Nov 14 00:01:41 bastion LinuxCommandsWazuh: User sarthak.s [174044]: 43 zodiac-ssh Nov 14 11:14:12 bastion LinuxCommandsWazuh: User aman [235177]: 651 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 14 11:14:21 bastion LinuxCommandsWazuh: User aman [235177]: 652 clear Nov 14 11:14:32 bastion LinuxCommandsWazuh: User aman [235177]: 653 kubectl get pods | grep cookie Nov 14 11:15:02 bastion LinuxCommandsWazuh: User aman [235177]: 653 kubectl get pods | grep cookie Nov 14 11:15:12 bastion LinuxCommandsWazuh: User aman [235177]: 653 kubectl get pods | grep cookie Nov 14 11:16:02 bastion LinuxCommandsWazuh: User ashish [236023]: 899 byobu Nov 14 11:16:10 bastion LinuxCommandsWazuh: User ashish [7446]: 899 clickhouse-ssh Nov 14 11:16:17 bastion LinuxCommandsWazuh: User ashish [7446]: kubectl get pods | grep "cookie" Nov 14 11:17:52 bastion LinuxCommandsWazuh: User aman [235177]: 653 kubectl get pods | grep cookie Nov 14 11:17:55 bastion LinuxCommandsWazuh: User aman [235177]: 654 clear Nov 14 11:17:58 bastion LinuxCommandsWazuh: User ashish [7446]: kubectl get pods | grep "cookie" Nov 14 11:18:00 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [7446]: kubectl get pods | grep "cookie"] Nov 14 11:20:52 bastion LinuxCommandsWazuh: User ashish [7446]: kubectl get pods | grep "cookie" Nov 14 11:33:10 bastion LinuxCommandsWazuh: User ashish [7446]: 1 kubectl get pods | grep "nitrox" Nov 14 12:01:35 bastion LinuxCommandsWazuh: User anam [281117]: 257 ssh anam@34.131.0.213 -vv Nov 14 12:03:53 bastion LinuxCommandsWazuh: User anam [281117]: 258 gcp-vpn-client Nov 14 12:10:27 bastion LinuxCommandsWazuh: User ankur [290198]: 625 psql Nov 14 12:10:29 bastion LinuxCommandsWazuh: User ankur [290303]: 625 psql Nov 14 12:10:31 bastion LinuxCommandsWazuh: User ankur [290303]: 626 ls Nov 14 12:16:46 bastion LinuxCommandsWazuh: User aman [302457]: 655 exit Nov 14 12:16:55 bastion LinuxCommandsWazuh: User aman [302457]: 656 kubectl get pods | grep coo Nov 14 12:16:58 bastion LinuxCommandsWazuh: User ankur [290303]: 627 mongo Nov 14 12:17:17 bastion LinuxCommandsWazuh: User aman [302457]: 657 kubectl logs -f cookie-cutter-common-task-7c56d55d5d-bdpqt | grep ashish@getnitro.co Nov 14 12:17:59 bastion LinuxCommandsWazuh: User aman [302457]: 658 kubectl logs -f cookie-cutter-common-task-7c56d55d5d-bdpqt Nov 14 12:18:13 bastion LinuxCommandsWazuh: User aman [302457]: 659 kubectl get pods | grep cook Nov 14 12:19:58 bastion LinuxCommandsWazuh: User aman [302457]: 660 kubectl exec -it cookie-cutter-5796b5cf59-2fgtc bash Nov 14 12:19:59 bastion LinuxCommandsWazuh: User aman [302457]: 661 clear Nov 14 12:20:02 bastion LinuxCommandsWazuh: User aman [302457]: 662 kubectl get pods | grep cook Nov 14 12:20:25 bastion LinuxCommandsWazuh: User aman [302457]: 662 kubectl get pods | grep cook Nov 14 12:20:25 bastion LinuxCommandsWazuh: User aman [302457]: 662 kubectl get pods | grep cook Nov 14 12:20:26 bastion LinuxCommandsWazuh: User aman [302457]: 663 clear Nov 14 12:23:53 bastion LinuxCommandsWazuh: User ashish [7446]: 1 kubectl get pods | grep "nitrox" Nov 14 12:23:53 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [7446]: 1 kubectl get pods | grep "nitrox"] Nov 14 12:24:36 bastion LinuxCommandsWazuh: User ashish [7446]: 2 kubectl get pods | grep "cookie-cutter-common-task-" Nov 14 12:26:23 bastion LinuxCommandsWazuh: User ashish [7446]: 3 stern cookie-cutter-common-task Nov 14 12:26:23 bastion LinuxCommandsWazuh: User ashish [7446]: 3 stern cookie-cutter-common-task Nov 14 12:26:54 bastion LinuxCommandsWazuh: User ashish [7446]: 4 kubectl rollout restart deploy cookie-cutter-common-task Nov 14 12:29:49 bastion LinuxCommandsWazuh: User abhijeet [327249]: 1998 sudo su anam Nov 14 12:29:55 bastion LinuxCommandsWazuh: User ankur [327405]: 625 psql Nov 14 12:29:57 bastion LinuxCommandsWazuh: User ankur [327405]: 626 ls Nov 14 12:30:00 bastion LinuxCommandsWazuh: User abhijeet [327249]: 1999 kubectl get pods | grep common Nov 14 12:30:04 bastion LinuxCommandsWazuh: User ashish [7446]: 5 stern cookie-cutter-common-task Nov 14 12:30:04 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2000 kubectl get pods -o wide| grep common Nov 14 12:30:19 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2001 kubectl top gke-nitrox-productio-cookie-cutter-qu-164056e1-ln5c Nov 14 12:30:26 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2002 kubectl top node gke-nitrox-productio-cookie-cutter-qu-164056e1-ln5c Nov 14 12:30:30 bastion LinuxCommandsWazuh: User ankur [328713]: 627 exit Nov 14 12:31:17 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2003 kubectl get node | cooki Nov 14 12:31:23 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2004 kubectl get node | grep cooki Nov 14 12:31:54 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2005 kubectl logs cookie-cutter-common-task-5f89c79477-bw465 Nov 14 12:32:35 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2006 date Nov 14 12:33:59 bastion LinuxCommandsWazuh: User abhijeet [327249]: 2007 kubectl exec -it cookie-cutter-common-task-5f89c79477-bw465 -- bash Nov 14 12:39:35 bastion LinuxCommandsWazuh: User ashish [7446]: 6 kubectl rollout restart deploy cookie-cutter-common-task Nov 14 12:39:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [7446]: 6 kubectl rollout restart deploy cookie-cutter-common-task] Nov 14 12:45:11 bastion LinuxCommandsWazuh: User ankur [356108]: 627 exit Nov 14 12:45:21 bastion LinuxCommandsWazuh: User ankur [356108]: 628 k get configmaps Nov 14 12:45:45 bastion LinuxCommandsWazuh: User ankur [356108]: 629 k edit configmap nitrox-ck-config Nov 14 12:48:22 bastion LinuxCommandsWazuh: User abhijeet [362861]: 1998 exit Nov 14 13:12:18 bastion LinuxCommandsWazuh: User ankur [406334]: 631 byobu Nov 14 13:12:21 bastion LinuxCommandsWazuh: User ankur [406478]: 631 byobu Nov 14 13:12:22 bastion LinuxCommandsWazuh: User ankur [406478]: 632 ls Nov 14 13:12:46 bastion LinuxCommandsWazuh: User ashish [7446]: 7 stern cookie-cutter-common-task Nov 14 13:12:48 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ashish [7446]: 7 stern cookie-cutter-common-task] Nov 14 13:13:07 bastion LinuxCommandsWazuh: User ashish [407848]: 899 byobu Nov 14 13:13:17 bastion LinuxCommandsWazuh: User mohtashim [408275]: 853 stern vortex vortex-5f575fcbc5 | grep "sauce" Nov 14 13:13:18 bastion LinuxCommandsWazuh: User mohtashim [408275]: 854 clear Nov 14 13:13:29 bastion LinuxCommandsWazuh: User ankur [406478]: 632 ls Nov 14 13:13:31 bastion LinuxCommandsWazuh: User ankur [406478]: 632 ls Nov 14 13:13:32 bastion LinuxCommandsWazuh: User ankur [406478]: 633 s Nov 14 13:13:38 bastion LinuxCommandsWazuh: User mohtashim [408275]: 855 k get pods | grep "datapulse" Nov 14 13:13:42 bastion LinuxCommandsWazuh: User ankur [406478]: 634 ls Nov 14 13:13:43 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ankur [406478]: 634 ls] Nov 14 13:13:50 bastion LinuxCommandsWazuh: User mohtashim [408275]: 856 stern datapulse-web-6b8bc4bbb8 Nov 14 13:14:00 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [408275]: 856 stern datapulse-web-6b8bc4bbb8 ] Nov 14 13:14:05 bastion LinuxCommandsWazuh: User mohtashim [408275]: 857 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:14:05 bastion LinuxCommandsWazuh: User mohtashim [408275]: 857 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:15:00 bastion LinuxCommandsWazuh: User mohtashim [408275]: 858 clear Nov 14 13:15:04 bastion LinuxCommandsWazuh: User mohtashim [411775]: 853 stern vortex vortex-5f575fcbc5 | grep "sauce" Nov 14 13:15:06 bastion LinuxCommandsWazuh: User mohtashim [411775]: 854 clear Nov 14 13:17:40 bastion LinuxCommandsWazuh: User mohtashim [408275]: 859 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:17:40 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [408275]: 859 stern datapulse-web-6b8bc4bbb8 | grep "error"] Nov 14 13:21:14 bastion LinuxCommandsWazuh: User rihan [423790]: 1540 byobu Nov 14 13:21:28 bastion LinuxCommandsWazuh: User ashish [424244]: 899 byobu Nov 14 13:21:29 bastion LinuxCommandsWazuh: message repeated 3 times: [ User ashish [424244]: 899 byobu] Nov 14 13:21:42 bastion LinuxCommandsWazuh: User rihan [424783]: 1540 byobu Nov 14 13:22:14 bastion LinuxCommandsWazuh: User rihan [425873]: 1541 psql Nov 14 13:23:37 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2000 sudo su mohtashim Nov 14 13:23:37 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2000 sudo su mohtashim Nov 14 13:23:43 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2001 psql Nov 14 13:23:49 bastion LinuxCommandsWazuh: User abhijeet [362861]: 1999 ls Nov 14 13:23:52 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2001 psql Nov 14 13:24:00 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2002 htop Nov 14 13:24:00 bastion LinuxCommandsWazuh: message repeated 2 times: [ User ubuntu [428444]: 2002 htop] Nov 14 13:24:01 bastion LinuxCommandsWazuh: User rihan [429251]: 1542 psql Nov 14 13:24:02 bastion LinuxCommandsWazuh: User rihan [429251]: 1543 cd Nov 14 13:24:04 bastion LinuxCommandsWazuh: User rihan [429356]: 1542 psql Nov 14 13:24:18 bastion LinuxCommandsWazuh: User rihan [429251]: 1544 psql Nov 14 13:24:19 bastion LinuxCommandsWazuh: User rihan [429356]: 1542 psql Nov 14 13:24:20 bastion LinuxCommandsWazuh: User rihan [429251]: 1545 ls Nov 14 13:24:22 bastion LinuxCommandsWazuh: User ubuntu [428444]: 2003 sudo su rihan Nov 14 13:24:40 bastion LinuxCommandsWazuh: User rihan [429251]: 1546 psql Nov 14 13:24:49 bastion LinuxCommandsWazuh: User abhijeet [362861]: 2000 sudo su rihan Nov 14 13:25:45 bastion LinuxCommandsWazuh: User rihan [433216]: 1548 exit Nov 14 13:27:32 bastion LinuxCommandsWazuh: User ankur [436439]: 631 byobu Nov 14 13:27:41 bastion LinuxCommandsWazuh: User ankur [436439]: 632 kafka-ssh Nov 14 13:29:22 bastion LinuxCommandsWazuh: User mohtashim [411775]: 855 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 14 13:32:50 bastion LinuxCommandsWazuh: User rihan [433216]: 1548 exit Nov 14 13:32:50 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [433216]: 1548 exit] Nov 14 13:34:22 bastion LinuxCommandsWazuh: User mohtashim [408275]: 859 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:34:22 bastion LinuxCommandsWazuh: User mohtashim [408275]: 859 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:39:37 bastion LinuxCommandsWazuh: User mohtashim [408275]: 860 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 14 13:39:53 bastion LinuxCommandsWazuh: User ashish [451918]: 899 byobu Nov 14 13:42:56 bastion LinuxCommandsWazuh: User mohtashim [411775]: 856 mongo pixel_v1 Nov 14 13:43:03 bastion LinuxCommandsWazuh: User mohtashim [408275]: 860 psql -h 10.94.16.3 -U postgres -d vortex_v2 Nov 14 13:43:04 bastion LinuxCommandsWazuh: User mohtashim [408275]: 861 clear Nov 14 13:43:09 bastion LinuxCommandsWazuh: User mohtashim [408275]: 862 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:43:10 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [408275]: 862 stern datapulse-web-6b8bc4bbb8 | grep "error"] Nov 14 13:43:28 bastion LinuxCommandsWazuh: User mohtashim [408275]: 863 clear Nov 14 13:43:35 bastion LinuxCommandsWazuh: User mohtashim [408275]: 864 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:43:36 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [408275]: 864 stern datapulse-web-6b8bc4bbb8 | grep "error"] Nov 14 13:51:06 bastion LinuxCommandsWazuh: User mohtashim [408275]: 864 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:51:06 bastion LinuxCommandsWazuh: User mohtashim [408275]: 864 stern datapulse-web-6b8bc4bbb8 | grep "error" Nov 14 13:51:40 bastion LinuxCommandsWazuh: User mohtashim [411775]: 856 mongo pixel_v1 Nov 14 13:56:06 bastion LinuxCommandsWazuh: User mohtashim [482559]: 868 exit Nov 14 14:02:11 bastion LinuxCommandsWazuh: User abhijeet [488334]: 1998 exit Nov 14 14:02:26 bastion LinuxCommandsWazuh: User abhijeet [488334]: 1999 kubectl get all -A | grep cook Nov 14 14:02:35 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2000 kubectl get cm Nov 14 14:03:51 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2001 kubectl get cm nitrox-ck-config -o yaml Nov 14 14:05:49 bastion LinuxCommandsWazuh: User ankur [492424]: 631 byobu Nov 14 14:17:26 bastion LinuxCommandsWazuh: User ayush [511977]: 613 byobu Nov 14 14:17:33 bastion LinuxCommandsWazuh: User ayush [512197]: 613 byobu Nov 14 14:17:38 bastion LinuxCommandsWazuh: User aman [512461]: 664 exit Nov 14 14:27:38 bastion LinuxCommandsWazuh: User aman [512461]: 665 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 14 14:27:39 bastion LinuxCommandsWazuh: User aman [512461]: 665 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 14 14:27:39 bastion LinuxCommandsWazuh: User ayush [512197]: 614 sudo su - aman Nov 14 14:27:40 bastion LinuxCommandsWazuh: User ayush [512197]: 614 sudo su - aman Nov 14 14:27:41 bastion LinuxCommandsWazuh: User ayush [531329]: 614 sudo su - aman Nov 14 14:27:45 bastion LinuxCommandsWazuh: User ayush [511977]: 613 byobu Nov 14 14:27:47 bastion LinuxCommandsWazuh: User ayush [511977]: 613 byobu Nov 14 14:37:03 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2002 ls Nov 14 14:42:35 bastion LinuxCommandsWazuh: User ayush [545912]: 614 sudo su - aman Nov 14 14:42:48 bastion LinuxCommandsWazuh: User ayush [545912]: 615 kubectl get configmap Nov 14 14:42:51 bastion LinuxCommandsWazuh: User ayush [545912]: 616 kubectl get configmaps Nov 14 14:42:59 bastion LinuxCommandsWazuh: User ayush [545912]: 617 kubectl get configmaps | grep nitro Nov 14 14:43:51 bastion LinuxCommandsWazuh: User ayush [545912]: 618 kubectl edit configmap nitrox-ck-config Nov 14 14:45:04 bastion LinuxCommandsWazuh: User ayush [545912]: 619 kubectl logs -f Nov 14 14:45:10 bastion LinuxCommandsWazuh: User ayush [545912]: 620 kubectl get pods Nov 14 14:45:16 bastion LinuxCommandsWazuh: User ayush [545912]: 621 kubectl get pods | grep coo Nov 14 14:45:29 bastion LinuxCommandsWazuh: User venky [549556]: 2000 redis Nov 14 14:45:57 bastion LinuxCommandsWazuh: User venky [549556]: 2000 redis Nov 14 14:45:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [549556]: 2000 redis] Nov 14 14:47:52 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:48:59 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:49:41 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:49:41 bastion LinuxCommandsWazuh: message repeated 2 times: [ User venky [549556]: 2001 stern cookie-cutter] Nov 14 14:50:00 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:50:00 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:50:05 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 14:50:05 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 15:04:14 bastion LinuxCommandsWazuh: User venky [549556]: 2001 stern cookie-cutter Nov 14 15:04:15 bastion LinuxCommandsWazuh: User ayush [545912]: 622 sudo su - venky Nov 14 15:04:15 bastion LinuxCommandsWazuh: User ayush [545912]: 622 sudo su - venky Nov 14 15:28:51 bastion LinuxCommandsWazuh: User ashish [565019]: 899 byobu Nov 14 15:29:47 bastion LinuxCommandsWazuh: User ankur [566070]: 631 byobu Nov 14 15:34:44 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2002 ls Nov 14 15:38:29 bastion LinuxCommandsWazuh: User anam [582545]: 258 gcp-vpn-client Nov 14 15:38:39 bastion LinuxCommandsWazuh: User anam [582545]: 259 sudo su Venkatesh Nov 14 15:38:48 bastion LinuxCommandsWazuh: User venky [583147]: 2000 stern cookie-cutter Nov 14 15:38:57 bastion LinuxCommandsWazuh: User venky [583147]: 2001 ls Nov 14 15:39:01 bastion LinuxCommandsWazuh: User venky [583147]: 2002 cd Nov 14 15:39:14 bastion LinuxCommandsWazuh: User venky [583147]: 2003 cd ~/.shh Nov 14 15:39:18 bastion LinuxCommandsWazuh: User venky [583147]: 2004 cd ~/.ssh Nov 14 15:39:19 bastion LinuxCommandsWazuh: User venky [583147]: 2005 ls Nov 14 15:39:25 bastion LinuxCommandsWazuh: User venky [583147]: 2006 cat authorized_keys Nov 14 15:41:28 bastion LinuxCommandsWazuh: User venky [583147]: 2007 at id_rsa.pub Nov 14 15:41:42 bastion LinuxCommandsWazuh: User venky [583147]: 2008 cat id_rsa.pub Nov 14 15:42:50 bastion LinuxCommandsWazuh: User ashish [424244]: clickhouse-ssh Nov 14 15:43:37 bastion LinuxCommandsWazuh: User ashish [424244]: 1 kubectl get pods | grep "cookie" Nov 14 15:43:50 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2003 kubectl get cm Nov 14 15:44:05 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2004 kubectl get cm nitrox-ck-config -o wide Nov 14 15:44:11 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2005 kubectl get cm nitrox-ck-config -o yaml Nov 14 15:47:05 bastion LinuxCommandsWazuh: User ankur [599235]: 631 byobu Nov 14 15:48:55 bastion LinuxCommandsWazuh: User ayush [602648]: 622 sudo su - venky Nov 14 15:49:02 bastion LinuxCommandsWazuh: User venky [602906]: 2000 stern cookie-cutter Nov 14 15:49:11 bastion LinuxCommandsWazuh: message repeated 3 times: [ User venky [602906]: 2000 stern cookie-cutter] Nov 14 15:49:11 bastion LinuxCommandsWazuh: User ayush [602648]: 623 sudo su - venky Nov 14 15:49:12 bastion LinuxCommandsWazuh: User ayush [602648]: 623 sudo su - venky Nov 14 15:50:34 bastion LinuxCommandsWazuh: User mohtashim [605869]: 869 mongo pixel_v1 Nov 14 15:50:51 bastion LinuxCommandsWazuh: User mohtashim [605869]: 870 clear Nov 14 15:50:54 bastion LinuxCommandsWazuh: User ubuntu [606592]: 2000 exit Nov 14 15:50:58 bastion LinuxCommandsWazuh: User ubuntu [606592]: 2000 exit Nov 14 15:51:03 bastion LinuxCommandsWazuh: User ubuntu [606592]: 2001 kubectl get pods Nov 14 15:51:07 bastion LinuxCommandsWazuh: User rihan [607103]: 1548 exit Nov 14 15:51:08 bastion LinuxCommandsWazuh: User rihan [607103]: 1549 k get pods Nov 14 15:51:14 bastion LinuxCommandsWazuh: User rihan [607103]: 1550 kubectl get pods Nov 14 15:51:18 bastion LinuxCommandsWazuh: User rihan [607103]: 1550 kubectl get pods Nov 14 15:51:18 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [607103]: 1550 kubectl get pods] Nov 14 15:51:19 bastion LinuxCommandsWazuh: User ubuntu [606592]: 2002 sudo su rihan Nov 14 16:00:06 bastion LinuxCommandsWazuh: User anam [623824]: 260 sudo su venky Nov 14 16:00:09 bastion LinuxCommandsWazuh: User anam [623824]: 261 ls Nov 14 16:01:11 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2006 kubectl get pods Nov 14 16:03:29 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2006 kubectl get pods Nov 14 16:03:45 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2007 kubectl logs sbert-classifier-6d8998f45-44dr6 Nov 14 16:03:52 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2008 kubectl get pods Nov 14 16:04:05 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2009 kubectl delete pod sbert-classifier-6d8998f45-44dr6 Nov 14 16:04:07 bastion LinuxCommandsWazuh: User abhijeet [488334]: 2010 kubectl get pods Nov 14 16:10:49 bastion LinuxCommandsWazuh: User ayush [634544]: 623 sudo su - venky Nov 14 16:10:56 bastion LinuxCommandsWazuh: User venky [634673]: 2000 cat id_rsa.pub Nov 14 16:11:14 bastion LinuxCommandsWazuh: User venky [634673]: 2001 stern cookie-cutter Nov 14 16:11:17 bastion LinuxCommandsWazuh: User venky [634673]: 2001 stern cookie-cutter Nov 14 16:11:20 bastion LinuxCommandsWazuh: User venky [634673]: 2002 clear Nov 14 16:11:23 bastion LinuxCommandsWazuh: User venky [634673]: 2002 clear Nov 14 16:11:23 bastion LinuxCommandsWazuh: User ayush [634544]: 624 sudo su - venky Nov 14 16:11:23 bastion LinuxCommandsWazuh: User ayush [634544]: 624 sudo su - venky Nov 14 16:27:49 bastion LinuxCommandsWazuh: User ubuntu [651493]: 2000 exit Nov 14 16:27:51 bastion LinuxCommandsWazuh: User ubuntu [651535]: 2000 exit Nov 14 16:27:57 bastion LinuxCommandsWazuh: User rihan [651631]: 1551 exit Nov 14 16:27:57 bastion LinuxCommandsWazuh: User rihan [651631]: 1552 cd Nov 14 16:28:07 bastion LinuxCommandsWazuh: User rihan [651631]: 1553 kubectl get pods | grep "forever" Nov 14 16:28:15 bastion LinuxCommandsWazuh: User rihan [651631]: 1554 k logs -f forever-b6df658-rm225 Nov 14 16:28:22 bastion LinuxCommandsWazuh: User rihan [651631]: 1555 kubectl get logs -f forever-b6df658-rm225 Nov 14 16:28:26 bastion LinuxCommandsWazuh: User rihan [651631]: 1555 kubectl get logs -f forever-b6df658-rm225 Nov 14 16:28:39 bastion LinuxCommandsWazuh: User rihan [651631]: 1555 kubectl get logs -f forever-b6df658-rm225 Nov 14 16:28:43 bastion LinuxCommandsWazuh: User rihan [651631]: 1556 kubectl get pods | grep "forever" Nov 14 16:29:01 bastion LinuxCommandsWazuh: User rihan [651631]: 1557 kubectl get logs -f forever-b6df658-rm225 Nov 14 16:29:11 bastion LinuxCommandsWazuh: User rihan [651631]: 1558 kubectl get logs forever-b6df658-rm225 Nov 14 16:29:14 bastion LinuxCommandsWazuh: User ubuntu [651535]: 2001 sudo su rihan Nov 14 16:29:15 bastion LinuxCommandsWazuh: User ubuntu [651493]: 2001 sudo su ubuntu Nov 14 16:29:27 bastion LinuxCommandsWazuh: User ubuntu [653344]: 2000 exit Nov 14 16:29:28 bastion LinuxCommandsWazuh: User ubuntu [653373]: 2000 exit Nov 14 16:29:30 bastion LinuxCommandsWazuh: User rihan [653412]: 1559 exit Nov 14 16:29:38 bastion LinuxCommandsWazuh: User rihan [653412]: 1560 k logs -f forever-b6df658-rm225 Nov 14 16:29:48 bastion LinuxCommandsWazuh: User rihan [653412]: 1561 kubectl logs -f forever-b6df658-rm225 Nov 14 16:29:49 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [653412]: 1561 kubectl logs -f forever-b6df658-rm225 ] Nov 14 16:30:39 bastion LinuxCommandsWazuh: User ayush [654715]: 624 sudo su - venky Nov 14 16:30:41 bastion LinuxCommandsWazuh: User ayush [654715]: 625 clear Nov 14 16:30:53 bastion LinuxCommandsWazuh: User ayush [654715]: 626 kubectl get pods Nov 14 16:31:00 bastion LinuxCommandsWazuh: User ayush [654715]: 627 kubectl get pods | grep fore Nov 14 16:31:18 bastion LinuxCommandsWazuh: User venky [655370]: 2000 clear Nov 14 16:31:34 bastion LinuxCommandsWazuh: User venky [655370]: 2001 stern forever Nov 14 16:31:37 bastion LinuxCommandsWazuh: User venky [655370]: 2002 clear Nov 14 16:31:46 bastion LinuxCommandsWazuh: User ashish [424244]: 2 stern cookie-cutter-common-task Nov 14 16:31:50 bastion LinuxCommandsWazuh: User venky [655370]: 2003 kubectl get configmaps Nov 14 16:31:59 bastion LinuxCommandsWazuh: User ashish [424244]: 3 stern cookie-cutter | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_15: ORG_ID: 4f4c60be-3e68-41c2-97d6-ec8fd1df4bf2" Nov 14 16:32:13 bastion LinuxCommandsWazuh: User ashish [424244]: 4 stern cookie-cutter-common | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_15: ORG_ID: 4f4c60be-3e68-41c2-97d6-ec8fd1df4bf2" Nov 14 16:32:41 bastion LinuxCommandsWazuh: User ashish [424244]: 4 stern cookie-cutter-common | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_15: ORG_ID: 4f4c60be-3e68-41c2-97d6-ec8fd1df4bf2" Nov 14 16:32:42 bastion LinuxCommandsWazuh: message repeated 11 times: [ User ashish [424244]: 4 stern cookie-cutter-common | grep "LUCIRA DEBUG FOR WEBENGAGE STEP_15: ORG_ID: 4f4c60be-3e68-41c2-97d6-ec8fd1df4bf2"] Nov 14 16:32:51 bastion LinuxCommandsWazuh: User venky [655370]: 2004 kubectl get configmaps | grep link Nov 14 16:33:02 bastion LinuxCommandsWazuh: User venky [655370]: 2005 kubectl view configmap link-ui-config Nov 14 16:33:07 bastion LinuxCommandsWazuh: User venky [655370]: 2006 kubectl show configmap link-ui-config Nov 14 16:33:36 bastion LinuxCommandsWazuh: User venky [655370]: 2007 kubectl edit configmap link-ui-config Nov 14 16:35:39 bastion LinuxCommandsWazuh: User mohtashim [660330]: 871 make cookie-bash Nov 14 16:35:39 bastion LinuxCommandsWazuh: User mohtashim [660330]: 871 make cookie-bash Nov 14 16:37:58 bastion LinuxCommandsWazuh: User rihan [653412]: 1561 kubectl logs -f forever-b6df658-rm225 Nov 14 16:37:58 bastion LinuxCommandsWazuh: message repeated 3 times: [ User rihan [653412]: 1561 kubectl logs -f forever-b6df658-rm225 ] Nov 14 16:37:59 bastion LinuxCommandsWazuh: User ubuntu [653373]: 2001 sudo su rihan Nov 14 16:38:01 bastion LinuxCommandsWazuh: User ubuntu [653344]: 2001 sudo su ubuntu Nov 14 16:39:14 bastion LinuxCommandsWazuh: User venky [655370]: 2007 kubectl edit configmap link-ui-config Nov 14 16:39:14 bastion LinuxCommandsWazuh: User ayush [654715]: 628 sudo su - venky Nov 14 16:39:15 bastion LinuxCommandsWazuh: User ayush [654715]: 628 sudo su - venky Nov 14 16:42:20 bastion LinuxCommandsWazuh: User ubuntu [666732]: 2000 exit Nov 14 16:42:22 bastion LinuxCommandsWazuh: User rihan [666787]: 1562 exit Nov 14 16:42:24 bastion LinuxCommandsWazuh: User rihan [666787]: 1563 cd Nov 14 16:42:28 bastion LinuxCommandsWazuh: User ankur [666965]: 631 byobu Nov 14 16:42:33 bastion LinuxCommandsWazuh: User rihan [666787]: 1564 k get pods | grep "forever" Nov 14 16:42:40 bastion LinuxCommandsWazuh: User rihan [666787]: 1565 kubectl get pods | grep "forever" Nov 14 16:42:51 bastion LinuxCommandsWazuh: User rihan [666787]: 1566 kubectl get pods -o wide | grep "forever" Nov 14 16:43:24 bastion LinuxCommandsWazuh: User rihan [666787]: 1567 k top nodes gke-nitrox-productio-miscellaneous-on-3abe177f-9fcf Nov 14 16:43:29 bastion LinuxCommandsWazuh: User rihan [666787]: 1568 kubectl top nodes gke-nitrox-productio-miscellaneous-on-3abe177f-9fcf Nov 14 16:46:37 bastion LinuxCommandsWazuh: User rihan [666787]: 1569 curl -v https://nytro.link/ Nov 14 16:46:45 bastion LinuxCommandsWazuh: User rihan [666787]: 1570 k get logs -f forever-b6df658-rm225 Nov 14 16:47:00 bastion LinuxCommandsWazuh: User rihan [666787]: 1571 kubectl logs -f forever-b6df658-rm225 Nov 14 16:47:05 bastion LinuxCommandsWazuh: User rihan [666787]: 1572 k describe pod forever-b6df658-rm225 Nov 14 16:47:12 bastion LinuxCommandsWazuh: User rihan [666787]: 1573 kubectl describe pod forever-b6df658-rm225 Nov 14 16:49:14 bastion LinuxCommandsWazuh: User rihan [666787]: 1574 k get pods Nov 14 16:49:20 bastion LinuxCommandsWazuh: User rihan [666787]: 1575 alias kubectl=k Nov 14 16:49:22 bastion LinuxCommandsWazuh: User rihan [666787]: 1576 k get pods Nov 14 16:49:32 bastion LinuxCommandsWazuh: User rihan [666787]: 1577 alias k=kuebctl Nov 14 16:49:35 bastion LinuxCommandsWazuh: User rihan [666787]: 1578 k get pods Nov 14 16:49:37 bastion LinuxCommandsWazuh: User ubuntu [666732]: 2001 sudo su rihan Nov 14 16:49:38 bastion LinuxCommandsWazuh: User rihan [680859]: 1579 exit Nov 14 16:49:43 bastion LinuxCommandsWazuh: User rihan [680859]: 1580 alias k=kuebctl Nov 14 16:49:46 bastion LinuxCommandsWazuh: User rihan [680859]: 1581 k get pods Nov 14 16:49:57 bastion LinuxCommandsWazuh: User rihan [680859]: 1582 alias k=kubectl Nov 14 16:50:00 bastion LinuxCommandsWazuh: User rihan [680859]: 1583 k get pods Nov 14 16:50:05 bastion LinuxCommandsWazuh: User rihan [680859]: 1584 k get ingress Nov 14 16:50:25 bastion LinuxCommandsWazuh: User rihan [680859]: 1585 k describe ingress Nov 14 16:55:25 bastion LinuxCommandsWazuh: User rihan [680859]: 1585 k describe ingress Nov 14 16:55:26 bastion LinuxCommandsWazuh: message repeated 2 times: [ User rihan [680859]: 1585 k describe ingress] Nov 14 16:55:27 bastion LinuxCommandsWazuh: User ubuntu [666732]: 2001 sudo su rihan Nov 14 17:00:37 bastion LinuxCommandsWazuh: User ashish [424244]: 5 kubectl get pods | grep "cookie" Nov 14 17:00:38 bastion LinuxCommandsWazuh: message repeated 4 times: [ User ashish [424244]: 5 kubectl get pods | grep "cookie"] Nov 14 17:00:55 bastion LinuxCommandsWazuh: User ashish [424244]: 6 history | grep stern Nov 14 17:01:50 bastion LinuxCommandsWazuh: User mohtashim [704248]: 872 exit Nov 14 17:01:52 bastion LinuxCommandsWazuh: User mohtashim [704248]: 873 cler Nov 14 17:01:52 bastion LinuxCommandsWazuh: User mohtashim [704248]: 873 cler Nov 14 17:01:54 bastion LinuxCommandsWazuh: User mohtashim [704248]: 874 clear Nov 14 17:02:13 bastion LinuxCommandsWazuh: User mohtashim [704248]: 875 k get pods | grep "datapulse" Nov 14 17:02:29 bastion LinuxCommandsWazuh: User mohtashim [704248]: 876 stern datapulse-web-5d475576fc Nov 14 17:02:30 bastion LinuxCommandsWazuh: message repeated 3 times: [ User mohtashim [704248]: 876 stern datapulse-web-5d475576fc] Nov 14 17:03:08 bastion LinuxCommandsWazuh: User mohtashim [704248]: 877 clear Nov 14 17:38:06 bastion LinuxCommandsWazuh: User ayush [742956]: 628 sudo su - venky Nov 14 17:38:09 bastion LinuxCommandsWazuh: User ayush [742956]: 629 ~clea Nov 14 17:38:10 bastion LinuxCommandsWazuh: User ayush [742956]: 630 clear Nov 14 17:38:14 bastion LinuxCommandsWazuh: User aman [743147]: 665 psql -h 10.94.16.3 -p 5432 -U postgres -d assistant_pg Nov 14 17:38:23 bastion LinuxCommandsWazuh: User aman [743147]: 666 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 17:39:12 bastion LinuxCommandsWazuh: User aman [743147]: 666 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 17:39:12 bastion LinuxCommandsWazuh: User aman [743147]: 666 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 17:39:13 bastion LinuxCommandsWazuh: User ayush [742956]: 630 clear Nov 14 17:40:28 bastion LinuxCommandsWazuh: User ayush [742956]: 631 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 17:40:29 bastion LinuxCommandsWazuh: User ayush [742956]: 631 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 17:45:47 bastion LinuxCommandsWazuh: User ankur [747967]: 631 byobu Nov 14 17:45:47 bastion LinuxCommandsWazuh: User ankur [747967]: 631 byobu Nov 14 17:52:22 bastion LinuxCommandsWazuh: User mohtashim [748273]: 877 clear Nov 14 17:56:14 bastion LinuxCommandsWazuh: User mohtashim [748273]: 877 clear Nov 14 17:56:17 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [748273]: 877 clear] Nov 14 18:09:51 bastion LinuxCommandsWazuh: User mohtashim [748273]: 878 mongo pixel_v1 Nov 14 18:09:51 bastion LinuxCommandsWazuh: User mohtashim [748273]: 878 mongo pixel_v1 Nov 14 18:09:53 bastion LinuxCommandsWazuh: User mohtashim [748273]: 879 clear Nov 14 18:13:31 bastion LinuxCommandsWazuh: User mohtashim [748273]: 880 stern datapulse-web-5d475576fc Nov 14 18:13:32 bastion LinuxCommandsWazuh: message repeated 2 times: [ User mohtashim [748273]: 880 stern datapulse-web-5d475576fc] Nov 14 18:56:41 bastion LinuxCommandsWazuh: User mohtashim [780502]: 880 stern datapulse-web-5d475576fc Nov 14 19:14:02 bastion LinuxCommandsWazuh: User venky [781732]: 2000 kubectl edit configmap link-ui-config Nov 14 19:14:16 bastion LinuxCommandsWazuh: User venky [781732]: 2000 kubectl edit configmap link-ui-config Nov 14 19:14:19 bastion LinuxCommandsWazuh: User aman [781761]: 666 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 19:15:01 bastion LinuxCommandsWazuh: User aman [781761]: 666 psql -h 10.94.16.3 -p 5432 -U dbuser -d assistant_pg Nov 14 19:15:11 bastion LinuxCommandsWazuh: User aman [781761]: 667 psql -h 10.94.16.3 -p 5432 -U postgress -d assistant_pg Nov 14 19:15:37 bastion LinuxCommandsWazuh: User aman [781761]: 667 psql -h 10.94.16.3 -p 5432 -U postgress -d assistant_pg