uptime":{"ms":104820665}},"memstats":{"gc_next":5895840,"memory_alloc":3708880,"memory_total":301872320408}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":716,"batches":25,"total":716},"read":{"bytes":150},"write":{"bytes":156202}},"pipeline":{"clients":3,"events":{"active":22,"published":697,"total":697},"queue":{"acked":716}}},"msg_file_cache":{"SecurityHits":697},"published_events":{"Security":716,"total":716}}}}
2026-05-26T18:46:50.576+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:46:51.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:46:53.624+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:46:54.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:46:55.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:46:56.658+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:46:57.679+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:46:58.704+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:46:59.719+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:47:01.746+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:47:02.776+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:47:03.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T18:47:04.833+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 77 events
2026-05-26T18:47:06.828+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:47:07.825+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-26T18:47:08.855+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:47:09.866+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:47:10.878+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:47:11.896+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:47:13.919+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:47:14.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:47:15.966+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:47:16.972+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:47:18.007+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:47:19.003+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:47:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168015,"time":{"ms":15}},"total":{"ticks":2068765,"time":{"ms":234},"value":2068765},"user":{"ticks":1900750,"time":{"ms":219}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":104850665}},"memstats":{"gc_next":8421168,"memory_alloc":6039192,"memory_total":301935619280,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":712,"batches":25,"total":712},"read":{"bytes":150},"write":{"bytes":153837}},"pipeline":{"clients":3,"events":{"active":0,"published":690,"total":690},"queue":{"acked":712}}},"msg_file_cache":{"SecurityHits":690},"published_events":{"Security":712,"total":712}}}}
2026-05-26T18:47:21.047+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T18:47:22.071+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:47:23.078+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:47:24.092+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:47:26.125+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:47:27.120+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T18:47:28.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:47:29.134+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:47:30.151+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:47:31.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:47:33.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:47:34.209+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:47:35.227+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:47:36.234+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:47:38.271+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:47:39.264+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:47:40.294+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:47:41.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:47:42.314+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:47:43.338+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:47:45.342+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:47:46.369+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:47:47.396+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:47:48.390+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:47:49.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168062,"time":{"ms":47}},"total":{"ticks":2069015,"time":{"ms":250},"value":2069015},"user":{"ticks":1900953,"time":{"ms":203}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":104880665}},"memstats":{"gc_next":5628608,"memory_alloc":2911592,"memory_total":301997819368,"rss":-528384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":650,"batches":24,"total":650},"read":{"bytes":144},"write":{"bytes":142186}},"pipeline":{"clients":3,"events":{"active":49,"published":699,"total":699},"queue":{"acked":650}}},"msg_file_cache":{"SecurityHits":699},"published_events":{"Security":650,"total":650}}}}
2026-05-26T18:47:50.427+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:47:51.437+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:47:52.452+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:47:53.468+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:47:54.485+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:47:55.485+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:47:56.522+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:47:57.523+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:47:59.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:48:00.569+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:48:01.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:48:02.604+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:48:04.614+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:48:05.622+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:48:06.682+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 82 events
2026-05-26T18:48:07.671+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:48:08.685+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:48:09.707+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:48:11.728+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:48:12.752+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:48:13.763+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:48:14.776+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:48:15.788+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:48:17.807+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:48:18.832+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 2 events
2026-05-26T18:48:18.832+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:48:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168093,"time":{"ms":31}},"total":{"ticks":2069327,"time":{"ms":312},"value":2069327},"user":{"ticks":1901234,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":104910665}},"memstats":{"gc_next":8375600,"memory_alloc":4465328,"memory_total":302060841176,"rss":577536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":725,"batches":25,"total":725},"read":{"bytes":150},"write":{"bytes":152662}},"pipeline":{"clients":3,"events":{"active":7,"published":683,"total":683},"queue":{"acked":725}}},"msg_file_cache":{"ApplicationMisses":2,"ApplicationSize":2,"SecurityHits":681},"published_events":{"Application":2,"Security":723,"total":725}}}}
2026-05-26T18:48:19.830+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:48:19.830+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 4 events
2026-05-26T18:48:20.872+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T18:48:20.872+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T18:48:21.907+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:48:23.912+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:48:24.929+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:48:25.939+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:48:26.955+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:48:27.960+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:48:28.978+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:48:30.979+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:48:32.016+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:48:33.020+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:48:34.021+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:48:36.051+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:48:37.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:48:38.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:48:39.094+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:48:40.104+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:48:41.126+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:48:42.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:48:43.157+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:48:45.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:48:46.176+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T18:48:47.185+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:48:48.224+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T18:48:49.217+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T18:48:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168140,"time":{"ms":47}},"total":{"ticks":2069577,"time":{"ms":250},"value":2069577},"user":{"ticks":1901437,"time":{"ms":203}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":104940665}},"memstats":{"gc_next":8466864,"memory_alloc":6621224,"memory_total":302124200888}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":641,"batches":26,"total":641},"read":{"bytes":156},"write":{"bytes":146682}},"pipeline":{"clients":3,"events":{"active":17,"published":651,"total":651},"queue":{"acked":641}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":646,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":4,"Security":636,"System":1,"total":641}}}}
2026-05-26T18:48:50.232+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:48:51.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:48:52.281+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:48:54.290+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:48:55.293+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:48:56.305+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:48:58.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:48:59.331+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:49:00.356+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:49:01.355+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T18:49:03.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:49:04.403+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:49:05.422+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:49:06.432+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:49:07.482+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T18:49:08.484+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:49:10.517+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:49:11.518+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T18:49:12.541+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:49:13.571+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:49:15.570+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:49:16.602+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:49:17.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:49:18.613+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:49:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168156,"time":{"ms":16}},"total":{"ticks":2069906,"time":{"ms":329},"value":2069906},"user":{"ticks":1901750,"time":{"ms":313}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":104970665}},"memstats":{"gc_next":8252016,"memory_alloc":5780992,"memory_total":302185122832}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":637,"batches":24,"total":637},"read":{"bytes":144},"write":{"bytes":140072}},"pipeline":{"clients":3,"events":{"active":45,"published":665,"total":665},"queue":{"acked":637}}},"msg_file_cache":{"SecurityHits":665},"published_events":{"Security":637,"total":637}}}}
2026-05-26T18:49:20.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:49:21.650+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:49:22.658+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:49:23.705+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 71 events
2026-05-26T18:49:24.711+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:49:25.736+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:49:26.735+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T18:49:28.774+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T18:49:29.778+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:49:30.787+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:49:31.805+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:49:32.838+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T18:49:33.851+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:49:34.856+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:49:35.873+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:49:36.890+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:49:38.938+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 69 events
2026-05-26T18:49:39.938+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:49:40.949+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:49:41.987+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T18:49:43.994+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:49:45.020+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:49:46.040+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:49:47.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:49:48.060+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:49:49.101+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T18:49:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":168171,"time":{"ms":15}},"total":{"ticks":2070186,"time":{"ms":280},"value":2070186},"user":{"ticks":1902015,"time":{"ms":265}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":105000665}},"memstats":{"gc_next":8483344,"memory_alloc":4681088,"memory_total":302254419728,"rss":40960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":855,"batches":26,"total":855},"read":{"bytes":156},"write":{"bytes":176826}},"pipeline":{"clients":3,"events":{"active":12,"published":822,"total":822},"queue":{"acked":855}}},"msg_file_cache":{"SecurityHits":822},"published_events":{"Security":855,"total":855}}}}
2026-05-26T18:49:50.099+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:49:51.129+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:49:53.135+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:49:54.160+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:49:55.187+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:49:56.191+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:49:57.210+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:49:59.226+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:50:00.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:50:01.255+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T18:50:01.255+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:50:02.277+0800	IN