}B;0dN' Fdil=kt,$[E<1&{,x-Z!d}ylNϚkSXH8x:bM YƭL+gj㟀듲fa[p?Go!&`/bLzƪ~g`4lɲ=l9BK'g7@ f`>B/E+Y`=l|u<ظ #ߧc!X`5v`&;bi#ߧГG]H ̀PK _`9} =xEdil\&Y-e!${1&{!)ds"Xj u!n GzG^Hh#GNV]Rn]eГE8rJKB_5+GL 6D~Kh)/2k֊{,h),$ eru!n5#'O6FOd5#ߧc!Yf_5;?۱/>m>___{Oo(ӿw#?s㲼@0 =&E`9}:"L FГG]8`9} VLv!ؖ)KYyu %W`v!؆`yu[BO]H,N??l`]!#?l"Cv/+ =0p\Y>?l"إ vh &%opZmfާl"C5E`$w{%ds  s\k.C߯إ v,ٸ-{`XN{\XB`[`.ڍ<1KOc$p0k咋Rkvnܑl>G,Y~SÈ`%\ `%&{wׯ$`s0ГN VKl]sl&d+']Y/}Eͮ_Q4Y -YzcG`a_◾"l~] f^~IBMGkldIUcr+*v_.ڍb,t:kldVK Vl}]d6\JBMG/9ϗ_,> AWv5k&[Zyod,*} `M_.ڍrŕe%`sj$MY͠_rĒ¯kn.K_^8r"}zAH޺k7MK67i+6h$,y%+!E_X~żh,MGNd VKl|hDЃ!9p&+&+a!1.b+.x-'Oeq,Mc!*}MГ͵,8.E r,$hkun_p4ABK&#?кMl5_ zEG{@d%GLn_]8' _|d B/9b]u÷ߵ?=ln3cV:X?0W_o?0NpvY'%`FӇo8 wѿq7E .YL ]~ݻk7/8 'd^ `A%+!콋v 6rIf/e[d%d\ddv=rG΂s `8{AK` ׽v%;y `X ]޻k7KYxɵ`ȿ^zڿXHX ]׽vۙ5k>;EXȕ r=b=$d8 {Ȱ,{1.{HBMG { 2zA뭯{zF^1, >bk7`s[B6[Η`> X.]ztnDl"#^9v(ad%G,.z`0^ %[d#,? %@M]ףv(Y?2,Ÿ=VDcd%G,.z3Y@B/ل/pEz'{ɰlv̒=}~Y{ Üa!*{b"ﷄl8r^ VKl{=`kyyl!#?W%a!Y;L#&_^—ln"#,BuA@X_=U>/:`ꢯ( -XqJhG~.YKBj.ڍ,3K HKB_Yrd/e%dsdds%B_z_Qv,YJguCv(y =| , ˰l䈽^_04/K.p\~!mr,$[09b]BKBO6\Hhk05/BU#&`/0_В+_w?\U%ך^]E,L>3O[,Oda1d(y# dkds?KgU"5k7`}j{Oc`ײZ葬,9Y ˾k7d󑷄l8.gh!6.]k7d󙷄l8.Ez&ɱPU#lqg7@۬t 2 VKlf5"%EeX_r`7J&#w˰lv nЃMG a!*}7\m$ W#7˰luKl}apN`8W2){ %,[#_o=n bardaU/9'XdW-d+Nvot^O%B [%;_=%#voϻё[lm큯uM-dH:.%5XH_ߎl| |}&K(?#7K֏}׷#_3[h%#H_BK6Fdk -F?BE_[XH_ߎ48+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:18:15.680+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:18:16.685+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:18:17.691+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:18:18.725+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:18:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174703,"time":{"ms":63}},"total":{"ticks":2136249,"time":{"ms":500},"value":2136249},"user":{"ticks":1961546,"time":{"ms":437}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110310665}},"memstats":{"gc_next":8366000,"memory_alloc":4210672,"memory_total":314262818640,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":819,"batches":27,"total":819},"read":{"bytes":162},"write":{"bytes":172448}},"pipeline":{"clients":3,"events":{"active":0,"published":763,"total":763},"queue":{"acked":819}}},"msg_file_cache":{"ApplicationMisses":2,"ApplicationSize":2,"SecurityHits":761},"published_events":{"Application":2,"Security":817,"total":819}}}} 2026-05-26T20:18:20.723+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:18:21.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:18:22.759+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:18:23.773+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:18:24.787+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:18:25.804+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:18:26.834+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:18:27.873+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:18:28.878+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:18:29.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:18:31.924+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:18:32.915+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T20:18:33.938+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:18:34.961+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:18:36.989+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:18:38.000+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:18:39.010+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:18:40.028+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:18:41.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:18:42.067+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:18:43.091+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:18:45.113+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:18:46.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:18:47.152+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:18:48.166+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:18:49.182+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:18:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174796,"time":{"ms":93}},"total":{"ticks":2136842,"time":{"ms":593},"value":2136842},"user":{"ticks":1962046,"time":{"ms":500}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110340666}},"memstats":{"gc_next":5570960,"memory_alloc":3814432,"memory_total":314330830320}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":754,"batches":26,"total":754},"read":{"bytes":156},"write":{"bytes":159559}},"pipeline":{"clients":3,"events":{"active":28,"published":782,"total":782},"queue":{"acked":754}}},"msg_file_cache":{"SecurityHits":782,"SystemSize":-1},"published_events":{"Security":754,"total":754}}}} 2026-05-26T20:18:50.199+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:18:51.228+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:18:52.236+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:18:54.266+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:18:55.263+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T20:18:56.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:18:57.313+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:18:58.331+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:19:00.356+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:19:01.358+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:19:02.377+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:19:03.396+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:19:04.409+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:19:05.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:19:07.461+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T20:19:08.475+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:19:09.479+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:19:10.512+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:19:11.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:19:12.541+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:19:13.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:19:14.575+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:19:16.605+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:19:17.616+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:19:18.618+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:19:19.644+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:19:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174812,"time":{"ms":16}},"total":{"ticks":2137202,"time":{"ms":360},"value":2137202},"user":{"ticks":1962390,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110370665}},"memstats":{"gc_next":8292240,"memory_alloc":4955616,"memory_total":314397039112}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":739,"batches":26,"total":739},"read":{"bytes":156},"write":{"bytes":162792}},"pipeline":{"clients":3,"events":{"active":22,"published":733,"total":733},"queue":{"acked":739}}},"msg_file_cache":{"SecurityHits":733},"published_events":{"Security":739,"total":739}}}} 2026-05-26T20:19:20.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:19:22.666+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:19:23.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:19:24.715+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:19:25.726+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:19:26.738+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:19:28.764+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:19:29.799+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:19:30.797+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:19:31.805+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:19:32.840+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:19:33.851+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:19:34.867+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:19:36.876+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:19:37.881+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T20:19:38.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:19:39.908+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:19:40.930+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:19:41.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:19:42.980+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:19:45.017+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:19:46.033+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:19:47.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:19:48.089+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:19:49.093+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:19:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174875,"time":{"ms":63}},"total":{"ticks":2137578,"time":{"ms":376},"value":2137578},"user":{"ticks":1962703,"time":{"ms":313}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110400665}},"memstats":{"gc_next":8408176,"memory_alloc":6268312,"memory_total":314459399552}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":687,"batches":25,"total":687},"read":{"bytes":150},"write":{"bytes":150339}},"pipeline":{"clients":3,"events":{"active":0,"published":665,"total":665},"queue":{"acked":687}}},"msg_file_cache":{"SecurityHits":665},"published_events":{"Security":687,"total":687}}}} 2026-05-26T20:19:51.123+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:19:53.139+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:19:54.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:19:55.156+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:19:58.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:19:59.194+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:20:00.205+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:20:01.232+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:20:01.232+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:20:03.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:20:05.261+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:20:06.275+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:20:07.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:20:09.304+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:20:10.318+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:20:11.332+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:20:12.338+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:20:13.357+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:20:14.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T20:20:15.385+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:20:16.405+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:20:17.427+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:20:19.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:20:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174921,"time":{"ms":46}},"total":{"ticks":2137921,"time":{"ms":343},"value":2137921},"user":{"ticks":1963000,"time":{"ms":297}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110430665}},"memstats":{"gc_next":5271952,"memory_alloc":3075688,"memory_total":314514040000,"rss":-475136}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":553,"batches":22,"total":553},"read":{"bytes":132},"write":{"bytes":126980}},"pipeline":{"clients":3,"events":{"active":23,"published":576,"total":576},"queue":{"acked":553}}},"msg_file_cache":{"ApplicationHits":1,"ApplicationSize":-1,"SecurityHits":575},"published_events":{"Application":1,"Security":552,"total":553}}}} 2026-05-26T20:20:20.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:20:22.481+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:20:23.496+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:20:24.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:20:25.526+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:20:27.547+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:20:28.547+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:20:29.582+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:20:30.581+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:20:31.599+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:20:32.622+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:20:33.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:20:35.664+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:20:36.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:20:37.698+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:20:39.723+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:20:40.726+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:20:42.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:20:43.760+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:20:44.784+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:20:45.812+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:20:46.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:20:47.826+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T20:20:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174953,"time":{"ms":32}},"total":{"ticks":2138249,"time":{"ms":328},"value":2138249},"user":{"ticks":1963296,"time":{"ms":296}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110460666}},"memstats":{"gc_next":8083696,"memory_alloc":5828240,"memory_total":314572291464,"rss":385024}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":611,"batches":23,"total":611},"read":{"bytes":138},"write":{"bytes":137407}},"pipeline":{"clients":3,"events":{"active":48,"published":636,"total":636},"queue":{"acked":611}}},"msg_file_cache":{"SecurityHits":636},"published_events":{"Security":611,"total":611}}}} 2026-05-26T20:20:49.864+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:20:50.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:20:51.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:20:52.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:20:54.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:20:55.921+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:20:58.947+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:21:00.951+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:21:01.990+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:21:05.017+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:21:07.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:21:08.040+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:21:11.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:21:12.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:21:13.073+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T20:21:14.092+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:21:15.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:21:18.154+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:21:19.160+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:21:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":174968,"time":{"ms":15}},"total":{"ticks":2138389,"time":{"ms":140},"value":2138389},"user":{"ticks":1963421,"time":{"ms":125}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110490665}},"memstats":{"gc_next":8346800,"memory_alloc":7061896,"memory_total":314618526000,"rss":28672}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":496,"batches":19,"total":496},"read":{"bytes":114},"write":{"bytes":112448}},"pipeline":{"clients":3,"events":{"active":19,"published":467,"total":467},"queue":{"acked":496}}},"msg_file_cache":{"SecurityHits":467},"published_events":{"Security":496,"total":496}}}} 2026-05-26T20:21:20.173+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:21:21.183+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:21:23.192+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:21:25.212+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:21:26.214+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:21:27.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:21:29.246+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:21:30.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T20:21:31.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T20:21:32.292+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:21:33.319+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:21:34.343+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:21:35.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:21:37.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:21:38.384+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:21:39.421+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T20:21:40.440+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:21:42.452+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:21:43.489+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:21:44.508+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:21:45.509+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:21:46.542+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:21:47.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:21:48.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:21:49.605+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:21:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175031,"time":{"ms":63}},"total":{"ticks":2138765,"time":{"ms":376},"value":2138765},"user":{"ticks":1963734,"time":{"ms":313}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110520665}},"memstats":{"gc_next":8287632,"memory_alloc":6798120,"memory_total":314680712096,"rss":-438272}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":679,"batches":25,"total":679},"read":{"bytes":150},"write":{"bytes":149262}},"pipeline":{"clients":3,"events":{"active":0,"published":660,"total":660},"queue":{"acked":679}}},"msg_file_cache":{"SecurityHits":660},"published_events":{"Security":679,"total":679}}}} 2026-05-26T20:21:51.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:21:52.630+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:21:53.652+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:21:54.669+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:21:55.705+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-26T20:21:56.703+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:21:57.721+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:21:58.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:21:59.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:22:01.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:22:02.792+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:22:03.810+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:22:04.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:22:05.848+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:22:06.842+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:22:08.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:22:09.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:22:10.908+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:22:11.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:22:12.946+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:22:13.948+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:22:14.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:22:15.991+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:22:16.995+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:22:18.022+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:22:19.043+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:22:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175093,"time":{"ms":62}},"total":{"ticks":2139218,"time":{"ms":453},"value":2139218},"user":{"ticks":1964125,"time":{"ms":391}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110550666}},"memstats":{"gc_next":5729120,"memory_alloc":3826800,"memory_total":314749999208,"rss":401408}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":785,"batches":26,"total":785},"read":{"bytes":156},"write":{"bytes":166802}},"pipeline":{"clients":3,"events":{"active":31,"published":816,"total":816},"queue":{"acked":785}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":816},"published_events":{"Security":785,"total":785}}}} 2026-05-26T20:22:20.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:22:22.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:22:23.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:22:24.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:22:25.131+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:22:26.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:22:27.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:22:28.182+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:22:30.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T20:22:31.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:22:32.218+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T20:22:33.221+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:22:35.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:22:36.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:22:37.280+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T20:22:38.297+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:22:39.306+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:22:40.318+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:22:41.348+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:22:42.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:22:44.385+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:22:45.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:22:46.424+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:22:47.455+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T20:22:48.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:22:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175109,"time":{"ms":16}},"total":{"ticks":2139562,"time":{"ms":344},"value":2139562},"user":{"ticks":1964453,"time":{"ms":328}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110580666}},"memstats":{"gc_next":5229184,"memory_alloc":3494088,"memory_total":314814402824,"rss":16384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":723,"batches":25,"total":723},"read":{"bytes":150},"write":{"bytes":154150}},"pipeline":{"clients":3,"events":{"active":27,"published":719,"total":719},"queue":{"acked":723}}},"msg_file_cache":{"SecurityHits":719},"published_events":{"Security":723,"total":723}}}} 2026-05-26T20:22:50.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:22:51.497+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:22:52.516+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:22:53.531+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:22:54.551+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:22:55.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:22:56.583+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:22:57.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:22:58.612+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:22:59.630+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:23:00.654+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:23:01.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:23:03.695+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:23:04.729+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T20:23:05.731+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:23:06.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:23:07.768+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:23:08.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:23:09.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:23:11.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:23:12.820+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:23:13.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T20:23:14.860+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:23:15.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:23:16.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:23:18.912+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:23:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175140,"time":{"ms":31}},"total":{"ticks":2139827,"time":{"ms":265},"value":2139827},"user":{"ticks":1964687,"time":{"ms":234}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110610665}},"memstats":{"gc_next":5257824,"memory_alloc":3214776,"memory_total":314882069456,"rss":-425984}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":767,"batches":26,"total":767},"read":{"bytes":156},"write":{"bytes":164206}},"pipeline":{"clients":3,"events":{"active":34,"published":774,"total":774},"queue":{"acked":767}}},"msg_file_cache":{"SecurityHits":774},"published_events":{"Security":767,"total":767}}}} 2026-05-26T20:23:19.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:23:20.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:23:21.971+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:23:23.009+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T20:23:24.010+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:23:25.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:23:27.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:23:28.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:23:29.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:23:31.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:23:32.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:23:33.123+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:23:34.164+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:23:35.175+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:23:36.189+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:23:37.188+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T20:23:38.240+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T20:23:39.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:23:41.253+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:23:42.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:23:43.302+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:23:44.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:23:45.342+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:23:46.339+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T20:23:48.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T20:23:49.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:23:49.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175140},"total":{"ticks":2140155,"time":{"ms":328},"value":2140155},"user":{"ticks":1965015,"time":{"ms":328}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110640665}},"memstats":{"gc_next":8448528,"memory_alloc":6373016,"memory_total":314948779176,"rss":430080}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":780,"batches":26,"total":780},"read":{"bytes":156},"write":{"bytes":165833}},"pipeline":{"clients":3,"events":{"active":0,"published":746,"total":746},"queue":{"acked":780}}},"msg_file_cache":{"SecurityHits":746},"published_events":{"Security":780,"total":780}}}} 2026-05-26T20:23:51.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-26T20:23:52.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:23:53.421+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:23:54.461+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T20:23:55.471+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:23:56.475+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:23:58.514+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T20:23:59.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:24:00.553+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:24:01.547+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T20:24:02.571+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:24:03.599+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T20:24:04.601+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:24:06.629+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:24:07.652+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:24:08.657+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:24:09.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:24:10.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T20:24:11.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T20:24:13.728+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:24:14.748+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:24:15.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:24:16.774+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:24:18.800+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:24:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175171,"time":{"ms":31}},"total":{"ticks":2140499,"time":{"ms":344},"value":2140499},"user":{"ticks":1965328,"time":{"ms":313}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110670665}},"memstats":{"gc_next":5799872,"memory_alloc":3349216,"memory_total":315012183344,"rss":-438272}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":715,"batches":24,"total":715},"read":{"bytes":144},"write":{"bytes":149027}},"pipeline":{"clients":3,"events":{"active":19,"published":734,"total":734},"queue":{"acked":715}}},"msg_file_cache":{"SecurityHits":734},"published_events":{"Security":715,"total":715}}}} 2026-05-26T20:24:19.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:24:20.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:24:21.845+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:24:22.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:24:23.875+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:24:24.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:24:25.915+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:24:26.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:24:28.929+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T20:24:29.969+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T20:24:30.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:24:31.983+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:24:33.006+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:24:33.006+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:24:34.018+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:24:34.018+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 5 events 2026-05-26T20:24:35.064+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T20:24:35.064+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events 2026-05-26T20:24:36.080+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:24:38.104+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:24:39.123+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:24:40.162+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T20:24:41.164+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:24:42.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:24:43.207+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:24:44.211+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:24:45.238+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:24:46.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:24:47.267+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:24:49.300+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:24:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175187,"time":{"ms":16}},"total":{"ticks":2141015,"time":{"ms":516},"value":2141015},"user":{"ticks":1965828,"time":{"ms":500}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110700665}},"memstats":{"gc_next":5746336,"memory_alloc":3359072,"memory_total":315084338784,"rss":-405504}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":853,"batches":27,"total":853},"read":{"bytes":162},"write":{"bytes":182221}},"pipeline":{"clients":3,"events":{"active":20,"published":854,"total":854},"queue":{"acked":853}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":847,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":846,"System":1,"total":853}}}} 2026-05-26T20:24:50.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:24:51.327+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:24:52.358+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:24:53.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-05-26T20:24:55.370+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:24:56.401+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:24:57.404+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:24:59.430+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:25:00.444+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:25:01.450+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:25:02.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:25:03.491+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:25:04.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:25:06.529+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:25:07.542+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:25:08.581+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T20:25:09.584+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:25:10.598+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:25:11.624+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:25:12.625+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:25:13.624+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T20:25:14.648+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:25:15.670+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:25:17.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:25:19.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175265,"time":{"ms":78}},"total":{"ticks":2141436,"time":{"ms":421},"value":2141436},"user":{"ticks":1966171,"time":{"ms":343}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":110730665}},"memstats":{"gc_next":8182032,"memory_alloc":6932824,"memory_total":315145847032,"rss":507904}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":646,"active":15,"batches":24,"total":646},"read":{"bytes":144},"write":{"bytes":141911}},"pipeline":{"clients":3,"events":{"active":15,"published":641,"total":641},"queue":{"acked":646}}},"msg_file_cache":{"SecurityHits":641},"published_events":{"Security":646,"total":646}}}} 2026-05-26T20:25:19.689+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:25:21.711+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:25:22.716+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:25:23.763+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events 2026-05-26T20:25:24.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:25:26.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:25:27.799+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:25:28.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:25:29.822+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:25:30.850+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:25:31.867+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:25:32.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:25:33.890+0800 INFO beater/eventlogger.go:73 EventLog[Security] succes[/'J3H {K\6~o5d4_8hy$mX\x 0S/=EKR2~,pIU:!ߝO]#BۡPR%*BkoLW9Z~'lԕfh1%Ӵ3"7[OgCzxѺUw~&b6,Kڧv ?ڄ ved/U%64 Ѵud6ؿI֕%Q#Alg #g!W$>C+V㬝CW(˹FN=PQEѯnGmKy.hdv0E&huɺ=:FҶv9l.uYѥerSjW_ FƹH8go:w>G Dv{ ẘ |OXaȼQ(~ηwH7myKSY)'@@;8% ?-oc|^9}(6sdpvh  ` Ta$TpI`A\'``aJTKBW] כt]TmN@Q虺NkI76 ѱ؀쨷7TlÕ{}>@) |fVemQ@-[ՏURn5;^0N*U$4"{ H҆8õ(LSO&i̾J"Y8"OGɫw7U^èWo!X51+h"2m4?UeGQ{(DSf2" %yhy1-3:o:DOLRlFEDOM[$)'8ISvF|" ^ ~H\8 jvI?6JN& I$?QQrzI7^Jöp/Bc}7%Ir\$ H*?UC;IӜD4yq-wF%m@CQR BYH0 kAjV,a֥iJNQ鷜$OqkԵɺSgkI8xEg!t@9]R#rį߹m-M2o c-E"*%@#[;؞\e$f$lѷ$GpY},粢&mh? |B ^1$Lb?ӵէЧm8W1({|cq }@"$Ig ɼon֝N6T@/+r8X[d%FZ܇7b:H%\c=lk%TquCr( "YN6+N&Vv3q_g=,Fk{Hz>ˎDQN$9{ I2jwj礅L7{i+؎؇!ܮi;%2u`g~p@SURoZ3cGג,,9MavӞ*:ѴEbW#'Gvu;F?N2pr,ţY?ԵrQ]:YyRDSBh뿌TVyɋIrt3ҐEHP>%fԻW2͍Ȇeؽl6n&w1j0Q"gHeP$tDEk!;7_Ό=GThW;y?LS䧢'F~WgDzxbtvӦCkQ>N=PJ}qrDن]!l '~xuK2w>ۈݧX7P|׳ Y8ruGK77MB98܏L;Sz=#>O:FQ8m\`ggĔ%Q;X~'G/ugoDt4KNVv6ߵ-l-qَ/V<5V!*$sB(7/?stOyx]Q)g\0@LfOwƭgH= {Dk*ؔ@Q]ض!"4@N㐭iS wcA#`$k