uccessfully published 34 events 2026-07-12T11:46:43.985+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T11:46:44.986+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T11:46:47.021+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T11:46:48.035+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T11:46:49.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-12T11:46:50.073+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T11:46:51.083+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T11:46:53.087+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T11:46:54.120+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-12T11:46:55.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-12T11:46:56.164+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T11:46:57.167+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-12T11:46:59.186+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T11:47:00.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T11:47:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":226703,"time":{"ms":94}},"total":{"ticks":2321906,"time":{"ms":376},"value":2321906},"user":{"ticks":2095203,"time":{"ms":282}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":181980617}},"memstats":{"gc_next":8918000,"memory_alloc":4948168,"memory_total":414409791048}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":714,"batches":23,"total":714},"read":{"bytes":138},"write":{"bytes":156021}},"pipeline":{"clients":3,"events":{"active":12,"published":718,"total":718},"queue":{"acked":714}}},"msg_file_cache":{"SecurityHits":718},"published_events":{"Security":714,"total":714}}}} 2026-07-12T11:47:01.217+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T11:47:02.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T11:47:03.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-07-12T11:47:04.283+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-12T11:47:06.301+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T11:47:07.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T11:47:08.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-12T11:47:09.340+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T11:47:10.339+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T11:47:11.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T11:47:12.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-07-12T11:47:13.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T11:47:14.402+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T11:47:15.427+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T11:47:17.423+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-07-12T11:47:19.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-07-12T11:47:20.464+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T11:47:21.479+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T11:47:22.501+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-12T11:47:23.526+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T11:47:25.545+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T11:47:26.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T11:47:27.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-12T11:47:28.599+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-12T11:47:29.605+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T11:47:30.623+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T11:47:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":226765,"time":{"ms":62}},"total":{"ticks":2322202,"time":{"ms":296},"value":2322202},"user":{"ticks":2095437,"time":{"ms":234}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":182010617}},"memstats":{"gc_next":5884736,"memory_alloc":5040184,"memory_total":414474178040}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":691,"batches":26,"total":691},"read":{"bytes":156},"write":{"bytes":155412}},"pipeline":{"clients":3,"events":{"active":0,"published":679,"total":679},"queue":{"acked":691}}},"msg_file_cache":{"SecurityHits":679},"published_events":{"Security":691,"total":691}}}} 2026-07-12T11:47:32.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T11:47:33.655+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T11:47:34.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T11:47:35.691+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T11:47:36.700+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T11:47:37.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T11:47:39.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T11:47:40.759+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T11:47:41.778+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T11:47:43.796+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T11:47:44.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-07-12T11:47:45.831+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T11:47:46.839+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T11:47:47.859+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T11:47:48.870+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T11:47:48.870+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-07-12T11:47:49.899+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 6 events 2026-07-12T11:47:49.899+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 4 events 2026-07-12T11:47:49.899+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully ed 50 events 2026-07-12T12:32:07.507+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:32:08.509+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-07-12T12:32:09.539+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:32:10.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:32:11.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:32:12.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:32:14.598+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:32:15.602+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:32:16.637+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-12T12:32:17.634+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:32:18.661+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:32:20.666+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:32:21.679+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:32:22.697+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:32:23.708+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T12:32:24.728+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:32:25.768+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-07-12T12:32:27.777+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:32:28.839+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 81 events 2026-07-12T12:32:29.852+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:32:30.882+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-12T12:32:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229656,"time":{"ms":31}},"total":{"ticks":2355031,"time":{"ms":344},"value":2355031},"user":{"ticks":2125375,"time":{"ms":313}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184710617}},"memstats":{"gc_next":8958384,"memory_alloc":5552768,"memory_total":420502887136}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":828,"batches":27,"total":828},"read":{"bytes":162},"write":{"bytes":178991}},"pipeline":{"clients":3,"events":{"active":29,"published":829,"total":829},"queue":{"acked":828}}},"msg_file_cache":{"SecurityHits":829},"published_events":{"Security":828,"total":828}}}} 2026-07-12T12:32:31.894+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:32:32.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:32:33.940+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-12T12:32:34.981+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-07-12T12:32:36.000+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:32:37.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T12:32:38.038+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:32:40.043+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T12:32:41.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:32:42.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:32:43.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:32:44.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:32:45.143+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T12:32:46.171+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-12T12:32:47.192+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:32:48.202+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:32:49.216+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:32:50.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:32:51.276+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-07-12T12:32:52.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:32:54.322+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:32:55.326+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:32:56.338+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:32:57.376+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-07-12T12:32:58.386+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:32:59.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-07-12T12:33:00.431+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:33:01.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229671,"time":{"ms":15}},"total":{"ticks":2355499,"time":{"ms":468},"value":2355499},"user":{"ticks":2125828,"time":{"ms":453}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184740618}},"memstats":{"gc_next":5793184,"memory_alloc":3303224,"memory_total":420579983296}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":999,"batches":27,"total":999},"read":{"bytes":162},"write":{"bytes":200900}},"pipeline":{"clients":3,"events":{"active":26,"published":996,"total":996},"queue":{"acked":999}}},"msg_file_cache":{"SecurityHits":996},"published_events":{"Security":999,"total":999}}}} 2026-07-12T12:33:01.443+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:33:02.470+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:33:03.488+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-12T12:33:04.500+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:33:05.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:33:06.526+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:33:07.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:33:08.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:33:09.592+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:33:10.607+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:33:11.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:33:13.652+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:33:14.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-12T12:33:15.685+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:33:16.719+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:33:17.730+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:33:18.736+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:33:19.770+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-12T12:33:20.777+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:33:21.803+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-12T12:33:22.831+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-12T12:33:23.847+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:33:24.855+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:33:25.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:33:26.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:33:27.924+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:33:28.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:33:29.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-07-12T12:33:31.002+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:33:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229718,"time":{"ms":47}},"total":{"ticks":2356046,"time":{"ms":547},"value":2356046},"user":{"ticks":2126328,"time":{"ms":500}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184770617}},"memstats":{"gc_next":6248736,"memory_alloc":5288656,"memory_total":420662000424}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1008,"batches":29,"total":1008},"read":{"bytes":174},"write":{"bytes":207259}},"pipeline":{"clients":3,"events":{"active":65,"published":1047,"total":1047},"queue":{"acked":1008}}},"msg_file_cache":{"SecurityHits":1047},"published_events":{"Security":1008,"total":1008}}}} 2026-07-12T12:33:32.046+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-07-12T12:33:33.046+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:33:35.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T12:33:36.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-12T12:33:37.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T12:33:38.122+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:33:39.145+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:33:40.153+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:33:41.159+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:33:42.197+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:33:43.197+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:33:45.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:33:46.246+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T12:33:47.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:33:48.282+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-12T12:33:49.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:33:50.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:33:51.323+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:33:52.348+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:33:53.360+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:33:54.362+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T12:33:55.403+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 6 events 2026-07-12T12:33:55.403+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-07-12T12:33:56.423+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:33:56.423+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-07-12T12:33:57.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T12:33:58.457+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:33:59.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:34:00.488+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:34:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229781,"time":{"ms":63}},"total":{"ticks":2356593,"time":{"ms":547},"value":2356593},"user":{"ticks":2126812,"time":{"ms":484}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184800617}},"memstats":{"gc_next":8880624,"memory_alloc":5754176,"memory_total":420733534552}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":866,"batches":27,"total":866},"read":{"bytes":162},"write":{"bytes":187988}},"pipeline":{"clients":3,"events":{"active":35,"published":836,"total":836},"queue":{"acked":866}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":829,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":859,"System":1,"total":866}}}} 2026-07-12T12:34:01.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:34:02.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-12T12:34:03.532+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:34:04.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:34:05.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T12:34:07.585+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-12T12:34:08.603+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T12:34:09.608+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:34:10.628+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:34:11.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T12:34:12.642+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-07-12T12:34:12.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:34:13.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:34:15.690+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:34:16.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:34:17.730+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:34:18.742+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:34:19.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:34:20.781+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:34:21.783+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:34:22.801+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:34:23.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:34:24.846+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:34:25.850+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:34:26.876+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:34:27.890+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:34:28.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:34:30.935+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:34:31.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229859,"time":{"ms":78}},"total":{"ticks":2357109,"time":{"ms":516},"value":2357109},"user":{"ticks":2127250,"time":{"ms":438}}},"handles":{"open":320},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184830618}},"memstats":{"gc_next":8940976,"memory_alloc":5847440,"memory_total":420802620320,"rss":-12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":766,"batches":27,"total":766},"read":{"bytes":162},"write":{"bytes":167332}},"pipeline":{"clients":3,"events":{"active":37,"published":768,"total":768},"queue":{"acked":766}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":767},"published_events":{"Application":1,"Security":765,"total":766}}}} 2026-07-12T12:34:31.955+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T12:34:32.968+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:34:33.999+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-12T12:34:34.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-07-12T12:34:36.025+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-12T12:34:37.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:34:38.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:34:39.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-12T12:34:41.085+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:34:42.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:34:43.114+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:34:44.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:34:46.157+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:34:47.166+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:34:48.180+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:34:49.212+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-12T12:34:50.214+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:34:51.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T12:34:52.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:34:53.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:34:55.269+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:34:56.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:34:57.299+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-12T12:34:58.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:34:59.335+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:35:00.335+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T12:35:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":229890,"time":{"ms":31}},"total":{"ticks":2357421,"time":{"ms":312},"value":2357421},"user":{"ticks":2127531,"time":{"ms":281}}},"handles":{"open":320},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":184860617}},"memstats":{"gc_next":8935760,"memory_alloc":8133352,"memory_total":420868180320,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":701,"batches":26,"total":701},"read":{"bytes":156},"write":{"bytes":160765}},"pipeline":{"clients":3,"events":{"active":47,"published":711,"total":711},"queue":{"acked":701}}},"msg_file_cache":{"SecurityHits":711},"published_events":{"Security":701,"total":701}}}} 2026-07-12T12:35:01.369+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-12T12:35:03.372+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:35:04.406+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:35:05.410+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:35:06.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T12:35:08.439+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:35:09.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13