6f4'`yϰƏ6 ]]..#вUtg9bExkMwK""R4aʬqo?^(br<ҳ]ornnx8Z]_ZM1@Z4cb9EܬCe8*N2?7w)~%xKr<3HI(ݷs 3vtVRܥMTkvw$e !oKf[ZtYܙaW.ς?KXqj;v>l=e9"{dH\#+Ht~Rz|uN'/ sGh#Xfϖsn}ocޗy-Y`x| Ȥ㏘ 9[-cWvF.A8'wY6&B* X2˖ٓ>x$d)~^gՀ7`l,aE 72Byc#X]F42Oݧaϖ7 0P j+&=JOsXI/aPP+~Z ( ( ( ( ( ( ( ( ( ( ( ( u=2[s70@ m-$wظ8&MEsvS%ZK˝!9h6Bw|kNgAn oie]mwat({[[̒ypnػ_C!]w;(@fxo?ijWhyX.uxw{J#YB1&1t2c._jѵ; X{`*r͒]e,$ԇہ=hn UT]#dmM`_kEbx}[Ocbc~" Rkyl8H]ct@~E$P ;ݭZ\In0e#8vm%,CXqDiaIf\][s{1mWvMEsk:tL^WЪl$AxbT62BaiVSmk:#i$v~0 (>Lg+t򼼆8$ 1G n@W5kk,fq[to1@ečYeٕFZ(CiCr mndiu)iÑs#*qdg$Lu$Y++QHK싷Efh^ H"_ʐC)v>lp P~n>Fk'?z#GnbKyrJ2FQ= f;E ?j9wa;+b;p¶(M(vvPI>f]Kíq^I*.eO&)TY%!.#r m'oX䱮+pu nu^B1O,g}?KDkx~AhOɿSPc/5إOm) 76gW!G$Rp9=&;y$גEe0l7y-Edvg2U^Ec-4?0n>dXorsÄe40(xVͻqDŋFV@pv+7@Z\XTwtxdXˁ4Swݜ B=χTc>dw-Y$1*y["a ΊԬ./ⷞ,KxXB+3a]7Ι_ }a[ 7Fs:'P2*۰?u\:8+:Lr藲y'(1l?<1>YfDL)gH$퉛'Ho^I@/ЉCͺ&#TFo(Ęs`Kd@6gvQ ] Aos,ֺJgUeTtIq!0YIq]2"[Es/q$Q;y,ZhԬDK,jZ ơrmfrCmbcݸ1]Hlp˦_&s&EsHmV)vϕoߜ6 QEbKK[UW I>p]tV o4~S)x܌3SQ@οswmqwڐ\1*b3ml;,J/;R$mGQ.QI,Wnh(V.>h[Er^7x%D[-yI4lfE\!bH;4|#@]CskHTF֎"&+61NG^(o#TX%8V.Qհ=-&S,2B|RF!n_shܢ[o"(#7a,c5QEQEQEQEQEQEQEQEQEQEQEQEQEQ\W)MKR-E~+[!԰ٞNv?B\W+Y"m$dfE`3, k+my⹞iKoq7U_+ 6e ؈Q\Y.]^(WD;,1p74ۃeF \ [=I)o#*\[S@(4 ktk '{4j;F3\a [߯--|-$y6|0,ːr7!*Î>KF#n{#yc  2P9 { TC_m|~f;I%Ml5(HE0Gww ۚ::֗>z}yl+f;d*q4˕X3yr@`wwF"0EȂ!pJ2B; B$O:tj0< 9#2%@̣vd=:(ͱchYf&Gږsy d3%,e`YNenAukvdzʞlq6sG 㓑4|(m9A Q,a"&>b5[wvaLP4'اfWybv^HH+Fܻvמq֢-z+O.Pn)<ȳIn"$eeh۳g^A ,o'8> w^zuJ$ejpY[ p>_Wѯ#Q%bJvkhbV혷~E;Mm$wH8ʢ6HQ37qu ݐ *[kVwhdRgk`v[((((((((((((((((((((((((((((((((((((({jIòtY<.r"_k͜WAE`}7 %!nH0dUBcsc˔M `Tp2!lm5V#hWs$.T<[ƍjɌ)vWbF;T;W''^9|9fܷ+%Ϧ݌w\ɜmhq94VgSUvndH\pdvxXmzlH@m㝍KM-R +v,vNOZEgEcyśj ܱ'Т((((((((((((((((((((((((((((((((((((((((-۠,Pe}c屹wWݵ3y 9߳rA4o<ԌNA C~\' p~I|AUOm:)VMnmy!cehR[ޏ!Æ v KsW~e>\newp!!RvV'_越>f7Ȁ}r'+up1H+0`I _hm۶isW=]))5Ω%12\ǵm8Pgs ЙGK~O_&8',w)qpyR;H;I4jL/bi64c9Q+ÞV׶@!Dk] ZxHO1bE-іopUW3FXy`y#$nTN%.Kj! ȕhG[/TʉWvn0jV1y0cDi A Hz*s|fsch2iUrmp }4yt= O,)1s+#2,򱂩M76!m}m nF $,fgH4egCՃ 1V˲ۿɆIvn-Kc88=(լMdmHmݜgi8 g{-V9HEEgD̩ a3wHd7#LXopybJdh(zk5^]G+A(T-`vc}Am%c搅[dJʹdd#Qcy-h$aI:XU1 29,kQ qMg&{١4ˀ=3U%Q+D)*s^yH#2#mHװ޳$ \M'?L>P2ۂHx鳧*#j<(2-psߟk *@y\"؍Bvv2:-S8dؠPd~u@xnR6yW^Gdqi2,`8$5g; l.Hkr2a$WmJ`t9V)ra&`3[A8 HUG޳iءb`CQOcu4;Ci"#o[4_jp#;|ݩBfo.!F7 Vd\PN 6 a}NKvM}y)/nnea aOj<;-k) l k-e~}K)b87uiZQno`d2/7HLҼKa,(6| 'gW۹l?6ywFQ6*$fb(gd}ܛ:_M+,PǕ"Ӭ",E$nR5nhcѲshv]K{X'e #LG$F*8eKy1Oӵٞݖ6ۼ pzsY>wlcdˌ1C1gܹPoxjOK{2N$w}VHQd Wl$we֛q io+׽TRN0VL$zǿax^^Hr$6Ѽac[{G_4B 8lHUd xXTH.ٰF]1xl璤 4Q/I[ I"D gTgxy }F4{8nM3I[0<yl o; c?Oϸ4X13`n7;n;n݄x̑\ #2]6t 8oXpH$fO7=~R8$au8bT^E<B,$n:<PymㅠeX%e|EdʳF.]cj嶄i\G`2?U (W8';jZl3(|A7)5DV)xr][ /^GrXI?-$q򌤎Dnw#&OTmN;k!o"4AmRFvy?dDw'FfU;U@@]0,0Ucr%t4|~)wlFqԀM?Zk۩-^x8F2푙STrv7lx ~nm<̿fZ4ۀ~mFI&yi$mfq::*zrY$g0~uFqq3n*_jiD|Xy!qm8XK{8dN72Uqnu pK1BGm퉞hc(]`bı() }.~v UY&O™T]GJRDjgLw@_wu2\LR$gsp71(YvE/[]ÃkŖRXnFC"6;e͵p럕A .X? >\nn%KXYeueep˞@#8`@йսC!( $ߝǽ>=N(CHBXZ>~uCeswTJꛌ0\܌9w,vyPY1$Qnbt d M:+D J >J|Mʜmf4^}[XD,qg?SPC,@ݕ{FTyiWzV#K ,Ȯ-?;wlcdˌ1C1gܹPoxjOK{2N$w}VHQd Wl$we֛q io+׽TRN0VL$zǿax^^Hr$6Ѽac[{G_4B 8lHUd xXw\t>"@$$Fe#l@ `p;ޱᾑ#UufI̟)?4o{qHpĩ!kTQMEQFH]$Eeuo1X>T&KKhaߍTkvdպ(֓e|Ąw.ۙTm2*Hw> ܼo9$cLex(>G[Y'8Gʤ=1lUwSQٔ}w>ߕY%ʎ7͌2NX(o#Y"?thHڮOM.?/jc˚Iӓijyۯ5 v,$h.1€l]983SQEQFH]$Eeuo1X>T&KKhaߍTkvdպ(֓e|Ą@id-4/ fPue":2089484},"user":{"ticks":1888750,"time":{"ms":360}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":163680570}},"memstats":{"gc_next":6257408,"memory_alloc":3635952,"memory_total":372323018200,"rss":16384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":819,"batches":25,"total":819},"read":{"bytes":150},"write":{"bytes":169499}},"pipeline":{"clients":3,"events":{"active":18,"published":778,"total":778},"queue":{"acked":819}}},"msg_file_cache":{"SecurityHits":778},"published_events":{"Security":819,"total":819}}}} 2026-05-24T11:30:36.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-24T11:30:37.902+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-24T11:30:39.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-24T11:30:40.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-24T11:30:41.937+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-24T11:30:42.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-24T11:30:44.978+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-24T11:30:45.994+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-24T11:30:48.032+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-24T11:30:49.050+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-24T11:30:50.056+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-24T11:30:51.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-24T11:30:52.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-24T11:30:53.103+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-24T11:30:54.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-24T11:30:55.122+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-24T11:30:57.182+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 80 events 2026-05-24T11:30:58.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-24T11:30:59.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-24T11:31:00.242+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-05-24T11:31:01.239+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-24T11:31:03.267+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-24T11:31:04.272+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-24T11:31:05.282+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-24T11:31:06.306+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-24T11:31:06.613+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":200765,"time":{"ms":31}},"total":{"ticks":2089874,"time":{"ms":390},"value":2089874},"user":{"ticks":1889109,"time":{"ms":359}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":163710570}},"memstats":{"gc_next":8893136,"memory_alloc":5817168,"memory_total":372391236624}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":808,"batches":25,"total":808},"read":{"bytes":150},"write":{"bytes":168258}},"pipeline":{"clients":3,"events":{"active":37,"published":827,"total":827},"queue":{"acked":808}}},"msg_file_cache":{"SecurityHits":827},"published_events":{"Security":808,"total":808}}}} 2026-05-24T11:31:07.329+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-24T11:31:08.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-24T11:31:10.387+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-24T11:31:11.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-24T11:31:12.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-24T11:31:13.449+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-24T11:31:14.446+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-24T11:31:15.457+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-24T11:31:16.480+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-24T11:31:17.497+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-24T11:31:18.513+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-24T11:31:19.528+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-24T11:31:20.546+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-24T11:31:21.573+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-24T11:31:22.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-24T11:31:23.588+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-24T11:31:25.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-24T11:31:26.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-24T11:31:27.628+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-24T11:31:28.659+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-24T11:31:29.678+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-24T11:31:30.682+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-24T11:31:31.708+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-24T11:31:32.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-24T11:31:33.750+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-24T11:31:34.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-24T11:31:36.613+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":200812,"time":{"ms":47}},"total":{"ticks":2090233,"time":{"ms":359},"value":2090233},"user":{"ticks":1889421,"time":{"ms":312}}},"handles":{"open":322},"info":{"ephemeral_id":"0e0e2001-c7a8-4d32-973c-2c19a124c4fe","uptime":{"ms":163740570}},"memstats":{"gc_next":5715968,"memory_alloc":3146832,"memory_total":372458864536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":799,"batches":26,"total":799},"read":{"bytes":156},"write":{"bytes":166294}},"pipeline":{"clients":3,"events":{