h=#z Q &<.winlogbeat.yml.new`=X#h2Q <.winlogbeat.ymlh=#Ȑ2Q &<.winlogbeat.yml.new`=#02Q <.winlogbeat.yml`=#XQ <.winlogbeat.ymlh=Y#vIL &<.winlogbeat.yml.newh=Y#XmoL &<.winlogbeat.yml.newh=Y#L &<.winlogbeat.yml.new`=#(L <.winlogbeat.ymlh=Y#L &<.winlogbeat.yml.new`=Y#L <.winlogbeat.yml`=Y#PL <.winlogbeat.ymlX|=O6 <2026-05-05.logX|=O6 <2026-05-05.logX|=O6`Eܔ <2026-05-05.logX|=O6Eܔ <2026-05-05.logX|=O6Eܔ <2026-05-05.logX|=O6h? <2026-05-05.logX|=O6( <2026-05-05.logX|=O6( <2026-05-05.logX|=O6p( <2026-05-05.logX|=O6ȗ( <2026-05-05.logX|=O6 N <2026-05-05.logX|=O6xN <2026-05-05.logX|=O6ИN <2026-05-05.logX|=O6(N <2026-05-05.logX|=O6t <2026-05-05.logX|=O6ؙt <2026-05-05.logh=#0lG &<.winlogbeat.yml.newh=#G &<.winlogbeat.yml.newh=#DH &<.winlogbeat.yml.new`=Y#hjH <.winlogbeat.ymlh=#țjH &<.winlogbeat.yml.new`=#0jH <.winlogbeat.yml`=#jH <.winlogbeat.ymlX|=O6Mu <2026-05-05.logX|=O6HMu <2026-05-05.logX|=O6 <2026-05-05.logX|=O6 <2026-05-05.logX|=O6Pv <2026-05-05.logX|=O6v <2026-05-05.logX|=O6v <2026-05-05.logX|=O6Xv <2026-05-05.log3 EventLog[Security] successfully published 45 events 2026-05-18T12:44:06.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-18T12:44:08.190+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-18T12:44:09.210+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-18T12:44:10.224+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-18T12:44:10.784+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":433046,"time":{"ms":78}},"total":{"ticks":4236702,"time":{"ms":750},"value":4236702},"user":{"ticks":3803656,"time":{"ms":672}}},"handles":{"open":328},"info":{"ephemeral_id":"30f8e925-9d4a-400e-97a1-74e315be2f22","uptime":{"ms":336690407}},"memstats":{"gc_next":5957936,"memory_alloc":4919336,"memory_total":762230683216}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":700,"batches":24,"total":700},"read":{"bytes":144},"write":{"bytes":149031}},"pipeline":{"clients":3,"events":{"active":0,"published":700,"total":700},"queue":{"acked":700}}},"msg_file_cache":{"SecurityHits":700},"published_events":{"Security":700,"total":700}}}} 2026-05-18T12:44:12.264+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-18T12:44:16.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-18T12:44:17.294+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-18T12:44:18.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-18T12:44:20.336+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-18T12:44:21.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-18T12:44:22.370+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-18T12:44:23.375+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-18T12:44:24.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-18T12:44:25.430+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-18T12:44:27.448+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-18T12:44:28.476+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-18T12:44:29.479+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-18T12:44:30.485+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-18T12:44:31.513+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-18T12:44:32.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-18T12:44:34.524+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-18T12:44:35.547+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-18T12:44:36.588+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-18T12:44:37.592+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-18T12:44:38.612+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-18T12:44:39.620+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-18T12:44:40.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-18T12:44:40.783+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":433078,"time":{"ms":32}},"total":{"ticks":4237093,"time":{"ms":391},"value":4237093},"user":{"ticks":3804015,"time":{"ms":359}}},"handles":{"open":328},"info":{"ephemeral_id":"30f8e925-9d4a-400e-97a1-74e315be2f22","uptime":{"ms":336720406}},"memstats":{"gc_next":9081920,"memory_alloc":6221656,"memory_total":762292765696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":699,"batches":23,"total":699},"read":{"bytes":138},"write":{"bytes":151044}},"pipeline":{"clients":3,"events":{"active":46,"published":745,"total":745},"queue":{"acked":699}}},"msg_file_cache":{"SecurityHits":745},"published_events":{"Security":699,"total":699}}}} 2026-05-18T12:44:41.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-18T12:44:42.696+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-18T12:44:44.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-18T12:44:45.724+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-18T12:44:46.759+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-18T12:44:47.771+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-18T12:44:48.783+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-18T12:44:50.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-18T12:44:51.824+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-18T12:44:52.846+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-18T12:44:53.854+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-18T12:44:55.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-18T12:44:56.933+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 75 events 2026-05-18T12:44:57.922+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-18T12:44:59.936+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-18T12:45:00.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-18T12:45:01.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-18T12:45:02.974+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-18T12:45:04.002+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-18T12:45:05.016+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-18T12:45:06.023+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-18T12:45:07.075+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-18T12:45:08.077+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-18T12:45:09.095+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-18T12:45:10.130+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-18T12:45:10.784+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":433171,"time":{"ms":93}},"total":{"ticks":4237421,"time":{"ms":328},"value":4237421},"user":{"ticks":3804250,"time":{"ms":235}}},"handles":{"open":328},"info":{"ephemeral_id":"30f8e925-9d4a-400e-97a1-74e315be2f22","uptime":{"ms":336750406}},"memstats":{"gc_next":8882048,"memory_alloc":7774016,"memory_total":762353873824}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":679,"batches":25,"total":679},"read":{"bytes":150},"write":{"bytes":146948}},"pipeline":{"clients":3,"events":{"active":0,"published":633,"total":633},"queue":{"acked":679}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":633},"published_events":{"Security":679,"total":679}}}} 2026-05-18T12:45:12.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-18T12:45:13.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-18T12:45:14.181+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-18T12:45:16.208+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-18T12:45:17.222+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-18T12:45:18.233+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-18T12:45:19.263+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-18T12:45:20.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-18T12:45:21.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-18T12:45:22.311+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-18T12:45:23.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-18T12:45:24.323+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-18T12:45:25.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-18T12:45:26.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-18T12:45:27.390+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-18T12:45:29.424+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-18T12:45:30.436+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-18T12:45:31.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-18T12:45:32.476+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-18T12:45:33.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-18T12:45:35.495+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-18T12:45:36.520+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-18T12:45:37.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-18T12:45:38.564+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-18T12:45:39.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-18T12:45:40.599+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-18T12:45:40.783+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":433218,"time":{"ms":47}},"total":{"ticks":4237718,"time":{"ms":297},"value":4237718},"user":{"ticks":3804500,"time":{"ms":250}}},"handles":{"open":328},"info":{"ephemeral_id":"30f8e925-9d4a-400e-97a1-74e315be2f22","uptime":{"ms":336780406}},"memstats":{"gc_next":6314960,"memory_alloc":3756776,"memory_total":762420168464}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":711,"batches":26,"total":711},"read":{"bytes":156},"write":{"bytes":154996}},"pipeline":{"clients":3,"events":{"active":22,"published":733,"total":733},"queue":{"acked":711}}},"msg_file_cache":{"SecurityHits":733},"published_events":{"Security":711,"total":711}}}} 2026-05-18T12:45:41.611+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-18T12:45:42.651+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-18T12:45:43.679+0800 INFO beater/eventlogger.go:73 EventLog[S 中国船级社质量认证有限公司 中国船级社质量认证有限公司
En