00 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:04:12.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:04:13.114+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-07-12T12:04:13.114+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-07-12T12:04:15.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:04:16.152+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T12:04:18.171+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:04:19.185+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-12T12:04:20.188+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:04:21.194+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:04:22.232+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-07-12T12:04:23.239+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-12T12:04:24.241+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T12:04:25.273+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:04:26.282+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-12T12:04:28.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:04:29.328+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:04:30.336+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:04:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":227953},"total":{"ticks":2335296,"time":{"ms":312},"value":2335296},"user":{"ticks":2107343,"time":{"ms":312}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":183030617}},"memstats":{"gc_next":8757904,"memory_alloc":5158992,"memory_total":416759552968,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":718,"batches":25,"total":718},"read":{"bytes":150},"write":{"bytes":160014}},"pipeline":{"clients":3,"events":{"active":21,"published":714,"total":714},"queue":{"acked":718}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":713},"published_events":{"Application":1,"Security":717,"total":718}}}} 2026-07-12T12:04:31.347+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:04:32.386+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-12T12:04:33.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:04:35.409+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-07-12T12:04:37.431+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:04:38.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-07-12T12:04:39.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:04:41.496+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:04:42.523+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:04:43.536+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:04:44.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:04:46.571+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:04:47.591+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:04:48.626+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:04:49.638+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:04:50.647+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:04:51.682+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:04:52.692+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:04:54.719+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:04:55.723+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:04:56.751+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:04:57.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:04:58.781+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T12:04:59.790+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:05:00.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:05:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":227968,"time":{"ms":15}},"total":{"ticks":2335655,"time":{"ms":359},"value":2335655},"user":{"ticks":2107687,"time":{"ms":344}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":183060617}},"memstats":{"gc_next":5757984,"memory_alloc":3590824,"memory_total":416826346768,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":786,"batches":25,"total":786},"read":{"bytes":150},"write":{"bytes":172449}},"pipeline":{"clients":3,"events":{"active":26,"published":791,"total":791},"queue":{"acked":786}}},"msg_file_cache":{"SecurityHits":791},"published_events":{"Security":786,"total":786}}}} 2026-07-12T12:05:01.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:05:03.857+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:05:04.871+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:05:05.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-07-12T12:05:07.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:05:08.914+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:05:09.914+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:05:10.951+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:05:11.972+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-12T12:05:12.981+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-12T12:05:14.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:05:16.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:05:17.056+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-12T12:05:18.050+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-12T12:05:19.077+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:05:20.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] sucpublished 37 events 2026-07-13T04:56:32.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-13T04:56:33.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:56:34.584+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-13T04:56:35.602+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-13T04:56:36.618+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:56:37.641+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-13T04:56:38.671+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-13T04:56:39.700+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-13T04:56:40.703+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-13T04:56:42.724+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:56:43.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-07-13T04:56:44.772+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T04:56:45.781+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-13T04:56:46.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-13T04:56:47.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-13T04:56:48.853+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-13T04:56:49.865+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:56:50.895+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-13T04:56:51.902+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T04:56:52.926+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-13T04:56:53.932+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-13T04:56:55.946+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T04:56:56.965+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T04:56:57.972+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T04:56:59.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-13T04:57:00.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-07-13T04:57:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":302296,"time":{"ms":46}},"total":{"ticks":3091983,"time":{"ms":327},"value":3091983},"user":{"ticks":2789687,"time":{"ms":281}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":243780617}},"memstats":{"gc_next":9019888,"memory_alloc":5206352,"memory_total":554545219712}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":857,"batches":27,"total":857},"read":{"bytes":162},"write":{"bytes":178715}},"pipeline":{"clients":3,"events":{"active":15,"published":835,"total":835},"queue":{"acked":857}}},"msg_file_cache":{"SecurityHits":835},"published_events":{"Security":857,"total":857}}}} 2026-07-13T04:57:01.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-13T04:57:02.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-13T04:57:03.083+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-13T04:57:04.107+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-13T04:57:05.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-13T04:57:06.133+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T04:57:08.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:57:09.179+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-13T04:57:11.187+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:57:12.222+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-07-13T04:57:13.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:57:14.253+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-13T04:57:15.269+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-13T04:57:16.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-13T04:57:17.294+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-13T04:57:18.323+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-13T04:57:19.362+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-13T04:57:20.366+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T04:57:22.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-13T04:57:23.406+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:57:24.440+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-13T04:57:25.463+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-13T04:57:26.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:57:27.495+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-13T04:57:29.499+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-13T04:57:30.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-13T04:57:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":302312,"time":{"ms":16}},"total":{"ticks":3092358,"time":{"ms":375},"value":3092358},"user":{"ticks":2790046,"time":{"ms":359}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":243810617}},"memstats":{"gc_next":6302784,"memory_alloc":4642656,"memory_total":554613993168}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":769,"batches":26,"total":769},"read":{"bytes":156},"write":{"bytes":164956}},"pipeline":{"clients":3,"events":{"active":52,"published":806,"total":806},"queue":{"acked":769}}},"msg_file_cache":{"SecurityHits":806},"published_events":{"Security":769,"total":769}}}} 2026-07-13T04:57:31.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-13T04:57:32.546+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-13T04:57:33.549+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-07-13T04:57:34.575+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:57:36.584+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:57:38.596+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:57:39.627+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:57:40.633+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-13T04:57:41.663+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-13T04:57:42.663+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-13T04:57:43.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-13T04:57:44.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events 2026-07-13T04:57:45.725+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-13T04:57:46.739+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T04:57:47.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T04:57:48.773+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T04:57:50.805+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-13T04:57:51.802+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-07-13T04:57:52.827+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T04:57:53.854+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-13T04:57:54.862+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-13T04:57:56.897+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-13T04:57:57.896+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-13T04:57:58.906+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-13T04:57:59.939+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-13T04:58:00.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-13T04:58:01.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":302343,"time":{"ms":31}},"total":{"ticks":3092686,"time":{"ms":328},"value":3092686},"user":{"ticks":2790343,"time":{"ms":297}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":243840618}},"memstats":{"gc_next":5797104,"memory_alloc":5382016,"memory_total":554677440688}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":693,"batches":26,"total":693},"read":{"bytes":156},"write":{"bytes":150991}},"pipeline":{"clients":3,"events":{"active":10,"published":651,"total":651},"queue":{"acked":693}}},"msg_file_cache":{"SecurityHits":651},"published_events":{"Security":693,"total":693}}}} 2026-07-13T04:58:01.960+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-13T04:58:03.978+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T04:58:05.011+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-13T04:58:06.027+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:58:07.038+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T04:58:08.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-13T04:58:09.080+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-13T04:58:10.090+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T04:58:11.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-13T04:58:13.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-13T04:58:15.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-13T04:58:16.186+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 80 events 2026-07-13T04:58:17.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-13T04:58:18.200+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:58:20.220+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:58:21.239+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:58:22.257+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T04:58:23.262+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-13T04:58:24.263+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-07-13T04:58:25.314+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events 2026-07-13T04:58:26.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-13T04:58:28.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:58:29.345+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-13T04:58:30.360+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:58:31.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":302421,"time":{"ms":78}},"total":{"ticks":3093092,"time":{"ms":406},"value":3093092},"user":{"ticks":2790671,"time":{"ms":328}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":243870618}},"memstats":{"gc_next":6212896,"memory_alloc":4448144,"memory_total":554740084856}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":689,"batches":24,"total":689},"read":{"bytes":144},"write":{"bytes":145914}},"pipeline":{"clients":3,"events":{"active":36,"published":715,"total":715},"queue":{"acked":689}}},"msg_file_cache":{"SecurityHits":715},"published_events":{"Security":689,"total":689}}}} 2026-07-13T04:58:31.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-13T04:58:32.377+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-07-13T04:58:34.399+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T04:58:35.414+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T04:58:36.432+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-13T04:58:37.442+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:58:38.456+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-13T04:58:40.463+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-13T04:58:41.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 70 events 2026-07-13T04:58:42.503+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-07-13T04:58:43.528+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:58:45.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-13T04:58:46.595+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-13T04:58:47.605+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:58:48.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-13T04:58:49.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-13T04:58:50.658+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:58:51.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-13T04:58:52.680+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-07-13T04:58:54.726+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-07-13T04:58:55.716+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-13T04:58:56.732+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T04:58:58.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:58:59.759+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T04:59:00.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-13T04:59:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":302437,"time":{"ms":16}},"total":{"ticks":3093374,"time":{"ms":282},"value":3093374},"user":{"ticks":2790937,"time":{"ms":266}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":243900617}},"memstats":{"gc_next":5834208,"memory_alloc":3754520,"memory_total":554802639136}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":673,"batches":25,"total":673},"read":{"bytes":150},"write":{"bytes":146361}},"pipeline":{"clients":3,"events":{"active":34,"published":671,"total":671},"queue":{"acked":673}}},"msg_file_cache":{"SecurityHits":671},"published_events":{"Security":673,"total":673}}}} 2026-07-13T04:59:01.804+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-13T04:59:02.815+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-13T04:59:04.829+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-13T04:59:06.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-13T04:59:07.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T04:59:08.886+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-13T04:59:09.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-13T04:59:10.918+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-13T04:59:11.930+0800