37d","uptime":{"ms":88950667}},"memstats":{"gc_next":5221536,"memory_alloc":3169096,"memory_total":258303904464,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":819,"batches":26,"total":819},"read":{"bytes":156},"write":{"bytes":172262}},"pipeline":{"clients":3,"events":{"active":20,"published":796,"total":796},"queue":{"acked":819}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":796},"published_events":{"Security":819,"total":819}}}} 2026-05-26T14:22:19.811+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:22:20.831+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:22:21.859+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T14:22:22.879+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:22:23.887+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:22:24.925+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-26T14:22:25.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:22:27.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:22:28.976+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:22:29.994+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:22:31.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:22:32.027+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T14:22:33.038+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T14:22:34.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T14:22:35.080+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:22:36.089+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:22:38.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T14:22:39.137+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:22:40.134+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T14:22:41.181+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T14:22:42.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:22:43.205+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:22:44.211+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:22:45.227+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:22:46.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:22:47.265+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:22:48.262+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T14:22:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":143875,"time":{"ms":79}},"total":{"ticks":1767265,"time":{"ms":438},"value":1767265},"user":{"ticks":1623390,"time":{"ms":359}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":88980666}},"memstats":{"gc_next":8089840,"memory_alloc":6264096,"memory_total":258375476584,"rss":-221184}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":799,"batches":27,"total":799},"read":{"bytes":162},"write":{"bytes":168470}},"pipeline":{"clients":3,"events":{"active":61,"published":840,"total":840},"queue":{"acked":799}}},"msg_file_cache":{"SecurityHits":840},"published_events":{"Security":799,"total":799}}}} 2026-05-26T14:22:50.310+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T14:22:51.322+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:22:52.319+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T14:22:53.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:22:54.381+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T14:22:55.380+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T14:22:56.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:22:57.410+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:22:58.428+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:22:59.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:23:00.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:23:01.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:23:02.504+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T14:23:03.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:23:05.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T14:23:06.569+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-26T14:23:07.560+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:23:08.577+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:23:09.609+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T14:23:10.635+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:23:11.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:23:13.663+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T14:23:14.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:23:16.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:23:17.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:23:18.734+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:23:19.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":143906,"time":{"ms":31}},"total":{"ticks":1767656,"time":{"ms":391},"value":1767656},"user":{"ticks":1623750,"time":{"ms":360}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89010665}},"memstats":{"gc_next":8316432,"memory_alloc":4975328,"memory_total":258442654080,"rss":192512}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":797,"batches":26,"total":797},"read":{"bytes":156},"write":{"bytes":168188}},"pipeline":{"clients":3,"events":{"active":22,"published":758,"total":758},"queue":{"acked":797}}},"msg_file_cache":{"SecurityHits":758},"published_events":{"Security":797,"total":797}}}} 2026-05-26T14:23:19.745+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:23:20.755+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T14:23:21.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:23:22.793+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:23:24.806+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:23:25.837+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T14:23:26.861+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T14:23:27.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:23:28.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T14:23:29.903+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:23:30.931+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T14:23:31.964+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T14:23:32.960+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T14:23:33.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:23:36.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:23:37.008+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:23:38.038+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:23:39.043+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:23:40.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:23:40.070+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T14:23:42.083+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T14:23:43.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:23:44.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T14:23:45.115+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:23:46.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T14:23:48.157+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-26T14:23:49.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T14:23:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":143906},"total":{"ticks":1767874,"time":{"ms":218},"value":1767874},"user":{"ticks":1623968,"time":{"ms":218}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89040665}},"memstats":{"gc_next":8489360,"memory_alloc":6850904,"memory_total":258509185680,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":740,"batches":26,"total":740},"read":{"bytes":156},"write":{"bytes":158438}},"pipeline":{"clients":3,"events":{"active":26,"published":744,"total":744},"queue":{"acked":740}}},"msg_file_cache":{"SecurityHits":743,"SystemMisses":1,"SystemSize":1},"published_events":{"Security":739,"System":1,"total":740}}}} 2026-05-26T14:23:50.167+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:23:51.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T14:23:52.221+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T14:23:54.245+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:23:55.262+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:23:56.290+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:23:57.299+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T14:23:58.325+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:23:59.347+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:24:00.367+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:24:01.377+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T14:24:02.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:24:04.436+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T14:24:05.438+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T14:24:06.450+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T14:24:07.485+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:24:08.490+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:24:10.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:24:11.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T14:24:12.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:24:13.594+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-26T14:24:14.596+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:24:15.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:24:16.648+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:24:17.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:24:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":143906},"total":{"ticks":1768234,"time":{"ms":360},"value":1768234},"user":{"ticks":1624328,"time":{"ms":360}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89070667}},"memstats":{"gc_next":8413328,"memory_alloc":5465456,"memory_total":258579806216}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":831,"active":49,"batches":26,"total":880},"read":{"bytes":150},"write":{"bytes":171546}},"pipeline":{"clients":3,"events":{"active":49,"published":854,"total":854},"queue":{"acked":831}}},"msg_file_cache":{"SecurityHits":854},"published_events":{"Security":831,"total":831}}}} 2026-05-26T14:24:19.697+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T14:24:20.701+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:24:21.703+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T14:24:23.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T14:24:24.745+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:24:25.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:24:26.791+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T14:24:27.810+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:24:29.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:24:30.840+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:24:32.863+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:24:33.889+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T14:24:34.883+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T14:24:35.922+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T14:24:36.920+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:24:38.945+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:24:39.965+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:24:40.983+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:24:41.999+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:24:43.016+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:24:44.049+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T14:24:45.064+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:24:47.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:24:48.093+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:24:49.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events 2026-05-26T14:24:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":143984,"time":{"ms":78}},"total":{"ticks":1768562,"time":{"ms":328},"value":1768562},"user":{"ticks":1624578,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89100666}},"memstats":{"gc_next":8589808,"memory_alloc":5074336,"memory_total":258645200472,"rss":24576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":820,"active":-49,"batches":24,"total":771},"read":{"bytes":150},"write":{"bytes":174743}},"pipeline":{"clients":3,"events":{"active":21,"published":792,"total":792},"queue":{"acked":820}}},"msg_file_cache":{"SecurityHits":792},"published_events":{"Security":820,"total":820}}}} 2026-05-26T14:24:50.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:24:51.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:24:52.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:24:53.189+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:24:54.221+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:24:55.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:24:56.264+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:24:58.294+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T14:24:59.317+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T14:25:00.332+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:25:01.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:25:02.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:25:03.369+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T14:25:05.414+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T14:25:06.408+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T14:25:07.444+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:25:08.452+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:25:10.471+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:25:11.484+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:25:12.503+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:25:13.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:25:14.533+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:25:15.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T14:25:16.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:25:18.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:25:19.590+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:25:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144015,"time":{"ms":31}},"total":{"ticks":1768952,"time":{"ms":390},"value":1768952},"user":{"ticks":1624937,"time":{"ms":359}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89130665}},"memstats":{"gc_next":5683296,"memory_alloc":3984448,"memory_total":258713899624}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":790,"batches":26,"total":790},"read":{"bytes":156},"write":{"bytes":165584}},"pipeline":{"clients":3,"events":{"active":32,"published":801,"total":801},"queue":{"acked":790}}},"msg_file_cache":{"SecurityHits":801},"published_events":{"Security":790,"total":790}}}} 2026-05-26T14:25:20.609+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:25:21.633+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:25:22.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T14:25:24.660+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:25:25.683+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:25:26.683+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T14:25:27.717+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:25:28.717+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:25:29.763+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-05-26T14:25:30.771+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:25:31.772+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T14:25:32.815+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T14:25:33.821+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:25:35.836+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:25:36.862+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:25:37.865+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T14:25:38.871+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:25:39.920+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-26T14:25:40.923+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T14:25:41.946+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:25:42.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T14:25:43.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T14:25:45.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:25:46.025+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:25:48.028+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:25:49.033+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T14:25:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144046,"time":{"ms":31}},"total":{"ticks":1769405,"time":{"ms":453},"value":1769405},"user":{"ticks":1625359,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89160665}},"memstats":{"gc_next":8116176,"memory_alloc":6466704,"memory_total":258781946248,"rss":-409600}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":751,"batches":26,"total":751},"read":{"bytes":156},"write":{"bytes":161330}},"pipeline":{"clients":3,"events":{"active":67,"published":786,"total":786},"queue":{"acked":751}}},"msg_file_cache":{"SecurityHits":786,"SystemSize":-1},"published_events":{"Security":751,"total":751}}}} 2026-05-26T14:25:50.087+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-26T14:25:51.073+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T14:25:52.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:25:54.116+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:25:55.113+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T14:25:56.139+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:25:57.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T14:25:58.153+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:25:59.183+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:26:00.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:26:01.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:26:02.254+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T14:26:03.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T14:26:04.273+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:26:05.303+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T14:26:06.317+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:26:07.331+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:26:09.356+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T14:26:10.362+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T14:26:11.403+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T14:26:12.424+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:26:13.421+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T14:26:14.465+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T14:26:15.475+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:26:16.481+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:26:18.504+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:26:19.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:26:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144093,"time":{"ms":47}},"total":{"ticks":1769702,"time":{"ms":297},"value":1769702},"user":{"ticks":1625609,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89190665}},"memstats":{"gc_next":8291664,"memory_alloc":6852600,"memory_total":258850384680,"rss":376832}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":804,"batches":27,"total":804},"read":{"bytes":162},"write":{"bytes":172318}},"pipeline":{"clients":3,"events":{"active":17,"published":754,"total":754},"queue":{"acked":804}}},"msg_file_cache":{"SecurityHits":754},"published_events":{"Security":804,"total":804}}}} 2026-05-26T14:26:20.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:26:21.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T14:26:22.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:26:23.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:26:24.607+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T14:26:26.640+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T14:26:27.654+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:26:28.678+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T14:26:29.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:26:30.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:26:31.751+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T14:26:32.748+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T14:26:33.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T14:26:34.802+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:26:35.817+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T14:26:36.837+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:26:38.852+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:26:39.854+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T14:26:40.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T14:26:41.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:26:43.940+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T14:26:44.964+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T14:26:45.973+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:26:47.002+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:26:48.032+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:26:49.045+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:26:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144109,"time":{"ms":16}},"total":{"ticks":1770171,"time":{"ms":469},"value":1770171},"user":{"ticks":1626062,"time":{"ms":453}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89220665}},"memstats":{"gc_next":5671040,"memory_alloc":3538160,"memory_total":258922157384,"rss":-20480}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":877,"batches":26,"total":877},"read":{"bytes":156},"write":{"bytes":180111}},"pipeline":{"clients":3,"events":{"active":25,"published":885,"total":885},"queue":{"acked":877}}},"msg_file_cache":{"SecurityHits":885},"published_events":{"Security":877,"total":877}}}} 2026-05-26T14:26:50.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:26:51.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:26:52.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T14:26:53.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:26:54.154+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:26:55.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:26:56.196+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:26:57.218+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:26:58.219+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T14:27:00.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T14:27:01.279+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:27:02.300+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:27:03.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T14:27:04.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T14:27:05.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:27:07.390+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:27:08.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T14:27:09.423+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T14:27:10.458+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:27:11.460+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T14:27:12.495+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T14:27:13.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T14:27:14.519+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:27:15.538+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:27:16.575+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T14:27:17.591+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T14:27:18.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:27:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144156,"time":{"ms":47}},"total":{"ticks":1770671,"time":{"ms":500},"value":1770671},"user":{"ticks":1626515,"time":{"ms":453}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89250665}},"memstats":{"gc_next":8228752,"memory_alloc":5277008,"memory_total":258998121344,"rss":139264}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":951,"batches":27,"total":951},"read":{"bytes":162},"write":{"bytes":195109}},"pipeline":{"clients":3,"events":{"active":32,"published":958,"total":958},"queue":{"acked":951}}},"msg_file_cache":{"SecurityHits":958},"published_events":{"Security":951,"total":951}}}} 2026-05-26T14:27:20.623+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:27:22.645+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T14:27:24.665+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T14:27:25.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:27:26.690+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T14:27:27.717+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T14:27:28.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:27:29.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T14:27:30.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T14:27:32.819+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events 2026-05-26T14:27:33.823+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:27:34.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T14:27:35.852+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T14:27:36.867+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T14:27:37.886+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:27:38.897+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:27:39.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T14:27:40.929+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:27:41.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T14:27:42.954+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:27:44.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T14:27:45.986+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:27:47.016+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:27:48.049+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:27:49.067+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T14:27:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":144156},"total":{"ticks":1771015,"time":{"ms":344},"value":1771015},"user":{"ticks":1626859,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":89280665}},"memstats":{"gc_next":8278256,"memory_alloc":5010928,"memory_total":259064570632,"rss":196608}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":791,"batches":25,"total":791},"read":{"bytes":150},"write":{"bytes":167724}},"pipeline":{"clients":3,"events":{"active":24,"published":783,"total":783},"queue":{"acked":791}}},"msg_file_cache":{"SecurityHits":783},"published_events":{"Security":791,"total":791}}}} 2026-05-26T14:27:50.074+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T14:27:51.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:27:52.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T14:27:53.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T14:27:54.173+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T14:27:55.169+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T14:27:57.185+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:27:58.217+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T14:27:59.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T14:28:00.219+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T14:28:01.279+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-26T14:28:02.289+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:28:03.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T14:28:04.320+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T14:28:05.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T14:28:06.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:28:07.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T14:28:08.405+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T14:28:10.431+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T14:28:11.452+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T14:28:12.447+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T14:28:13.485+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T14:28:14.502+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T14:28:15.515+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T14:28:16.550+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T14:28:17.569+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26