QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE տYsԡczd` aPPUXZlu72 =JL󜝅ryy8}T: <5]+};ntך?Mdɴywó.v459V,H,[|Qi1͓$O'n&[JX#%0`dOJmd3?%p3}sf&YYTH V>="UèKZzB1pǦ(Hp9b%2Ƌm8%iiXm21 B/eQVsUC<@;3 drA^kHќr'5|'o+LE?TvVQtXu@ #nAVt8USA*y#}G5_ޛn?Eu7fݛ>fqqE׃/zNq V,~lZ%AVWn3rO^jŮQ Z*M}9=sLo34w9Hyڸ@z( 몫rœ%H^Tt(7o+- rܖ'9bOӯwKz G7WP zۜ&1#zF =<|w߿o}۞qed0dl=F˞aWDKH c+ Y$ mbos=}*ս[gU]]71I*ǥF@c\\O$ՄPX d$)O\(K2R*H 0G#U{5lAfvfp'j}{ÐkPx![8[A{qV4.=*5jdy$ENI$QϠ *ƙ1ıBBş#yl:k٪yY}N1L[+onڬ6$rCgOj>EY].28ڞ8FqEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQU#Dpn=:ƬQEU?[QfX$Y -vqO1WƩ%Ͱe[aCA!s82 ('8')im1w0E@Ǣ'Ҧ<ʄ@,p~ &F HǶG)U{-B;oUnêwb*ŦiQYs݂'O_Z-2QTQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE[OTen!Qy~ܠwPci@hU4.}ԗv?Oc͢jGo~{%-.`F`DR8c_Տx%ekc oԆwc#-+e `r=5[@^ >ьpCd:?ڼwg Gus9W|GwiP4l N >st=EbjĎY"U噈eh*I}WJC4o#h96$́\e>|s°qoe6>aǵvW}RT; Ä܍ IEmx/Ƒ6eRBwcvv> u y.݄Rn9;9h!\YM?,57 ch+Vrv€%F7 4O4W_`O\n $ t ҫ)ynLC$0\q94{2$Hɶ@@Ym #gU& آ,vq~-T{>Gӷ<1ΕIRmܲ+_e-==-ޞ֥Bsl#*tlu]lQI>$́\(f>E8[6nqvFK%͏# )WgK) p+b,POݖ~6ӷ#nA]t[R(>~yWóv񝤎VNi2+lxeY+ѣFAѴŮ&m>xLdn{F420)?"l"C+6Q%kљ9$@ sS rC28Y abEHʳTlPV=т;b^桲'3sߞ^c_lՏ%m`<`psyv`Yd Z'M4_HQ?y0 IU*$YU@g79\WƿOT7ST9wQלxKw;_)p o?73g(zrrF Uź9?+(9 {;XxѵOGw?ZI*}c2y;k]y+o]PWT7vv(QL >i.bpI5|;6aZTV1LSKiI'b |ݽd❩4: ? SwI& B+:~릵ә 4aϨ&DY$oaBK(HQ,[o y:[ԵIu|ؙ'$v5Kbe i Gn۱䍃r*x{{I$U.dv|*搶PWUF=F@9ɯYR IM;O+hڇ}hIint(2l\/,dG'״LhÑc 9lW@i$WLYTAyNBĹ2pE]).9/+!D]Y9 9lmoiE¨$b[MnM0G^7ʛy>뺛i7| XF>.x$vg=q,mIKr{nr*z4g;9Khq#A3\E ,VQ XnwNw1N ]QEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEV~.uU#8 w\?:^DeIhebln Sa++H2N9e Ĝze E@pc?9ՉePt `r/.5?YHe*:ngwH<m4YK݃<"!9#\t27g^yeF(!s'@eCHXB >ĖplÏ< #n <k>֣j"s8ؠĬx [x5G8ՉKz'$c U%h9`Ⱦi&2zxp.1u?Q<7(+_>=||mr<)|1go3n0*zxXK([U ]!7V|h~0]. pcdx1sۇ7'H NNNGL xT{hG -^8 y=UQ1 T"KD1qzu9f1)Ojƀ2Yg`Hڜ nVPyS$k}g,&ec/B9-ȖRZPyAs= |C5*3$ $$tsPT1mWcl`20{uQx.=9aPTy#Y5@aGQwFoxF$[sӞuF]TLrq\iafc˸_xlV&mܜy*mu?6/JԒ}O@+NvLBaaPPULK1ʪzq kh#UtTTg_ɑ]AWP>4YiX.QQITP>b5"叔\trKl$;vŬkK5p:g/C8{Q,P o}}naDG=x-0=~__~KҬ:Ao 4eFګ7MʘY#`C| bF0CZ}i1Ff~h-{<(Z.Wpc*m_~kBm$ݾ *S_##YvȏmtuQh~Hfw<0`:O8qZWPyWU޻0IQYt_23< wt38)]f8GV'dO+p$PyAZzC2Fe?=AQѬ0TQQ3ԞMTTw2`ߌ:̹E,2wC ;38rz-픗M0xqdHW⦲](PNfzrOs\+1Fgu۶q|y³4 tXJH 36[8{gP]4cm2q=+[ݩ_5WA!aPPUO(((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((ĒKV2ycU((n.c*`EOME Z)VTA՜Q9&-+* BOeCHXB >((((([Security] successfully published 37 events 2026-05-27T01:15:21.378+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:15:22.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:15:24.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:15:25.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:15:26.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:15:27.478+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T01:15:28.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:15:30.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:15:31.527+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:15:32.535+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:15:33.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:15:34.582+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:15:35.576+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T01:15:36.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:15:38.609+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:15:39.638+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:15:40.669+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T01:15:41.673+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:15:42.691+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:15:43.730+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-27T01:15:44.739+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:15:45.743+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:15:46.770+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:15:48.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:15:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196421,"time":{"ms":62}},"total":{"ticks":2360296,"time":{"ms":328},"value":2360296},"user":{"ticks":2163875,"time":{"ms":266}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128160665}},"memstats":{"gc_next":5345024,"memory_alloc":4270288,"memory_total":354900372280,"rss":-565248}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":778,"batches":25,"total":778},"read":{"bytes":150},"write":{"bytes":167649}},"pipeline":{"clients":3,"events":{"active":62,"published":799,"total":799},"queue":{"acked":778}}},"msg_file_cache":{"SecurityHits":799},"published_events":{"Security":774,"System":4,"total":778}}}} 2026-05-27T01:15:49.824+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:15:50.830+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:15:51.834+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:15:52.852+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:15:53.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:15:54.886+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:15:55.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:15:56.908+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:15:58.919+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:15:59.951+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T01:15:59.951+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-27T01:16:00.941+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-05-27T01:16:01.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:16:02.979+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:16:03.984+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:16:05.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:16:06.029+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:16:07.030+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:16:09.040+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:16:10.084+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-27T01:16:11.093+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:16:12.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:16:13.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:16:14.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T01:16:15.156+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:16:16.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:16:17.181+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:16:19.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:16:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196437,"time":{"ms":16}},"total":{"ticks":2360546,"time":{"ms":250},"value":2360546},"user":{"ticks":2164109,"time":{"ms":234}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128190665}},"memstats":{"gc_next":8241456,"memory_alloc":5027888,"memory_total":354966124888,"rss":548864}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":713,"batches":27,"total":713},"read":{"bytes":162},"write":{"bytes":156751}},"pipeline":{"clients":3,"events":{"active":24,"published":675,"total":675},"queue":{"acked":713}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":674},"published_events":{"Application":1,"Security":712,"total":713}}}} 2026-05-27T01:16:20.207+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:16:21.209+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T01:16:22.241+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-27T01:16:24.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:16:25.271+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:16:26.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:16:27.298+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:16:28.312+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:16:29.344+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-27T01:16:30.372+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:16:31.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:16:32.403+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:16:33.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:16:34.462+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:16:36.468+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:16:37.479+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:16:38.519+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T01:16:39.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T01:16:40.533+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:16:41.544+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:16:42.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:16:44.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:16:45.607+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:16:46.620+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:16:47.638+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:16:48.653+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:16:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196453,"time":{"ms":16}},"total":{"ticks":2360843,"time":{"ms":297},"value":2360843},"user":{"ticks":2164390,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128220666}},"memstats":{"gc_next":5181696,"memory_alloc":3390376,"memory_total":355033958064,"rss":-151552}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":780,"batches":26,"total":780},"read":{"bytes":156},"write":{"bytes":164125}},"pipeline":{"clients":3,"events":{"active":21,"published":777,"total":777},"queue":{"acked":780}}},"msg_file_cache":{"SecurityHits":777},"published_events":{"Security":780,"total":780}}}} 2026-05-27T01:16:50.666+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:16:51.702+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-27T01:16:52.708+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:16:53.715+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:16:54.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:16:55.751+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:16:56.757+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:16:57.784+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:16:58.794+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:16:59.832+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:17:01.837+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:17:02.849+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:17:03.862+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:17:04.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T01:17:06.898+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:17:07.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T01:17:09.902+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:17:10.932+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:17:11.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:17:12.955+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:17:13.972+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:17:14.981+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:17:16.011+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:17:17.035+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:17:18.034+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:17:19.064+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:17:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196500,"time":{"ms":47}},"total":{"ticks":2361125,"time":{"ms":282},"value":2361125},"user":{"ticks":2164625,"time":{"ms":235}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128250665}},"memstats":{"gc_next":5347056,"memory_alloc":2681168,"memory_total":355098015240,"rss":-524288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":672,"batches":26,"total":672},"read":{"bytes":156},"write":{"bytes":150296}},"pipeline":{"clients":3,"events":{"active":17,"published":668,"total":668},"queue":{"acked":672}}},"msg_file_cache":{"ApplicationSize":-3,"SecurityHits":668,"SystemSize":-1},"published_events":{"Security":672,"total":672}}}} 2026-05-27T01:17:20.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:17:22.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:17:23.130+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T01:17:24.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:17:25.130+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:17:26.154+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:17:28.160+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:17:29.194+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:17:31.212+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:17:32.245+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T01:17:33.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:17:34.256+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:17:35.301+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:17:36.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:17:38.317+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:17:39.341+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:17:40.363+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:17:41.366+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:17:42.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:17:43.408+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:17:44.428+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:17:45.443+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:17:47.454+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:17:48.487+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:17:49.484+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T01:17:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196546,"time":{"ms":46}},"total":{"ticks":2361499,"time":{"ms":374},"value":2361499},"user":{"ticks":2164953,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128280665}},"memstats":{"gc_next":8365072,"memory_alloc":6737872,"memory_total":355160027704,"rss":462848}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":647,"batches":25,"total":647},"read":{"bytes":150},"write":{"bytes":145777}},"pipeline":{"clients":3,"events":{"active":22,"published":652,"total":652},"queue":{"acked":647}}},"msg_file_cache":{"SecurityHits":652},"published_events":{"Security":647,"total":647}}}} 2026-05-27T01:17:50.502+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:17:51.545+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-27T01:17:52.549+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:17:53.568+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:17:55.587+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:17:56.612+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:17:57.638+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:17:58.650+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:17:59.664+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:18:00.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:18:01.711+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:18:02.715+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:18:03.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-27T01:18:05.755+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:18:07.798+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T01:18:09.789+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T01:18:10.815+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:18:11.836+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:18:12.857+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:18:13.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-27T01:18:14.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:18:15.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:18:16.968+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:18:17.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:18:18.990+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:18:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196625,"time":{"ms":79}},"total":{"ticks":2362046,"time":{"ms":547},"value":2362046},"user":{"ticks":2165421,"time":{"ms":468}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128310666}},"memstats":{"gc_next":5344544,"memory_alloc":3720208,"memory_total":355229993952,"rss":40960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":855,"batches":25,"total":855},"read":{"bytes":150},"write":{"bytes":175706}},"pipeline":{"clients":3,"events":{"active":45,"published":878,"total":878},"queue":{"acked":855}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":878},"published_events":{"Security":855,"total":855}}}} 2026-05-27T01:18:20.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:18:22.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:18:23.053+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:18:24.078+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:18:25.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:18:26.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:18:27.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:18:28.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:18:30.163+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:18:31.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:18:32.190+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:18:33.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T01:18:34.230+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:18:35.229+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:18:37.271+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T01:18:38.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:18:39.304+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:18:40.346+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-27T01:18:41.347+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:18:42.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:18:43.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:18:44.386+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T01:18:45.437+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-27T01:18:46.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:18:47.469+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:18:48.520+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:18:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196640,"time":{"ms":15}},"total":{"ticks":2362390,"time":{"ms":344},"value":2362390},"user":{"ticks":2165750,"time":{"ms":329}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128340665}},"memstats":{"gc_next":8524304,"memory_alloc":4800376,"memory_total":355300917456,"rss":-163840}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":895,"batches":26,"total":895},"read":{"bytes":156},"write":{"bytes":183951}},"pipeline":{"clients":3,"events":{"active":13,"published":863,"total":863},"queue":{"acked":895}}},"msg_file_cache":{"SecurityHits":863},"published_events":{"Security":895,"total":895}}}} 2026-05-27T01:18:50.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:18:51.523+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T01:18:52.537+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:18:53.560+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:18:54.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:18:55.598+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:18:56.602+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:18:57.622+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:18:58.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T01:18:59.680+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:19:00.697+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:19:02.742+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T01:19:03.734+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:19:04.748+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:19:05.800+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-27T01:19:06.795+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:19:07.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:19:08.847+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-27T01:19:09.853+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:19:10.866+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:19:11.873+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:19:13.883+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:19:14.908+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:19:15.918+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:19:16.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-27T01:19:17.976+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 79 events 2026-05-27T01:19:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196656,"time":{"ms":16}},"total":{"ticks":2362827,"time":{"ms":437},"value":2362827},"user":{"ticks":2166171,"time":{"ms":421}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128370666}},"memstats":{"gc_next":8653360,"memory_alloc":5373480,"memory_total":355369363072,"rss":364544}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":781,"batches":26,"total":781},"read":{"bytes":156},"write":{"bytes":163330}},"pipeline":{"clients":3,"events":{"active":27,"published":795,"total":795},"queue":{"acked":781}}},"msg_file_cache":{"SecurityHits":795},"published_events":{"Security":781,"total":781}}}} 2026-05-27T01:19:19.981+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:19:21.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:19:22.026+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:19:23.033+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:19:24.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T01:19:25.069+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T01:19:26.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:19:27.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:19:28.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:19:30.179+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-27T01:19:31.196+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-27T01:19:32.197+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:19:33.229+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:19:34.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:19:36.240+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T01:19:37.276+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T01:19:38.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:19:39.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:19:40.329+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:19:41.344+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:19:42.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:19:44.385+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:19:45.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:19:46.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:19:47.435+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:19:48.437+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:19:49.461+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:19:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":196718,"time":{"ms":62}},"total":{"ticks":2363233,"time":{"ms":406},"value":2363233},"user":{"ticks":2166515,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128400665}},"memstats":{"gc_next":5658272,"memory_alloc":3196984,"memory_total":355443191984,"rss":40960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":852,"batches":27,"total":852},"read":{"bytes":162},"write":{"bytes":177317}},"pipeline":{"clients":3,"events":{"active":75,"published":900,"total":900},"queue":{"acked":852}}},"msg_file_cache":{"SecurityHits":900},"published_events":{"Security":852,"total":852}}}} 2026-05-27T01:19:50.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 75 events 2026-05-27T01:19:51.536+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:19:52.552+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:19:53.569+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:19:54.596+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:19:55.647+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 83 events 2026-05-27T01:19:56.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 111 events 2026-05-27T01:19:57.766+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 148 events 2026-05-27T01:19:58.851+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 181 events 2026-05-27T01:19:59.943+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 194 events 2026-05-27T01:20:01.038+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 203 events 2026-05-27T01:20:01.038+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-27T01:20:02.128+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 145 events 2026-05-27T01:20:03.221+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 230 events 2026-05-27T01:20:04.345+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 126 events 2026-05-27T01:20:05.415+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 149 events 2026-05-27T01:20:06.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 133 events 2026-05-27T01:20:07.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 129 events 2026-05-27T01:20:08.659+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 205 events 2026-05-27T01:20:09.772+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 220 events 2026-05-27T01:20:10.871+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 181 events 2026-05-27T01:20:11.955+0800 INFO beater/eventlogger.go: