Nov 4 05:43:28 bastion LinuxCommandsWazuh: User ankur [860650]: 766 byobu Nov 4 05:54:35 bastion LinuxCommandsWazuh: User ankur [871614]: 766 byobu Nov 4 06:34:13 bastion LinuxCommandsWazuh: User ankur [890407]: 766 byobu Nov 4 06:35:17 bastion LinuxCommandsWazuh: User ankur [890407]: 766 byobu Nov 4 06:55:57 bastion LinuxCommandsWazuh: User ankur [893885]: 767 exit Nov 4 06:56:23 bastion LinuxCommandsWazuh: User ankur [871614]: 767 clickhouse-ssh Nov 4 06:56:42 bastion LinuxCommandsWazuh: User ankur [894620]: 768 clickhouse-ssh Nov 4 06:57:02 bastion LinuxCommandsWazuh: User ankur [893885]: 768 byobu Nov 4 07:18:55 bastion LinuxCommandsWazuh: User ankur [896797]: 771 exit Nov 4 07:20:47 bastion LinuxCommandsWazuh: User ankur [898799]: 771 exit Nov 4 07:21:11 bastion LinuxCommandsWazuh: User ankur [898799]: 772 clickhouse-ssh Nov 4 07:21:25 bastion LinuxCommandsWazuh: User ankur [896797]: 772 byobu Nov 4 08:40:39 bastion LinuxCommandsWazuh: User ankur [906613]: 775 exit Nov 4 09:54:56 bastion LinuxCommandsWazuh: User ankur [931856]: 776 byobu Nov 4 09:55:53 bastion LinuxCommandsWazuh: User ankur [931856]: 776 byobu Nov 4 11:06:42 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 31 zodiac-ssh Nov 4 11:07:45 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 31 zodiac-ssh Nov 4 11:14:58 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 32 zodiac-scraper-ssh Nov 4 11:15:38 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 33 zodiac-server-ssh Nov 4 11:16:02 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 34 zodiac-server Nov 4 11:17:44 bastion sarthak.s: root@ [941420]: exit [0] Nov 4 11:17:48 bastion LinuxCommandsWazuh: User sarthak.s [939924]: 35 sudo su Nov 4 11:17:56 bastion LinuxCommandsWazuh: User ubuntu [941450]: 2000 exit Nov 4 11:18:02 bastion LinuxCommandsWazuh: User ubuntu [941450]: 2001 cd Nov 4 11:20:31 bastion LinuxCommandsWazuh: User sarthak.s [941973]: 31 zodiac-ssh Nov 4 11:27:10 bastion LinuxCommandsWazuh: User sarthak.s [943320]: 31 zodiac-ssh Nov 4 11:29:50 bastion LinuxCommandsWazuh: User ashish [943520]: 839 clickhouse-ssh Nov 4 11:30:50 bastion LinuxCommandsWazuh: User ashish [943520]: 839 clickhouse-ssh Nov 4 11:30:51 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [943520]: 839 clickhouse-ssh] Nov 4 11:31:30 bastion LinuxCommandsWazuh: User aman [944607]: 672 exit Nov 4 11:34:18 bastion LinuxCommandsWazuh: User aman [944607]: 673 mongo pixel_v1 Nov 4 11:37:12 bastion LinuxCommandsWazuh: User rihan [706166]: 1484 mongo Nov 4 11:44:09 bastion LinuxCommandsWazuh: User mohtashim [957180]: 699 psql; Nov 4 11:47:44 bastion LinuxCommandsWazuh: User mohtashim [957180]: 700 psql -h 10.94.16.3 -U postgres -d datapulse_v1 Nov 4 11:49:53 bastion LinuxCommandsWazuh: User aman [944607]: 674 clear Nov 4 11:49:56 bastion LinuxCommandsWazuh: User aman [944607]: 675 exit Nov 4 11:51:17 bastion LinuxCommandsWazuh: User abhijeet [964734]: 1998 sudo su anam Nov 4 11:51:27 bastion LinuxCommandsWazuh: User abhijeet [964734]: 1999 ls Nov 4 11:53:25 bastion LinuxCommandsWazuh: User aman [944607]: 676 clear Nov 4 12:15:13 bastion LinuxCommandsWazuh: User ashish [988584]: 839 clickhouse-ssh Nov 4 12:15:14 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [988584]: 839 clickhouse-ssh] Nov 4 12:15:22 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:16:59 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:18:03 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:18:07 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:18:50 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:20:05 bastion LinuxCommandsWazuh: User aman [944607]: 677 mongo pixel_v1 Nov 4 12:20:06 bastion LinuxCommandsWazuh: User aman [944607]: 678 clear Nov 4 12:20:07 bastion LinuxCommandsWazuh: User aman [944607]: 679 exit Nov 4 12:22:06 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 12:22:07 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [988584]: 840 kubectl get pods] Nov 4 12:25:44 bastion LinuxCommandsWazuh: User ankur [999838]: 777 exit Nov 4 12:28:49 bastion LinuxCommandsWazuh: User rihan [495053]: 1482 mongo Nov 4 12:29:23 bastion LinuxCommandsWazuh: User rihan [495053]: 1483 kubectl get configmaps Nov 4 12:29:24 bastion LinuxCommandsWazuh: User ankur [1006716]: 778 byobu Nov 4 12:34:36 bastion LinuxCommandsWazuh: User rihan [495053]: 1484 kubectl edit configmap nitrox-dj-config Nov 4 12:38:19 bastion LinuxCommandsWazuh: User ankur [1023776]: 778 byobu Nov 4 12:38:28 bastion LinuxCommandsWazuh: User aman [944607]: 680 clear Nov 4 12:38:36 bastion LinuxCommandsWazuh: User aman [944607]: 681 exit Nov 4 12:38:37 bastion LinuxCommandsWazuh: User aman [944607]: 682 clear Nov 4 12:38:38 bastion LinuxCommandsWazuh: User aman [944607]: 683 exit Nov 4 12:47:50 bastion LinuxCommandsWazuh: User ankur [1041831]: 778 byobu Nov 4 12:51:06 bastion LinuxCommandsWazuh: User ubuntu [941450]: 2002 zodiac-scraper-ssh Nov 4 13:02:31 bastion LinuxCommandsWazuh: User abhijeet [964734]: 2000 zodiac-scraper-ssh Nov 4 13:02:41 bastion LinuxCommandsWazuh: User ankur [1041831]: 779 clickhouse-ssh Nov 4 13:02:51 bastion LinuxCommandsWazuh: User ankur [418747]: 767 k rollout restart deployment/house-of-click Nov 4 13:03:55 bastion LinuxCommandsWazuh: User ankur [418747]: 768 k get pods | grep house Nov 4 13:03:59 bastion LinuxCommandsWazuh: User ankur [418747]: 769 k rollout restart deployment/house-of-click Nov 4 13:04:02 bastion LinuxCommandsWazuh: User ankur [418747]: 770 k get pods | grep house Nov 4 13:04:07 bastion LinuxCommandsWazuh: User abhijeet [964734]: 2000 zodiac-scraper-ssh Nov 4 13:10:38 bastion LinuxCommandsWazuh: User aman [1084941]: 683 exit Nov 4 13:10:39 bastion LinuxCommandsWazuh: User aman [1084941]: 684 clear Nov 4 13:12:26 bastion LinuxCommandsWazuh: User ubuntu [1088273]: 2000 zodiac-scraper-ssh Nov 4 13:12:30 bastion LinuxCommandsWazuh: User rihan [1088377]: 1487 kubectl edit configmap nitrox-dj-config Nov 4 13:28:41 bastion LinuxCommandsWazuh: User aman [1084941]: 685 mongo pixel_v1 Nov 4 13:34:10 bastion LinuxCommandsWazuh: User rihan [1088377]: 1488 zodiac-server Nov 4 13:39:09 bastion LinuxCommandsWazuh: User aman [1084941]: 686 clear Nov 4 14:10:42 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 1998 zodiac-scraper-ssh Nov 4 14:10:51 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 1999 ls Nov 4 14:24:32 bastion LinuxCommandsWazuh: User ankur [1160298]: 778 byobu Nov 4 14:24:42 bastion LinuxCommandsWazuh: User ankur [418747]: 771 k get pods | grep ray Nov 4 14:25:21 bastion LinuxCommandsWazuh: User ankur [418747]: 772 k get pods | grep house Nov 4 14:29:06 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2000 zodiac-scraper-ssh Nov 4 14:29:07 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2001 ls Nov 4 14:29:13 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2002 mongosh Nov 4 14:29:41 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2003 sudo systemctl status mongod.service Nov 4 14:29:52 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2004 sudo systemctl enable mongod.service Nov 4 14:29:53 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2005 sudo systemctl status mongod.service Nov 4 14:29:59 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2006 sudo systemctl start mongod.service Nov 4 14:30:02 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2007 sudo systemctl status mongod.service Nov 4 14:30:11 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2008 date Nov 4 14:30:16 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2009 cd /mnt/mon Nov 4 14:30:20 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2010 cd /mnt/ Nov 4 14:30:20 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2011 ls Nov 4 14:30:22 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2011 ls Nov 4 14:30:25 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2012 cd /mnt/ Nov 4 14:30:44 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2013 sudo systemctl start mongod.service Nov 4 14:30:49 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2014 sudo systemctl status mongod.service Nov 4 14:31:04 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2015 htop Nov 4 14:31:05 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2016 ls Nov 4 14:31:14 bastion LinuxCommandsWazuh: User abhijeet [1146877]: 2017 sudo systemctl stop mongod.service Nov 4 14:31:38 bastion LinuxCommandsWazuh: User ankur [1174936]: 778 byobu Nov 4 14:32:00 bastion LinuxCommandsWazuh: User ankur [1174936]: 779 mongo Nov 4 14:32:16 bastion LinuxCommandsWazuh: User ankur [1176117]: 778 byobu Nov 4 14:33:40 bastion LinuxCommandsWazuh: User ankur [1041831]: 779 clickhouse-ssh Nov 4 14:33:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1041831]: 779 clickhouse-ssh ] Nov 4 14:34:02 bastion LinuxCommandsWazuh: User ankur [1174936]: 780 mongo pixel_v1 Nov 4 14:34:05 bastion LinuxCommandsWazuh: User ankur [688417]: 768 clickhouse-ssh Nov 4 14:34:09 bastion LinuxCommandsWazuh: User ankur [4098413]: 756 psql Nov 4 14:34:12 bastion LinuxCommandsWazuh: User ankur [416746]: 762 clickhouse-ssh Nov 4 14:34:16 bastion LinuxCommandsWazuh: User ankur [1179826]: 804 exit Nov 4 14:34:19 bastion LinuxCommandsWazuh: User ankur [417522]: 761 kafka-ssh Nov 4 14:34:19 bastion LinuxCommandsWazuh: User ankur [1160298]: 778 byobu Nov 4 14:34:21 bastion LinuxCommandsWazuh: User ankur [1180029]: 806 exit Nov 4 14:34:25 bastion LinuxCommandsWazuh: User ankur [1160298]: 778 byobu Nov 4 14:34:46 bastion LinuxCommandsWazuh: User saurav [1180632]: 24 exit Nov 4 14:34:57 bastion LinuxCommandsWazuh: User saurav [1180632]: 25 zodiac-ssh Nov 4 14:39:57 bastion LinuxCommandsWazuh: User abhijeet [1186112]: 1998 zodiac-scraper-ssh Nov 4 14:40:04 bastion LinuxCommandsWazuh: User abhijeet [1186112]: 1999 kubectl get pods | grep rag Nov 4 14:40:06 bastion LinuxCommandsWazuh: User abhijeet [1186112]: 2000 kubectl get pods | grep r Nov 4 14:40:14 bastion LinuxCommandsWazuh: User abhijeet [1186112]: 2001 kubectl get pods | grep ray Nov 4 14:41:28 bastion LinuxCommandsWazuh: User abhijeet [1186112]: 2002 zodiac-scraper-ssh Nov 4 14:42:08 bastion LinuxCommandsWazuh: User abhijeet [1188435]: 1998 zodiac-scraper-ssh Nov 4 14:43:34 bastion LinuxCommandsWazuh: User saurav [1189830]: 25 zodiac-server Nov 4 14:43:40 bastion LinuxCommandsWazuh: User saurav [1189830]: 26 cd zodiac-server Nov 4 14:43:41 bastion LinuxCommandsWazuh: User saurav [1189830]: 27 ls Nov 4 14:56:36 bastion LinuxCommandsWazuh: User saurav [1203149]: 28 zodiac-server Nov 4 14:57:42 bastion LinuxCommandsWazuh: User abhijeet [1188435]: 1998 zodiac-scraper-ssh Nov 4 14:58:32 bastion LinuxCommandsWazuh: User abhijeet [1205063]: 1998 exit Nov 4 15:07:20 bastion LinuxCommandsWazuh: User aman [1213961]: 683 exit Nov 4 15:09:52 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 15:11:57 bastion LinuxCommandsWazuh: User ashish [988584]: 840 kubectl get pods Nov 4 15:11:58 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [988584]: 840 kubectl get pods] Nov 4 15:12:18 bastion LinuxCommandsWazuh: User abhijeet [1218804]: 1998 exit Nov 4 15:12:21 bastion LinuxCommandsWazuh: User abhijeet [1218804]: 1999 lsc Nov 4 15:14:30 bastion LinuxCommandsWazuh: User sarthak.s [1220978]: 36 sudo su ubuntu Nov 4 15:14:37 bastion LinuxCommandsWazuh: User sarthak.s [1220978]: 37 zodiac-server-ssh Nov 4 15:14:41 bastion LinuxCommandsWazuh: User sarthak.s [1220978]: 38 zodiac-server Nov 4 15:18:22 bastion LinuxCommandsWazuh: User sarthak.s [1225400]: 36 sudo su ubuntu Nov 4 15:18:22 bastion LinuxCommandsWazuh: User saurav [1225402]: 28 zodiac-server Nov 4 15:22:20 bastion LinuxCommandsWazuh: User aman [1213961]: 684 mongo pixel_v1 Nov 4 15:22:21 bastion LinuxCommandsWazuh: User aman [1213961]: 685 clear Nov 4 15:22:32 bastion LinuxCommandsWazuh: User aman [1213961]: 686 kubectl get pods | grep cookie Nov 4 15:23:08 bastion LinuxCommandsWazuh: User aman [1213961]: 687 kubectl logs -f cookie-cutter-common-task-5fcf585c5-66gl7 Nov 4 15:23:15 bastion LinuxCommandsWazuh: User aman [1213961]: 688 kubectl get pods | grep cookie Nov 4 15:41:34 bastion LinuxCommandsWazuh: User aman [1248607]: 693 kubectl logs -f cookie-cutter-common-task-5fcf585c5-9hsjf Nov 4 15:41:37 bastion LinuxCommandsWazuh: User aman [1248607]: 694 clear Nov 4 15:41:45 bastion LinuxCommandsWazuh: User aman [1248607]: 695 kubectl get pods | grep cookie Nov 4 15:42:03 bastion LinuxCommandsWazuh: User aman [1248607]: 696 kubectl logs -f cookie-cutter-common-task-5fcf585c5-9hsjf Nov 4 15:42:06 bastion LinuxCommandsWazuh: User aman [1248607]: 697 kubectl get pods | grep cookie Nov 4 15:42:43 bastion LinuxCommandsWazuh: User aman [1248607]: 698 kubectl logs -f cookie-cutter-common-task-5fcf585c5-q8qwf Nov 4 15:44:03 bastion LinuxCommandsWazuh: User aman [1248607]: 699 kubectl logs -f cookie-cutter-common-task-5fcf585c5-q8qwf | grep "AIU_FETCH" Nov 4 15:44:03 bastion LinuxCommandsWazuh: message repeated 2 times: [ User aman [1248607]: 699 kubectl logs -f cookie-cutter-common-task-5fcf585c5-q8qwf | grep "AIU_FETCH"] Nov 4 15:44:05 bastion LinuxCommandsWazuh: User aman [1248607]: 700 clear Nov 4 15:46:49 bastion LinuxCommandsWazuh: User abhijeet [1254301]: 1998 zodiac-scraper-ssh Nov 4 15:46:50 bastion LinuxCommandsWazuh: User abhijeet [1254301]: 1999 lsc Nov 4 15:46:51 bastion LinuxCommandsWazuh: User abhijeet [1254301]: 2000 ls Nov 4 15:47:49 bastion LinuxCommandsWazuh: User aman [1255358]: 701 exit Nov 4 15:52:45 bastion LinuxCommandsWazuh: User nikhils-art [1260144]: 66 zodiac-server Nov 4 15:52:52 bastion LinuxCommandsWazuh: User nikhils-art [1260144]: 67 xodiac-server Nov 4 16:04:47 bastion LinuxCommandsWazuh: User sarthak.s [1271963]: 40 zodiac-ssh Nov 4 16:05:05 bastion LinuxCommandsWazuh: User saurav [1272345]: 28 zodiac-server Nov 4 16:12:15 bastion LinuxCommandsWazuh: User sarthak.s [1279694]: 40 zodiac-ssh Nov 4 16:19:05 bastion LinuxCommandsWazuh: User abhijeet [1286606]: 1998 zodiac-scraper-ssh Nov 4 16:39:00 bastion LinuxCommandsWazuh: User abhijeet [1286606]: 1998 zodiac-scraper-ssh Nov 4 16:46:23 bastion LinuxCommandsWazuh: User abhijeet [1313959]: 1998 zodiac-scraper-ssh Nov 4 17:05:11 bastion LinuxCommandsWazuh: User ankur [1320321]: 807 exit Nov 4 17:05:14 bastion LinuxCommandsWazuh: User ankur [1320378]: 807 exit Nov 4 17:05:15 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1320378]: 807 exit] Nov 4 17:07:44 bastion LinuxCommandsWazuh: User abhijeet [1323558]: 1998 zodiac-scraper-ssh Nov 4 17:23:46 bastion LinuxCommandsWazuh: User ankur [1320321]: 808 byobu Nov 4 17:27:08 bastion LinuxCommandsWazuh: User ankur [1339997]: 809 exit Nov 4 17:29:36 bastion LinuxCommandsWazuh: User aman [1342409]: 701 exit Nov 4 17:29:37 bastion LinuxCommandsWazuh: User aman [1342409]: 702 clear Nov 4 17:33:55 bastion LinuxCommandsWazuh: User abhijeet [1346642]: 1998 zodiac-scraper-ssh Nov 4 17:36:25 bastion LinuxCommandsWazuh: User rihan [1349647]: 1488 zodiac-server Nov 4 17:36:44 bastion LinuxCommandsWazuh: User aman [1342409]: 703 mongo pixel_v1 Nov 4 17:36:46 bastion LinuxCommandsWazuh: User aman [1342409]: 704 clear Nov 4 17:38:22 bastion LinuxCommandsWazuh: User ankur [1339997]: 810 byobu Nov 4 17:38:41 bastion LinuxCommandsWazuh: User rihan [1349647]: 1489 byobu Nov 4 17:39:38 bastion LinuxCommandsWazuh: User aman [1342409]: 705 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 4 17:39:42 bastion LinuxCommandsWazuh: User aman [1342409]: 706 clear Nov 4 17:41:29 bastion LinuxCommandsWazuh: User aman [1342409]: 706 clear Nov 4 17:41:37 bastion LinuxCommandsWazuh: User aman [1342409]: 707 mongo pixel_V1 Nov 4 17:45:16 bastion LinuxCommandsWazuh: User ayush [1354069]: 553 sudo su - aman Nov 4 17:45:33 bastion LinuxCommandsWazuh: User ayush [1354069]: 554 kubectl get configmap Nov 4 17:45:38 bastion LinuxCommandsWazuh: User ayush [1354069]: 555 kubectl get configmap | grep chat Nov 4 17:45:49 bastion LinuxCommandsWazuh: User ayush [1354069]: 556 kubectl edit chatbot-config Nov 4 17:46:45 bastion LinuxCommandsWazuh: User abhijeet [1354935]: 1998 zodiac-scraper-ssh Nov 4 17:46:47 bastion LinuxCommandsWazuh: User ankur [1355036]: 811 exit Nov 4 17:46:49 bastion LinuxCommandsWazuh: User ankur [1355149]: 811 exit Nov 4 17:46:54 bastion LinuxCommandsWazuh: User ankur [1355235]: 811 exit Nov 4 17:46:55 bastion LinuxCommandsWazuh: User ankur [1355235]: 812 cd Nov 4 17:46:58 bastion LinuxCommandsWazuh: User ankur [1355235]: 813 cat .ssh/id_rsa.pub Nov 4 17:47:08 bastion LinuxCommandsWazuh: User ayush [1354069]: 557 kubectl edit configmap chatbot-config Nov 4 17:47:28 bastion LinuxCommandsWazuh: User abhijeet [1355859]: 1998 zodiac-scraper-ssh Nov 4 17:47:35 bastion LinuxCommandsWazuh: User abhijeet [1355859]: 1999 cat .bashrc | grep sc Nov 4 17:47:41 bastion LinuxCommandsWazuh: User ayush [1354069]: 558 kubectl rollout restart deploy/chatbot Nov 4 17:47:53 bastion LinuxCommandsWazuh: User ankur [1355235]: 814 vim .bashrc Nov 4 17:47:57 bastion LinuxCommandsWazuh: User ankur [1355235]: 815 source .bashrc Nov 4 17:48:00 bastion LinuxCommandsWazuh: User ayush [1354069]: 559 kubectl get pods | grep chat Nov 4 17:48:08 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ayush [1354069]: 559 kubectl get pods | grep chat] Nov 4 17:48:19 bastion LinuxCommandsWazuh: User ayush [1354069]: 560 kubectl get configmap | grep chat Nov 4 17:48:24 bastion LinuxCommandsWazuh: User ayush [1354069]: 561 kubectl get configmap | grep ray Nov 4 17:49:09 bastion LinuxCommandsWazuh: User ayush [1354069]: 561 kubectl get configmap | grep ray Nov 4 17:49:26 bastion LinuxCommandsWazuh: User ayush [1354069]: 561 kubectl get configmap | grep ray Nov 4 17:50:07 bastion LinuxCommandsWazuh: User ankur [1358639]: 811 exit Nov 4 17:50:09 bastion LinuxCommandsWazuh: User ankur [1358639]: 811 exit Nov 4 17:50:12 bastion LinuxCommandsWazuh: User ankur [1358796]: 812 byobu Nov 4 17:50:37 bastion LinuxCommandsWazuh: User ayush [1354069]: 562 kubectl get deploy Nov 4 17:50:45 bastion LinuxCommandsWazuh: User ayush [1354069]: 563 kubectl get deploy | grep ray Nov 4 17:51:11 bastion LinuxCommandsWazuh: User ayush [1354069]: 564 kubectl describe deploy ray-chatbot Nov 4 17:53:43 bastion LinuxCommandsWazuh: User aman [1342409]: 708 mongo pixel_v1 Nov 4 17:53:44 bastion LinuxCommandsWazuh: User aman [1342409]: 709 clear Nov 4 17:55:03 bastion LinuxCommandsWazuh: User aman [1363481]: 701 exit Nov 4 17:57:24 bastion LinuxCommandsWazuh: User ayush [1354069]: 565 kubectl get configmap ray-patched-config -o yaml | sed 's/name: ray-patched-config/name: ray-chatbot-config/' | kubectl create -f - Nov 4 17:57:38 bastion LinuxCommandsWazuh: User ayush [1354069]: 566 kubectl get configmap Nov 4 17:57:44 bastion LinuxCommandsWazuh: User ayush [1354069]: 567 kubectl get configmap | grep ray Nov 4 17:58:00 bastion LinuxCommandsWazuh: User ayush [3684421]: 555 kubectl get configmap ray-patched-config -o yaml | sed 's/name: ray-patched-config/name: ray-chatbot-config/' \ Nov 4 17:58:00 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [3684421]: 555 kubectl get configmap ray-patched-config -o yaml | sed 's/name: ray-patched-config/name: ray-chatbot-config/' \] Nov 4 17:58:13 bastion LinuxCommandsWazuh: User ayush [3684421]: 556 kubectl get configmap | grep ray Nov 4 18:08:12 bastion LinuxCommandsWazuh: User aman [1342409]: 710 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 4 18:08:13 bastion LinuxCommandsWazuh: User aman [1342409]: 711 clear Nov 4 18:08:17 bastion LinuxCommandsWazuh: User aman [1342409]: 712 redis-cli auth 628a85a2-9474-475a-b234-f00bbae11964 Nov 4 18:09:41 bastion LinuxCommandsWazuh: User aman [1342409]: 713 redis-cli -a 628a85a2-9474-475a-b234-f00bbae11964 Nov 4 18:09:42 bastion LinuxCommandsWazuh: User aman [1342409]: 714 clear Nov 4 18:10:11 bastion LinuxCommandsWazuh: User ayush [3684421]: 557 kubectl edit configmap ray-chatbot-config Nov 4 18:10:36 bastion LinuxCommandsWazuh: User ayush [3684421]: 558 redis-cli Nov 4 18:10:43 bastion LinuxCommandsWazuh: User ayush [3684421]: 559 kubectl edit configmap ray-chatbot-config Nov 4 18:10:46 bastion LinuxCommandsWazuh: User ayush [3684421]: 560 redis-cli Nov 4 18:10:46 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [3684421]: 560 redis-cli ] Nov 4 18:10:48 bastion LinuxCommandsWazuh: User ayush [3684421]: 561 redis Nov 4 18:11:00 bastion LinuxCommandsWazuh: User venky [1383274]: 2000 exit Nov 4 18:11:03 bastion LinuxCommandsWazuh: User venky [1383274]: 2000 exit Nov 4 18:12:32 bastion LinuxCommandsWazuh: User venky [1383274]: 2001 redis Nov 4 18:17:24 bastion LinuxCommandsWazuh: User aman [1390053]: 715 exit Nov 4 18:17:33 bastion LinuxCommandsWazuh: User aman [1390053]: 716 kubectl get pods | grep vortex Nov 4 18:18:45 bastion LinuxCommandsWazuh: User aman [1390053]: 717 kubectl logs -f vortex-799cb497f-kr9pp Nov 4 18:18:45 bastion LinuxCommandsWazuh: User aman [1390053]: 717 kubectl logs -f vortex-799cb497f-kr9pp Nov 4 18:20:18 bastion LinuxCommandsWazuh: User aman [1390053]: 717 kubectl logs -f vortex-799cb497f-kr9pp Nov 4 18:22:05 bastion LinuxCommandsWazuh: User aman [1390053]: 718 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 4 18:22:06 bastion LinuxCommandsWazuh: User aman [1390053]: 719 clear Nov 4 18:25:04 bastion LinuxCommandsWazuh: User ayush [1354069]: 568 byobu Nov 4 18:25:06 bastion LinuxCommandsWazuh: User ayush [1354069]: 569 kubectl get configmap Nov 4 18:25:24 bastion LinuxCommandsWazuh: User venky [1383274]: 2002 kubectl get configmap Nov 4 18:25:25 bastion LinuxCommandsWazuh: User ayush [1398230]: 553 sudo su - aman Nov 4 18:25:36 bastion LinuxCommandsWazuh: User ayush [1398230]: 554 kubectl get pods | grep ray Nov 4 18:25:47 bastion LinuxCommandsWazuh: User ayush [1398230]: 554 kubectl get pods | grep ray Nov 4 18:25:53 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ayush [1398230]: 554 kubectl get pods | grep ray] Nov 4 18:26:15 bastion LinuxCommandsWazuh: User ayush [1398230]: 555 kubectl get congifmap | grep ray Nov 4 18:26:34 bastion LinuxCommandsWazuh: User ayush [1398230]: 556 kubectl get configmap Nov 4 18:26:38 bastion LinuxCommandsWazuh: User ayush [1398230]: 557 kubectl get configmap | grep ray Nov 4 18:27:28 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:27:46 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:28:40 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:28:52 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:30:22 bastion LinuxCommandsWazuh: User abhijeet [1355859]: 2000 ls Nov 4 18:30:27 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:30:34 bastion LinuxCommandsWazuh: User ayush [1398230]: 558 kubectl edit configmap ray-chatbot-config Nov 4 18:30:41 bastion LinuxCommandsWazuh: User ayush [1354069]: 570 byobu Nov 4 18:30:44 bastion LinuxCommandsWazuh: User ankur [1403735]: 812 byobu Nov 4 18:30:47 bastion LinuxCommandsWazuh: User ankur [1403856]: 812 byobu Nov 4 18:30:48 bastion LinuxCommandsWazuh: User ayush [1354069]: 571 kubectl describe deploy ray-chatbot Nov 4 18:31:18 bastion LinuxCommandsWazuh: User ayush [1354069]: 572 kubectl rollout restart deploy/ray-chatbot Nov 4 18:31:20 bastion LinuxCommandsWazuh: User ankur [1404486]: 812 byobu Nov 4 18:31:21 bastion LinuxCommandsWazuh: User ankur [1404486]: 813 ls Nov 4 18:31:28 bastion LinuxCommandsWazuh: User ayush [1398230]: 559 kubectl get pods | grep ray Nov 4 18:31:35 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ayush [1398230]: 559 kubectl get pods | grep ray] Nov 4 18:31:36 bastion LinuxCommandsWazuh: User ankur [1404486]: 813 ls Nov 4 18:31:36 bastion LinuxCommandsWazuh: User ayush [1398230]: 559 kubectl get pods | grep ray Nov 4 18:31:38 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [1398230]: 559 kubectl get pods | grep ray] Nov 4 18:31:39 bastion LinuxCommandsWazuh: User ayush [1405258]: 553 sudo su - aman Nov 4 18:31:45 bastion LinuxCommandsWazuh: User ayush [1405258]: 554 kubectl logs -f ray-chatbot Nov 4 18:31:49 bastion LinuxCommandsWazuh: User ayush [1398230]: 559 kubectl get pods | grep ray Nov 4 18:32:11 bastion LinuxCommandsWazuh: User ankur [1406274]: 812 byobu Nov 4 18:32:14 bastion LinuxCommandsWazuh: User ankur [1406274]: 813 ls Nov 4 18:32:25 bastion LinuxCommandsWazuh: User ankur [1406274]: 814 k get pods | grep hou Nov 4 18:33:10 bastion LinuxCommandsWazuh: User ankur [1406274]: 815 k rollout restart deployment/house-of-click Nov 4 18:35:43 bastion LinuxCommandsWazuh: User ankur [1403735]: 812 byobu Nov 4 18:36:49 bastion LinuxCommandsWazuh: User ayush [1398230]: 560 kubectl edit configmap ray-chatbot-config Nov 4 18:39:41 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:39:55 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ayush [1398230]: 561 kubectl get pods | grep ray] Nov 4 18:40:07 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:40:11 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ayush [1398230]: 561 kubectl get pods | grep ray] Nov 4 18:40:21 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:40:22 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:40:28 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:40:30 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [1398230]: 561 kubectl get pods | grep ray] Nov 4 18:40:40 bastion LinuxCommandsWazuh: User ayush [1405258]: 555 kubectl logs -f ray-chatbot-57b7c59866-6vzkp Nov 4 18:40:43 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:40:44 bastion LinuxCommandsWazuh: User ayush [1398230]: 561 kubectl get pods | grep ray Nov 4 18:42:54 bastion LinuxCommandsWazuh: User ayush [1398230]: 562 kubectl get configmap | grep ray Nov 4 18:44:22 bastion LinuxCommandsWazuh: User venky [1383274]: 2003 kubectl get configmap | grep ray Nov 4 18:45:12 bastion LinuxCommandsWazuh: User ayush [1398230]: 563 kubectl edit configmap ray-patched-config Nov 4 18:45:19 bastion LinuxCommandsWazuh: User ayush [1398230]: 563 kubectl edit configmap ray-patched-config Nov 4 18:45:19 bastion LinuxCommandsWazuh: User ayush [1398230]: 563 kubectl edit configmap ray-patched-config Nov 4 18:45:20 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ayush [1398230]: 563 kubectl edit configmap ray-patched-config] Nov 4 18:51:58 bastion LinuxCommandsWazuh: User sarthak.s [1429618]: 40 zodiac-ssh Nov 4 19:02:01 bastion LinuxCommandsWazuh: User aman [1390053]: 720 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 4 19:02:03 bastion LinuxCommandsWazuh: User aman [1390053]: 721 clar Nov 4 19:02:04 bastion LinuxCommandsWazuh: User aman [1390053]: 722 clear Nov 4 19:02:17 bastion LinuxCommandsWazuh: User aman [1363481]: 702 mongo pixel_v1 Nov 4 19:02:18 bastion LinuxCommandsWazuh: User aman [1363481]: 703 clear Nov 4 19:12:42 bastion LinuxCommandsWazuh: User nikhils-art [1432755]: 68 zodiac-server Nov 4 19:44:12 bastion LinuxCommandsWazuh: User ankur [1355235]: 816 zodiac-scraper-ssh Nov 4 20:00:01 bastion LinuxCommandsWazuh: User abhijeet [1437095]: 1998 mongo-ssh Nov 4 22:05:22 bastion LinuxCommandsWazuh: User sarthak.s [1448341]: 40 zodiac-ssh Nov 4 22:40:53 bastion LinuxCommandsWazuh: User ayush [1405258]: 556 kubectl logs -f ray-chatbot-984476d67-vmhrj Nov 4 22:50:03 bastion LinuxCommandsWazuh: User sarthak.s [1452374]: 40 zodiac-ssh Nov 4 22:54:04 bastion LinuxCommandsWazuh: User sarthak.s [1452690]: 40 zodiac-ssh Nov 4 23:15:41 bastion LinuxCommandsWazuh: User ankur [1455953]: 818 zodiac-scraper-ssh Nov 4 23:22:58 bastion LinuxCommandsWazuh: User ankur [1463017]: 818 zodiac-scraper-ssh Nov 4 23:24:16 bastion LinuxCommandsWazuh: User ankur [1465217]: 819 byobu Nov 4 23:38:36 bastion LinuxCommandsWazuh: User ankur [1320378]: 808 psql Nov 4 23:38:39 bastion LinuxCommandsWazuh: User ankur [1404486]: 814 kafka-ssh Nov 4 23:38:46 bastion LinuxCommandsWazuh: User ankur [1358639]: 812 zodiac-scraper-ssh Nov 4 23:38:51 bastion LinuxCommandsWazuh: User ankur [1480817]: 831 exit Nov 4 23:39:02 bastion LinuxCommandsWazuh: User ankur [1480817]: 832 k get pods | grep big- Nov 4 23:39:52 bastion LinuxCommandsWazuh: User ankur [1481842]: 831 exit Nov 4 23:39:54 bastion LinuxCommandsWazuh: User ankur [1481842]: 832 ls Nov 4 23:46:05 bastion LinuxCommandsWazuh: User ankur [1403856]: 813 clickhouse-ssh Nov 4 23:46:13 bastion LinuxCommandsWazuh: User ankur [1465217]: 819 byobu Nov 4 23:46:46 bastion LinuxCommandsWazuh: User ankur [1465217]: 820 ps -ef Nov 4 23:46:58 bastion LinuxCommandsWazuh: User ankur [1465217]: 820 ps -ef Nov 4 23:46:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [1465217]: 820 ps -ef] Nov 4 23:47:16 bastion LinuxCommandsWazuh: User ankur [1465217]: 821 ps aux | grep -i byobu Nov 4 23:47:33 bastion LinuxCommandsWazuh: User ankur [1465217]: 822 ps aux | grep -i byobu | grep -v grep Nov 4 23:47:59 bastion LinuxCommandsWazuh: User ankur [1465217]: 823 pgrep -a -u $(whoami) byobu Nov 4 23:48:02 bastion LinuxCommandsWazuh: User ankur [1465217]: 824 pgrep -a byobu Nov 4 23:48:18 bastion LinuxCommandsWazuh: User ankur [1465217]: 825 ps aux | grep -i byobu | grep -v grep Nov 4 23:48:27 bastion LinuxCommandsWazuh: User ankur [1465217]: 826 kill -9 1320371 Nov 4 23:48:30 bastion LinuxCommandsWazuh: User ankur [1465217]: 827 ps aux | grep -i byobu | grep -v grep Nov 4 23:48:34 bastion LinuxCommandsWazuh: User ankur [1465217]: 828 ls Nov 4 23:48:37 bastion LinuxCommandsWazuh: User ankur [1465217]: 829 clear Nov 4 23:48:40 bastion LinuxCommandsWazuh: User ankur [1488538]: 837 k logs -f big-o-cookie-cutter-b6d5779d6-n4rz5 Nov 4 23:48:43 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ankur [1488538]: 837 k logs -f big-o-cookie-cutter-b6d5779d6-n4rz5]