g[Security] successfully published 17 events
2026-05-26T18:14:38.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:14:39.396+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:14:40.412+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:14:42.409+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:14:43.441+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:14:44.441+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T18:14:45.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:14:46.511+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 79 events
2026-05-26T18:14:47.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:14:48.517+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:14:49.536+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:14:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165578,"time":{"ms":32}},"total":{"ticks":2042874,"time":{"ms":328},"value":2042874},"user":{"ticks":1877296,"time":{"ms":296}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":102900665}},"memstats":{"gc_next":8286800,"memory_alloc":5478240,"memory_total":297485114032}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":806,"batches":27,"total":806},"read":{"bytes":162},"write":{"bytes":170917}},"pipeline":{"clients":3,"events":{"active":36,"published":792,"total":792},"queue":{"acked":806}}},"msg_file_cache":{"SecurityHits":792},"published_events":{"Security":806,"total":806}}}}
2026-05-26T18:14:50.557+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:14:52.559+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:14:53.572+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:14:54.585+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:14:55.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T18:14:56.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:14:57.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:14:58.678+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T18:14:59.674+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:15:01.707+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:15:02.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:15:03.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:15:04.745+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:15:05.769+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:15:06.787+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:15:07.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:15:08.827+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:15:09.837+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:15:10.873+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:15:11.891+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:15:13.893+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:15:14.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T18:15:15.935+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:15:17.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:15:18.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:15:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165656,"time":{"ms":78}},"total":{"ticks":2043327,"time":{"ms":453},"value":2043327},"user":{"ticks":1877671,"time":{"ms":375}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":102930665}},"memstats":{"gc_next":5707328,"memory_alloc":3419344,"memory_total":297550635800}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":764,"batches":25,"total":764},"read":{"bytes":150},"write":{"bytes":163530}},"pipeline":{"clients":3,"events":{"active":25,"published":753,"total":753},"queue":{"acked":764}}},"msg_file_cache":{"SecurityHits":753},"published_events":{"Security":764,"total":764}}}}
2026-05-26T18:15:19.987+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:15:20.986+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:15:22.015+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:15:23.012+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T18:15:24.023+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:15:25.053+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:15:26.054+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:15:28.088+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:15:29.089+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:15:30.094+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:15:31.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T18:15:33.154+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:15:34.167+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:15:35.186+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:15:37.200+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:15:38.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:15:39.229+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:15:40.252+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:15:41.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:15:42.268+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:15:43.288+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:15:44.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:15:45.307+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:15:46.331+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:15:47.361+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:15:48.370+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:15:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165734,"time":{"ms":78}},"total":{"ticks":2043655,"time":{"ms":328},"value":2043655},"user":{"ticks":1877921,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":102960665}},"memstats":{"gc_next":5314048,"memory_alloc":2901384,"memory_total":297614972096,"rss":-450560}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":675,"batches":26,"total":675},"read":{"bytes":156},"write":{"bytes":149293}},"pipeline":{"clients":3,"events":{"active":31,"published":681,"total":681},"queue":{"acked":675}}},"msg_file_cache":{"SecurityHits":681},"published_events":{"Security":675,"total":675}}}}
2026-05-26T18:15:50.389+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:15:51.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:15:52.424+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:15:53.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:15:55.443+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:15:56.484+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:15:57.478+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:15:59.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:16:00.506+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:16:02.566+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T18:16:04.567+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:16:05.575+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:16:06.592+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:16:07.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:16:08.615+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:16:09.629+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:16:10.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T18:16:12.666+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:16:13.688+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:16:14.693+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 6 events
2026-05-26T18:16:14.693+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:16:15.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T18:16:15.739+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T18:16:16.763+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:16:17.775+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:16:18.815+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-26T18:16:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165765,"time":{"ms":31}},"total":{"ticks":2044108,"time":{"ms":453},"value":2044108},"user":{"ticks":1878343,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":102990665}},"memstats":{"gc_next":8512784,"memory_alloc":4288624,"memory_total":297676717016,"rss":-98304}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":722,"batches":24,"total":722},"read":{"bytes":144},"write":{"bytes":158531}},"pipeline":{"clients":3,"events":{"active":0,"published":691,"total":691},"queue":{"acked":722}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":684,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":715,"System":1,"total":722}}}}
2026-05-26T18:16:20.819+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:16:21.848+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:16:23.853+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:16:24.868+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:16:25.881+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:16:26.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T18:16:28.912+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:16:29.927+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:16:30.926+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T18:16:31.964+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T18:16:32.977+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:16:34.007+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:16:35.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:16:37.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:16:38.059+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:16:39.092+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T18:16:40.098+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:16:41.110+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:16:42.139+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:16:43.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:16:44.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:16:45.199+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:16:46.200+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:16:48.235+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:16:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165765},"total":{"ticks":2044390,"time":{"ms":282},"value":2044390},"user":{"ticks":1878625,"time":{"ms":282}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103020667}},"memstats":{"gc_next":8343952,"memory_alloc":5332928,"memory_total":297740552688}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":717,"batches":24,"total":717},"read":{"bytes":144},"write":{"bytes":152635}},"pipeline":{"clients":3,"events":{"active":32,"published":749,"total":749},"queue":{"acked":717}}},"msg_file_cache":{"SecurityHits":749},"published_events":{"Security":717,"total":717}}}}
2026-05-26T18:16:50.254+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:16:51.262+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:16:53.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:16:54.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:16:55.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:16:56.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:16:57.342+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:16:58.378+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:16:59.386+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:17:00.412+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:17:01.422+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:17:02.434+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:17:04.459+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:17:05.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:17:06.497+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:17:07.516+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:17:08.513+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T18:17:09.530+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:17:10.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:17:13.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:17:14.603+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:17:15.610+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:17:16.640+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:17:17.663+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:17:18.680+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:17:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165796,"time":{"ms":31}},"total":{"ticks":2044702,"time":{"ms":312},"value":2044702},"user":{"ticks":1878906,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103050666}},"memstats":{"gc_next":5724736,"memory_alloc":4321616,"memory_total":297805080456,"rss":-413696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":704,"batches":25,"total":704},"read":{"bytes":150},"write":{"bytes":153791}},"pipeline":{"clients":3,"events":{"active":50,"published":722,"total":722},"queue":{"acked":704}}},"msg_file_cache":{"SecurityHits":722},"published_events":{"Security":704,"total":704}}}}
2026-05-26T18:17:19.713+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T18:17:21.720+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:17:22.746+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:17:23.755+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:17:24.766+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:17:25.793+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:17:26.802+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:17:27.802+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T18:17:29.830+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:17:30.832+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:17:31.831+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:17:32.846+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:17:33.878+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:17:35.901+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:17:36.907+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:17:37.913+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:17:38.952+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T18:17:39.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:17:40.969+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:17:42.008+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:17:43.009+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:17:45.028+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:17:46.039+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:17:47.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:17:48.070+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:17:49.089+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:17:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165796},"total":{"ticks":2044952,"time":{"ms":250},"value":2044952},"user":{"ticks":1879156,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103080665}},"memstats":{"gc_next":5372688,"memory_alloc":2831592,"memory_total":297868885416,"rss":339968}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":684,"batches":26,"total":684},"read":{"bytes":156},"write":{"bytes":149810}},"pipeline":{"clients":3,"events":{"active":30,"published":664,"total":664},"queue":{"acked":684}}},"msg_file_cache":{"SecurityHits":664},"published_events":{"Security":684,"total":684}}}}
2026-05-26T18:17:50.106+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:17:51.124+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:17:52.131+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:17:53.139+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:17:55.182+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T18:17:56.182+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:17:57.199+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:17:58.219+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:17:59.236+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:18:00.246+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:18:01.267+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:18:03.285+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:18:04.285+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:18:05.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T18:18:06.340+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:18:07.375+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:18:08.378+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T18:18:09.386+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:18:10.413+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:18:11.428+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:18:13.430+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:18:14.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:18:15.496+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 4 events
2026-05-26T18:18:15.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T18:18:16.499+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:18:16.499+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 6 events
2026-05-26T18:18:17.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T18:18:17.548+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-26T18:18:18.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:18:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165859,"time":{"ms":63}},"total":{"ticks":2045296,"time":{"ms":344},"value":2045296},"user":{"ticks":1879437,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103110665}},"memstats":{"gc_next":5244544,"memory_alloc":3787960,"memory_total":297937329184,"rss":98304}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":790,"batches":26,"total":790},"read":{"bytes":156},"write":{"bytes":171901}},"pipeline":{"clients":3,"events":{"active":41,"published":801,"total":801},"queue":{"acked":790}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":787,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":776,"System":4,"total":790}}}}
2026-05-26T18:18:20.570+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:18:21.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T18:18:22.613+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:18:23.626+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:18:24.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:18:25.655+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:18:26.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:18:27.690+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:18:28.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:18:29.698+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T18:18:30.731+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T18:18:32.735+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:18:33.759+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:18:34.763+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:18:35.787+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:18:36.821+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T18:18:38.827+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:18:39.835+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:18:40.861+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:18:41.876+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:18:42.897+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:18:43.913+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:18:45.912+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:18:46.955+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T18:18:47.943+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T18:18:48.963+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:18:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165906,"time":{"ms":47}},"total":{"ticks":2045640,"time":{"ms":344},"value":2045640},"user":{"ticks":1879734,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103140666}},"memstats":{"gc_next":8236144,"memory_alloc":5225152,"memory_total":298004130624,"rss":-552960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":760,"batches":26,"total":760},"read":{"bytes":156},"write":{"bytes":161592}},"pipeline":{"clients":3,"events":{"active":30,"published":749,"total":749},"queue":{"acked":760}}},"msg_file_cache":{"SecurityHits":749},"published_events":{"Security":760,"total":760}}}}
2026-05-26T18:18:49.982+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:18:50.981+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T18:18:52.016+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:18:53.023+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:18:54.029+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:18:56.061+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:18:57.091+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:18:58.089+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:18:59.121+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:19:00.143+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:19:02.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:19:03.192+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:19:04.203+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:19:05.215+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:19:06.240+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:19:07.259+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:19:08.279+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:19:09.316+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T18:19:10.315+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:19:11.327+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:19:12.358+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:19:13.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T18:19:14.356+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T18:19:15.374+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T18:19:16.410+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T18:19:17.408+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:19:18.428+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:19:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":165953,"time":{"ms":47}},"total":{"ticks":2045968,"time":{"ms":328},"value":2045968},"user":{"ticks":1880015,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103170665}},"memstats":{"gc_next":5249568,"memory_alloc":2928776,"memory_total":298072694208,"rss":552960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":763,"batches":27,"total":763},"read":{"bytes":162},"write":{"bytes":165729}},"pipeline":{"clients":3,"events":{"active":23,"published":756,"total":756},"queue":{"acked":763}}},"msg_file_cache":{"SecurityHits":756},"published_events":{"Security":763,"total":763}}}}
2026-05-26T18:19:20.440+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:19:21.478+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T18:19:22.516+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:19:23.525+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:19:24.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 69 events
2026-05-26T18:19:25.555+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:19:26.598+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:19:27.614+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:19:29.629+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:19:30.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:19:31.665+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:19:32.685+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:19:33.694+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:19:34.715+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:19:35.711+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T18:19:37.764+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T18:19:38.777+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:19:39.772+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-26T18:19:40.795+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:19:41.812+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:19:42.831+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:19:43.847+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:19:44.869+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:19:45.873+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T18:19:46.922+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T18:19:48.930+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:19:49.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":166000,"time":{"ms":47}},"total":{"ticks":2046421,"time":{"ms":453},"value":2046421},"user":{"ticks":1880421,"time":{"ms":406}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103200665}},"memstats":{"gc_next":5352576,"memory_alloc":3624824,"memory_total":298143532992,"rss":40960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":839,"batches":26,"total":839},"read":{"bytes":156},"write":{"bytes":174652}},"pipeline":{"clients":3,"events":{"active":46,"published":862,"total":862},"queue":{"acked":839}}},"msg_file_cache":{"SecurityHits":862},"published_events":{"Security":839,"total":839}}}}
2026-05-26T18:19:49.962+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:19:50.974+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:19:52.994+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:19:54.049+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 77 events
2026-05-26T18:19:55.041+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:19:56.061+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:19:57.076+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:19:58.088+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:20:00.107+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:20:01.115+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:20:01.115+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T18:20:02.128+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:20:03.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 74 events
2026-05-26T18:20:04.170+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:20:05.193+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:20:07.214+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:20:08.234+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T18:20:09.246+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:20:10.292+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T18:20:11.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:20:12.308+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:20:13.350+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T18:20:14.363+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:20:15.372+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:20:16.396+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:20:17.396+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T18:20:18.425+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:20:19.444+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:20:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":166062,"time":{"ms":62}},"total":{"ticks":2046749,"time":{"ms":328},"value":2046749},"user":{"ticks":1880687,"time":{"ms":266}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103230665}},"memstats":{"gc_next":5635632,"memory_alloc":2985568,"memory_total":298214680632,"rss":24576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":866,"batches":27,"total":866},"read":{"bytes":162},"write":{"bytes":180402}},"pipeline":{"clients":3,"events":{"active":5,"published":825,"total":825},"queue":{"acked":866}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":-2,"SecurityHits":824,"SystemSize":-1},"published_events":{"Application":1,"Security":865,"total":866}}}}
2026-05-26T18:20:20.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T18:20:22.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:20:23.474+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T18:20:24.489+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:20:25.515+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:20:26.530+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:20:27.552+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:20:28.596+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 70 events
2026-05-26T18:20:29.614+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:20:30.623+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:20:32.648+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:20:33.659+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:20:34.703+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T18:20:35.717+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:20:36.716+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:20:37.740+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T18:20:38.785+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T18:20:39.800+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:20:40.817+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:20:41.837+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:20:42.856+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T18:20:43.876+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:20:44.887+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:20:45.917+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T18:20:46.923+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:20:47.961+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:20:48.989+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:20:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":166062},"total":{"ticks":2047093,"time":{"ms":344},"value":2047093},"user":{"ticks":1881031,"time":{"ms":344}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103260666}},"memstats":{"gc_next":8369648,"memory_alloc":4209616,"memory_total":298290763920,"rss":176128}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":966,"batches":27,"total":966},"read":{"bytes":162},"write":{"bytes":193501}},"pipeline":{"clients":3,"events":{"active":0,"published":961,"total":961},"queue":{"acked":966}}},"msg_file_cache":{"SecurityHits":961},"published_events":{"Security":966,"total":966}}}}
2026-05-26T18:20:51.003+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T18:20:52.033+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:20:53.042+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T18:20:54.063+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:20:55.108+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T18:20:56.122+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:20:57.148+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:20:58.156+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:20:59.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:21:00.200+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:21:01.194+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T18:21:03.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:21:04.249+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T18:21:05.253+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:21:06.262+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T18:21:07.297+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T18:21:09.299+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T18:21:10.334+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T18:21:11.375+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 73 events
2026-05-26T18:21:12.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:21:13.420+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T18:21:14.429+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:15.467+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T18:21:16.480+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:21:17.494+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:21:18.511+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T18:21:19.551+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T18:21:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":166078,"time":{"ms":16}},"total":{"ticks":2047562,"time":{"ms":469},"value":2047562},"user":{"ticks":1881484,"time":{"ms":453}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103290665}},"memstats":{"gc_next":8520912,"memory_alloc":5156592,"memory_total":298369665344,"rss":110592}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1022,"batches":27,"total":1022},"read":{"bytes":162},"write":{"bytes":204750}},"pipeline":{"clients":3,"events":{"active":25,"published":1047,"total":1047},"queue":{"acked":1022}}},"msg_file_cache":{"SecurityHits":1047},"published_events":{"Security":1022,"total":1022}}}}
2026-05-26T18:21:20.553+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:21.556+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:21:22.577+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:21:23.590+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:24.617+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T18:21:25.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T18:21:27.662+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T18:21:28.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:21:29.695+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T18:21:30.715+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T18:21:31.726+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:21:32.760+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T18:21:33.751+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T18:21:34.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T18:21:35.814+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T18:21:36.812+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T18:21:37.822+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T18:21:38.849+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:21:39.867+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T18:21:40.887+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T18:21:42.911+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T18:21:43.918+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T18:21:44.931+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T18:21:45.959+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:21:46.969+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:47.987+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:49.018+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:21:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":166140,"time":{"ms":62}},"total":{"ticks":2048046,"time":{"ms":484},"value":2048046},"user":{"ticks":1881906,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":103320666}},"memstats":{"gc_next":8392592,"memory_alloc":5063984,"memory_total":298440867368,"rss":-483328}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":828,"batches":27,"total":828},"read":{"bytes":162},"write":{"bytes":175579}},"pipeline":{"clients":3,"events":{"active":23,"published":826,"total":826},"queue":{"acked":828}}},"msg_file_cache":{"SecurityHits":826},"published_events":{"Security":828,"total":828}}}}
2026-05-26T18:21:50.022+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T18:21:51.054+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T18:21:52.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:21:53.085+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T18:21:54.091+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T18:21:55.125+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T18:21:56.156+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-26T18:21:57.161+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:21:59.186+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T18:22:00.195+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T18:22:01.229+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T18:22:02.251+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T18:22:03.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T18:22:04.271+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T18:22:05.284+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T18:22:06.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T18:22:07.323+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T18:22:08.354+0800	INFO	beater/eventlogger.go:73	EventLog[Security]