Oct 16 11:54:28 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2000 cool-server Oct 16 11:54:39 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2001 clickhouse Oct 16 11:56:02 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2002 clickhouse-ssh Oct 16 11:57:25 bastion LinuxCommandsWazuh: User rihan [3268858]: 1432 mongo Oct 16 11:59:22 bastion LinuxCommandsWazuh: User ashish [3269006]: 740 clear Oct 16 11:59:27 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ashish [3269006]: 740 clear] Oct 16 11:59:43 bastion LinuxCommandsWazuh: User ashish [3269096]: 740 clear Oct 16 11:59:45 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3269096]: 740 clear] Oct 16 11:59:55 bastion LinuxCommandsWazuh: User ashish [3269096]: 741 kubectl get pods Oct 16 12:00:01 bastion LinuxCommandsWazuh: User ashish [3269096]: 742 kubectl get pods | grep "nitrox" Oct 16 12:05:37 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2003 mongo-ssh Oct 16 12:15:26 bastion LinuxCommandsWazuh: User ashish [3285516]: 740 clear Oct 16 12:15:29 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [3285516]: 740 clear] Oct 16 12:15:52 bastion LinuxCommandsWazuh: User ashish [3285516]: 741 history | grep "nitrox" Oct 16 12:18:22 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2004 ls Oct 16 12:22:20 bastion LinuxCommandsWazuh: User aman [3292061]: 424 exit Oct 16 12:22:22 bastion LinuxCommandsWazuh: User aman [3292061]: 425 clear Oct 16 12:22:39 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2005 cat /usr/local/bin/login-notify.sh Oct 16 12:22:39 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2005 cat /usr/local/bin/login-notify.sh Oct 16 12:22:40 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2005 cat /usr/local/bin/login-notify.sh Oct 16 12:22:40 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2005 cat /usr/local/bin/login-notify.sh Oct 16 12:23:57 bastion LinuxCommandsWazuh: User aman [3292061]: 426 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 12:23:58 bastion LinuxCommandsWazuh: User aman [3292061]: 427 clear Oct 16 12:24:28 bastion LinuxCommandsWazuh: User ashish [3269096]: 743 kubectl exec -it nitrox-dj-7bc4778d9f-6v8hr bash Oct 16 12:24:34 bastion LinuxCommandsWazuh: User ashish [3285516]: 742 psql -h 10.94.16.3 -p 5432 -U dbuser -d nitrox_v2; Oct 16 12:24:35 bastion LinuxCommandsWazuh: User ashish [3285516]: 743 clear Oct 16 12:24:36 bastion LinuxCommandsWazuh: User ashish [3285516]: 743 clear Oct 16 12:24:37 bastion LinuxCommandsWazuh: User ashish [3269006]: 741 byobu Oct 16 12:27:05 bastion LinuxCommandsWazuh: User abhijeet [3295861]: 1998 kubectl top pods | grep vor Oct 16 12:27:08 bastion LinuxCommandsWazuh: User abhijeet [3295994]: 1998 kubectl top pods | grep vor Oct 16 12:27:10 bastion LinuxCommandsWazuh: User abhijeet [3296129]: 1998 kubectl top pods | grep vor Oct 16 12:27:42 bastion LinuxCommandsWazuh: User abhijeet [3296129]: 1999 ls Oct 16 12:29:02 bastion LinuxCommandsWazuh: User abhijeet [3296129]: 2000 cat /usr/local/bin/login-notify.sh Oct 16 12:30:17 bastion LinuxCommandsWazuh: User abhijeet [3295994]: 1999 kubectl get pods -n loki Oct 16 12:30:57 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2006 cool-server Oct 16 12:34:20 bastion LinuxCommandsWazuh: User ubuntu [3268067]: 2007 redis-url-ssh Oct 16 12:35:42 bastion LinuxCommandsWazuh: User ubuntu [3305221]: 2000 exit Oct 16 13:06:40 bastion LinuxCommandsWazuh: User abhijeet [3295861]: 1999 lsc Oct 16 13:06:40 bastion LinuxCommandsWazuh: User abhijeet [3295861]: 1999 lsc Oct 16 13:09:48 bastion LinuxCommandsWazuh: User abhijeet [3296129]: 2001 redis-url-ssh Oct 16 13:11:52 bastion LinuxCommandsWazuh: User sarthak.s [3340961]: Oct 16 13:13:17 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: Oct 16 13:14:00 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 1 cd Oct 16 13:14:00 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 2 ls Oct 16 13:15:15 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 3 ssh ubuntu@13.232.83.204 Oct 16 13:15:25 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 4 ssh-key Oct 16 13:15:30 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 5 ssh-keygen Oct 16 13:15:34 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 6 cat .ssh/id_rsa.pub Oct 16 13:19:17 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 7 ssh ubuntu@13.232.83.204 Oct 16 13:20:40 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: 8 vim .bashrc Oct 16 13:21:04 bastion LinuxCommandsWazuh: User sarthak.s [3342236]: source .bashrc Oct 16 13:21:09 bastion LinuxCommandsWazuh: User aman [3350343]: 428 exit Oct 16 13:21:31 bastion LinuxCommandsWazuh: User sarthak.s [3340961]: 1 zodiac-ssh Oct 16 13:22:07 bastion LinuxCommandsWazuh: User sarthak.s [3351363]: 2 exit Oct 16 13:27:58 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 13:28:26 bastion LinuxCommandsWazuh: User aman [3350343]: 429 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 13:28:28 bastion LinuxCommandsWazuh: User aman [3350343]: 430 clear Oct 16 13:29:14 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 524 make cookie-bash Oct 16 13:31:05 bastion LinuxCommandsWazuh: User ayush [3357704]: 508 sudo su - venky Oct 16 13:31:08 bastion LinuxCommandsWazuh: User aman [3357727]: 428 exit Oct 16 13:31:25 bastion LinuxCommandsWazuh: User aman [3357727]: 429 kubectl get pods | grep chat Oct 16 13:32:16 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 525 mongo pixel_v1 Oct 16 13:32:27 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 526 k get pods | grep Oct 16 13:32:27 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [3357447]: 526 k get pods | grep ] Oct 16 13:32:32 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 527 k get pods | grep "common" Oct 16 13:39:22 bastion LinuxCommandsWazuh: User abhijeet [3295994]: 2000 sudo su sarthak.s Oct 16 13:44:36 bastion LinuxCommandsWazuh: User abhijeet [3295994]: 2001 ls Oct 16 13:46:18 bastion LinuxCommandsWazuh: User nikhils-art [3373063]: 32 zodiac-server Oct 16 13:46:40 bastion LinuxCommandsWazuh: User nikhils-art [3373063]: 32 zodiac-server Oct 16 13:48:07 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 1998 exit Oct 16 13:48:08 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 1999 ls Oct 16 13:48:12 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 1999 ls Oct 16 13:48:21 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2000 kubectl get cm -n loki Oct 16 13:50:16 bastion LinuxCommandsWazuh: User mohtashim [3377078]: 524 make cookie-bash Oct 16 13:53:44 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2001 kubectl edit cm prometheus-server -n loki Oct 16 13:54:01 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2002 kubectl get deployment -n loki Oct 16 13:54:21 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2003 kubectl rollout restart deployment prometheus-server -n loki Oct 16 13:54:34 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2004 kubectl get pods | grep prom Oct 16 13:54:42 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2005 kubectl get pods -n loki Oct 16 13:54:46 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3374847]: 2005 kubectl get pods -n loki] Oct 16 13:55:10 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2006 kubectl get pods -n loki --watch Oct 16 13:55:12 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2007 kubectl get pods -n loki Oct 16 13:55:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3374847]: 2007 kubectl get pods -n loki] Oct 16 13:55:16 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2007 kubectl get pods -n loki Oct 16 13:55:17 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2008 kubectl get pods -n lokiw Oct 16 13:55:20 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2009 kubectl get pods -n loki Oct 16 13:55:22 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2009 kubectl get pods -n loki Oct 16 13:55:23 bastion LinuxCommandsWazuh: User abhijeet [3374847]: 2009 kubectl get pods -n loki Oct 16 14:23:06 bastion LinuxCommandsWazuh: User aman [3350343]: 431 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 14:23:08 bastion LinuxCommandsWazuh: User aman [3350343]: 432 clear Oct 16 14:23:11 bastion LinuxCommandsWazuh: User aman [3350343]: 433 exity Oct 16 14:25:13 bastion LinuxCommandsWazuh: User abhijeet [3411686]: 1998 kubectl get pods -n loki --watch Oct 16 14:31:56 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 14:36:00 bastion LinuxCommandsWazuh: User abhijeet [3411686]: 1999 mongo-ssh Oct 16 14:36:10 bastion LinuxCommandsWazuh: User abhijeet [3419356]: 1998 kubectl get pods -n loki --watch Oct 16 14:36:22 bastion LinuxCommandsWazuh: User ankur [3419374]: 505 byobu Oct 16 14:36:23 bastion LinuxCommandsWazuh: User ankur [3419374]: 506 cd Oct 16 14:38:40 bastion LinuxCommandsWazuh: User mohtashim [3419530]: 525 exit Oct 16 14:39:11 bastion LinuxCommandsWazuh: User ankur [3419374]: 507 vim .ssh/authorized_keys Oct 16 14:39:22 bastion LinuxCommandsWazuh: User ankur [3419654]: 505 byobu Oct 16 14:39:23 bastion LinuxCommandsWazuh: User ankur [3419654]: 506 ls Oct 16 14:39:27 bastion LinuxCommandsWazuh: User ankur [3419654]: 506 ls Oct 16 14:39:27 bastion LinuxCommandsWazuh: User ankur [3419654]: 506 ls Oct 16 14:40:16 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 528 k exec -it cookie-cutter-common-task-98798fd59-57ttr bash Oct 16 14:40:19 bastion LinuxCommandsWazuh: User mohtashim [3419912]: 525 exit Oct 16 14:40:35 bastion LinuxCommandsWazuh: User mohtashim [3419912]: 526 k get pods | grep "common" Oct 16 14:42:02 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 14:43:36 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 15:33:25 bastion LinuxCommandsWazuh: User ping-pong [3445602]: 247 mongo Oct 16 15:33:26 bastion LinuxCommandsWazuh: User ping-pong [3445602]: 248 ls Oct 16 15:33:36 bastion LinuxCommandsWazuh: User ping-pong [3445602]: 249 psql Oct 16 15:33:48 bastion LinuxCommandsWazuh: User ping-pong [3445602]: 250 exig Oct 16 15:33:49 bastion LinuxCommandsWazuh: User ping-pong [3445602]: 250 exig Oct 16 15:34:24 bastion LinuxCommandsWazuh: User mohtashim [3419530]: 526 mongo pixel_v1 Oct 16 15:34:50 bastion LinuxCommandsWazuh: User ping-pong [3448375]: 251 exit Oct 16 15:34:55 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 1998 kubectl get pods -n loki --watch Oct 16 15:34:56 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 1999 ls Oct 16 15:34:58 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 2000 cd Oct 16 15:35:00 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 2001 ls Oct 16 15:35:05 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 2001 ls Oct 16 15:35:08 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 2002 PSQL Oct 16 15:37:32 bastion LinuxCommandsWazuh: User mohtashim [3419530]: 526 mongo pixel_v1 Oct 16 15:37:38 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 15:43:44 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 15:48:05 bastion LinuxCommandsWazuh: User mohtashim [3465428]: 527 exit Oct 16 15:50:00 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 15:53:18 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 15:56:06 bastion LinuxCommandsWazuh: User ankur [3471421]: 507 exit Oct 16 15:56:12 bastion LinuxCommandsWazuh: User ankur [3471627]: 507 exit Oct 16 15:56:29 bastion LinuxCommandsWazuh: User ankur [1544279]: 677 ls Oct 16 15:56:48 bastion LinuxCommandsWazuh: User ankur [1544279]: 678 stern big-o-cookie-cutter | grep -i "MEMWATCH\|MemoryLog\|leak" Oct 16 15:57:40 bastion LinuxCommandsWazuh: User ankur [2440417]: 653 zodiac-server Oct 16 15:57:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2440417]: 653 zodiac-server ] Oct 16 15:58:06 bastion LinuxCommandsWazuh: User ubuntu [3473557]: 2000 exit Oct 16 15:58:15 bastion LinuxCommandsWazuh: User ubuntu [3473557]: 2001 301402 Oct 16 16:01:12 bastion LinuxCommandsWazuh: User mohtashim [3357447]: 529 byobu Oct 16 16:02:03 bastion LinuxCommandsWazuh: User sarthak.s [3477552]: 13 zodiac-ssh Oct 16 16:11:23 bastion LinuxCommandsWazuh: User ankur [3487087]: 509 vim .ssh/authorized_keys Oct 16 16:11:25 bastion LinuxCommandsWazuh: User ankur [3487087]: 510 yb Oct 16 16:11:26 bastion LinuxCommandsWazuh: User ankur [3487087]: 510 yb Oct 16 16:11:26 bastion LinuxCommandsWazuh: User ankur [3487087]: 511 ls Oct 16 16:12:35 bastion LinuxCommandsWazuh: User ankur [3488976]: 509 vim .ssh/authorized_keys Oct 16 16:12:36 bastion LinuxCommandsWazuh: User ankur [3488976]: 510 ls Oct 16 16:13:13 bastion LinuxCommandsWazuh: User abhijeet [3490176]: 1998 mongo-ssh Oct 16 16:13:48 bastion LinuxCommandsWazuh: User abhijeet [3490176]: 1999 kubectl get pods -n loki Oct 16 16:13:56 bastion LinuxCommandsWazuh: User aman [3350343]: 434 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:13:57 bastion LinuxCommandsWazuh: User aman [3350343]: 435 clear Oct 16 16:14:09 bastion LinuxCommandsWazuh: User aman [3350343]: 436 kubectl get pods Oct 16 16:14:13 bastion LinuxCommandsWazuh: User aman [3350343]: 437 kubectl get pods | grep chat Oct 16 16:15:21 bastion LinuxCommandsWazuh: User aman [3350343]: 438 kubectl exec -it chatbot-7874f44fd8-rztxp bash Oct 16 16:15:24 bastion LinuxCommandsWazuh: User aman [3350343]: 439 clear Oct 16 16:16:16 bastion LinuxCommandsWazuh: User abhijeet [3493998]: 1998 mongo-ssh Oct 16 16:16:26 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2000 mongo-ssh Oct 16 16:16:27 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2001 cd Oct 16 16:16:27 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2002 ls Oct 16 16:16:33 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2003 cd k8s/ Oct 16 16:16:33 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2004 ls Oct 16 16:16:35 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2004 ls Oct 16 16:16:37 bastion LinuxCommandsWazuh: User aman [3350343]: 440 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:16:37 bastion LinuxCommandsWazuh: User aman [3350343]: 441 clear Oct 16 16:16:39 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2005 cd loki/ Oct 16 16:16:39 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2006 ls Oct 16 16:16:42 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2007 cd loki/ Oct 16 16:16:42 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2008 ls Oct 16 16:17:00 bastion LinuxCommandsWazuh: User aman [3350343]: 442 kubectl exec -it chatbot-7874f44fd8-rztxp bash Oct 16 16:17:02 bastion LinuxCommandsWazuh: User aman [3350343]: 443 clear Oct 16 16:17:19 bastion LinuxCommandsWazuh: User aman [3350343]: 444 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:17:20 bastion LinuxCommandsWazuh: User aman [3350343]: 445 clear Oct 16 16:17:51 bastion LinuxCommandsWazuh: User aman [3350343]: 446 kubectl exec -it chatbot-7874f44fd8-rztxp bash Oct 16 16:17:54 bastion LinuxCommandsWazuh: User aman [3350343]: 447 clear Oct 16 16:18:00 bastion LinuxCommandsWazuh: User ankur [3495839]: 510 byobu Oct 16 16:18:01 bastion LinuxCommandsWazuh: User ankur [3495839]: 511 ls Oct 16 16:18:07 bastion LinuxCommandsWazuh: User ankur [3495839]: 512 k get pods | grep house Oct 16 16:18:21 bastion LinuxCommandsWazuh: User aman [3350343]: 448 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:18:22 bastion LinuxCommandsWazuh: User aman [3350343]: 449 clear Oct 16 16:18:27 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2009 vim apps.Deployment.grafana.yaml Oct 16 16:18:47 bastion LinuxCommandsWazuh: User aman [3350343]: 450 kubectl exec -it chatbot-7874f44fd8-rztxp bash Oct 16 16:18:49 bastion LinuxCommandsWazuh: User aman [3350343]: 451 clear Oct 16 16:19:02 bastion LinuxCommandsWazuh: User aman [3350343]: 452 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:19:03 bastion LinuxCommandsWazuh: User aman [3350343]: 453 clear Oct 16 16:19:05 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2010 ls Oct 16 16:19:22 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2011 cp apps.Deployment.grafana.yaml ../backup/ Oct 16 16:19:41 bastion LinuxCommandsWazuh: User abhijeet [3490176]: 2000 sudo su ubunut Oct 16 16:19:46 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2000 mongo-ssh Oct 16 16:19:47 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2001 cd Oct 16 16:19:47 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2002 ls Oct 16 16:19:50 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2003 cd k8s/ Oct 16 16:19:51 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2004 ls Oct 16 16:19:52 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2005 cd loki/ Oct 16 16:19:53 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2006 ls Oct 16 16:19:54 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2007 cd .. Oct 16 16:19:54 bastion LinuxCommandsWazuh: User ubuntu [3497915]: 2000 mongo-ssh Oct 16 16:19:54 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2008 l; Oct 16 16:19:56 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2009 cat README.md Oct 16 16:20:00 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2010 ls Oct 16 16:20:05 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2011 cd nitrox-production/ Oct 16 16:20:05 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2012 ls Oct 16 16:20:06 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2013 cd .. Oct 16 16:20:07 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2014 ls Oct 16 16:20:10 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2015 cat WORKING.md Oct 16 16:20:10 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2016 l;s Oct 16 16:21:59 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2012 cp apps.Deployment.grafana.yaml ../backup/apps.Deployment.grafana.yaml-$(date +%Y-%m-%d).yaml Oct 16 16:22:01 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2013 ls Oct 16 16:22:15 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2017 cd nitrox-production/ Oct 16 16:22:15 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2018 ls Oct 16 16:22:18 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2019 cd nitrox-production/ Oct 16 16:22:18 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2020 l Oct 16 16:22:25 bastion LinuxCommandsWazuh: User ubuntu [3497627]: 2021 cat apps.Deployment.xlr8.yaml Oct 16 16:22:57 bastion LinuxCommandsWazuh: User ankur [3495839]: 513 k rollout restart deployment/house-of-click Oct 16 16:25:45 bastion LinuxCommandsWazuh: User aman [3350343]: 454 kubectl --version Oct 16 16:25:48 bastion LinuxCommandsWazuh: User aman [3350343]: 455 clear Oct 16 16:25:55 bastion LinuxCommandsWazuh: User aman [3350343]: 456 kubectl get pods Oct 16 16:26:20 bastion LinuxCommandsWazuh: User aman [3350343]: 457 kubectl get pods | grep chat Oct 16 16:27:10 bastion LinuxCommandsWazuh: User aman [3350343]: 458 kubectl exec -it chatbot-6556795b78-4z52r bash Oct 16 16:27:10 bastion LinuxCommandsWazuh: User aman [3350343]: 459 clear Oct 16 16:28:10 bastion LinuxCommandsWazuh: User ankur [3506537]: 510 byobu Oct 16 16:28:42 bastion LinuxCommandsWazuh: User ankur [3506537]: 511 k get pods | grep nitrox Oct 16 16:28:50 bastion LinuxCommandsWazuh: User aman [3350343]: 460 kubectl exec -it chatbot-6556795b78-4z52r bash Oct 16 16:28:50 bastion LinuxCommandsWazuh: User aman [3350343]: 461 clear Oct 16 16:29:00 bastion LinuxCommandsWazuh: User aman [3350343]: 462 exitr Oct 16 16:30:00 bastion LinuxCommandsWazuh: User ankur [3506537]: 512 k logs -f nitrox-dramatiq-56d6478cd4-6tghj Oct 16 16:30:09 bastion LinuxCommandsWazuh: User ankur [3506537]: 513 clickhouse- Oct 16 16:30:09 bastion LinuxCommandsWazuh: User ankur [3506537]: 513 clickhouse- Oct 16 16:30:28 bastion LinuxCommandsWazuh: User aman [3509004]: 465 exit Oct 16 16:32:33 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2014 vim apps.Deployment.grafana.yaml Oct 16 16:32:53 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2015 kubectl apply -f apps.Deployment.grafana.yaml -n loki Oct 16 16:33:17 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2016 kubectl get pods Oct 16 16:33:27 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2016 kubectl get pods Oct 16 16:34:23 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2017 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Oct 16 16:35:21 bastion LinuxCommandsWazuh: User ubuntu [3497915]: 2001 cool-server Oct 16 16:35:49 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2018 cd Oct 16 16:35:49 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2019 ls Oct 16 16:36:00 bastion LinuxCommandsWazuh: User ubuntu [3497915]: 2001 cool-server Oct 16 16:36:00 bastion LinuxCommandsWazuh: User ubuntu [3497915]: 2001 cool-server Oct 16 16:36:06 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2019 ls Oct 16 16:37:03 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2020 cat README.md Oct 16 16:38:22 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2021 ls Oct 16 16:38:34 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2022 cd k8s/ Oct 16 16:38:34 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2023 ls Oct 16 16:38:41 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2024 gcloud auth activate-service-account --key-file=./service.json Oct 16 16:38:41 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2024 gcloud auth activate-service-account --key-file=./service.json Oct 16 16:38:46 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2025 kubectl get pods Oct 16 16:38:51 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2026 gcloud container clusters get-credentials nitrox-production --zone asia-south2-b --project nitrox-436511 Oct 16 16:38:56 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2027 kubectl get pods Oct 16 16:39:23 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2028 ls Oct 16 16:39:27 bastion LinuxCommandsWazuh: User aman [3509004]: 466 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:39:28 bastion LinuxCommandsWazuh: User aman [3509004]: 467 clear Oct 16 16:39:57 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2029 vim WORKING.md Oct 16 16:39:57 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2030 ls Oct 16 16:40:00 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2031 cd loki/ Oct 16 16:40:00 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2032 l;s Oct 16 16:40:02 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2033 cd loki/ Oct 16 16:40:02 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2034 ;ls Oct 16 16:40:09 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2035 kubectl apply -f apps.Deployment.grafana.yaml -n loki Oct 16 16:40:15 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2036 kubectl get pods -n oki Oct 16 16:40:18 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2037 kubectl get pods -n loki Oct 16 16:41:44 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2038 kubectl get pods -n loki --watch Oct 16 16:41:47 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2039 kubectl get pods -n loki Oct 16 16:42:03 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2040 kubectl get pods -n loki --watch Oct 16 16:42:05 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2041 kubectl get pods -n loki Oct 16 16:42:24 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2042 kubectl logs grafana-6bf94f8c99-gs487 -n loki Oct 16 16:42:26 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2043 kubectl get pods -n loki Oct 16 16:42:29 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2044 kubectl logs grafana-6bf94f8c99-gs487 -n loki Oct 16 16:42:32 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2045 kubectl get pods -n loki Oct 16 16:42:47 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2046 kubectl describe pod grafana-6bf94f8c99-gs487 -n loki Oct 16 16:42:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3494144]: 2046 kubectl describe pod grafana-6bf94f8c99-gs487 -n loki] Oct 16 16:42:56 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2047 kubectl describe pod grafana-6bf94f8c99-gs487 -n loki --watch Oct 16 16:42:58 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2048 kubectl describe pod grafana-6bf94f8c99-gs487 -n loki Oct 16 16:43:10 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2049 kubectl get pods -n loki Oct 16 16:43:33 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2050 kubectl delete pods grafana-95d999b88-gcz52 -n loki Oct 16 16:43:34 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2051 kubectl get pods -n loki Oct 16 16:43:40 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2051 kubectl get pods -n loki Oct 16 16:43:49 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2051 kubectl get pods -n loki Oct 16 16:44:11 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2052 kubectl delete pods grafana-6bf94f8c99-gs487 grafana-95d999b88-fz5db -n loki Oct 16 16:44:13 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2053 kubectl get pods -n loki Oct 16 16:44:20 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2053 kubectl get pods -n loki Oct 16 16:44:27 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2054 kubectl get pods Oct 16 16:44:33 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2055 kubectl get pod -n loki Oct 16 16:44:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3494144]: 2055 kubectl get pod -n loki] Oct 16 16:44:47 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2056 kubectl get pod -n loki --watch Oct 16 16:44:51 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2057 kubectl get pod -n loki Oct 16 16:44:55 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [3494144]: 2057 kubectl get pod -n loki] Oct 16 16:45:31 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2058 kubectl desctribe pods Oct 16 16:45:32 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2059 kubectl get pod -n loki Oct 16 16:46:22 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2059 kubectl get pod -n loki Oct 16 16:46:35 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2060 kubectl delete pod grafana-6bf94f8c99-j54p8 -n loki Oct 16 16:46:42 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2061 kubectl get pod -n loki -o wide Oct 16 16:46:50 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2061 kubectl get pod -n loki -o wide Oct 16 16:47:35 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2062 kubectl get volume -n loki Oct 16 16:47:41 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2062 kubectl get volume -n loki Oct 16 16:47:48 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2063 kubectl get pvc -n loki Oct 16 16:48:06 bastion LinuxCommandsWazuh: User ankur [3487087]: 512 byobu Oct 16 16:48:26 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2064 kubectl get deployment -n loki Oct 16 16:52:39 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2065 kubectl get pod -n loki -o wide Oct 16 16:52:55 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2066 kubectl delete pod grafana-6bf94f8c99-jqrlh -n loki Oct 16 16:52:56 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2067 kubectl get pod -n loki -o wide Oct 16 16:53:54 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2067 kubectl get pod -n loki -o wide Oct 16 16:54:11 bastion LinuxCommandsWazuh: User ankur [3528018]: 514 exit Oct 16 16:54:13 bastion LinuxCommandsWazuh: User ankur [3528018]: 515 ls Oct 16 16:54:17 bastion LinuxCommandsWazuh: User ankur [3528158]: 514 exit Oct 16 16:54:44 bastion LinuxCommandsWazuh: User ankur [3528158]: 514 exit Oct 16 16:55:40 bastion LinuxCommandsWazuh: User aman [3530182]: 468 exit Oct 16 16:56:19 bastion LinuxCommandsWazuh: User ubuntu [3497915]: 2001 cool-server Oct 16 16:56:35 bastion LinuxCommandsWazuh: User aman [3530182]: 469 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 16:56:37 bastion LinuxCommandsWazuh: User aman [3530182]: 470 clear Oct 16 16:58:21 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2068 ls Oct 16 16:58:25 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2068 ls Oct 16 16:58:35 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2069 cat '\' Oct 16 16:58:59 bastion LinuxCommandsWazuh: User ubuntu [3494144]: 2070 ls Oct 16 16:59:09 bastion LinuxCommandsWazuh: User abhijeet [3533692]: 1998 mongo-ssh Oct 16 17:04:41 bastion LinuxCommandsWazuh: User abhijeet [3448552]: 2003 psql Oct 16 17:08:48 bastion LinuxCommandsWazuh: User rihan [3544648]: 1432 mongo Oct 16 17:09:21 bastion LinuxCommandsWazuh: User ankur [3528158]: 515 clickhouse-ssh Oct 16 17:10:10 bastion LinuxCommandsWazuh: User ubuntu [3547409]: 2000 exit Oct 16 17:10:42 bastion LinuxCommandsWazuh: User rihan [3548354]: 1432 mongo Oct 16 17:10:56 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 17:13:52 bastion LinuxCommandsWazuh: User abhijeet [3493998]: 1999 sudo su ubuntu Oct 16 17:20:25 bastion LinuxCommandsWazuh: User mohtashim [3557132]: 533 mongo pixel_v1 Oct 16 17:34:58 bastion LinuxCommandsWazuh: User aman [3530182]: 471 kubectl get pods | grep chat Oct 16 17:37:42 bastion LinuxCommandsWazuh: User aman [3530182]: 472 kubectl logs -f chatbot-6869b56df5-sbgqb Oct 16 17:37:42 bastion LinuxCommandsWazuh: User aman [3530182]: 472 kubectl logs -f chatbot-6869b56df5-sbgqb Oct 16 17:42:56 bastion LinuxCommandsWazuh: User aman [3530182]: 473 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Oct 16 17:42:57 bastion LinuxCommandsWazuh: User aman [3530182]: 474 clear Oct 16 17:44:43 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 17:48:09 bastion LinuxCommandsWazuh: User ankur [3559939]: 516 byobu Oct 16 17:48:45 bastion LinuxCommandsWazuh: User mohtashim [3560045]: 534 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 16 17:51:52 bastion LinuxCommandsWazuh: User ankur [3559939]: 517 ls Oct 16 17:51:55 bastion LinuxCommandsWazuh: message repeated 8 times: [ User ankur [3559939]: 517 ls] Oct 16 17:51:59 bastion LinuxCommandsWazuh: User ankur [3560472]: 517 ls Oct 16 17:53:39 bastion LinuxCommandsWazuh: User mohtashim [3562121]: 535 clickhouse-ssh Oct 16 17:57:34 bastion LinuxCommandsWazuh: User ankur [3566420]: 519 exit Oct 16 17:57:37 bastion LinuxCommandsWazuh: User ankur [3560472]: 518 byobu Oct 16 18:01:07 bastion LinuxCommandsWazuh: User ayush [3567298]: 509 sudo su - aman Oct 16 18:01:12 bastion LinuxCommandsWazuh: User ayush [3567298]: 510 ls Oct 16 18:01:13 bastion LinuxCommandsWazuh: User ayush [3567298]: 510 ls Oct 16 18:01:30 bastion LinuxCommandsWazuh: User ayush [3567298]: 511 vim Makefile Oct 16 18:01:36 bastion LinuxCommandsWazuh: User ayush [3567298]: 512 clear Oct 16 18:01:51 bastion LinuxCommandsWazuh: User aman [3567356]: 475 exit Oct 16 18:02:04 bastion LinuxCommandsWazuh: User aman [3567356]: 476 kubectl get pods | grep cocki Oct 16 18:02:20 bastion LinuxCommandsWazuh: User aman [3567356]: 477 kubectl get pods | grep cooki Oct 16 18:06:26 bastion LinuxCommandsWazuh: User aman [3567356]: 477 kubectl get pods | grep cooki Oct 16 18:06:34 bastion LinuxCommandsWazuh: User aman [3567356]: 477 kubectl get pods | grep cooki Oct 16 18:07:53 bastion LinuxCommandsWazuh: User aman [3567356]: 477 kubectl get pods | grep cooki Oct 16 18:08:20 bastion LinuxCommandsWazuh: User ubuntu [3568266]: 2000 clickhouse-ssh Oct 16 18:17:29 bastion LinuxCommandsWazuh: User aman [3567356]: 477 kubectl get pods | grep cooki Oct 16 18:17:32 bastion LinuxCommandsWazuh: User aman [3567356]: 478 clear Oct 16 18:17:34 bastion LinuxCommandsWazuh: User ayush [3567298]: 513 sudo su - aman Oct 16 18:30:08 bastion LinuxCommandsWazuh: User mohtashim [3570479]: 535 clickhouse-ssh Oct 16 18:39:01 bastion LinuxCommandsWazuh: User mohtashim [3570479]: 536 psql -h 10.94.16.3 -U postgres -d vortex_v2 Oct 16 18:39:03 bastion LinuxCommandsWazuh: User mohtashim [3570479]: 537 clear Oct 16 18:44:04 bastion LinuxCommandsWazuh: User ashish [3582769]: 747 byobu Oct 16 18:44:06 bastion LinuxCommandsWazuh: User ashish [3582857]: 747 byobu Oct 16 18:44:13 bastion LinuxCommandsWazuh: User ashish [3582857]: 748 kubectl get pods Oct 16 18:44:19 bastion LinuxCommandsWazuh: User ashish [3582857]: 749 kubectl get pods | cook Oct 16 18:44:22 bastion LinuxCommandsWazuh: User ashish [3582857]: 750 kubectl get pods | grep cook Oct 16 18:47:01 bastion LinuxCommandsWazuh: User rihan [3268858]: 1433 byobu Oct 16 18:51:50 bastion LinuxCommandsWazuh: User rihan [3268858]: 1434 mongo Oct 16 18:54:19 bastion LinuxCommandsWazuh: User ashish [3582857]: 751 kubectl exec -it cookie-cutter-queues-6d95888b9-zwnj7 bash Oct 16 18:54:19 bastion LinuxCommandsWazuh: User ashish [3582769]: 747 byobu Oct 16 19:42:00 bastion LinuxCommandsWazuh: User abhijeet [3600859]: 1998 sudo su ubuntu Oct 16 19:42:01 bastion LinuxCommandsWazuh: User abhijeet [3600859]: 1999 ls Oct 16 19:42:09 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3600859]: 1999 ls] Oct 16 19:42:43 bastion LinuxCommandsWazuh: User abhijeet [3600859]: 2000 cat /usr/local/bin/login-notify.sh Oct 16 19:43:26 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 1998 sudo su ubuntu Oct 16 19:43:26 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 1999 ls Oct 16 19:43:42 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3601010]: 1999 ls] Oct 16 19:43:49 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2000 cool-server Oct 16 19:43:54 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2001 ls Oct 16 19:44:04 bastion LinuxCommandsWazuh: message repeated 2 times: [ User abhijeet [3601010]: 2001 ls] Oct 16 19:44:30 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2002 la Oct 16 19:44:33 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2003 ls Oct 16 19:44:35 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2004 kls Oct 16 19:44:38 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2005 ls Oct 16 19:44:44 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [3601010]: 2005 ls] Oct 16 19:44:59 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2005 ls Oct 16 19:45:19 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2006 l Oct 16 19:45:20 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2007 ls Oct 16 19:45:22 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2007 ls Oct 16 19:45:25 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2007 ls Oct 16 19:45:45 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2007 ls Oct 16 19:45:49 bastion LinuxCommandsWazuh: message repeated 3 times: [ User abhijeet [3601010]: 2007 ls] Oct 16 19:45:54 bastion LinuxCommandsWazuh: User abhijeet [3601010]: 2008 lsc Oct 16 19:54:19 bastion LinuxCommandsWazuh: User mohtashim [3419912]: 527 k exec -it cookie-cutter-common-task-98798fd59-rszb7 bash