/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180734,"time":{"ms":16}},"total":{"ticks":1794827,"time":{"ms":281},"value":1794827},"user":{"ticks":1614093,"time":{"ms":265}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147181271}},"memstats":{"gc_next":5463104,"memory_alloc":3119160,"memory_total":332459604168,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":753,"batches":27,"total":753},"read":{"bytes":162},"write":{"bytes":166119}},"pipeline":{"clients":3,"events":{"active":25,"published":718,"total":718},"queue":{"acked":753}}},"msg_file_cache":{"SecurityHits":718},"published_events":{"Security":753,"total":753}}}}
2026-05-09T09:56:53.494+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-09T09:56:54.519+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T09:56:55.543+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-09T09:56:57.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-09T09:56:58.591+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-09T09:56:59.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-09T09:57:01.619+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-09T09:57:02.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-09T09:57:03.637+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-09T09:57:04.677+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-09T09:57:05.716+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-09T09:57:06.714+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-09T09:57:08.745+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-09T09:57:09.757+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-09T09:57:10.784+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-09T09:57:11.825+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-09T09:57:12.838+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:57:13.843+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-09T09:57:14.877+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-09T09:57:15.891+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-09T09:57:16.903+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-09T09:57:17.931+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-09T09:57:18.948+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-09T09:57:19.956+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:57:20.982+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T09:57:22.002+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-09T09:57:22.668+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180796,"time":{"ms":62}},"total":{"ticks":1795280,"time":{"ms":453},"value":1795280},"user":{"ticks":1614484,"time":{"ms":391}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147211271}},"memstats":{"gc_next":8489744,"memory_alloc":4815472,"memory_total":332529683704,"rss":270336}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":847,"batches":26,"total":847},"read":{"bytes":156},"write":{"bytes":174114}},"pipeline":{"clients":3,"events":{"active":14,"published":836,"total":836},"queue":{"acked":847}}},"msg_file_cache":{"SecurityHits":836},"published_events":{"Security":847,"total":847}}}}
2026-05-09T09:57:23.010+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-09T09:57:24.028+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:57:25.039+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:57:26.083+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-09T09:57:27.087+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:57:29.098+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:57:30.130+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-09T09:57:31.149+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-09T09:57:32.157+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T09:57:33.176+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-09T09:57:35.201+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-09T09:57:36.218+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-09T09:57:37.217+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-09T09:57:38.247+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-09T09:57:40.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-09T09:57:41.271+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:57:42.299+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-09T09:57:43.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-09T09:57:44.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-09T09:57:46.359+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-09T09:57:47.380+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-09T09:57:48.385+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-09T09:57:49.409+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-09T09:57:50.436+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-09T09:57:51.430+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-09T09:57:52.470+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-09T09:57:52.668+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180828,"time":{"ms":32}},"total":{"ticks":1795531,"time":{"ms":251},"value":1795531},"user":{"ticks":1614703,"time":{"ms":219}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147241271}},"memstats":{"gc_next":5847648,"memory_alloc":4533744,"memory_total":332596450544,"rss":-516096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":758,"batches":26,"total":758},"read":{"bytes":156},"write":{"bytes":163350}},"pipeline":{"clients":3,"events":{"active":0,"published":744,"total":744},"queue":{"acked":758}}},"msg_file_cache":{"SecurityHits":744},"published_events":{"Security":758,"total":758}}}}
2026-05-09T09:57:54.465+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-09T09:57:55.502+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-09T09:57:56.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:57:57.530+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 2 events
2026-05-09T09:57:57.530+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-09T09:57:58.582+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 69 events
2026-05-09T09:57:58.582+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-09T09:57:58.582+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 4 events
2026-05-09T09:58:00.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:58:01.596+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:58:02.615+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-09T09:58:03.636+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-09T09:58:04.659+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-09T09:58:05.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-09T09:58:07.687+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:58:08.709+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T09:58:09.714+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-09T09:58:10.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T09:58:11.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-09T09:58:12.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T09:58:13.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-09T09:58:14.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-09T09:58:16.826+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-09T09:58:17.836+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-09T09:58:18.844+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-09T09:58:19.863+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-09T09:58:20.902+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-09T09:58:22.669+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180890,"time":{"ms":62}},"total":{"ticks":1795796,"time":{"ms":265},"value":1795796},"user":{"ticks":1614906,"time":{"ms":203}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147271272}},"memstats":{"gc_next":5378048,"memory_alloc":2786776,"memory_total":332659601520,"rss":352256}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":725,"batches":24,"total":725},"read":{"bytes":144},"write":{"bytes":157328}},"pipeline":{"clients":3,"events":{"active":3,"published":728,"total":728},"queue":{"acked":725}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":721,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":718,"System":1,"total":725}}}}
2026-05-09T09:58:22.898+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-09T09:58:23.937+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-09T09:58:24.944+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-09T09:58:25.966+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-09T09:58:26.980+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:58:28.030+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 67 events
2026-05-09T09:58:29.030+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-09T09:58:30.044+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T09:58:31.081+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-09T09:58:32.080+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-09T09:58:34.126+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-09T09:58:35.123+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-09T09:58:36.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T09:58:37.165+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-09T09:58:38.162+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-09T09:58:39.172+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-09T09:58:40.207+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-09T09:58:41.207+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-09T09:58:42.220+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:58:44.268+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 72 events
2026-05-09T09:58:45.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-09T09:58:46.276+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:58:47.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-09T09:58:48.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-09T09:58:49.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-09T09:58:51.350+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-09T09:58:52.390+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-09T09:58:52.668+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180921,"time":{"ms":31}},"total":{"ticks":1796171,"time":{"ms":375},"value":1796171},"user":{"ticks":1615250,"time":{"ms":344}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147301271}},"memstats":{"gc_next":8726800,"memory_alloc":5250608,"memory_total":332732381736,"rss":143360}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":854,"batches":27,"total":854},"read":{"bytes":162},"write":{"bytes":178008}},"pipeline":{"clients":3,"events":{"active":25,"published":876,"total":876},"queue":{"acked":854}}},"msg_file_cache":{"SecurityHits":876},"published_events":{"Security":854,"total":854}}}}
2026-05-09T09:58:53.395+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-09T09:58:54.411+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-09T09:58:55.413+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-09T09:58:56.446+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-09T09:58:57.464+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-09T09:58:59.487+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-09T09:59:00.512+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-09T09:59:01.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-09T09:59:02.544+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-09T09:59:03.539+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-09T09:59:04.567+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-09T09:59:06.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-09T09:59:07.607+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-09T09:59:08.615+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:59:09.647+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-09T09:59:10.647+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-09T09:59:11.661+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T09:59:12.703+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 65 events
2026-05-09T09:59:13.713+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-09T09:59:14.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-09T09:59:15.755+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-09T09:59:16.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-09T09:59:17.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-09T09:59:18.801+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-09T09:59:20.828+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-09T09:59:21.840+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T09:59:22.668+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180953,"time":{"ms":32}},"total":{"ticks":1796578,"time":{"ms":407},"value":1796578},"user":{"ticks":1615625,"time":{"ms":375}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147331271}},"memstats":{"gc_next":5539712,"memory_alloc":2871304,"memory_total":332801196944}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":804,"batches":26,"total":804},"read":{"bytes":156},"write":{"bytes":167572}},"pipeline":{"clients":3,"events":{"active":26,"published":805,"total":805},"queue":{"acked":804}}},"msg_file_cache":{"SecurityHits":805},"published_events":{"Security":804,"total":804}}}}
2026-05-09T09:59:22.850+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:59:23.868+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-09T09:59:24.896+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-09T09:59:25.898+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-09T09:59:26.907+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-09T09:59:27.921+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-09T09:59:28.946+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-09T09:59:29.969+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-09T09:59:30.978+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-09T09:59:32.001+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-09T09:59:33.043+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-09T09:59:34.047+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-09T09:59:35.072+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T09:59:36.071+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-09T09:59:37.096+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-09T09:59:38.135+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-09T09:59:39.145+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-09T09:59:41.181+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-09T09:59:42.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-09T09:59:44.210+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-09T09:59:45.241+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-09T09:59:46.245+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-09T09:59:47.275+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-09T09:59:48.291+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-09T09:59:49.310+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-09T09:59:50.315+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-09T09:59:51.344+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-09T09:59:52.340+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-09T09:59:52.668+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":181031,"time":{"ms":78}},"total":{"ticks":1797140,"time":{"ms":562},"value":1797140},"user":{"ticks":1616109,"time":{"ms":484}}},"handles":{"open":326},"info":{"ephemeral_id":"8ff29b1a-4241-406a-becd-7234f69c1bfa","uptime":{"ms":147361271}},"memstats":{"gc_next":8303888,"memory_alloc":6547408,"memory_total":332876326616}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":858,"batches":28,"total":858},"read":{"bytes":168},"write":{"bytes":179278}},"pipeline":{"clients":3,"events":{"active":67,"published":899,"total":899},"queue":{"acked":858}}},"msg_file_cache":{"SecurityHits":899},"published_events":{"Security":858,"total":858}}}}
2026-05-09T09:59:53.386+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 67 events
2026-05-09T09:59:54.391+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:59:55.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T09:59:57.428+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-09T09:59:58.442+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-09T09:59:59.460+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 10 events
2026-05-09T09:59:59.460+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-09T09:59:59.460+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-09T10:00:00.508+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 71 events
2026-05-09T10:00:01.518+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-09T10:00:02.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-09T10:00:03.565+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-09T10:00:04.575+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-09T10:00:05.592+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-09T10:00:06.622+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-09T10:00:07.625+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-09T10:00:08.637+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-09T10:00:10.680+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-09T10:00:11.674+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-09T10:00:12.702+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-09T10:00:13.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-09T10:00:14.733+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-09T10:00:15.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-09T10:00:17.776+0800	INFO	beater/eventlogger.go:73	Eve