Nov 7 00:34:05 bastion LinuxCommandsWazuh: User ankur [2255583]: 880 exit Nov 7 00:40:52 bastion LinuxCommandsWazuh: User ankur [1666854]: 867 kafka-ssh Nov 7 00:40:59 bastion LinuxCommandsWazuh: User ankur [1666854]: 868 ls Nov 7 00:42:58 bastion LinuxCommandsWazuh: User ankur [1666854]: 869 kafka-ssh Nov 7 00:43:20 bastion LinuxCommandsWazuh: User ankur [1666854]: 869 kafka-ssh Nov 7 00:45:45 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 7 00:45:51 bastion LinuxCommandsWazuh: User ankur [2267876]: 880 exit Nov 7 00:45:56 bastion LinuxCommandsWazuh: User ankur [2267876]: 881 mongo --quiet --eval 'var L=db.getSiblingDB("local"); var o=L.oplog.rs.find().sort({$natural:1}).limit(1)[0]; var n=L.oplog.rs.find().sort({$natural:-1}).limit(1)[0]; printjson({oldest:o?o.ts.t:null, newest:n?n.ts.t:null, oldest_date:o?new Date(o.ts.getTime()*1000):null, newest_date:n?new Date(n.ts.getTime()*1000):null})' Nov 7 00:45:56 bastion LinuxCommandsWazuh: User ankur [2267876]: 881 mongo --quiet --eval 'var L=db.getSiblingDB("local"); var o=L.oplog.rs.find().sort({$natural:1}).limit(1)[0]; var n=L.oplog.rs.find().sort({$natural:-1}).limit(1)[0]; printjson({oldest:o?o.ts.t:null, newest:n?n.ts.t:null, oldest_date:o?new Date(o.ts.getTime()*1000):null, newest_date:n?new Date(n.ts.getTime()*1000):null})' Nov 7 00:46:06 bastion LinuxCommandsWazuh: User ankur [2267876]: 882 mongo --quiet --eval 'rs.printReplicationInfo()' Nov 7 00:46:22 bastion LinuxCommandsWazuh: User ankur [2267876]: 882 mongo --quiet --eval 'rs.printReplicationInfo()' Nov 7 00:46:22 bastion LinuxCommandsWazuh: User ankur [2267876]: 882 mongo --quiet --eval 'rs.printReplicationInfo()' Nov 7 00:46:38 bastion LinuxCommandsWazuh: User ankur [2267876]: 883 journalctl -u mongod -f Nov 7 00:46:39 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2267876]: 883 journalctl -u mongod -f ] Nov 7 00:48:13 bastion LinuxCommandsWazuh: User ankur [2267876]: 884 mongo Nov 7 00:48:27 bastion LinuxCommandsWazuh: User ankur [1712024]: 15 mongo --quiet --eval 's=db.serverStatus(); printjson({opcounters:s.opcounters, opcountersRepl:s.opcountersRepl, mem:s.mem, conex:s.connections})' Nov 7 01:06:58 bastion LinuxCommandsWazuh: User ankur [2255583]: 881 byobu Nov 7 01:16:42 bastion LinuxCommandsWazuh: User ankur [2289961]: 887 exit Nov 7 01:18:34 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 7 07:15:05 bastion LinuxCommandsWazuh: User ankur [2328306]: 888 byobu Nov 7 07:18:04 bastion LinuxCommandsWazuh: User ankur [2328306]: 888 byobu Nov 7 07:51:55 bastion LinuxCommandsWazuh: User ankur [2334689]: 889 zodiac-server Nov 7 08:07:37 bastion LinuxCommandsWazuh: User ankur [2350438]: 889 zodiac-server Nov 7 08:35:14 bastion LinuxCommandsWazuh: User ankur [1652266]: 868 clickhouse-ssh Nov 7 08:39:09 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 7 08:42:27 bastion LinuxCommandsWazuh: User ankur [1703758]: 883 k rollout restart deployment/house-of-click Nov 7 08:47:23 bastion LinuxCommandsWazuh: User ankur [2350438]: 890 clickhouse-ssh Nov 7 08:47:27 bastion LinuxCommandsWazuh: User ankur [2334689]: 890 byobu Nov 7 10:42:25 bastion LinuxCommandsWazuh: User saurav [2399127]: 28 zodiac-server Nov 7 11:10:21 bastion LinuxCommandsWazuh: User saurav [2401909]: 28 zodiac-server Nov 7 11:15:23 bastion LinuxCommandsWazuh: User sarthak.s [2402714]: 43 zodiac-ssh Nov 7 11:22:58 bastion LinuxCommandsWazuh: User sarthak.s [2403049]: 43 zodiac-ssh Nov 7 11:35:41 bastion LinuxCommandsWazuh: User saurav [2404669]: 28 zodiac-server Nov 7 11:42:08 bastion LinuxCommandsWazuh: User ubuntu [2404967]: 2000 mongo-ssh Nov 7 11:42:09 bastion LinuxCommandsWazuh: User ubuntu [2404967]: 2001 ls Nov 7 11:43:16 bastion LinuxCommandsWazuh: User ubuntu [2404967]: 2002 mongo-server Nov 7 11:43:16 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [2404967]: 2002 mongo-server ] Nov 7 12:04:33 bastion LinuxCommandsWazuh: User ubuntu [2407186]: 2000 mongo-ssh Nov 7 12:18:08 bastion LinuxCommandsWazuh: User ubuntu [2407186]: 2000 mongo-ssh Nov 7 12:29:30 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 1998 kubectl get cm urlbird-config -o yaml | grep RED Nov 7 12:29:45 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 1999 kubectl get pods -o wide | grep app Nov 7 12:29:45 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 1999 kubectl get pods -o wide | grep app Nov 7 12:29:59 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2000 kubectl get node | grep gke-nitrox-productio-application Nov 7 12:30:13 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2001 kubectl get pods -o wide | grep gke-nitrox-productio-application Nov 7 12:31:40 bastion LinuxCommandsWazuh: User ashish [2411488]: 846 byobu Nov 7 12:32:00 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2002 kubectl top pods -o wide | grep gke-nitrox-productio-application Nov 7 12:32:16 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2003 kubectl top pods | grep xlr8 Nov 7 12:32:31 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2004 kubectl top pods | grep sso Nov 7 12:32:40 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2005 kubectl top pods | grep mun Nov 7 12:32:48 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2006 kubectl top pods | grep forever Nov 7 12:33:49 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2007 kubectl top pods -o wide | grep gke-nitrox-productio-application Nov 7 12:33:55 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2008 kubectl get pods -o wide | grep gke-nitrox-productio-application Nov 7 12:34:28 bastion LinuxCommandsWazuh: User ubuntu [2414397]: 2000 exit Nov 7 12:36:05 bastion LinuxCommandsWazuh: User ubuntu [2414397]: 2001 cool-server Nov 7 12:36:09 bastion LinuxCommandsWazuh: User ubuntu [2414397]: 2002 exiy Nov 7 12:36:50 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2008 kubectl get pods -o wide | grep gke-nitrox-productio-application Nov 7 12:48:32 bastion LinuxCommandsWazuh: User anam [2428784]: 120 `exit Nov 7 12:49:11 bastion LinuxCommandsWazuh: User abhijeet [2429599]: 1998 kubectl get cm urlbird-config -o yaml | grep RED Nov 7 12:49:18 bastion LinuxCommandsWazuh: User anam [2429702]: 120 `exit Nov 7 12:49:19 bastion LinuxCommandsWazuh: User anam [2429702]: 121 cd Nov 7 12:49:47 bastion LinuxCommandsWazuh: User anam [2428784]: 121 ssh ubuntu@stage Nov 7 12:49:52 bastion LinuxCommandsWazuh: User anam [2429702]: 122 cat .ssh/id_rsa.pub Nov 7 12:50:55 bastion LinuxCommandsWazuh: User anam [2429702]: 123 vim .bashrc Nov 7 12:50:59 bastion LinuxCommandsWazuh: User anam [2429702]: 124 source .bashrc Nov 7 12:51:08 bastion LinuxCommandsWazuh: User anam [2429702]: 125 stage-ssh Nov 7 12:51:13 bastion LinuxCommandsWazuh: User anam [2428784]: 122 stage-ssh Nov 7 12:51:17 bastion LinuxCommandsWazuh: User abhijeet [2429599]: 1999 sudo su anam Nov 7 12:51:29 bastion LinuxCommandsWazuh: User anam [2432074]: 129 exit Nov 7 12:52:29 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2009 kubectl get pods -o wide | grep fore Nov 7 12:52:32 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2009 kubectl get pods -o wide | grep fore Nov 7 12:52:35 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2009 kubectl get pods -o wide | grep fore Nov 7 12:52:46 bastion LinuxCommandsWazuh: message repeated 8 times: [ User abhijeet [2411142]: 2009 kubectl get pods -o wide | grep fore] Nov 7 12:52:47 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2010 kubectl get pods -o wide | grep forew Nov 7 12:52:49 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2011 kubectl get pods -o wide | grep foreww Nov 7 12:52:51 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2012 kubectl get pods -o wide | grep fore Nov 7 12:52:53 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2012 kubectl get pods -o wide | grep fore Nov 7 12:52:55 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2013 kubectl get pods -o wide | grep forew Nov 7 12:52:56 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2014 kubectl get pods -o wide | grep fore Nov 7 12:52:59 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2014 kubectl get pods -o wide | grep fore Nov 7 12:53:07 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2015 kubectl get deployment Nov 7 12:53:19 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2016 kubectl get pods -o wide | grep fore Nov 7 12:53:23 bastion LinuxCommandsWazuh: User anam [2434254]: 129 exit Nov 7 12:53:40 bastion LinuxCommandsWazuh: User anam [2434254]: 130 pr-server Nov 7 12:54:20 bastion LinuxCommandsWazuh: User anam [2434254]: 131 ls Nov 7 12:54:34 bastion LinuxCommandsWazuh: User anam [2434254]: 132 cat .bashrc Nov 7 13:00:05 bastion LinuxCommandsWazuh: User ankur [2441215]: 893 exit Nov 7 13:03:30 bastion LinuxCommandsWazuh: User ping-pong [2447626]: 253 mongo Nov 7 13:04:56 bastion LinuxCommandsWazuh: User ankur [2450189]: 893 exit Nov 7 13:04:59 bastion LinuxCommandsWazuh: User ankur [2450189]: 894 psql Nov 7 13:09:30 bastion LinuxCommandsWazuh: User ping-pong [2447626]: 253 mongo Nov 7 13:09:37 bastion LinuxCommandsWazuh: User ping-pong [2447626]: 254 clear Nov 7 13:11:45 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2016 kubectl get pods -o wide | grep fore Nov 7 13:12:58 bastion LinuxCommandsWazuh: User anam [2432074]: 130 stage-ssh Nov 7 13:13:24 bastion LinuxCommandsWazuh: User ping-pong [2462902]: 255 ssh bastion Nov 7 13:13:32 bastion LinuxCommandsWazuh: User abhijeet [2463038]: 1998 exit Nov 7 13:13:35 bastion LinuxCommandsWazuh: User abhijeet [2463038]: 1999 ls Nov 7 13:17:48 bastion LinuxCommandsWazuh: User abhijeet [2463038]: 2000 psql Nov 7 13:17:51 bastion LinuxCommandsWazuh: message repeated 6 times: [ User abhijeet [2463038]: 2000 psql] Nov 7 13:17:54 bastion LinuxCommandsWazuh: User ping-pong [2462902]: 256 sudo su abhijeet Nov 7 13:17:58 bastion LinuxCommandsWazuh: message repeated 5 times: [ User ping-pong [2462902]: 256 sudo su abhijeet] Nov 7 13:25:38 bastion LinuxCommandsWazuh: User sarthak.s [2475650]: 43 zodiac-ssh Nov 7 13:25:46 bastion LinuxCommandsWazuh: User anam [2475787]: 135 internal-tool Nov 7 13:25:47 bastion LinuxCommandsWazuh: User anam [2475787]: 136 cd Nov 7 13:25:58 bastion LinuxCommandsWazuh: User anam [2475787]: 137 internal-tool Nov 7 13:26:00 bastion LinuxCommandsWazuh: User abhijeet [2411142]: 2017 sudo su anam Nov 7 13:30:36 bastion LinuxCommandsWazuh: User mohtashim [2480414]: 717 mongo pixel_v1 Nov 7 13:31:39 bastion LinuxCommandsWazuh: User anam [2481513]: 138 exit Nov 7 13:31:44 bastion LinuxCommandsWazuh: User anam [2481513]: 139 ls Nov 7 13:31:55 bastion LinuxCommandsWazuh: User anam [2481513]: 140 cd /etc Nov 7 13:31:59 bastion LinuxCommandsWazuh: User anam [2481513]: 141 ls Nov 7 13:32:15 bastion LinuxCommandsWazuh: User anam [2481513]: 142 cd nginx Nov 7 13:32:43 bastion LinuxCommandsWazuh: User anam [2481513]: 143 cd /nginx Nov 7 13:33:07 bastion LinuxCommandsWazuh: User anam [2481513]: 144 cd Nov 7 13:42:06 bastion LinuxCommandsWazuh: User anam [2492014]: 138 exit Nov 7 13:42:11 bastion LinuxCommandsWazuh: User anam [2492014]: 139 cat .bashrc Nov 7 13:49:39 bastion LinuxCommandsWazuh: User saurav [2499604]: 28 zodiac-server Nov 7 13:49:45 bastion LinuxCommandsWazuh: User saurav [2499604]: 29 zodiac-ssh Nov 7 13:53:25 bastion LinuxCommandsWazuh: User ashish [3749413]: 832 mongo pixel_v1; Nov 7 13:53:32 bastion LinuxCommandsWazuh: User ashish [3749413]: 833 kubectl get pods Nov 7 13:53:38 bastion LinuxCommandsWazuh: User ashish [3749413]: 834 history | grep stern Nov 7 13:55:27 bastion LinuxCommandsWazuh: User aman [2505819]: 531 exit Nov 7 13:55:37 bastion LinuxCommandsWazuh: User aman [2505819]: 532 kubectl get pods | grep cookie Nov 7 13:56:28 bastion LinuxCommandsWazuh: User ashish [3749413]: 835 stern cookie-cutter | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is_" Nov 7 13:56:35 bastion LinuxCommandsWazuh: User ashish [3749413]: 836 stern cookie-cutter -n nitrox-production --tail 100 -l app=cookie-cutter -c cookie-cutter Nov 7 13:57:08 bastion LinuxCommandsWazuh: User ashish [3749413]: 837 stern cookie-cutter -n nitrox-production --tail 100 -l app=cookie-cutter -c cookie-cutter | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is" Nov 7 13:57:27 bastion LinuxCommandsWazuh: User ashish [3749413]: 837 stern cookie-cutter -n nitrox-production --tail 100 -l app=cookie-cutter -c cookie-cutter | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is" Nov 7 13:57:33 bastion LinuxCommandsWazuh: User ashish [3749413]: 838 kubectl get pods Nov 7 13:57:56 bastion LinuxCommandsWazuh: User ayush [2508324]: 576 clear Nov 7 13:58:03 bastion LinuxCommandsWazuh: User aman [2508459]: 531 exit Nov 7 13:58:05 bastion LinuxCommandsWazuh: User ashish [3749413]: 839 stern cookie-cutter-queues- | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is_" Nov 7 13:58:25 bastion LinuxCommandsWazuh: User ashish [3749413]: 840 stern cookie-cutter-queues-5fc95f8c96-2jcb6 | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is_" Nov 7 14:44:22 bastion LinuxCommandsWazuh: User aman [2508459]: 532 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 7 14:44:24 bastion LinuxCommandsWazuh: User aman [2508459]: 532 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 7 14:44:25 bastion LinuxCommandsWazuh: User ayush [2508324]: 577 sudo su - aman Nov 7 14:57:49 bastion LinuxCommandsWazuh: User anam [2527778]: 147 vpn-server Nov 7 15:09:57 bastion LinuxCommandsWazuh: User saurav [2528798]: 30 zodiac-server Nov 7 15:17:37 bastion LinuxCommandsWazuh: User anam [2527778]: 148 internal-tool Nov 7 15:18:33 bastion LinuxCommandsWazuh: User anam [2529762]: 147 vpn-server Nov 7 15:22:47 bastion LinuxCommandsWazuh: User anam [2530081]: 148 internal-tool Nov 7 15:24:02 bastion LinuxCommandsWazuh: User anam [2530081]: 149 cat .bashrc Nov 7 15:24:23 bastion LinuxCommandsWazuh: User nikhils-art [2530228]: 68 zodiac-server Nov 7 15:28:03 bastion LinuxCommandsWazuh: User ayush [2530993]: 577 sudo su - aman Nov 7 15:28:12 bastion LinuxCommandsWazuh: User ayush [2530993]: 578 kubectl get pods Nov 7 15:28:17 bastion LinuxCommandsWazuh: User ayush [2530993]: 579 kubectl get pods | grep chat Nov 7 15:33:16 bastion LinuxCommandsWazuh: User ayush [2530993]: 580 kubectl logs -f chatbot-7cb8bf9588-m7nbh Nov 7 15:33:16 bastion LinuxCommandsWazuh: message repeated 6 times: [ User ayush [2530993]: 580 kubectl logs -f chatbot-7cb8bf9588-m7nbh] Nov 7 15:34:22 bastion LinuxCommandsWazuh: User anam [2531410]: 148 internal-tool Nov 7 15:41:15 bastion LinuxCommandsWazuh: User ashish [2532430]: 846 byobu Nov 7 15:41:20 bastion LinuxCommandsWazuh: User ashish [3749413]: 841 kubectl logs -f cookie-cutter-queues-5fc95f8c96-2jcb6 | grep "BikEventsExporter 2ef77b89-feb8-4492-b354-c6ad7369d54b event_name=is_" Nov 7 15:45:06 bastion LinuxCommandsWazuh: User abhijeet [2536114]: 1998 exit Nov 7 15:45:09 bastion LinuxCommandsWazuh: User abhijeet [2536114]: 1999 lsc Nov 7 15:47:58 bastion LinuxCommandsWazuh: User aman [2505819]: 533 exut Nov 7 15:49:06 bastion LinuxCommandsWazuh: User sarthak.s [2540523]: 43 zodiac-ssh Nov 7 15:52:21 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 1998 exit Nov 7 15:52:21 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 1999 l Nov 7 15:59:14 bastion LinuxCommandsWazuh: User abhijeet [2536114]: 2000 internal-server Nov 7 16:07:15 bastion LinuxCommandsWazuh: User mohtashim [2558726]: 717 mongo pixel_v1 Nov 7 16:11:58 bastion LinuxCommandsWazuh: User mohtashim [2480414]: 718 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 7 16:12:01 bastion LinuxCommandsWazuh: User mohtashim [2480414]: 719 clear Nov 7 16:31:11 bastion LinuxCommandsWazuh: User ubuntu [2582138]: 2000 exit Nov 7 17:06:56 bastion LinuxCommandsWazuh: User ayush [2530993]: 580 kubectl logs -f chatbot-7cb8bf9588-m7nbh Nov 7 17:10:35 bastion LinuxCommandsWazuh: User anam [2596159]: 151 internal-tool Nov 7 17:11:35 bastion LinuxCommandsWazuh: User anam [2596159]: 151 internal-tool Nov 7 17:35:52 bastion LinuxCommandsWazuh: User mohtashim [2598941]: 720 exit Nov 7 17:42:23 bastion LinuxCommandsWazuh: User mohtashim [2598941]: 721 mongo pixel_v1 Nov 7 17:42:26 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [2598941]: 721 mongo pixel_v1] Nov 7 17:58:36 bastion LinuxCommandsWazuh: User anam [2601095]: 152 stage-ssh Nov 7 18:09:59 bastion LinuxCommandsWazuh: User ankur [2602572]: 498 byobu Nov 7 18:09:59 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [2602572]: 498 byobu] Nov 7 18:15:43 bastion LinuxCommandsWazuh: User sandeep [2603509]: 29 exit Nov 7 18:17:22 bastion LinuxCommandsWazuh: User sandeep [2603509]: 30 zodiac-server Nov 7 18:17:38 bastion LinuxCommandsWazuh: message repeated 3 times: [ User sandeep [2603509]: 30 zodiac-server] Nov 7 18:17:55 bastion LinuxCommandsWazuh: User sandeep [2603679]: 31 exit Nov 7 18:19:19 bastion LinuxCommandsWazuh: User sandeep [2603679]: 32 zodiac-server Nov 7 18:32:10 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2000 internal-server Nov 7 18:32:20 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2001 kubectl get pods -n loki Nov 7 18:32:46 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2001 kubectl get pods -n loki Nov 7 18:32:58 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2002 kubectl get pods -n loki --watch Nov 7 18:33:43 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2003 kubectl delete pods --field-selector status.phase=Failed -n loki Nov 7 18:33:48 bastion LinuxCommandsWazuh: User abhijeet [2543760]: 2004 kubectl get pods -n loki Nov 7 19:59:34 bastion LinuxCommandsWazuh: User ashish [2612803]: 846 byobu Nov 7 19:59:37 bastion LinuxCommandsWazuh: User ashish [2612803]: 847 bybobu Nov 7 19:59:43 bastion LinuxCommandsWazuh: User ashish [3749413]: 842 clickhouse-ssh Nov 7 19:59:49 bastion LinuxCommandsWazuh: User ashish [3749413]: 843 kubectl get pods Nov 7 19:59:57 bastion LinuxCommandsWazuh: User ashish [3749413]: 844 kubectl get pods | grep Nov 7 20:00:01 bastion LinuxCommandsWazuh: User ashish [3749413]: 845 kubectl get pods | grep "cookie" Nov 7 20:00:46 bastion LinuxCommandsWazuh: User ashish [3749413]: 846 kubectl get pods | grep "cookie-cutter-" Nov 7 20:01:04 bastion LinuxCommandsWazuh: User ashish [3749413]: 847 kubectl get pods | grep "cookie-cutter-6b" Nov 7 20:01:29 bastion LinuxCommandsWazuh: User ashish [3749413]: 847 kubectl get pods | grep "cookie-cutter-6b" Nov 7 20:01:31 bastion LinuxCommandsWazuh: User ashish [646657]: 846 clickhouse-ssh Nov 7 20:01:33 bastion LinuxCommandsWazuh: User ashish [2612803]: 848 byobu