+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-23T18:37:37.639+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-23T18:37:38.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-23T18:37:39.671+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-23T18:37:40.683+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-23T18:37:41.705+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-23T18:37:42.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-23T18:37:43.734+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-23T18:37:44.777+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-23T18:37:46.780+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-23T18:37:47.807+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-23T18:37:48.832+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-23T18:37:49.844+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-23T18:37:50.856+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-23T18:37:51.880+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-23T18:37:52.909+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-23T18:37:53.916+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-23T18:37:55.953+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-23T18:37:56.981+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-23T18:37:58.003+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-23T18:37:59.008+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-23T18:38:00.016+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-23T18:38:01.058+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-23T18:38:03.075+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:38:04.076+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-23T18:38:05.114+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-23T18:38:06.122+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-23T18:38:06.613+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":126000,"time":{"ms":47}},"total":{"ticks":1303500,"time":{"ms":407},"value":1303500},"user":{"ticks":1177500,"time":{"ms":360}}},"handles":{"open":320},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":102930570}},"memstats":{"gc_next":9038768,"memory_alloc":7899888,"memory_total":232733582520}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":826,"batches":27,"total":826},"read":{"bytes":162},"write":{"bytes":172892}},"pipeline":{"clients":3,"events":{"active":24,"published":814,"total":814},"queue":{"acked":826}}},"msg_file_cache":{"SecurityHits":814},"published_events":{"Security":826,"total":826}}}}
2026-05-23T18:38:07.137+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-23T18:38:08.163+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-23T18:38:09.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-23T18:38:11.208+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-23T18:38:12.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-23T18:38:13.259+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-23T18:38:14.288+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-23T18:38:15.281+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-23T18:38:16.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:38:17.332+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-23T18:38:18.343+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-23T18:38:19.361+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-23T18:38:20.384+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-23T18:38:22.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-23T18:38:23.414+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-23T18:38:24.419+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-23T18:38:25.431+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-23T18:38:26.453+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-23T18:38:27.462+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-23T18:38:28.487+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-23T18:38:29.516+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-23T18:38:30.520+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-23T18:38:32.523+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-23T18:38:33.566+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-23T18:38:34.573+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-23T18:38:35.588+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-23T18:38:36.610+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-23T18:38:36.613+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":126015,"time":{"ms":15}},"total":{"ticks":1303780,"time":{"ms":280},"value":1303780},"user":{"ticks":1177765,"time":{"ms":265}}},"handles":{"open":320},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":102960570}},"memstats":{"gc_next":6189728,"memory_alloc":3601872,"memory_total":232803856168,"rss":-65536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":809,"batches":27,"total":809},"read":{"bytes":162},"write":{"bytes":171151}},"pipeline":{"clients":3,"events":{"active":0,"published":785,"total":785},"queue":{"acked":809}}},"msg_file_cache":{"SecurityHits":805},"published_events":{"Security":809,"total":809}}}}
2026-05-23T18:38:37.626+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:38:38.660+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-23T18:38:40.666+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-23T18:38:41.675+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-23T18:38:42.694+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-23T18:38:43.711+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-23T18:38:45.745+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-23T18:38:46.761+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-23T18:38:47.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-23T18:38:48.820+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-23T18:38:49.824+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-23T18:38:50.839+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:38:52.857+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-23T18:38:53.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-23T18:38:54.901+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-23T18:38:55.906+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-23T18:38:56.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-23T18:38:57.951+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-23T18:38:58.974+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-23T18:38:59.981+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-23T18:39:02.013+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-23T18:39:03.018+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-23T18:39:04.033+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-23T18:39:05.044+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-23T18:39:06.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-23T18:39:06.613+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":126031,"time":{"ms":16}},"total":{"ticks":1304031,"time":{"ms":251},"value":1304031},"user":{"ticks":1178000,"time":{"ms":235}}},"handles":{"open":320},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":102990570}},"memstats":{"gc_next":5845328,"memory_alloc":4444904,"memory_total":232868768192,"rss":32768}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":755,"batches":25,"total":755},"read":{"bytes":150},"write":{"bytes":158291}},"pipeline":{"clients":3,"events":{"active":0,"published":755,"total":755},"queue":{"acked":755}}},"msg_file_cache":{"SecurityHits":735},"published_events":{"Security":755,"total":755}}}}
2026-05-23T18:39:08.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-23T18:39:09.091+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-23T18:39:10.127+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-23T18:39:11.126+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-23T18:39:12.143+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-23T18:39:13.169+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-23T18:39:14.217+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-23T18:39:15.218+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-23T18:39:17.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:39:18.264+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-23T18:39:19.269+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-23T18:39:20.293+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-23T18:39:21.300+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-23T18:39:23.307+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-23T18:39:24.332+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-23T18:39:25.331+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-23T18:39:26.340+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-23T18:39:27.360+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-23T18:39:28.362+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-23T18:39:28.362+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-23T18:39:29.412+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-23T18:39:29.412+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 5 events
2026-05-23T18:39:30.445+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-23T18:39:30.445+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-23T18:39:31.445+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-23T18:39:32.465+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-23T18:39:34.490+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-23T18:39:35.493+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-23T18:39:36.515+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-23T18:39:36.613+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":126046,"time":{"ms":15}},"total":{"ticks":1304342,"time":{"ms":311},"value":1304342},"user":{"ticks":1178296,"time":{"ms":296}}},"handles":{"open":320},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":103020570}},"memstats":{"gc_next":8920496,"memory_alloc":4783808,"memory_total":232935753040}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":742,"batches":26,"total":742},"read":{"bytes":156},"write":{"bytes":163396}},"pipeline":{"clients":3,"events":{"active":10,"published":752,"total":752},"queue":{"acked":742}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":745,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":735,"System":1,"total":742}}}}
2026-05-23T18:39:37.516+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-23T18:39:38.573+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 76 events
2026-05-23T18:39:39.562+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-23T18:39:41.586+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-23T18:39:42.619+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-23T18:39:43.619+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-23T18:39:44.652+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-23T18:39:45.665+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-23T18:39:46.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:39:48.695+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-23T18:39:49.732+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-23T18:39:50.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-23T18:39:51.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-23T18:39:52.775+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-23T18:39:53.784+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-23T18:39:54.823+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-23T18:39:55.822+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-23T18:39:56.832+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-23T18:39:58.863+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-23T18:39:59.879+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-23T18:40:00.907+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-23T18:40:01.918+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-23T18:40:02.928+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-23T18:40:04.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-23T18:40:05.956+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-23T18:40:06.613+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":126046},"total":{"ticks":1304608,"time":{"ms":266},"value":1304608},"user":{"ticks":1178562,"time":{"ms":266}}},"handles":{"open":320},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":103050570}},"memstats":{"gc_next":8974000,"memory_alloc":6421344,"memory_total":233001447736,"rss":-425984}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":770,"batches":25,"total":770},"read":{"bytes":150},"write":{"bytes":162411}},"pipeline":{"clients":3,"events":{"active":0,"published":760,"total":760},"queue":{"acked":770}}},"msg_file_cache":{"SecurityHits":760},"published_events":{"Security":770,"total":770}}}}
2026-05-23T18:40:07.990+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-23T18:40:08.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-23T18:40:10.011+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-23T18:40:11.051+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-23T18:40:13.049+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-23T18:40:14.076+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-23T18:40:15.100+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-23T18:40:16.118+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-23T18:40:18.132+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-23T18:40:19.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-23T18:40:20.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-23T18:40:21.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-23T18:40:22.192+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-23T18:40:23.220+0800	INFO	beater/eventlogger.go:73	EventLog[Secur													<dd id="lcid22"><a href='/scopeoftheserv