ents 2026-07-11T20:52:48.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-11T20:52:49.691+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-11T20:52:50.720+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-11T20:52:51.720+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-11T20:52:53.745+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-11T20:52:54.777+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-07-11T20:52:55.776+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-11T20:52:56.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-11T20:52:57.826+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-11T20:52:58.830+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-11T20:52:59.875+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-07-11T20:53:00.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-11T20:53:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":159656,"time":{"ms":47}},"total":{"ticks":1638281,"time":{"ms":391},"value":1638281},"user":{"ticks":1478625,"time":{"ms":344}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":128340617}},"memstats":{"gc_next":9110576,"memory_alloc":6519336,"memory_total":292709311392,"rss":-512000}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":798,"batches":27,"total":798},"read":{"bytes":162},"write":{"bytes":176356}},"pipeline":{"clients":3,"events":{"active":0,"published":757,"total":757},"queue":{"acked":798}}},"msg_file_cache":{"SecurityHits":757},"published_events":{"Security":798,"total":798}}}} 2026-07-11T20:53:02.891+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-11T20:53:03.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-11T20:53:04.919+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-11T20:53:05.949+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-11T20:53:06.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-11T20:53:08.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-11T20:53:10.004+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-07-11T20:53:11.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-11T20:53:12.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-11T20:53:13.057+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-11T20:53:14.066+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-11T20:53:15.088+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-11T20:53:17.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-11T20:53:18.145+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-11T20:53:19.158+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-11T20:53:20.201+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-07-11T20:53:21.201+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-11T20:53:22.215+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-11T20:53:23.248+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-11T20:53:24.245+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-11T20:53:25.272+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-11T20:53:26.282+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-11T20:53:27.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-11T20:53:28.303+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-11T20:53:29.339+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-11T20:53:30.348+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-11T20:53:31.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":159687,"time":{"ms":31}},"total":{"ticks":1638624,"time":{"ms":343},"value":1638624},"user":{"ticks":1478937,"time":{"ms":312}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":128370618}},"memstats":{"gc_next":8993136,"memory_alloc":7010040,"memory_total":292776285440,"rss":479232}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":754,"batches":26,"total":754},"read":{"bytes":156},"write":{"bytes":165309}},"pipeline":{"clients":3,"events":{"active":0,"published":754,"total":754},"queue":{"acked":754}}},"msg_file_cache":{"SecurityHits":754},"published_events":{"Security":754,"total":754}}}} 2026-07-11T20:53:32.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-11T20:53:33.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-11T20:53:34.390+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-11T20:53:35.431+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-07-11T20:53:36.442+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-11T20:53:38.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-11T20:53:39.488+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-11T20:53:40.491+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-11T20:53:41.519+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-11T20:53:42.542+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-11T20:53:43.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-11T20:53:44.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-11T20:53:45.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-11T20:53:46.591+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-11T20:53:47.604+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-11T20:53:48.623+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-11T20:53:50.627+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-11T20:53:51.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-11T20:53:52.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-11T20:53:53.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-11T20:53:54.702+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully puSPADMSTLT/3\ \@,SPADMSTLT/3\b@.SPADMSTLT/3\ e@.SPADMSTLT/3\l@0SPADMSTLT/3\ o@0SPADMSTLT/3\w@2SPADMSTLT/ 3\z@2SPADMSTLT/!3\@~@2SPAD