8+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events
2026-05-24T02:07:38.302+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:07:39.337+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events
2026-05-24T02:07:41.363+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events
2026-05-24T02:07:42.370+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events
2026-05-24T02:07:43.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events
2026-05-24T02:07:44.409+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events
2026-05-24T02:07:45.435+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events
2026-05-24T02:07:46.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 91 events
2026-05-24T02:07:47.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events
2026-05-24T02:07:48.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:07:49.549+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events
2026-05-24T02:07:50.569+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events
2026-05-24T02:07:51.594+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events
2026-05-24T02:07:52.622+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events
2026-05-24T02:07:53.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events
2026-05-24T02:07:54.651+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events
2026-05-24T02:07:55.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events
2026-05-24T02:07:56.696+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events
2026-05-24T02:07:58.710+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events
2026-05-24T02:07:59.734+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events
2026-05-24T02:08:00.749+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events
2026-05-24T02:08:01.764+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events
2026-05-24T02:08:02.800+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events
2026-05-24T02:08:03.808+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events
2026-05-24T02:08:04.823+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events
2026-05-24T02:08:05.860+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events
2026-05-24T02:08:06.612+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":158750},"total":{"ticks":1647859,"time":{"ms":438},"value":1647859},"user":{"ticks":1489109,"time":{"ms":438}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":129930569}},"memstats":{"gc_next":8965936,"memory_alloc":5233408,"memory_total":293666237712,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":967,"batches":27,"total":967},"read":{"bytes":162},"write":{"bytes":189643}},"pipeline":{"clients":3,"events":{"active":20,"published":965,"total":965},"queue":{"acked":967}}},"msg_file_cache":{"SecurityHits":964,"SystemMisses":1},"published_events":{"Security":966,"System":1,"total":967}}}}
2026-05-24T02:08:06.873+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:08:07.895+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events
2026-05-24T02:08:08.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events
2026-05-24T02:08:09.931+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events
2026-05-24T02:08:10.942+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events
2026-05-24T02:08:11.994+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events
2026-05-24T02:08:12.998+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events
2026-05-24T02:08:14.007+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events
2026-05-24T02:08:15.040+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events
2026-05-24T02:08:16.048+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events
2026-05-24T02:08:17.095+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events
2026-05-24T02:08:18.097+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events
2026-05-24T02:08:18.097+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events
2026-05-24T02:08:19.110+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events
2026-05-24T02:08:20.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events
2026-05-24T02:08:21.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events
2026-05-24T02:08:22.186+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events
2026-05-24T02:08:23.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events
2026-05-24T02:08:24.240+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events
2026-05-24T02:08:25.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events
2026-05-24T02:08:26.279+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events
2026-05-24T02:08:27.298+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events
2026-05-24T02:08:28.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:08:30.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events
2026-05-24T02:08:31.335+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events
2026-05-24T02:08:32.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events
2026-05-24T02:08:33.384+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events
2026-05-24T02:08:34.388+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 6 events
2026-05-24T02:08:34.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events
2026-05-24T02:08:36.028+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events
2026-05-24T02:08:36.028+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events
2026-05-24T02:08:36.613+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":158796,"time":{"ms":46}},"total":{"ticks":1648389,"time":{"ms":530},"value":1648389},"user":{"ticks":1489593,"time":{"ms":484}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":129960570}},"memstats":{"gc_next":9138224,"memory_alloc":7048320,"memory_total":293745437912,"rss":-512000}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":962,"batches":28,"total":962},"read":{"bytes":168},"write":{"bytes":192847}},"pipeline":{"clients":3,"events":{"active":68,"published":1010,"total":1010},"queue":{"acked":962}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":1002,"SystemMisses":2,"SystemSize":2},"published_events":{"Application":6,"Security":954,"System":2,"total":962}}}}
2026-05-24T02:08:37.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events
2026-05-24T02:08:38.467+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events
2026-05-24T02:08:39.481+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events
2026-05-24T02:08:40.522+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events
2026-05-24T02:08:41.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events
2026-05-24T02:08:42.569+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events
2026-05-24T02:08:43.602+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events
2026-05-24T02:08:44.634+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events
2026-05-24T02:08:45.661+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events
2026-05-24T02:08:46.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events
2026-05-24T02:08:47.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:08:48.732+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events
2026-05-24T02:08:49.743+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events
2026-05-24T02:08:50.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events
2026-05-24T02:08:51.795+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events
2026-05-24T02:08:52.794+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events
2026-05-24T02:08:54.805+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events
2026-05-24T02:08:55.833+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events
2026-05-24T02:08:56.847+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events
2026-05-24T02:08:57.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events
2026-05-24T02:08:58.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events
2026-05-24T02:08:59.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events
2026-05-24T02:09:00.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events
2026-05-24T02:09:01.995+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events
2026-05-24T02:09:03.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events
2026-05-24T02:09:05.053+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events
2026-05-24T02:09:06.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events
2026-05-24T02:09:06.613+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":158875,"time":{"ms":79}},"total":{"ticks":1648812,"time":{"ms":423},"value":1648812},"user":{"ticks":1489937,"time":{"ms":344}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":129990570}},"memstats":{"gc_next":8966960,"memory_alloc":7252976,"memory_total":293828141808,"rss":409600}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1139,"batches":27,"total":1139},"read":{"bytes":162},"write":{"bytes":212638}},"pipeline":{"clients":3,"events":{"active":75,"published":1146,"total":1146},"queue":{"acked":1139}}},"msg_file_cache":{"SecurityHits":1146},"published_events":{"Security":1139,"total":1139}}}}
2026-05-24T02:09:07.127+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 75 events
2026-05-24T02:09:08.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 82 events
2026-05-24T02:09:09.201+080 });
}
function lineInfo(line) {
if (typeof line == "number") {
if (!isLine(line)) return null;
var n = line;
line = getLine(line);
if (!line) return null;
}
else {
var n = lineNo(line);
if (n == null) return null;
}
var marker = line.gutterMarker;
return {line: n, handle: line, text: line.text, markerText: marker && marker.text,
markerClass: marker && marker.style, lineClass: line.className};
}
function stringWidth(str) {
measure.innerHTML = "x
";
measure.firstChild.firstChild.firstChild.nodeValue = str;
return measure.firstChild.firstChild.offsetWidth || 10;
}
// These are used to go from pixel positions to character
// positions, taking varying character widths into account.
function charFromX(line, x) {
if (x <= 0) return 0;
var lineObj = getLine(line), text = lineObj.text;
function getX(len) {
measure.innerHTML = "" + lineObj.getHTML(null, null, false, tabText, len) + "
";
return measure.firstChild.firstChild.offsetWidth;
}
var from = 0, fromX = 0, to = text.length, toX;
// Guess a suitable upper bound for our search.
var estimated = Math.min(to, Math.ceil(x / charWidth()));
for (;;) {
var estX = getX(estimated);
if (estX <= x && estimated < to) estimated = Math.min(to, Math.ceil(estimated * 1.2));
else {toX = estX; to = estimated; break;}
}
if (x > toX) return to;
// Try to guess a suitable lower bound as well.
estimated = Math.floor(to * 0.8); estX = getX(estimated);
if (estX < x) {from = estimated; fromX = estX;}
// Do a binary search between these bounds.
for (;;) {
if (to - from <= 1) return (toX - x > x - fromX) ? from : to;
var middle = Math.ceil((from + to) / 2), middleX = getX(middle);
if (middleX > x) {to = middle; toX = middleX;}
else {from = middle; fromX = middleX;}
}
}
var tempId = Math.floor(Math.random() * 0xffffff).toString(16);
function measureLine(line, ch) {
var extra = "";
// Include extra text at the end to make sure the measured line is wrapped in the right way.
if (options.lineWrapping) {
var end = line.text.indexOf(" ", ch + 2);
extra = htmlEscape(line.text.slice(ch + 1, end < 0 ? line.text.length : end + (ie ? 5 : 0)));
}
measure.innerHTML = "" + line.getHTML(null, null, false, tabText, ch) +
'' + htmlEscape(line.text.charAt(ch) || " ") + "" +
extra + "";
var elt = document.getElementById("CodeMirror-temp-" + tempId);
var top = elt.offsetTop, left = elt.offsetLeft;
// Older IEs report zero offsets for spans directly after a wrap
if (ie && ch && top == 0 && left == 0) {
var backup = document.createElement("span");
backup.innerHTML = "x";
elt.parentNode.insertBefore(backup, elt.nextSibling);
top = backup.offsetTop;
}
return {top: top, left: left};
}
function localCoords(pos, inLineWrap) {
var x, lh = textHeight(), y = lh * (heightAtLine(doc, pos.line) - (inLineWrap ? displayOffset : 0));
if (pos.ch == 0) x = 0;
else {
var sp = measureLine(getLine(pos.line), pos.ch);
x = sp.left;
if (options.lineWrapping) y += Math.max(0, sp.top);
}
return {x: x, y: y, yBot: y + lh};
}
// Coords must be lineSpace-local
function coordsChar(x, y) {
if (y < 0) y = 0;
var th = textHeight(), cw = charWidth(), heightPos = displayOffset + Math.floor(y / th);
var lineNo = lineAtHeight(doc, heightPos);
if (lineNo >= doc.size) return {line: doc.size - 1, ch: getLine(doc.size - 1).text.length};
var lineObj = getLine(lineNo), text = lineObj.text;
var tw = options.lineWrapping, innerOff = tw ? heightPos - heightAtLine(doc, lineNo) : 0;
if (x <= 0 && innerOff == 0) return {line: lineNo, ch: 0};
function getX(len) {
var sp = measureLine(lineObj, len);
if (tw) {
var off = Math.round(sp.top / th);
return Math.max(0, sp.left + (off - innerOff) * scroller.clientWidth);
}
return sp.left;
}
var from = 0, fromX = 0, to = text.length, toX;
// Guess a suitable upper bound for our search.
var estimated = Math.min(to, Math.ceil((x + innerOff * scroller.clientWidth * .9) / cw));
for (;;) {
var estX = getX(estimated);
if (estX <= x && estimated < to) estimated = Math.min(to, Math.ceil(estimated * 1.2));
else {toX = estX; to = estim