5 events
2026-05-26T16:51:21.289+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T16:51:22.288+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T16:51:23.307+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:51:25.312+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:51:26.331+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:51:27.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:51:28.364+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T16:51:29.393+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:51:30.390+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T16:51:31.410+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:51:32.435+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T16:51:34.447+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:51:35.467+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:51:36.480+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:51:37.523+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T16:51:38.525+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:51:39.545+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:51:41.541+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T16:51:42.591+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T16:51:43.591+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T16:51:44.589+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:51:45.629+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T16:51:46.626+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:51:47.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:51:48.657+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:51:49.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":154890,"time":{"ms":47}},"total":{"ticks":1881483,"time":{"ms":406},"value":1881483},"user":{"ticks":1726593,"time":{"ms":359}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":97920665}},"memstats":{"gc_next":5212880,"memory_alloc":3612472,"memory_total":278720187912,"rss":-417792}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":743,"batches":26,"total":743},"read":{"bytes":156},"write":{"bytes":161621}},"pipeline":{"clients":3,"events":{"active":35,"published":743,"total":743},"queue":{"acked":743}}},"msg_file_cache":{"SecurityHits":743},"published_events":{"Security":743,"total":743}}}}
2026-05-26T16:51:50.687+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:51:51.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:51:52.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 65 events
2026-05-26T16:51:53.745+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:51:54.747+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T16:51:55.766+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:51:56.770+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:51:57.799+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:51:58.808+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:51:59.816+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:52:00.820+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:52:01.854+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T16:52:02.863+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:52:04.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:52:05.880+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:52:06.890+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T16:52:07.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T16:52:09.928+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:52:10.960+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:52:11.964+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T16:52:12.988+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:52:15.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T16:52:16.030+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:52:17.029+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T16:52:18.069+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T16:52:19.082+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:52:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":154953,"time":{"ms":63}},"total":{"ticks":1881812,"time":{"ms":329},"value":1881812},"user":{"ticks":1726859,"time":{"ms":266}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":97950666}},"memstats":{"gc_next":5649280,"memory_alloc":3204720,"memory_total":278785927384,"rss":266240}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":738,"batches":26,"total":738},"read":{"bytes":156},"write":{"bytes":159551}},"pipeline":{"clients":3,"events":{"active":17,"published":720,"total":720},"queue":{"acked":738}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":720},"published_events":{"Security":738,"total":738}}}}
2026-05-26T16:52:20.090+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:52:21.115+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:52:22.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:52:23.158+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T16:52:24.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:52:26.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:52:27.210+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:52:28.231+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:52:29.233+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:52:30.244+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T16:52:31.273+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T16:52:32.284+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:52:33.318+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:52:35.345+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:52:36.343+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:52:37.372+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T16:52:38.383+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:52:39.437+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 72 events
2026-05-26T16:52:40.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:52:41.456+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:52:42.484+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:52:43.505+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T16:52:45.505+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:52:46.528+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:52:47.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:52:48.556+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:52:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":154984,"time":{"ms":31}},"total":{"ticks":1882280,"time":{"ms":468},"value":1882280},"user":{"ticks":1727296,"time":{"ms":437}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":97980666}},"memstats":{"gc_next":5255552,"memory_alloc":3127960,"memory_total":278854079728,"rss":331776}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":775,"batches":26,"total":775},"read":{"bytes":156},"write":{"bytes":163438}},"pipeline":{"clients":3,"events":{"active":21,"published":779,"total":779},"queue":{"acked":775}}},"msg_file_cache":{"SecurityHits":779},"published_events":{"Security":775,"total":775}}}}
2026-05-26T16:52:50.570+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:52:51.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:52:53.603+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:52:54.614+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:52:55.645+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:52:57.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:52:58.658+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:52:59.683+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:53:00.679+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T16:53:01.703+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:53:02.712+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:53:03.738+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T16:53:05.757+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:53:06.752+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T16:53:07.776+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:53:08.809+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T16:53:09.814+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:53:11.818+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:53:12.862+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T16:53:13.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T16:53:15.892+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T16:53:16.892+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:53:17.906+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:53:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155015,"time":{"ms":31}},"total":{"ticks":1882608,"time":{"ms":328},"value":1882608},"user":{"ticks":1727593,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98010665}},"memstats":{"gc_next":8240304,"memory_alloc":5023920,"memory_total":278911015048}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":598,"batches":23,"total":598},"read":{"bytes":138},"write":{"bytes":134408}},"pipeline":{"clients":3,"events":{"active":24,"published":601,"total":601},"queue":{"acked":598}}},"msg_file_cache":{"SecurityHits":601},"published_events":{"Security":598,"total":598}}}}
2026-05-26T16:53:19.922+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:53:20.935+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:53:21.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:53:22.970+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:53:23.991+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:53:25.027+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T16:53:26.020+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:53:27.029+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:53:28.084+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T16:53:30.077+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:53:31.098+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:53:32.107+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:53:34.124+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:53:35.141+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:53:37.146+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:53:38.162+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:53:39.169+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T16:53:41.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-26T16:53:42.207+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:53:43.214+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:53:44.232+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:53:45.253+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:53:46.250+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T16:53:47.266+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:53:49.290+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:53:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155078,"time":{"ms":63}},"total":{"ticks":1882953,"time":{"ms":345},"value":1882953},"user":{"ticks":1727875,"time":{"ms":282}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98040666}},"memstats":{"gc_next":8315312,"memory_alloc":5588016,"memory_total":278973142872,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":643,"batches":25,"total":643},"read":{"bytes":150},"write":{"bytes":143585}},"pipeline":{"clients":3,"events":{"active":38,"published":657,"total":657},"queue":{"acked":643}}},"msg_file_cache":{"SecurityHits":657},"published_events":{"Security":643,"total":643}}}}
2026-05-26T16:53:50.310+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T16:53:52.312+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:53:53.328+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:53:54.345+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:53:55.358+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:53:56.376+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:53:57.403+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:53:58.397+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T16:53:59.414+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:54:00.443+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:54:01.456+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T16:54:02.471+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:54:03.478+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T16:54:05.503+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:54:06.517+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:54:07.521+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:54:08.525+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T16:54:09.570+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T16:54:10.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T16:54:12.590+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:54:13.613+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T16:54:15.624+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:54:16.639+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:54:17.661+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:19.678+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:54:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155156,"time":{"ms":78}},"total":{"ticks":1883343,"time":{"ms":390},"value":1883343},"user":{"ticks":1728187,"time":{"ms":312}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98070665}},"memstats":{"gc_next":8285424,"memory_alloc":4976128,"memory_total":279034851776}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":661,"batches":25,"total":661},"read":{"bytes":150},"write":{"bytes":145913}},"pipeline":{"clients":3,"events":{"active":0,"published":623,"total":623},"queue":{"acked":661}}},"msg_file_cache":{"SecurityHits":651},"published_events":{"Security":661,"total":661}}}}
2026-05-26T16:54:20.695+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:54:21.707+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:54:22.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T16:54:23.738+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:54:25.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T16:54:26.802+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:54:27.810+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:54:28.828+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:54:29.850+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:30.860+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:54:31.897+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T16:54:33.912+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:54:34.910+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T16:54:35.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:54:36.942+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:54:37.963+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:54:38.980+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:39.982+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:54:41.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T16:54:42.053+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T16:54:43.059+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:54:44.083+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:45.103+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:46.126+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:54:48.143+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:54:49.148+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:54:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155171,"time":{"ms":15}},"total":{"ticks":1883639,"time":{"ms":296},"value":1883639},"user":{"ticks":1728468,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98100665}},"memstats":{"gc_next":5297728,"memory_alloc":2891448,"memory_total":279103553368,"rss":28672}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":803,"batches":26,"total":803},"read":{"bytes":156},"write":{"bytes":168240}},"pipeline":{"clients":3,"events":{"active":22,"published":825,"total":825},"queue":{"acked":803}}},"msg_file_cache":{"SecurityHits":797},"published_events":{"Security":803,"total":803}}}}
2026-05-26T16:54:50.162+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:54:51.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:54:52.195+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:54:53.219+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:54:54.244+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T16:54:55.242+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:54:56.267+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:54:57.298+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T16:54:58.299+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T16:55:00.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:55:01.322+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:55:02.346+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:55:03.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:55:04.396+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T16:55:05.397+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T16:55:06.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T16:55:07.451+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:55:08.462+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:55:10.488+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:55:11.500+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:55:12.526+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T16:55:13.554+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:55:14.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:55:15.574+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:55:16.610+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T16:55:17.608+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:55:19.628+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:55:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155203,"time":{"ms":32}},"total":{"ticks":1884015,"time":{"ms":376},"value":1884015},"user":{"ticks":1728812,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98130666}},"memstats":{"gc_next":5323136,"memory_alloc":2963912,"memory_total":279174496720}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":813,"batches":27,"total":813},"read":{"bytes":162},"write":{"bytes":171916}},"pipeline":{"clients":3,"events":{"active":32,"published":823,"total":823},"queue":{"acked":813}}},"msg_file_cache":{"SecurityHits":823},"published_events":{"Security":813,"total":813}}}}
2026-05-26T16:55:20.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:55:21.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:55:22.670+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:55:23.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:55:24.681+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T16:55:26.729+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T16:55:27.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:55:28.744+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:55:29.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:55:30.775+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:55:31.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:55:32.823+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T16:55:33.836+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:55:35.851+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:55:36.873+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:55:37.892+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:55:38.919+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T16:55:39.922+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:55:40.935+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:55:41.971+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T16:55:42.977+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:55:43.992+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:55:45.012+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:55:46.009+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T16:55:48.050+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T16:55:49.059+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:55:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155250,"time":{"ms":47}},"total":{"ticks":1884406,"time":{"ms":391},"value":1884406},"user":{"ticks":1729156,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98160665}},"memstats":{"gc_next":8267920,"memory_alloc":4527760,"memory_total":279240943232}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":760,"batches":26,"total":760},"read":{"bytes":156},"write":{"bytes":163344}},"pipeline":{"clients":3,"events":{"active":11,"published":739,"total":739},"queue":{"acked":760}}},"msg_file_cache":{"SecurityHits":739},"published_events":{"Security":760,"total":760}}}}
2026-05-26T16:55:50.061+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:55:52.085+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:55:53.109+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T16:55:54.105+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:55:55.131+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:55:56.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:55:57.155+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T16:55:58.186+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T16:55:59.200+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:56:00.223+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:56:01.238+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:56:02.256+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:56:02.256+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 6 events
2026-05-26T16:56:03.304+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T16:56:03.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-26T16:56:04.305+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:56:05.323+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:56:06.322+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:56:07.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T16:56:08.362+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T16:56:09.361+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T16:56:11.399+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T16:56:13.412+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:56:14.448+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T16:56:15.463+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:56:16.468+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:56:17.502+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T16:56:18.521+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:56:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155250},"total":{"ticks":1884656,"time":{"ms":250},"value":1884656},"user":{"ticks":1729406,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98190666}},"memstats":{"gc_next":5304448,"memory_alloc":3151400,"memory_total":279309205872,"rss":-630784}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":772,"batches":26,"total":772},"read":{"bytes":156},"write":{"bytes":167344}},"pipeline":{"clients":3,"events":{"active":32,"published":793,"total":793},"queue":{"acked":772}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":786,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":765,"System":1,"total":772}}}}
2026-05-26T16:56:20.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:56:21.557+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:56:22.565+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:56:23.613+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 67 events
2026-05-26T16:56:24.612+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:56:25.621+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:56:27.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:56:28.664+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:56:29.682+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:56:30.715+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T16:56:31.718+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:56:33.749+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:56:36.791+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T16:56:37.791+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T16:56:38.830+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-26T16:56:39.853+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T16:56:40.861+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:56:41.881+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:56:42.897+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:56:43.940+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T16:56:45.955+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T16:56:46.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:56:47.980+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T16:56:49.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T16:56:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155281,"time":{"ms":31}},"total":{"ticks":1884984,"time":{"ms":328},"value":1884984},"user":{"ticks":1729703,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98220665}},"memstats":{"gc_next":8463984,"memory_alloc":4258112,"memory_total":279376215424,"rss":487424}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":869,"batches":24,"total":869},"read":{"bytes":144},"write":{"bytes":177304}},"pipeline":{"clients":3,"events":{"active":0,"published":837,"total":837},"queue":{"acked":869}}},"msg_file_cache":{"SecurityHits":837},"published_events":{"Security":869,"total":869}}}}
2026-05-26T16:56:51.023+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:56:52.026+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T16:56:53.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:56:55.060+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:56:56.077+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:56:57.086+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:56:58.088+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:56:59.118+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:57:01.128+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:57:02.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:57:03.172+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:57:04.178+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T16:57:05.213+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T16:57:06.223+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:57:07.240+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T16:57:08.255+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:57:09.276+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:57:10.289+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:57:11.303+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:57:13.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:57:14.338+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:57:15.367+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T16:57:16.376+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T16:57:17.391+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:57:18.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:57:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155296,"time":{"ms":15}},"total":{"ticks":1885327,"time":{"ms":343},"value":1885327},"user":{"ticks":1730031,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98250665}},"memstats":{"gc_next":8240432,"memory_alloc":5124192,"memory_total":279440055328}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":681,"batches":25,"total":681},"read":{"bytes":150},"write":{"bytes":149753}},"pipeline":{"clients":3,"events":{"active":27,"published":708,"total":708},"queue":{"acked":681}}},"msg_file_cache":{"SecurityHits":708},"published_events":{"Security":681,"total":681}}}}
2026-05-26T16:57:20.418+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:57:21.445+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:57:22.440+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T16:57:24.451+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:57:25.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T16:57:26.489+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T16:57:27.513+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:57:28.516+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:57:29.554+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:57:30.578+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:57:32.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:57:33.603+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:57:34.620+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:57:35.644+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:57:36.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T16:57:37.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T16:57:38.663+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T16:57:40.686+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:57:41.698+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:57:42.715+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T16:57:43.721+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T16:57:44.744+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:57:45.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T16:57:46.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:57:47.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T16:57:48.803+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T16:57:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155328,"time":{"ms":32}},"total":{"ticks":1885593,"time":{"ms":266},"value":1885593},"user":{"ticks":1730265,"time":{"ms":234}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98280666}},"memstats":{"gc_next":8493872,"memory_alloc":6837736,"memory_total":279504600536,"rss":-503808}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":689,"batches":26,"total":689},"read":{"bytes":156},"write":{"bytes":150391}},"pipeline":{"clients":3,"events":{"active":24,"published":686,"total":686},"queue":{"acked":689}}},"msg_file_cache":{"SecurityHits":686},"published_events":{"Security":689,"total":689}}}}
2026-05-26T16:57:49.822+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:57:50.853+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T16:57:51.846+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T16:57:53.878+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:57:54.890+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:57:55.914+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:57:56.923+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T16:57:58.943+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:57:59.961+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:58:00.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T16:58:03.009+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T16:58:04.017+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 10 events
2026-05-26T16:58:04.017+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-26T16:58:04.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:58:05.036+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:58:06.057+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:58:07.077+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T16:58:08.097+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:58:09.105+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:58:10.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:58:11.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T16:58:13.171+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:58:14.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T16:58:15.188+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T16:58:16.220+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T16:58:17.223+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T16:58:18.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T16:58:19.267+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:58:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155359,"time":{"ms":31}},"total":{"ticks":1886046,"time":{"ms":453},"value":1886046},"user":{"ticks":1730687,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98310665}},"memstats":{"gc_next":8354480,"memory_alloc":6620760,"memory_total":279571435360,"rss":233472}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":771,"batches":26,"total":771},"read":{"bytes":156},"write":{"bytes":167550}},"pipeline":{"clients":3,"events":{"active":0,"published":747,"total":747},"queue":{"acked":771}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":733,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":757,"System":4,"total":771}}}}
2026-05-26T16:58:21.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T16:58:22.286+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:58:23.307+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:58:24.319+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T16:58:26.339+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T16:58:27.372+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T16:58:28.376+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T16:58:29.399+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T16:58:30.417+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:58:31.436+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:58:32.447+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T16:58:33.470+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T16:58:34.500+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T16:58:35.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T16:58:36.520+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T16:58:38.539+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T16:58:39.553+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T16:58:40.558+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T16:58:41.592+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T16:58:43.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T16:58:44.628+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T16:58:45.631+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T16:58:46.650+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T16:58:47.676+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T16:58:48.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T16:58:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155390,"time":{"ms":31}},"total":{"ticks":1886358,"time":{"ms":312},"value":1886358},"user":{"ticks":1730968,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98340666}},"memstats":{"gc_next":8303216,"memory_alloc":6808600,"memory_total":279634829904,"rss":241664}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":694,"batches":25,"total":694},"read":{"bytes":150},"write":{"bytes":155144}},"pipeline":{"clients":3,"events":{"active":0,"published":694,"total":694},"queue":{"acked":694}}},"msg_file_cache":{"SecurityHits":696},"published_events":{"Security":694,"total":694}}}}
2026-05-26T16:58:50.690+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T16:58:51.733+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T16:58:54.557+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1500 events
2026-05-26T16:59:18.667+0800	ERROR	logstash/async.go:256	Failed to publish events caused by: read tcp 172.18.8.11:49906->172.18.8.249:5044: wsarecv: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2026-05-26T16:59:18.667+0800	ERROR	logstash/async.go:256	Failed to publish events caused by: read tcp 172.18.8.11:49906->172.18.8.249:5044: wsarecv: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2026-05-26T16:59:18.667+0800	ERROR	logstash/async.go:256	Failed to publish events caused by: read tcp 172.18.8.11:49906->172.18.8.249:5044: wsarecv: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2026-05-26T16:59:18.667+0800	INFO	[publish]	pipeline/retry.go:166	retryer: send wait signal to consumer
2026-05-26T16:59:18.668+0800	INFO	[publish]	pipeline/retry.go:168	  done
2026-05-26T16:59:18.675+0800	ERROR	logstash/async.go:256	Failed to publish events caused by: client is not connected
2026-05-26T16:59:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":155593,"time":{"ms":203}},"total":{"ticks":1889358,"time":{"ms":3000},"value":1889358},"user":{"ticks":1733765,"time":{"ms":2797}}},"handles":{"open":318},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":98370665}},"mpa�q�ؼ�&������k){E�p?J�e;�������A�HD�(���ǽ�W���̌x�&H�� ����fm�*�Q*�w�"��Pj~q�����.������fֻ�:m���;�2���>\"�l�k9c�J�>"�D�������P���>/�@:!�wbF�N�
�9&�K��Ɏ�&_�E�}]ɞ91;���i�`O�oSK�
���n�3�*�f
�_�׺�̈́�>����s��誛�;��Z:c���\@��WJ���;���ok���������:�(A���SG[�!����I��~�y�r�zu�V-���:���~:0-YG��?6P����j���#�9#�r������<��5�4Ѿ��W�5ퟐ��~��[W���4�u�nVTwV��\K6��ݔj�el�����ղ��iV���B���b�����sy]�8X��7Ӳ�:�X��z�]Y=Xo�g��m��^FY�9�Mj�ﭢ,���$���:��:���z4�R�'�W]gg���T�ī�Ҵ�������R�%3�nl��^�n��Q��'���yo���A�����,ꨪe�{R+��OV~�X�FS�\�l���2JP�2��!��nY�g�vW����~�J:7%VSߪ�/;���Yi�6#UJ��2�uy���.�h�g;;Y��q��*V�U��F}-�����l�#�Z�CBE���9�0R�rAZ�DJ�?d\�8�G	�������aȤ�qN�͍De�=g��pp1Q1">�<���2� �
���҆6a>�^K�(�9�an�7i�O�9��C�H�㷤�}�3"bC"���ܰ�����q�4�q�pc�W�]c��f�Y�ܲG�'�Pf݄�>���u����D�(EO%C���z��~5y%�,�'Q0�/� y��
s	���|�_���*�{"�?���k*�2���bF���'r�3h��{-s��r�)����㋊��M��H'�d�=���Qe�����qmGM��X~KS�������ӯKz>R����/aqξ�#lvD�����q�`̵5`K��1N,`u�?��Pł�=�
F"]i1ŕ�sh���P�����S��_��HՃ��� ��'�!IwuU+q�is�d�iG�>�E��u��`��۲kD堰�����L+:Cr��.���������u����!ʆ�U
��1�E.&i�<#+�ʰC� ���Gr=�#���p���{��+ʾA�@qf���D�"���Rd#&l��
Խ�&�&F��
�D����巤ef[���k���N���	6��w���U����Om�no�m��Z.�VZ��;e�I��}�a��&E��P�f�umk�ԍx�mbG���Y�QMGu4����{�WBq]];Ġ�3Z�V?������pO�m%-������w�ѝ}u���2�1�"�78�������v�'�־�v�>�RSS>��7Sk���������iK}�/�2�X�pBB/���Q7��4M~��f~���J�͎�4�k5�PKI5K��֕txrb���Z���L�p�� �Xq����:J�]D��ґ9�}mJ0�93
r.���te.k��3�5��X�.�:[���o��4��w�i�[�B��g��:�Ɔ� ��B%�ڔ�Ú���u�ݎ���n�\'��~���=]q&
��{hH���e�g����y�k�N�3����_�nH��-��,�P�x~�ڛ0ר�_߿�Fi1�iˆ��V���RB?��:
���b����R[�[�x;(ӎ}��I:����ޯfH��Ik���7���qT���oj��B���������g�h��d�/��nU�ı��V̧~m�咯��*U����]]e�������)��F
�o�f�gУ,�<���{��������hه���UC-����%�V���Z�U�
�?κ�ܠ:��`q�	��q~~+5�UD5*U�lص_%iާ��-�����>�����,"䋚��:�b'{����T��_�1�dh~��Vcު�-��\���u�B:<��>��K�z>����+og;����u#U�WXݚ�Оq-Ԩ�_�^�Zj_R���Ec>�a����V4A�$z���Ć:8����L���`��T�؟U���r���~���sra��|-Z��^oY)�x���I~9eL����[�a�B�[!��.�
��k�������,YX����_��7�����=�(c�
����v�
g���1EU�XA}ѡ�~�[]������UТO�ո��ߨ�2���`aV#]���WM�}��J�˯=j��T&!�����*�P���5�ya�����J�e�R��]��qX��$۬&��֗2ҡ�F���-��𮱪�����]C���Ќoۨ]�ZjR���&U�d*b��W|nar����K&P�!���
e8H�Mr'��Ū�%�K<׹�C�|q�WƌF��޵�XG�g�][�6<RDt����c���j�m;�&�1�Zد��*�~�
���p� �A�~�"D��w��+�f��#��4@ғ�e��l�g��Qb��E,�Ca��D��!��g�]�hR��3�U�ˀ7�6:k ~{-�:��ې�}���Ƅ�W7�/�
���7�w�|�BH�UO�LԶ�5���m�M�"銌
-��r{�}�tۨ�`��������<��<Vs߯��&��l�ֱ��	Q�A��M����龾�����+E�K�kH��n�	�e7���W�g��]g�wP�2�h޷���U�F����ڡ�/Һ(*2�F�)XT?�/����cTҌ�k�p۽���8]6`�iҕ1��IUR�ݶ�k��Yo�ה!UT��_t`FS�TC%T}Y��Iҕ
=�}|��)�G�����T�Y�����t�>��ѡ
d�|]��Rw�n���3Md6�Ц��U��_5��8���g~5*�O�k�9y��+��mu��B��Ã�i]�ޘ�\���y�٦��kS��ӆ�����v�&�ml#�i`�ʺ��vwao��m5��G��l}���e�[�R��ԤQQM}���h_W�)mr<H7����i�cK[�D�Wս}%Q�o��dU*R@}�LpM�'�Yʟ����3~JW�vU�6�������mu���m�ӳ�q�j���h�������&@�
=RK�����dp��xA�(��g� 
D8 �	#E
�?�"�2�W���oy�dHa"�ao��2��G��Qԍjؽ�.�ja�ݤr��`A�X�x��ӝ=��H
�s�@���*�H���j�AJ"1��Z~O�LC:5��ĝ��"�GA��7/�gOr����>��-���݄�A�Y5���6�e[��3�Z���/Q$��@���!��A���9B�(��?g�;L� ��(adш6�����|ݿ��j��AG�Ȑ�i�i�ulZM�4��>�F&�/�Ͽb{�{Dy�܄�:l�rHxd�܀~�G�XH"[���7\[�:�!�D����N\(_�H�Ph�O�cK+{ˀ@ ?��_,N��8H�
�g$���ك���� c�8�'����
@����mǕe��*!����� ��Q*�gi��߿N���4=�? ����̀�3Ƣ{�ȑ�[�͊"m�2Q3�we+��FP�� K��-D��=2�
;̓i��8��'6�R)��?�t���w�_���6j��f�'�٘��Z�?��!?�@�#�RV���F�<���H��m�%5���vqŵk:Eڸ�

"��`[���)�G��І���j����VE׷�OG���A����}�4,��ή��ɺ����7+���������
�
�
`�����w������?����@7�ȗ����H�2R中��lSN[�O�#;�/�ӄwR�bBS��¡��N_���AZa e#t�����'gMWT;�=u���ճn	m�k#:��N-i���E����N;{i+O�4��v�{�.�j���ɍ?77I���n�Tɠ���`�D{
Y���Y/rV�Sޖ^:0��F���{6U�J��~�>��L"����qC�ԧy9��NgΉUƼ�z�M���>�SU��m��C�k�O�L�D^[�L���)���U+��,��XĝMȸ�vLK���tr��v���
׵��g"]U�T;$�պ��	d���^jYmSW�v)�v��h�|z�]5]ۘ��I�詓Ӛ�C#ٗU8i�nSG��ђo��f�*f�vry?3M����7r��'�
њ��U��
-�j`�z�_�5��5q(^T�J��ҵ_�S�|/��5�e\[��V'UU�n�##-l�Т�J.��c���ՅYI:0��~�0U%
�lyU�e��c�0�i�w�Z(�����:=;E��F�����L�SMk�i��zũl�j�'ulf=qX�ѩlr��[��$���6�dBST#��7�kh�A�5m