r.go:73 EventLog[Security] successfully published 24 events 2026-07-16T12:29:27.650+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-07-16T12:29:28.125+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":17000,"time":{"ms":47}},"total":{"ticks":167781,"time":{"ms":344},"value":167781},"user":{"ticks":150781,"time":{"ms":297}}},"handles":{"open":316},"info":{"ephemeral_id":"1c6e21f5-7086-4861-9b8c-667058124cb4","uptime":{"ms":12900727}},"memstats":{"gc_next":8980000,"memory_alloc":5368808,"memory_total":29374992800}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":743,"batches":27,"total":743},"read":{"bytes":162},"write":{"bytes":162259}},"pipeline":{"clients":3,"events":{"active":24,"published":756,"total":756},"queue":{"acked":743}}},"msg_file_cache":{"SecurityHits":756},"published_events":{"Security":743,"total":743}}}} 2026-07-16T12:29:28.658+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-16T12:29:29.671+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-16T12:29:30.685+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-16T12:29:32.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-16T12:29:33.722+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-16T12:29:34.735+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-16T12:29:36.750+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-16T12:29:37.790+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-07-16T12:29:38.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-16T12:29:40.808+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-16T12:29:41.823+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-16T12:29:42.839+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-16T12:29:43.861+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-16T12:29:45.878+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-16T12:29:46.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-16T12:29:47.930+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-16T12:29:48.933+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-16T12:29:49.970+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-16T12:29:50.991+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-16T12:29:51.997+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-16T12:29:53.050+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events 2026-07-16T12:29:54.039+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-07-16T12:29:57.067+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-16T12:29:58.089+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-16T12:29:58.125+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":17046,"time":{"ms":46}},"total":{"ticks":168077,"time":{"ms":296},"value":168077},"user":{"ticks":151031,"time":{"ms":250}}},"handles":{"open":316},"info":{"ephemeral_id":"1c6e21f5-7086-4861-9b8c-667058124cb4","uptime":{"ms":12930727}},"memstats":{"gc_next":8959872,"memory_alloc":5438584,"memory_total":29439612216,"rss":-417792}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":767,"batches":24,"total":767},"read":{"bytes":144},"write":{"bytes":162774}},"pipeline":{"clients":3,"events":{"active":27,"published":770,"total":770},"queue":{"acked":767}}},"msg_file_cache":{"SecurityHits":770},"published_events":{"Security":767,"total":767}}}} 2026-07-16T12:29:59.102+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-16T12:30:01.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-16T12:30:02.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-16T12:30:03.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 80 events 2026-07-16T12:30:04.179+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-16T12:30:05.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-16T12:30:06.229+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-16T12:30:07.228+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-16T12:30:09.271+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-16T12:30:10.281+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-16T12:30:11.288+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-16T12:30:12.313+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-16T12:30:13.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-16T12:30:14.354+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-16T12:30:16.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-16T12:30:17.374+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-16T12:30:18.403+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-16T12:30:19.423+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-16T12:30:20.414+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-16T12:30:21.436+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-16T12:30:22.447+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-16T12:30:24.465+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-16T12:30:25.490+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-16T12:30:26.515+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-16T12:30:27.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-16T12:30:28.125+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":17062,"time":{"ms":16}},"total":{"ticks":168390,"time":{"ms":313},"value":168390},"user":{"ticks":151328,"time":{"ms":297}}},"handles":{"open":316},"info":{"ephemeral_id":"1c6e21f5-7086-4861-9b8c-667058124cb4","uptime":{"ms":12960727}},"memstats":{"gc_next":5888048,"memory_alloc":3867968,"memory_total":29506357400,"rss":225280}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":762,"batches":25,"total":762},"read":{"bytes":150},"write":{"bytes":160848}},"pipeline":{"clients":3,"events":{"active":54,"published":789,"total":789},"queue":{"acked":762}}},"msg_file_cache":{"SecurityHits":789},"published_events":{"Security":762,"total":762}}}} 2026-07-16T12:30:28.556+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-16