployment -n nitrox-production Oct 8 13:38:29 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2032 kubectl delete deployment urlbird-jobs-spot-ondemand -n nitrox-production Oct 8 13:38:33 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2033 kubectl delete deployment urlbird-spot-ondemand -n nitrox-production Oct 8 13:38:34 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 744 k exec -it cookie-cutter-common-task-5f65f8645-pwzq5 bash Oct 8 13:38:38 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2034 kubectl get deployment -n nitrox-production Oct 8 13:38:43 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 745 make cookie-bash Oct 8 13:38:44 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2035 kubectl get pods -o wide | grep url Oct 8 13:39:01 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2035 kubectl get pods -o wide | grep url Oct 8 13:39:06 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 746 k get pods Oct 8 13:39:12 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2036 kubectl get hpa Oct 8 13:39:27 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2037 kubectl delete hpa urlbird-jobs-spot-ondemand Oct 8 13:39:37 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2038 kubectl delete hpa urlbird-spot-ondemand Oct 8 13:39:40 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2039 kubectl get hpa Oct 8 13:39:53 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2040 kubectl get pods -o wide | grep url \ Oct 8 13:39:54 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2041 kubectl get pods -o wide | grep url Oct 8 13:40:23 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2042 kubectl get deployment -n nitrox-production Oct 8 13:43:22 bastion LinuxCommandsWazuh: User mohtashim [2101987]: 744 k exec -it cookie-cutter-common-task-5f65f8645-pwzq5 bash Oct 8 13:44:29 bastion LinuxCommandsWazuh: User mohtashim [2101987]: 745 stern vortex Oct 8 13:44:30 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [2101987]: 745 stern vortex] Oct 8 13:44:33 bastion LinuxCommandsWazuh: User mohtashim [2101987]: 746 k get hpa Oct 8 13:45:07 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2043 kubectl get hpa Oct 8 13:51:13 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2044 kubectl get pods -o wide | grep coo Oct 8 13:51:42 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2045 kubectl get hpa Oct 8 13:51:52 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2046 kubectl get pods -o wide | grep coo Oct 8 13:52:04 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2046 kubectl get pods -o wide | grep coo Oct 8 13:52:17 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2046 kubectl get pods -o wide | grep coo Oct 8 13:52:51 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2047 kubectl edit service cookie-cutter Oct 8 13:52:54 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2048 kubectl get pods -o wide | grep coo Oct 8 13:53:11 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2049 kubectl logs cookie-cutter-7595cf78df-kzvp8 -f Oct 8 13:53:29 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2050 kubectl get pods -o wide --watch | gerp coo Oct 8 13:56:04 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2051 kubectl get pods -o wide --watch | grep coo Oct 8 13:56:08 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2052 kubectl get hpa Oct 8 13:56:37 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2052 kubectl get hpa Oct 8 13:56:53 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2052 kubectl get hpa Oct 8 13:57:42 bastion LinuxCommandsWazuh: User ankur [2113359]: 543 exit Oct 8 14:03:25 bastion LinuxCommandsWazuh: User ankur [1332700]: 518 stern house-of-click Oct 8 14:03:29 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1332700]: 518 stern house-of-click] Oct 8 14:03:39 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2053 kubectl get hpa --watch Oct 8 14:03:48 bastion LinuxCommandsWazuh: User ankur [1332700]: 519 stern house-of-click | grep "EVENTS ----->" Oct 8 14:03:53 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2054 kubectl get pods -o wide | grep coo Oct 8 14:04:01 bastion LinuxCommandsWazuh: User ankur [1332700]: 519 stern house-of-click | grep "EVENTS ----->" Oct 8 14:04:06 bastion LinuxCommandsWazuh: User ankur [1332700]: 520 stern house-of-click | grep "QUERY IS" Oct 8 14:04:26 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2055 kubectl get deployment -n nitrox-production Oct 8 14:07:16 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2014 kubectl get pods -n loki | grep coo Oct 8 14:07:46 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2015 kubectl get deployment -n loki Oct 8 14:07:52 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 747 k exec -it vortex-5c48bf4c8d-tgjkd bash Oct 8 14:07:55 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2016 kubectl get deployment Oct 8 14:08:17 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2017 kubectl get hpa Oct 8 14:08:20 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 748 k get pods | grep "vortex" Oct 8 14:08:43 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2018 kubectl delete hpa cookie-cutter-queues-spot -n nitrox-production Oct 8 14:08:53 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2019 kubectl delete hpa cookie-cutter-spot -n nitrox-production Oct 8 14:09:02 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2020 kubectl get deployment Oct 8 14:09:38 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2021 kubectl delete deployment cookie-cutter-queues-spot -n nitrox-production Oct 8 14:09:45 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2022 kubectl delete deployment cookie-cutter-spot -n nitrox-production Oct 8 14:09:50 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2023 kubectl get pods -n loki | grep coo Oct 8 14:10:01 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2024 kubectl get pods | grep coo Oct 8 14:10:06 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2025 kubectl get pods | grep coo Oct 8 14:10:25 bastion LinuxCommandsWazuh: User ping-pong [2126518]: 232 kubectl get pods -o name | while read pod; do echo "=== $pod ==="; kubectl logs "$pod" | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_20: ORG_ID: 1bb4d9ae-f94b-4d25-8707-60951061c1ff"; done Oct 8 14:13:14 bastion LinuxCommandsWazuh: User abhijeet [2129233]: 1997 exit Oct 8 14:13:22 bastion LinuxCommandsWazuh: User abhijeet [2129233]: 1998 cool-server Oct 8 14:13:30 bastion LinuxCommandsWazuh: User ubuntu [2129527]: 1999 mongo-ssh Oct 8 14:13:31 bastion LinuxCommandsWazuh: User ubuntu [2129527]: 2000 cd Oct 8 14:13:39 bastion LinuxCommandsWazuh: User ubuntu [2129527]: 2001 cool-server Oct 8 14:19:10 bastion LinuxCommandsWazuh: User ubuntu [2129527]: 2002 EXIT Oct 8 14:19:15 bastion LinuxCommandsWazuh: User abhijeet [2129233]: 1999 sudo su ubuntu Oct 8 14:19:33 bastion LinuxCommandsWazuh: User abhijeet [2129233]: 2000 internal-server Oct 8 14:19:36 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 1999 exit Oct 8 14:19:57 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2000 ssh nitro@10.8.0.5 Oct 8 14:20:01 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2001 ssh nitro@10.8.0.5 --v Oct 8 14:20:15 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2002 ssh nitro@10.8.0.5 -vv Oct 8 14:20:35 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2003 ssh nitro@10.8.0.5 -P 12222 Oct 8 14:20:39 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2004 ssh nitro@10.8.0.5 -P 12222 -vv Oct 8 14:20:42 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2005 ssh nitro@10.8.0.5 -P 12222 -v Oct 8 14:20:48 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2006 ssh nitro@10.8.0.5 -P 1222 -v Oct 8 14:20:57 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2007 ssh nitro@10.8.0.5 -p 1222 -v Oct 8 14:21:03 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2008 ssh nitro@10.8.0.5 -p 12222 -v Oct 8 14:21:06 bastion LinuxCommandsWazuh: User ubuntu [2135889]: 2009 ls Oct 8 14:21:21 bastion LinuxCommandsWazuh: User abhijeet [2129233]: 2001 sudo su ubuntu Oct 8 14:23:49 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 1997 exit Oct 8 14:24:05 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 1998 kubectl get pods -o wide | grep coo Oct 8 14:24:18 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 1998 kubectl get pods -o wide | grep coo Oct 8 14:25:15 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 1998 kubectl get pods -o wide | grep coo Oct 8 14:25:34 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 1999 kubectl logs cookie-cutter-fffbb96fd-vgjvs Oct 8 14:25:54 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2000 kubectl logs cookie-cutter-fffbb96fd-vgjvs -f Oct 8 14:26:04 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2001 kubectl get pods | grep coo Oct 8 14:26:41 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2002 kubectl edit service cookie-cutter Oct 8 14:26:46 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2003 kubectl logs cookie-cutter-fffbb96fd-vgjvs -f Oct 8 14:27:06 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2004 kubectl get pods | grep coo Oct 8 14:27:09 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 749 k exec -it vortex-5c48bf4c8d-7hq5n bash Oct 8 14:27:18 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2004 kubectl get pods | grep coo Oct 8 14:27:35 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2005 kubectl logs cookie-cutter-fffbb96fd-2hnxt Oct 8 14:28:09 bastion LinuxCommandsWazuh: User abhijeet [2140147]: 2006 kubectl logs cookie-cutter-fffbb96fd-2hnxt -f Oct 8 14:29:09 bastion LinuxCommandsWazuh: User ping-pong [2146066]: 233 mongo Oct 8 14:30:06 bastion LinuxCommandsWazuh: User ayush [2147051]: 477 cool-server Oct 8 14:30:26 bastion LinuxCommandsWazuh: User mohtashim [2085130]: 747 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 8 14:30:27 bastion LinuxCommandsWazuh: User mohtashim [2085130]: 748 clear Oct 8 14:30:41 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 750 clear Oct 8 14:31:43 bastion LinuxCommandsWazuh: User ping-pong [2146066]: 233 mongo Oct 8 14:34:05 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2056 kubectl get pods -o wide | grep coo Oct 8 14:34:56 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2057 kubectl get pods -o wide --watch | grep coo Oct 8 14:35:02 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2058 kubectl get pods -o wide| grep coo Oct 8 14:36:08 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2059 kubectl logs cookie-cutter-79f797df48-ggbbs -f Oct 8 14:38:47 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2060 kubectl get deployment Oct 8 14:39:14 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2061 kubectl get pods -o wide | grep coo Oct 8 14:40:53 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 751 redis-cli Oct 8 14:41:05 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 751 redis-cli Oct 8 14:41:06 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 752 clear Oct 8 14:41:40 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 753 redis-cli Oct 8 14:41:42 bastion LinuxCommandsWazuh: User mohtashim [2158745]: 744 k exec -it cookie-cutter-common-task-5f65f8645-pwzq5 bash Oct 8 14:43:14 bastion LinuxCommandsWazuh: User mohtashim [2158745]: 745 redis-cli Oct 8 14:43:47 bastion LinuxCommandsWazuh: User mohtashim [2158745]: 745 redis-cli Oct 8 14:43:49 bastion LinuxCommandsWazuh: User mohtashim [2097109]: 754 byobu Oct 8 14:44:25 bastion LinuxCommandsWazuh: User ankur [3771893]: 1996 clickhouse-ssh Oct 8 14:45:22 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2062 kubectl get hpa Oct 8 14:49:50 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2063 kubectl get pods | grep data Oct 8 14:50:37 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2064 kubectl get pods --watch | grep data Oct 8 14:50:58 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2065 kubectl get pods -o wide --watch | grep data Oct 8 14:51:04 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2066 kubectl get pods -o wide | grep data Oct 8 14:51:14 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2066 kubectl get pods -o wide | grep data Oct 8 14:51:19 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2067 kubectl get pods -o wide | grep dat Oct 8 14:51:36 bastion LinuxCommandsWazuh: User abhijeet [1972064]: 2026 kubectl get pods --watch | grep coo Oct 8 14:51:54 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2067 kubectl get pods -o wide | grep dat Oct 8 14:52:06 bastion LinuxCommandsWazuh: User ashish [2171561]: 574 byobu Oct 8 14:52:07 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2067 kubectl get pods -o wide | grep dat Oct 8 14:52:18 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2068 kubectl logs datapulse-web-8485754df7-wx6bv -f Oct 8 14:52:20 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2069 kubectl get pods -o wide | grep dat Oct 8 14:52:53 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2070 kubectl get pods -o wide --watch | grep dat Oct 8 14:53:01 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2071 kubectl get hpa Oct 8 14:53:16 bastion LinuxCommandsWazuh: User ashish [2015486]: 572 mongo pixel_v1; Oct 8 14:53:17 bastion LinuxCommandsWazuh: User ashish [2171561]: 574 byobu Oct 8 14:53:20 bastion LinuxCommandsWazuh: User ashish [2174105]: 575 mongo pixel_v1; Oct 8 14:53:26 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2072 kubectl get hap datapulse-web -o yaml Oct 8 14:53:46 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2073 kubectl get pods -o wide | grep dat Oct 8 14:53:55 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2073 kubectl get pods -o wide | grep dat Oct 8 14:53:58 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2073 kubectl get pods -o wide | grep dat Oct 8 14:54:03 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2073 kubectl get pods -o wide | grep dat Oct 8 14:54:20 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2073 kubectl get pods -o wide | grep dat Oct 8 14:55:32 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2074 kubectl logs datapulse-web-8485754df7-bhgp4 -f Oct 8 14:55:43 bastion LinuxCommandsWazuh: User ashish [2174105]: 576 clickhouse-ssh Oct 8 14:55:52 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat Oct 8 14:56:00 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat Oct 8 14:56:05 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat] Oct 8 14:56:10 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat Oct 8 14:56:16 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat] Oct 8 14:56:21 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2075 kubectl get pods -o wide | grep dat Oct 8 14:56:27 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2076 kubectl get hoa Oct 8 14:56:30 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2077 kubectl get hpa Oct 8 14:56:55 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2078 kubectl delete hpa datapulse-celery-spot Oct 8 14:57:00 bastion LinuxCommandsWazuh: User ashish [2181722]: 575 mongo pixel_v1; Oct 8 14:57:04 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2079 kubectl delete hpa datapulse-web-spot Oct 8 14:58:01 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2080 kubectl get pods -o wide | grep data Oct 8 14:58:05 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2081 kubectl get pods -o wide | grep data Oct 8 14:58:18 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2081 kubectl get pods -o wide | grep data Oct 8 14:58:27 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2082 kubectl get hpa Oct 8 14:58:35 bastion LinuxCommandsWazuh: User abhijeet [2023570]: 2083 kubectl get deployment Oct 8 14:59:15 bastion LinuxCommandsWazuh: User ankur [2184088]: 546 byobu Oct 8 14:59:36 bastion LinuxCommandsWazuh: User ankur [2184802]: 546 byobu Oct 8 15:02:40 bastion LinuxCommandsWazuh: User ashish [2181722]: 576 clickhouse-ssh Oct 8 15:02:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2181722]: 576 clickhouse-ssh ] Oct 8 15:02:46 bastion LinuxCommandsWazuh: User ankur [2184088]: 546 byobu Oct 8 15:19:03 bastion LinuxCommandsWazuh: User ayush [2147051]: 478 mongo Oct 8 15:19:34 bastion LinuxCommandsWazuh: User ashish [2181722]: 577 redis-cli Oct 8 15:21:07 bastion LinuxCommandsWazuh: User ashish [2181722]: 577 redis-cli Oct 8 15:53:27 bastion LinuxCommandsWazuh: User ankur [2242237]: 547 exit Oct 8 15:54:26 bastion LinuxCommandsWazuh: User ashish [2181722]: 577 redis-cli Oct 8 15:54:57 bastion LinuxCommandsWazuh: User ashish [2181722]: 577 redis-cli Oct 8 15:59:23 bastion LinuxCommandsWazuh: User ashish [2181722]: 578 redis Oct 8 15:59:27 bastion LinuxCommandsWazuh: User ashish [2181722]: 578 redis Oct 8 16:07:33 bastion LinuxCommandsWazuh: User ashish [2181722]: 578 redis Oct 8 16:07:34 bastion LinuxCommandsWazuh: User ashish [2174105]: 577 mongo pixel_v1; Oct 8 16:07:47 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2174105]: 577 mongo pixel_v1;] Oct 8 16:08:01 bastion LinuxCommandsWazuh: User ashish [2174105]: 577 mongo pixel_v1; Oct 8 16:27:35 bastion LinuxCommandsWazuh: User ankur [2276428]: 548 byobu Oct 8 16:33:01 bastion LinuxCommandsWazuh: User ashish [2281616]: 578 redis Oct 8 16:33:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [2281616]: 578 redis] Oct 8 16:33:13 bastion LinuxCommandsWazuh: User ashish [2281931]: 578 redis Oct 8 16:35:15 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 762 k get hpa Oct 8 16:35:17 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 763 clear Oct 8 16:35:26 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 764 k get pods Oct 8 16:35:55 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 764 k get pods Oct 8 16:35:56 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2285826]: 764 k get pods] Oct 8 16:36:00 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 765 k logs -f cookie-cutter-common-task-5f65f8645-h9gt7\ Oct 8 16:36:03 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 766 k logs -f cookie-cutter-common-task-5f65f8645-h9gt7' Oct 8 16:36:04 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 767 k logs -f cookie-cutter-common-task-5f65f8645-h9gt7 Oct 8 16:39:43 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 1998 kubectl get pods --watch | grep coo Oct 8 16:39:43 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 1999 ls Oct 8 16:39:44 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 1999 ls Oct 8 16:40:14 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 768 clear Oct 8 16:40:17 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 769 k get pods Oct 8 16:40:21 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2000 kubectl get pods -o wide | grep coo Oct 8 16:40:30 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 769 k get pods Oct 8 16:41:31 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2001 kubectl get pods -o wide | grep misc Oct 8 16:42:14 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2002 kubectl describe pod sbert-classifier-7fc7d9c968-65sdh Oct 8 16:43:05 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2003 kubectl get pods -o wide | grep misc Oct 8 16:43:17 bastion LinuxCommandsWazuh: User mohtashim [2301671]: 762 k get hpa Oct 8 16:44:55 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2004 kubectl top pods -o wide | grep misc Oct 8 16:45:04 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2005 kubectl top pods | grep misc Oct 8 16:45:07 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2006 kubectl top pods Oct 8 16:48:28 bastion LinuxCommandsWazuh: User mohtashim [2301671]: 763 mongo pixel_v1 Oct 8 16:48:36 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2007 kubectl top pods -o wide | grep misc Oct 8 16:48:49 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2008 kubectl node pods -o wide | grep misc Oct 8 16:48:56 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2009 kubectl get pods -o wide | grep misc Oct 8 16:49:06 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2010 kubectl top pod Oct 8 16:51:50 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2011 kubectl top node Oct 8 16:53:34 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2012 kubectl get deployment Oct 8 16:54:32 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2013 kubectl get service Oct 8 16:55:02 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2014 kubectl get pods Oct 8 16:56:08 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2014 kubectl get pods Oct 8 16:56:23 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2015 kubectl get pods -o wide Oct 8 16:57:50 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2016 kubectl get pods Oct 8 16:58:05 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2017 kubectl logs cookie-cutter-5c89c4569c-m5qxs Oct 8 16:58:19 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2018 kubectl logs cookie-cutter-5c89c4569c-m5qxs -f Oct 8 16:58:21 bastion LinuxCommandsWazuh: User ashish [2317364]: 579 byobu Oct 8 17:01:40 bastion LinuxCommandsWazuh: User ashish [2174105]: 578 clickhouse-ssh Oct 8 17:01:41 bastion LinuxCommandsWazuh: User ashish [2317364]: 579 byobu Oct 8 17:04:37 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2019 kubectl get deployment Oct 8 17:05:06 bastion LinuxCommandsWazuh: User abhijeet [2294870]: 2020 kubectl get hpa Oct 8 17:22:19 bastion LinuxCommandsWazuh: User ashish [2335592]: 582 clickhouse-ssh Oct 8 17:26:01 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 1998 kubectl get pods --watch | grep coo Oct 8 17:26:06 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 1999 kubectl get pods | grep coo Oct 8 17:26:24 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2000 kubectl logs cookie-cutter-788fcc8669-c8nrr Oct 8 17:26:56 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2001 kubectl logs cookie-cutter-788fcc8669-c8nrr -f Oct 8 17:26:56 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [2336351]: 2001 kubectl logs cookie-cutter-788fcc8669-c8nrr -f] Oct 8 17:27:02 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2002 kubectl get pods | grep coo Oct 8 17:27:16 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2003 kubectl logs cookie-cutter-788fcc8669-thdzp -f Oct 8 17:27:23 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2004 kubectl get pods | grep coo Oct 8 17:27:37 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2005 kubectl logs cookie-cutter-788fcc8669-thdzp -f Oct 8 17:27:56 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2006 kubectl get pods | grep coo Oct 8 17:28:20 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2007 kubectl delete pod cookie-cutter-788fcc8669-thdzp Oct 8 17:28:22 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2008 kubectl get pods | grep coo Oct 8 17:28:39 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2009 kubectl delete pod cookie-cutter-788fcc8669-vqs4h Oct 8 17:28:41 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2010 kubectl get pods | grep coo Oct 8 17:28:53 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2010 kubectl get pods | grep coo Oct 8 17:29:07 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2011 kubectl delete pod cookie-cutter-788fcc8669-vqs4h Oct 8 17:29:09 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2012 kubectl get pods | grep coo Oct 8 17:29:36 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2013 kubectl logs cookie-cutter-788fcc8669-d8tqq Oct 8 17:29:38 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2014 kubectl get pods | grep coo Oct 8 17:29:50 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 770 k exec -it cookie-cutter-common-task-6d58fb8f6f-9bs65 bash Oct 8 17:30:21 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2015 kubectl get pods --watch | grep coo Oct 8 17:30:23 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2016 kubectl get pods | grep coo Oct 8 17:30:49 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2017 kubectl logs cookie-cutter-788fcc8669-8btwx | grep err Oct 8 17:30:54 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2018 kubectl logs cookie-cutter-788fcc8669-8btwx | grep error Oct 8 17:30:59 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2019 kubectl logs cookie-cutter-788fcc8669-8btwx | grep Erro Oct 8 17:31:03 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2020 kubectl get pods | grep coo Oct 8 17:31:21 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2020 kubectl get pods | grep coo Oct 8 17:31:41 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2021 watch 'kubectl get pods | grep cood' Oct 8 17:32:04 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2022 watch 'kubectl get pods | grep coo' Oct 8 17:34:57 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2023 watch 'kubectl get pods -o wide| grep coo' Oct 8 17:35:11 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2024 watch 'kubectl get pods -o wide| grep coo | grep 0/0' Oct 8 17:35:26 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2025 watch 'kubectl get pods -o wide| grep 0/0' Oct 8 17:35:49 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2026 watch 'kubectl get pods -o wide| grep coo' Oct 8 17:35:55 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2027 watch 'kubectl get pods -o wide| grep {' Oct 8 17:36:02 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2028 watch 'kubectl get pods -o wide| grep (' Oct 8 17:36:37 bastion LinuxCommandsWazuh: User mohtashim [2339291]: 762 k get hpa Oct 8 17:36:49 bastion LinuxCommandsWazuh: User mohtashim [2339291]: 763 k get pods | grep "cookie" Oct 8 17:37:17 bastion LinuxCommandsWazuh: User mohtashim [2339291]: 764 k logs -f cookie-cutter-5f9677ff4b-27284 Oct 8 17:37:17 bastion LinuxCommandsWazuh: User mohtashim [2339291]: 764 k logs -f cookie-cutter-5f9677ff4b-27284 Oct 8 17:37:19 bastion LinuxCommandsWazuh: User mohtashim [2339291]: 765 clear Oct 8 17:40:06 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2029 watch 'kubectl get pods -o wide| grep coo' Oct 8 17:40:18 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2030 \kubectl get pods -o wide Oct 8 17:40:18 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2030 \kubectl get pods -o wide Oct 8 17:40:23 bastion LinuxCommandsWazuh: User abhijeet [2336351]: 2031 kubectl get pods -o wide Oct 8 17:56:44 bastion LinuxCommandsWazuh: User venky [2348266]: 1998 kubectl get deploy Oct 8 17:56:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [2348266]: 1998 kubectl get deploy ] Oct 8 17:56:58 bastion LinuxCommandsWazuh: User venky [2348266]: 1999 kubectl get po | grep cooki Oct 8 17:57:23 bastion LinuxCommandsWazuh: User venky [2348266]: 2000 kubectl describe po cookie-cutter-5f9677ff4b-4bb4n Oct 8 18:00:09 bastion LinuxCommandsWazuh: User venky [2348266]: 2001 kubectl edit deploy cookie-cutter Oct 8 18:00:18 bastion LinuxCommandsWazuh: User venky [2348266]: 2002 kubectl logs cookie-cutter-5f9677ff4b-4bb4n Oct 8 18:00:35 bastion LinuxCommandsWazuh: User venky [2348266]: 2003 kubectl logs -f cookie-cutter-5f9677ff4b-4bb4n Oct 8 18:01:26 bastion LinuxCommandsWazuh: User venky [2348266]: 2003 kubectl logs -f cookie-cutter-5f9677ff4b-4bb4n Oct 8 18:01:26 bastion LinuxCommandsWazuh: User venky [2348266]: 2003 kubectl logs -f cookie-cutter-5f9677ff4b-4bb4n Oct 8 18:01:33 bastion LinuxCommandsWazuh: User venky [2348266]: 2004 kubectl get po | grep cooki Oct 8 18:01:50 bastion LinuxCommandsWazuh: User venky [2348266]: 2005 kubectl logs -f cookie-cutter-5f9677ff4b-tflrt Oct 8 18:02:05 bastion LinuxCommandsWazuh: User venky [2348266]: 2006 kubectl logs -f cookie-cutter-5f9677ff4b-tflrt | more Oct 8 18:02:14 bastion LinuxCommandsWazuh: User venky [2348266]: 2007 kubectl logs cookie-cutter-5f9677ff4b-tflrt | more Oct 8 18:07:20 bastion LinuxCommandsWazuh: User venky [2348266]: 2008 kubectl logs cookie-cutter-5f9677ff4b-tflrt | less Oct 8 18:07:26 bastion LinuxCommandsWazuh: User venky [2348266]: 2009 kubectl logs cookie-cutter-5f9677ff4b-tflrt Oct 8 18:07:53 bastion LinuxCommandsWazuh: User venky [2348266]: 2010 kubectl logs -f cookie-cutter-5f9677ff4b-tflrt Oct 8 18:07:53 bastion LinuxCommandsWazuh: User venky [2348266]: 2010 kubectl logs -f cookie-cutter-5f9677ff4b-tflrt Oct 8 18:12:52 bastion LinuxCommandsWazuh: User ashish [2352492]: 582 clickhouse-ssh Oct 8 18:12:56 bastion LinuxCommandsWazuh: User ashish [2352549]: 582 clickhouse-ssh Oct 8 18:13:18 bastion LinuxCommandsWazuh: User abhijeet [2353118]: 1998 watch 'kubectl get pods -o wide| grep coo' Oct 8 18:13:32 bastion LinuxCommandsWazuh: User abhijeet [2353118]: 1999 kubectl get pods -o wide Oct 8 18:13:44 bastion LinuxCommandsWazuh: User abhijeet [2353668]: 1998 exit Oct 8 18:13:49 bastion LinuxCommandsWazuh: User abhijeet [2353668]: 1999 kubectl get pods -o wide Oct 8 18:14:09 bastion LinuxCommandsWazuh: User abhijeet [2354181]: 1998 exit Oct 8 18:18:54 bastion LinuxCommandsWazuh: User rihan [2359321]: 1404 psql -d tasdeeq -U postgres Oct 8 18:25:48 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 1998 exit Oct 8 18:25:54 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 1999 kubectl get pods Oct 8 18:26:14 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2000 kubectl logs big-o-cookie-cutter-b6f56567c-kmp9m Oct 8 18:26:20 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2001 kubectl logs big-o-cookie-cutter-b6f56567c-kmp9m -f Oct 8 18:26:29 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2002 kubectl get deployment Oct 8 18:26:53 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2003 kubectl describe pod big-o-cookie-cutter-b6f56567c-kmp9m Oct 8 18:27:08 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2004 kubectl get deployment Oct 8 18:27:44 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2005 kubectl rollout restart deployment big-o-cookie-cutter -n nitrox-production Oct 8 18:27:47 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2006 kubectl get deployment Oct 8 18:27:53 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2007 kubectl get pods Oct 8 18:28:29 bastion LinuxCommandsWazuh: User abhijeet [2366342]: 2008 kubectl logs cookie-cutter-5f9677ff4b-c24ht -f Oct 8 18:39:59 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 1998 exit Oct 8 18:40:09 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 1999 kubectl get pods -o wide Oct 8 18:42:48 bastion LinuxCommandsWazuh: User ashish [2370393]: 583 byobu Oct 8 18:51:11 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 1999 kubectl get pods -o wide Oct 8 18:53:11 bastion LinuxCommandsWazuh: User ashish [2380560]: 583 byobu Oct 8 18:53:15 bastion LinuxCommandsWazuh: User rihan [2359321]: 1405 redis Oct 8 18:53:15 bastion LinuxCommandsWazuh: User rihan [2359321]: 1405 redis Oct 8 18:54:43 bastion LinuxCommandsWazuh: User rihan [2359321]: 1405 redis Oct 8 18:59:10 bastion LinuxCommandsWazuh: User ankur [2386922]: 548 byobu Oct 8 19:01:04 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 771 clear Oct 8 19:01:38 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 772 docker ps Oct 8 19:01:39 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2285826]: 772 docker ps] Oct 8 19:01:46 bastion LinuxCommandsWazuh: User mohtashim [2285826]: 773 k get pods Oct 8 19:16:10 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 2000 kubectl get pods -o wide --watch Oct 8 19:16:11 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 2001 ls Oct 8 19:16:18 bastion LinuxCommandsWazuh: User ankur [2409595]: 548 byobu Oct 8 19:16:19 bastion LinuxCommandsWazuh: User ankur [2409595]: 549 cd Oct 8 19:16:24 bastion LinuxCommandsWazuh: User ankur [2409595]: 550 ls Oct 8 19:16:31 bastion LinuxCommandsWazuh: User ankur [2409595]: 551 cat .ssh/authorized_keys Oct 8 19:18:00 bastion LinuxCommandsWazuh: User ankur [2411207]: 548 byobu Oct 8 19:18:02 bastion LinuxCommandsWazuh: User ankur [2411207]: 549 ssh ubuntu@34.131.95.95 Oct 8 19:22:55 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 2002 sudo su ankur Oct 8 19:22:58 bastion LinuxCommandsWazuh: User abhijeet [2370137]: 2003 kubectl get pods -o wide Oct 8 19:31:07 bastion LinuxCommandsWazuh: User rihan [2424227]: 1404 psql -d tasdeeq -U postgres Oct 8 19:31:31 bastion LinuxCommandsWazuh: User rihan [2424227]: 1405 kubectl get pods | grep cookie-cutter Oct 8 19:31:47 bastion LinuxCommandsWazuh: User rihan [2424227]: 1406 ster cookie-cutter-queue | grep "[EVENT_TRACE] org_id=" Oct 8 19:32:51 bastion LinuxCommandsWazuh: User rihan [2424227]: 1407 stern cookie-cutter-queue | grep "[EVENT_TRACE] org_id=" Oct 8 19:33:00 bastion LinuxCommandsWazuh: User rihan [2424227]: 1408 kubectl get pods | grep cookie-cutter Oct 8 19:33:34 bastion LinuxCommandsWazuh: User rihan [2424227]: 1409 kubetail -f cookie-cutter-queues-59bbfc5b8b-qm2jv Oct 8 19:33:35 bastion LinuxCommandsWazuh: User ankur [2433805]: 552 exit Oct 8 19:45:33 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1998 exit Oct 8 19:47:41 bastion LinuxCommandsWazuh: User rihan [1393]: 1404 psql -d tasdeeq -U postgres Oct 8 19:48:04 bastion LinuxCommandsWazuh: User rihan [1393]: 1405 redis-cli Oct 8 19:49:21 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:49:50 bastion LinuxCommandsWazuh: User rihan [1393]: 1406 redis Oct 8 19:49:52 bastion LinuxCommandsWazuh: message repeated 4 times: [ User rihan [1393]: 1406 redis] Oct 8 19:49:53 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:50:00 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:50:03 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:50:06 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:52:15 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:52:26 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:52:40 bastion LinuxCommandsWazuh: User abhijeet [1262]: 1999 kubectl get pods | grep coo Oct 8 19:53:13 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [1262]: 1999 kubectl get pods | grep coo] Oct 8 19:53:35 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2000 kubectl logs cookie-cutter-69b9b5c657-f77bw -f Oct 8 19:54:50 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2001 kubectl get pods | grep coo Oct 8 19:55:07 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2001 kubectl get pods | grep coo Oct 8 19:55:53 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2001 kubectl get pods | grep coo Oct 8 19:58:57 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2001 kubectl get pods | grep coo Oct 8 19:59:13 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2002 kubectl logs cookie-cutter-69b9b5c657-58xkd Oct 8 19:59:15 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2003 kubectl logs cookie-cutter-69b9b5c657-58xkd -f Oct 8 19:59:24 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2004 kubectl get pods | grep coo Oct 8 20:00:26 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2004 kubectl get pods | grep coo Oct 8 20:00:48 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2004 kubectl get pods | grep coo Oct 8 20:01:31 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2004 kubectl get pods | grep coo Oct 8 20:02:03 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2004 kubectl get pods | grep coo Oct 8 20:02:20 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2005 kubectl logs cookie-cutter-69b9b5c657-n7bwq | grep error Oct 8 20:02:41 bastion LinuxCommandsWazuh: User rihan [1393]: 1406 redis Oct 8 20:04:11 bastion LinuxCommandsWazuh: User abhijeet [1262]: 2006 kubectl get pods | grep coo Oct 8 21:42:26 bastion LinuxCommandsWazuh: User venky [10913]: 1999 kubectl exec -it cookie-cutter-59474cd9d4-bcrrl bash Oct 8 21:42:27 bastion LinuxCommandsWazuh: User venky [10913]: 1999 kubectl exec -it cookie-cutter-59474cd9d4-bcrrl bash Oct 8 22:16:04 bastion LinuxCommandsWazuh: User ayush [13924]: 478 mongo