7T01:09:59.205+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:10:00.204+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:10:01.212+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-27T01:10:01.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-27T01:10:02.269+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 75 events
2026-05-27T01:10:03.252+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T01:10:04.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 174 events
2026-05-27T01:10:05.410+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-27T01:10:06.469+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 84 events
2026-05-27T01:10:07.456+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:10:08.486+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-27T01:10:09.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:10:10.510+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:10:11.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-27T01:10:12.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:10:14.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:10:15.577+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T01:10:16.600+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:10:17.639+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-27T01:10:19.663+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:10:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195968,"time":{"ms":15}},"total":{"ticks":2356108,"time":{"ms":390},"value":2356108},"user":{"ticks":2160140,"time":{"ms":375}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127830665}},"memstats":{"gc_next":5218464,"memory_alloc":2785544,"memory_total":354150806320,"rss":98304}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":987,"batches":26,"total":987},"read":{"bytes":156},"write":{"bytes":205021}},"pipeline":{"clients":3,"events":{"active":10,"published":977,"total":977},"queue":{"acked":987}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":976},"published_events":{"Application":1,"Security":986,"total":987}}}}
2026-05-27T01:10:20.677+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:10:21.704+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:10:22.726+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:10:23.723+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-27T01:10:24.737+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-27T01:10:26.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-27T01:10:27.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T01:10:28.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-27T01:10:29.804+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
":2351093,"time":{"ms":328},"value":2351093},"user":{"ticks":2155640,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127410665}},"memstats":{"gc_next":5260224,"memory_alloc":3183720,"memory_total":353199334616}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":579,"batches":23,"total":579},"read":{"bytes":138},"write":{"bytes":132119}},"pipeline":{"clients":3,"events":{"active":28,"published":571,"total":571},"queue":{"acked":579}}},"msg_file_cache":{"SecurityHits":571},"published_events":{"Security":579,"total":579}}}}
2026-05-27T01:03:20.080+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:03:21.125+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-27T01:03:22.134+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T01:03:24.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:03:25.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T01:03:26.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:03:27.213+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:03:28.224+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:03:30.242+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:03:31.260+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:03:32.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:03:33.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:03:34.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:03:35.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:03:36.308+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-27T01:03:37.342+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-27T01:03:38.352+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-27T01:03:39.358+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:03:40.394+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T01:03:41.402+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-27T01:03:42.427+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:03:43.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:03:44.456+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T01:03:46.474+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:03:47.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:03:48.508+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:03:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195468,"time":{"ms":15}},"total":{"ticks":2351452,"time":{"ms":359},"value":2351452},"user":{"ticks":2155984,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127440665}},"memstats":{"gc_next":5190464,"memory_alloc":4000024,"memory_total":353266246344}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":740,"batches":26,"total":740},"read":{"bytes":156},"write":{"bytes":160037}},"pipeline":{"clients":3,"events":{"active":40,"published":752,"total":752},"queue":{"acked":740}}},"msg_file_cache":{"SecurityHits":752},"published_events":{"Security":740,"total":740}}}}
2026-05-27T01:03:50.535+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:03:51.541+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:03:52.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:03:53.588+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:03:54.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:03:55.615+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:03:57.638+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:03:58.663+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:03:59.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:04:00.681+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T01:04:01.690+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-27T01:04:03.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-27T01:04:04.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:04:05.772+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-27T01:04:07.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:04:08.784+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:04:09.803+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:04:10.827+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-27T01:04:11.829+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-27T01:04:12.859+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:04:13.875+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:04:15.882+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T01:04:16.903+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:04:17.917+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:04:18.964+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-27T01:04:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195515,"time":{"ms":47}},"total":{"ticks":2351874,"time":{"ms":422},"value":2351874},"user":{"ticks":2156359,"time":{"ms":375}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127470665}},"memstats":{"gc_next":8497872,"memory_alloc":4341616,"memory_total":353330908208}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":773,"batches":25,"total":773},"read":{"bytes":150},"write":{"bytes":164260}},"pipeline":{"clients":3,"events":{"active":0,"published":733,"total":733},"queue":{"acked":773}}},"msg_file_cache":{"SecurityHits":733},"published_events":{"Security":773,"total":773}}}}
2026-05-27T01:04:20.958+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:04:21.963+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-27T01:04:22.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T01:04:24.004+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T01:04:25.013+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:04:26.048+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-27T01:04:27.060+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:04:29.094+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-27T01:04:30.102+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:04:31.121+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:04:32.145+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:04:33.146+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:04:34.164+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:04:35.190+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:04:36.190+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T01:04:37.200+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:04:39.247+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-27T01:04:40.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T01:04:41.271+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:04:42.286+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T01:04:43.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:04:44.326+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:04:45.326+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:04:47.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T01:04:48.389+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T01:04:49.401+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-27T01:04:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195562,"time":{"ms":47}},"total":{"ticks":2352218,"time":{"ms":344},"value":2352218},"user":{"ticks":2156656,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127500665}},"memstats":{"gc_next":8346832,"memory_alloc":7275336,"memory_total":353397532728,"rss":65536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":720,"batches":26,"total":720},"read":{"bytes":156},"write":{"bytes":155419}},"pipeline":{"clients":3,"events":{"active":25,"published":745,"total":745},"queue":{"acked":720}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":745},"published_events":{"Security":720,"total":720}}}}
2026-05-27T01:04:50.416+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:04:51.440+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T01:04:52.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:04:54.454+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:04:56.491+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T01:04:57.515+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:04:58.511+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T01:04:59.539+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:05:00.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:05:02.555+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:05:03.578+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:05:04.604+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:05:05.606+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T01:05:07.649+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-27T01:05:08.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:05:09.666+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:05:10.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:05:11.718+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-27T01:05:13.736+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:05:14.750+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:05:15.757+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:05:17.788+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-27T01:05:17.788+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:05:18.786+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T01:05:19.687+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195593,"time":{"ms":31}},"total":{"ticks":2352468,"time":{"ms":250},"value":2352468},"user":{"ticks":2156875,"time":{"ms":219}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127530666}},"memstats":{"gc_next":8369968,"memory_alloc":6390256,"memory_total":353456037632}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":660,"batches":23,"total":660},"read":{"bytes":138},"write":{"bytes":142072}},"pipeline":{"clients":3,"events":{"active":8,"published":643,"total":643},"queue":{"acked":660}}},"msg_file_cache":{"SecurityHits":642,"SystemMisses":1,"SystemSize":1},"published_events":{"Security":659,"System":1,"total":660}}}}
2026-05-27T01:05:19.792+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T01:05:20.833+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-27T01:05:21.852+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:05:22.888+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:05:23.916+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-27T01:05:24.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:05:25.966+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-27T01:05:26.990+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:05:28.005+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:05:29.028+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-27T01:05:31.051+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T01:05:32.075+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:05:33.103+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-27T01:05:34.115+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:05:35.143+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:05:36.196+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 88 events
2026-05-27T01:05:37.202+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:05:38.216+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-27T01:05:39.245+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T01:05:40.269+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T01:05:41.289+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T01:05:42.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:05:44.305+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-27T01:05:45.317+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:05:46.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-27T01:05:47.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:05:48.372+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:05:49.398+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:05:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195625,"time":{"ms":32}},"total":{"ticks":2352921,"time":{"ms":453},"value":2352921},"user":{"ticks":2157296,"time":{"ms":421}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127560666}},"memstats":{"gc_next":8357328,"memory_alloc":5314224,"memory_total":353538854280,"rss":643072}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1081,"batches":28,"total":1081},"read":{"bytes":168},"write":{"bytes":213489}},"pipeline":{"clients":3,"events":{"active":31,"published":1104,"total":1104},"queue":{"acked":1081}}},"msg_file_cache":{"SecurityHits":1104},"published_events":{"Security":1081,"total":1081}}}}
2026-05-27T01:05:50.412+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:05:51.434+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T01:05:52.460+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:05:53.468+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T01:05:55.501+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T01:05:56.512+0800	INFO	beate