Oct 11 01:13:00 bastion LinuxCommandsWazuh: User rihan [1020995]: 1422 sudo su ashish Oct 11 05:41:02 bastion LinuxCommandsWazuh: User ping-pong [1041726]: 233 mongo Oct 11 10:00:08 bastion LinuxCommandsWazuh: User nikhil [1062462]: 64 zodiac-server Oct 11 10:09:45 bastion LinuxCommandsWazuh: User aman [1063373]: 348 mongo Oct 11 10:10:02 bastion LinuxCommandsWazuh: User aman [1063373]: 349 psql -h 10.94.16.3 -p 5432 -U postgres -d nitrox_v2 Oct 11 10:10:04 bastion LinuxCommandsWazuh: User aman [1063373]: 350 clear Oct 11 10:33:56 bastion LinuxCommandsWazuh: User venky [1065003]: 2000 exit Oct 11 10:34:04 bastion LinuxCommandsWazuh: User venky [1065003]: 2001 stern xlr8 Oct 11 10:34:24 bastion LinuxCommandsWazuh: User venky [1065003]: 2001 stern xlr8 Oct 11 10:40:26 bastion LinuxCommandsWazuh: User rihan [1065912]: 1423 mongo Oct 11 10:40:31 bastion LinuxCommandsWazuh: User rihan [1065971]: 1423 mongo Oct 11 10:42:24 bastion LinuxCommandsWazuh: User venky [1065003]: 2001 stern xlr8 Oct 11 10:42:31 bastion LinuxCommandsWazuh: User venky [1065003]: 2002 kubectl get hpa Oct 11 10:44:42 bastion LinuxCommandsWazuh: User rihan [1070117]: 1423 mongo Oct 11 10:46:04 bastion LinuxCommandsWazuh: User ping-pong [1072929]: 233 mongo Oct 11 10:56:37 bastion LinuxCommandsWazuh: User venky [1065003]: 2002 kubectl get hpa Oct 11 10:58:49 bastion LinuxCommandsWazuh: User venky [1065003]: 2003 kubectl edit deploy xlr8 Oct 11 11:01:41 bastion LinuxCommandsWazuh: User rihan [1070117]: 1424 byobu Oct 11 11:14:18 bastion LinuxCommandsWazuh: User ping-pong [1093292]: 233 mongo Oct 11 11:14:56 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 1998 kubectl get svc -n loki Oct 11 11:15:10 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 1999 ls Oct 11 11:15:50 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2000 vim Makefile Oct 11 11:16:23 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2001 make cookie-cutter-logs Oct 11 11:17:44 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2002 make cookie-cutter-logs | grep "ZOKO_CONTACT_EXPORT: org_id= 205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:18:31 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2003 make cookie-cutter-logs | grep "ZOKO_CONTACT_EXPORT: org_id=205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:19:02 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2004 make cookie-logs | grep "ZOKO_CONTACT_EXPORT: org_id=205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:21:14 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2005 make cookie-logs | grep "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:21:34 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2006 make cookie-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:21:57 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2006 make cookie-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:25:46 bastion LinuxCommandsWazuh: User ping-pong [1095199]: 233 mongo Oct 11 11:25:59 bastion LinuxCommandsWazuh: User abhijeet [1095221]: 1998 kubectl get svc -n loki Oct 11 11:26:01 bastion LinuxCommandsWazuh: User abhijeet [1095221]: 1999 ls Oct 11 11:26:13 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2006 make cookie-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:26:14 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2006 make cookie-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:26:42 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2007 make jobs-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:28:00 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2008 make queues-logs | grep "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:28:08 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2009 kubectl logs -f deployment.apps/cookie-cutter-queues Oct 11 11:28:28 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2010 kubectl logs -f deployment.apps/cookie-cutter-queues | grep "ZOKO_CONTACT_EXPORT: org_id=" Oct 11 11:28:36 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2011 kubectl logs -F deployment.apps/cookie-cutter-queues | grep "ZOKO_CONTACT_EXPORT: org_id=" Oct 11 11:29:29 bastion LinuxCommandsWazuh: User rihan [1065971]: 1424 make cookie-bash Oct 11 11:30:45 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2012 kubectl logs -f deployment.apps/cookie-cutter-queues | grep -F "ZOKO_CONTACT_EXPORT: org_id=" Oct 11 11:30:46 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2013 kubectl logs deployment.apps/cookie-cutter-queues --tail=10000 2>&1 | grep -F "ZOKO_CONTACT_EXPORT: org_id=" Oct 11 11:30:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [1093321]: 2013 kubectl logs deployment.apps/cookie-cutter-queues --tail=10000 2>&1 | grep -F "ZOKO_CONTACT_EXPORT: org_id="] Oct 11 11:31:34 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2014 kubectl logs deployment.apps/cookie-cutter-queues --tail=500 | grep -F "ZOKO_CONTACT_EXPORT" Oct 11 11:31:47 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2015 kubectl logs deployment.apps/cookie-cutter-queues --tail=500 | grep -F "ZOKO_CONTACT_EXPORT: org_id=" Oct 11 11:32:23 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2016 kubectl get pods --show-labels | grep cookie-cutter-queues Oct 11 11:33:40 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2017 make queues-logs | grep -F "205bd8d5-4992-4372-8e86-37ab32571c6a" Oct 11 11:33:54 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2018 kubectl logs -l app=cookie-cutter-queues --all-containers --tail=100 2>&1 | grep -F "ZOKO_CONTACT_EXPORT" Oct 11 11:34:17 bastion LinuxCommandsWazuh: message repeated 4 times: [ User abhijeet [1093321]: 2018 kubectl logs -l app=cookie-cutter-queues --all-containers --tail=100 2>&1 | grep -F "ZOKO_CONTACT_EXPORT"] Oct 11 11:34:24 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2019 kubectl logs -l app=cookie-cutter-queues --tail=20 Oct 11 11:34:40 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2020 kubectl get pods -l app=cookie-cutter-queues -o wide Oct 11 11:35:28 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2021 kubectl exec -it cookie-cutter-queues-64c4bc786d-26tx4 -- ps aux Oct 11 11:35:51 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2022 kubectl logs cookie-cutter-queues-64c4bc786d-26tx4 --previous Oct 11 11:36:00 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [1093321]: 2022 kubectl logs cookie-cutter-queues-64c4bc786d-26tx4 --previous] Oct 11 11:36:30 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2023 make cookie-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 11:36:35 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2024 make cookie-logs | grep -F ZOKO_CONTACT_EXPORT: org_id= Oct 11 11:36:47 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2025 make cookie-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 11:36:57 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2026 make jpbs-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 11:37:10 bastion LinuxCommandsWazuh: User abhijeet [1093321]: 2027 make jobs-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 11:37:11 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [1093321]: 2027 make jobs-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id='] Oct 11 11:44:11 bastion LinuxCommandsWazuh: User abhijeet [1095221]: 2000 vim Makefile Oct 11 12:11:41 bastion LinuxCommandsWazuh: User ayush [1099225]: 489 mongo Oct 11 12:21:58 bastion LinuxCommandsWazuh: User ayush [1099225]: 489 mongo Oct 11 12:22:02 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [1099225]: 489 mongo ] Oct 11 14:09:25 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 234 sudo su abhijeet Oct 11 14:09:27 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 1998 make jobs-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 14:10:05 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 1999 ls Oct 11 14:10:56 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 234 sudo su abhijeet Oct 11 14:11:08 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 235 redis Oct 11 14:11:15 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 236 ls Oct 11 14:11:43 bastion LinuxCommandsWazuh: User abhijeet [1109749]: 1998 make jobs-logs | grep -F 'ZOKO_CONTACT_EXPORT: org_id=' Oct 11 14:11:46 bastion LinuxCommandsWazuh: User abhijeet [1109749]: 1999 ls Oct 11 14:13:55 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2000 vim README.md Oct 11 14:14:16 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2001 cd Oct 11 14:14:19 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2002 ls Oct 11 14:15:06 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2003 redis Oct 11 14:15:26 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2004 vim Makefile Oct 11 14:16:14 bastion LinuxCommandsWazuh: User abhijeet [1109749]: 2000 redis Oct 11 14:54:49 bastion LinuxCommandsWazuh: User abhijeet [1109749]: 2000 redis Oct 11 14:54:49 bastion LinuxCommandsWazuh: User abhijeet [1109749]: 2000 redis Oct 11 14:54:51 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 237 sudo su abhijeet Oct 11 14:54:55 bastion LinuxCommandsWazuh: User abhijeet [1109523]: 2005 vim README.md Oct 11 14:54:57 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 234 sudo su abhijeet Oct 11 14:54:59 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 235 clear Oct 11 14:55:01 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 238 clear Oct 11 14:55:03 bastion LinuxCommandsWazuh: User ping-pong [1109698]: 239 ls Oct 11 14:56:04 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 235 clear Oct 11 14:56:27 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 236 make jobs-logs Oct 11 14:59:42 bastion LinuxCommandsWazuh: User ping-pong [1109509]: 236 make jobs-logs Oct 11 14:59:43 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ping-pong [1109509]: 236 make jobs-logs] Oct 11 16:12:31 bastion LinuxCommandsWazuh: User aman [1120195]: 351 exit Oct 11 16:12:33 bastion LinuxCommandsWazuh: User aman [1120195]: 352 clear Oct 11 16:13:38 bastion LinuxCommandsWazuh: User aman [1120195]: 352 clear Oct 11 16:13:38 bastion LinuxCommandsWazuh: User aman [1120195]: 352 clear Oct 11 16:15:37 bastion LinuxCommandsWazuh: User aman [1120990]: 353 exit Oct 11 16:15:39 bastion LinuxCommandsWazuh: User aman [1120990]: 354 clear Oct 11 16:16:23 bastion LinuxCommandsWazuh: User aman [1120990]: 354 clear Oct 11 16:16:24 bastion LinuxCommandsWazuh: message repeated 3 times: [ User aman [1120990]: 354 clear] Oct 11 16:55:50 bastion LinuxCommandsWazuh: User venky [1124191]: 2000 kubectl edit deploy xlr8 Oct 11 16:56:00 bastion LinuxCommandsWazuh: User venky [1124191]: 2001 kubectl get po | grep cook Oct 11 17:05:57 bastion LinuxCommandsWazuh: User venky [1124191]: 2001 kubectl get po | grep cook Oct 11 18:29:01 bastion LinuxCommandsWazuh: User ping-pong [1131241]: 243 vim README.md Oct 11 21:17:55 bastion LinuxCommandsWazuh: User ping-pong [1131241]: 244 mongo Oct 11 21:17:56 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ping-pong [1131241]: 244 mongo] Oct 11 21:17:58 bastion LinuxCommandsWazuh: User ping-pong [1131241]: 245 cd