Xƒ- 6°óèˆD*NêÜ <2026-05-23.logXƒ- 6X°óèˆD*NêÜ€ <2026-05-23.logXƒ- 6°°óèˆD*NêÜ <2026-05-23.logXƒ- 6±óèj*NêÜ€ <2026-05-23.logXƒ- 6`±óèÒ ¯NêÜ <2026-05-23.logXƒ- 6¸±óèÒ ¯NêÜ€ <2026-05-23.logXƒ- 6²óèˆV¯NêÜ <2026-05-23.logXƒ- 6h²óèˆV¯NêÜ€ <2026-05-23.logXƒ- 6À²óèˆV¯NêÜ <2026-05-23.logXƒ- 6³óè!}¯NêÜ€ <2026-05-23.logXƒ- 6p³óè§£¯NêÜ <2026-05-23.logXƒ- 6È³óè§£¯NêÜ€ <2026-05-23.logXƒ- 6 ´óè§£¯NêÜ <2026-05-23.logXƒ- 6x´óè›É¯NêÜ€ <2026-05-23.logXƒ- 6Ð´óè›É¯NêÜ <2026-05-23.logXƒ- 6(µóè›É¯NêÜ€ <2026-05-23.logXƒ- 6€µóè›É¯NêÜ <2026-05-23.logXƒ- 6Øµóè!ð¯NêÜ€ <2026-05-23.logXƒ- 60¶óè!ð¯NêÜ <2026-05-23.logXƒ- 6ˆ¶óè!ð¯NêÜ€ <2026-05-23.logh=B®ý#à¶óèÊhNêÜ &<.winlogbeat.yml.newh=B®ý#H·óèNêÜ &<.winlogbeat.yml.newh=B®ý#°·óèpÛNêÜ€ &<.winlogbeat.yml.new`>B¡ý#¸óè:NêÜ€ <.winlogbeat.ymlh=B®ý#x¸óè:NêÜ &<.winlogbeat.yml.new`=B®ý#à¸óè:NêÜ <.winlogbeat.yml`=B®ý#@¹óè:NêÜ € <.winlogbeat.ymlXƒ- 6 ¹óèô¥NêÜ <2026-05-23.logXƒ- 6ø¹óè¬¦NêÜ€ <2026-05-23.logXƒ- 6Pºóè¬¦NêÜ <2026-05-23.logXƒ- 6¨ºóè¬¦NêÜ€ <2026-05-23.logXƒ- 6»óèÿA¦NêÜ <2026-05-23.logXƒ- 6X»óèÿA¦NêÜ€ <2026-05-23.logXƒ- 6°»óèth¦NêÜ <2026-05-23.logXƒ- 6¼óèth¦NêÜ€ <2026-05-23.logXƒ- 6`¼óèth¦NêÜ <2026-05-23.logXƒ- 6¸¼óèth¦NêÜ€ <2026-05-23.logXƒ- 6½óè›Ž¦NêÜ <2026-05-23.logXƒ- 6h½óè›Ž¦NêÜ€ <2026-05-23.logXƒ- 6À½óè›Ž¦NêÜ <2026-05-23.logXƒ- 6¾óè´¦NêÜ€ <2026-05-23.logXƒ- 6p¾óè´¦NêÜ <2026-05-23.logXƒ- 6È¾óè´¦NêÜ€ <2026-05-23.logXƒ- 6 ¿óè´¦NêÜ <2026-05-23.logXƒ- 6x¿óèŽÚ¦NêÜ€ <2026-05-23.logXƒ- 6Àóèü˜§NêÜ <2026-05-23.logXƒ- 6XÀóèü˜§NêÜ€ <2026-05-23.logXƒ- 6°Àóèh¿§NêÜ <2026-05-23.logXƒ- 6Áóèh¿§NêÜ€ <2026-05-23.logXƒ- 6`Áóè@å§NêÜ <2026-05-23.logXƒ- 6¸Áóè@å§NêÜ€ <2026-05-23.logXƒ- 6Âóè@å§NêÜ <2026-05-23.logXƒ- 6hÂóè@å§NêÜ€ <2026-05-23.logXƒ- 6ÀÂóè¨NêÜ <2026-05-23.logXƒ- 6Ãóè¨NêÜ€ <2026-05-23.logXƒ- 6pÃóè¨NêÜ <2026-05-23.logXƒ- 6ÈÃóè¨NêÜ€ <2026-05-23.logXƒ- 6 Äóè2¨NêÜ <2026-05-23.logXƒ- 6xÄóè2¨NêÜ€ <2026-05-23.logXƒ- 6ÐÄóè2¨NêÜ <2026-05-23.logXƒ- 6(ÅóèœX¨NêÜ€ <2026-05-23.logXƒ- 6€ÅóèœX¨NêÜ <2026-05-23.logXƒ- 6ØÅóèœX¨NêÜ€ <2026-05-23.logXƒ- 60Æóèb|NêÜ <2026-05-23.logXƒ- 6ˆÆóèb|NêÜ€ <2026-05-23.logXƒ- 6àÆóèvˆ|NêÜ <2026-05-23.logXƒ- 68Çóèvˆ|NêÜ€ <2026-05-23.logXƒ- 6ÇóèŒ®|NêÜ <2026-05-23.logXƒ- 6èÇóèŒ®|NêÜ€ <2026-05-23.logXƒ- 6@ÈóèŒ®|NêÜ <2026-05-23.logXƒ- 6˜ÈóèŒ®|NêÜ€ <2026-05-23.logXƒ- 6ðÈóè²Ô|NêÜ <2026-05-23.logXƒ- 6HÉóè²Ô|NêÜ€ <2026-05-23.logXƒ- 6 Éóè²Ô|NêÜ <2026-05-23.logXƒ- 6øÉóè²Ô|NêÜ€ <2026-05-23.logXƒ- 6PÊóèßú|NêÜ <2026-05-23.logXƒ- 6¨Êóèßú|NêÜ€ <2026-05-23.logXƒ- 6Ëóèßú|NêÜ <2026-05-23.logXƒ- 6XËóèÖ }NêÜ€ <2026-05-23.logXƒ- 6°ËóèÖ }NêÜ <2026-05-23.logXƒ- 6ÌóèÖ }NêÜ€ <2026-05-23.logXƒ- 6`ÌóèÖ }NêÜ <2026-05-23.logXƒ- 6¸ÌóèfG}NêÜ€ <2026-05-23.logXƒ- 6ÍóèHn}NêÜ <2026-05-23.logXƒ- 6hÍóèHn}NêÜ€ <2026-05-23.logXƒ- 6ÀÍóè1”}NêÜ <2026-05-23.logXƒ- 6Îóè1”}NêÜ€ <2026-05-23.logXƒ- 6pÎóèÄ¹}NêÜ <2026-05-23.logXƒ- 6ÈÎóèÄ¹}NêÜ€ <2026-05-23.logXƒ- 6 Ïóè¨ß}NêÜ <2026-05-23.logXƒ- 6xÏóè¨ß}NêÜ€ <2026-05-23.logXƒ- 6Ðóè¨ß}NêÜ <2026-05-23.logXƒ- 6XÐóè(~NêÜ€ <2026-05-23.logXƒ- 6°Ðóè(~NêÜ <2026-05-23.logXƒ- 6Ñóè(~NêÜ€ <2026-05-23.logXƒ- 6`Ñóèj,~NêÜ <2026-05-23.logXƒ- 6¸Ñóèj,~NêÜ€ <2026-05-23.logXƒ- 6ÒóèÀR~NêÜ <2026-05-23.logXƒ- 6hÒóèÀR~NêÜ€ <2026-05-23.logXƒ- 6ÀÒóèÀR~NêÜ <2026-05-23.logXƒ- 6Óóè·x~NêÜ€ <2026-05-23.logXƒ- 6pÓóè·x~NêÜ <2026-05-23.logXƒ- 6ÈÓóè·x~NêÜ€ <2026-05-23.logXƒ- 6 Ôóè9ž~NêÜ <2026-05-23.logXƒ- 6xÔóè9ž~NêÜ€ <2026-05-23.logXƒ- 6ÐÔóèpÄ~NêÜ <2026-05-23.logXƒ- 6(ÕóèpÄ~NêÜ€ <2026-05-23.logXƒ- 6€ÕóèÏê~NêÜ <2026-05-23.logXƒ- 6ØÕóèÏê~NêÜ€ <2026-05-23.logXƒ- 60Öóèj†ÁNêÜ <2026-05-23.logXƒ- 6ˆÖóèj†ÁNêÜ€ <2026-05-23.logXƒ- 6àÖóèÀ¬ÁNêÜ <2026-05-23.logXƒ- 68×óèÀ¬ÁNêÜ€ <2026-05-23.logXƒ- 6×óèÓÁNêÜ <2026-05-23.logXƒ- 6è×óèÓÁNêÜ€ <2026-05-23.logXƒ- 6@ØóèÓÁNêÜ <2026-05-23.logXƒ- 6˜ØóèÓÁNêÜ€ <2026-05-23.logXƒ- 6ðØóèÐøÁNêÜ <2026-05-23.logXƒ- 6HÙóèÐøÁNêÜ€ <2026-05-23.logXƒ- 6 ÙóèÐøÁNêÜ <2026-05-23.logXƒ- 6øÙóèÐøÁNêÜ€ <2026-05-23.logXƒ- 6PÚóè[ÂNêÜ <2026-05-23.logXƒ- 6¨Úóè[ÂNêÜ€ <2026-05-23.logXƒ- 6Ûóè[ÂNêÜ <2026-05-23.logXƒ- 6XÛóè[ÂNêÜ€ <2026-05-23.logXƒ- 6°Ûóè©EÂNêÜ <2026-05-23.logXƒ- 6Üóè©EÂNêÜ€ <2026-05-23.logh>B¢ý#`Üóè&> NêÜ &<.winlogbeat.yml.newh>B¢ý#ÈÜóèd NêÜ &<.winlogbeat.yml.newh>B¢ý#0Ýóè>° NêÜ€ &<.winlogbeat.yml.new`=B®ý#˜ÝóèjÖ NêÜ€ <.winlogbeat.ymlh>B¢ý#øÝóèjÖ NêÜ &<.winlogbeat.yml.new`>B¢ý#`ÞóèjÖ NêÜ <.winlogbeat.yml`>B¢ý#ÀÞóèjÖ NêÜ € <.winlogbeat.ymlXƒ- 6 ßóè}à*NêÜ <2026-05-23.logXƒ- 6xßóè}à*NêÜ€ <2026-05-23.logXƒ- 6àóè+NêÜ <2026-05-23.logXƒ- 6Xàóè+NêÜ€ <2026-05-23.logXƒ- 6°àóè+NêÜ <2026-05-23.logXƒ- 6áóè¹,+NêÜ€ <2026-05-23.logXƒ- 6`áóè¹,+NêÜ <2026-05-23.logXƒ- 6¸áóè¹,+NêÜ€ <2026-05-23.logXƒ- 6âóèüR+NêÜ <2026-05-23.logXƒ- 6hâóèüR+NêÜ€ <2026-05-23.logXƒ- 6ÀâóèüR+NêÜ <2026-05-23.logXƒ- 6ãóèüR+NêÜ€ <2026-05-23.logXƒ- 6pãóèy+NêÜ <2026-05-23.logXƒ- 6Èãóèy+NêÜ€ <2026-05-23.logXƒ- 6 äóèy+NêÜ <2026-05-23.logXƒ- 6xäóèy+NêÜ€ <2026-05-23.logXƒ- 6Ðäóè0Ÿ+NêÜ <2026-05-23.logXƒ- 6(åóè0Ÿ+NêÜ€ <2026-05-23.logXƒ- 6€åóè>éCNêÜ <2026-05-23.logXƒ- 6Øåóè>éCNêÜ€ <2026-05-23.logXƒ- 60æóèxDNêÜ <2026-05-23.logXƒ- 6ˆæóèxDNêÜ€ <2026-05-23.logXƒ- 6àæóè‹5DNêÜ <2026-05-23.logXƒ- 68çóè‹5DNêÜ€ <2026-05-23.logXƒ- 6çóèº[DNêÜ <2026-05-23.logXƒ- 6èçóèº[DNêÜ€ <2026-05-23.logXƒ- 6@èóè•DNêÜ <2026-05-23.logXƒ- 6˜èóè•DNêÜ€ <2026-05-23.logXƒ- 6ðèóè•DNêÜ <2026-05-23.logXƒ- 6Héóè•DNêÜ€ <2026-05-23.logXƒ- 6 éóèÊ§DNêÜ <2026-05-23.logXƒ- 6øéóèÊ§DNêÜ€ <2026-05-23.logXƒ- 6Pêóè(ÎDNêÜ <2026-05-23.logXƒ- 6¨êóè(ÎDNêÜ€ <2026-05-23.logXƒ- 6ëóè(ÎDNêÜ <2026-05-23.logXƒ- 6Xëóè(ÎDNêÜ€ <2026-05-23.logXƒ- 6°ëóèúÁNêÜ <2026-05-23.logXƒ- 6ìóèúÁNêÜ€ <2026-05-23.logXƒ- 6`ìóè!ÂNêÜ <2026-05-23.logXƒ- 6¸ìóè!ÂNêÜ€ <2026-05-23.logXƒ- 6íóèßFÂNêÜ <2026-05-23.logXƒ- 6híóèßFÂNêÜ€ <2026-05-23.logXƒ- 6ÀíóèîkÂNêÜ <2026-05-23.logXƒ- 6îóè ’ÂNêÜ€ <2026-05-23.logXƒ- 6pîóè ’ÂNêÜ <2026-05-23.logXƒ- 6Èîóè ’ÂNêÜ€ <2026-05-23.logXƒ- 6 ïóè±¸ÂNêÜ <2026-05-23.logXƒ- 6xïóè±¸ÂNêÜ€ <2026-05-23.log"pipeline":{"clients":3,"events":{"active":0,"published":825,"total":825},"queue":{"acked":825}}},"msg_file_cache":{"SecurityHits":825},"published_events":{"Security":825,"total":825}}}} 2026-05-19T03:00:52.099+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-19T03:00:53.163+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-19T03:00:54.166+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-19T03:00:55.167+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-19T03:00:56.218+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events 2026-05-19T03:00:57.220+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-19T03:00:58.234+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-19T03:01:00.256+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-19T03:01:01.266+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-19T03:01:02.281+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-19T03:01:03.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-19T03:01:04.337+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-19T03:01:06.354+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-19T03:01:07.366+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-19T03:01:08.389+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-19T03:01:09.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-19T03:01:10.427+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-19T03:01:11.454+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-19T03:01:12.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-19T03:01:13.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-19T03:01:14.494+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-19T03:01:15.516+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-19T03:01:16.529+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-19T03:01:17.536+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-19T03:01:19.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-19T03:01:20.554+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":48187,"time":{"ms":31}},"total":{"ticks":481124,"time":{"ms":390},"value":481124},"user":{"ticks":432937,"time":{"ms":359}}},"handles":{"open":322},"info":{"ephemeral_id":"c94e7258-ea96-4c73-94b4-5128ec2fac78","uptime":{"ms":39241128}},"memstats":{"gc_next":8888736,"memory_alloc":5262008,"memory_total":87276214168,"rss":65536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":766,"batches":25,"total":766},"read":{"bytes":150},"write":{"bytes":162173}},"pipeline":{"clients":3,"events":{"active":22,"published":788,"total":788},"queue":{"acked":766}}},"msg_file_cache":{"SecurityHits":788,"SystemSize":-1},"published_events":{"Security":766,"total":766}}}} 2026-05-19T03:01:20.568+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-19T03:01:21.582+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2