887520,"memory_total":311345336040}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":708,"batches":24,"total":708},"read":{"bytes":144},"write":{"bytes":151293}},"pipeline":{"clients":3,"events":{"active":47,"published":755,"total":755},"queue":{"acked":708}}},"msg_file_cache":{"ApplicationSize":-3,"SecurityHits":755,"SystemSize":-1},"published_events":{"Security":708,"total":708}}}}
2026-05-26T19:56:49.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T19:56:50.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:56:51.809+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T19:56:52.826+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:56:54.843+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:56:55.874+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T19:56:56.875+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:56:58.879+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:56:59.908+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:57:00.918+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:57:01.949+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:57:02.965+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:57:03.975+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:57:04.978+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:57:05.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:57:08.007+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:57:09.032+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T19:57:10.056+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:57:11.060+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:57:12.115+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 79 events
2026-05-26T19:57:14.118+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:57:15.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T19:57:16.146+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:57:17.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T19:57:18.185+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:57:19.196+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T19:57:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173312,"time":{"ms":47}},"total":{"ticks":2120546,"time":{"ms":313},"value":2120546},"user":{"ticks":1947234,"time":{"ms":266}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109050665}},"memstats":{"gc_next":8185040,"memory_alloc":5018224,"memory_total":311413725992}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":813,"batches":26,"total":813},"read":{"bytes":156},"write":{"bytes":174457}},"pipeline":{"clients":3,"events":{"active":26,"published":792,"total":792},"queue":{"acked":813}}},"msg_file_cache":{"SecurityHits":792},"published_events":{"Security":81beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:01:12.999+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:01:14.019+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:01:15.031+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:01:16.064+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T20:01:17.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:01:18.098+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T20:01:19.108+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:01:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173703,"time":{"ms":16}},"total":{"ticks":2124218,"time":{"ms":406},"value":2124218},"user":{"ticks":1950515,"time":{"ms":390}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109290666}},"memstats":{"gc_next":8407888,"memory_alloc":7025368,"memory_total":311973650832}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":763,"batches":26,"total":763},"read":{"bytes":156},"write":{"bytes":160150}},"pipeline":{"clients":3,"events":{"active":11,"published":758,"total":758},"queue":{"acked":763}}},"msg_file_cache":{"SecurityHits":758},"published_events":{"Security":763,"total":763}}}}
2026-05-26T20:01:20.110+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:01:21.156+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T20:01:22.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T20:01:23.181+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:01:24.190+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:01:25.220+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T20:01:27.221+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:01:27.221+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T20:01:28.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T20:01:29.255+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T20:01:30.277+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:01:31.294+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:01:32.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:01:33.326+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:01:34.365+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:01:36.361+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:01:37.363+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T20:01:38.409+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 65 events
2026-05-26T20:01:39.406+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:01:40.435+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:01:41.462+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:01:43.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:01:44.499+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:01:45.512+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:01:47.547+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T20:01:48.559+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:01:49.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T20:01:49.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173718,"time":{"ms":15}},"total":{"ticks":2124561,"time":{"ms":343},"value":2124561},"user":{"ticks":1950843,"time":{"ms":328}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109320666}},"memstats":{"gc_next":8186448,"memory_alloc":5916176,"memory_total":312043390144}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":793,"batches":26,"total":793},"read":{"bytes":156},"write":{"bytes":168612}},"pipeline":{"clients":3,"events":{"active":51,"published":833,"total":833},"queue":{"acked":793}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":832},"published_events":{"Application":1,"Security":792,"total":793}}}}
2026-05-26T20:01:50.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T20:01:51.609+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:01:52.618+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:01:54.654+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:01:55.653+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:01:56.671+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:01:57.687+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:01:58.698+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:02:00.721+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:02:01.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:02:02.752+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:02:03.774+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:02:04.784+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:02:05.790+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T20:02:06.818+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:02:07.822+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:02:09.857+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:02:10.871+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:02:11.889+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T20:02:12.902+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T20:02:13.929+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:02:14.935+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:02:16.960+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:02:17.970+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:02:18.985+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T20:02:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173718},"total":{"ticks":2124983,"time":{"ms":422},"value":2124983},"user":{"ticks":1951265,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109350665}},"memstats":{"gc_next":5677984,"memory_alloc":4077280,"memory_total":312107783760,"rss":-720896}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":732,"batches":25,"total":732},"read":{"bytes":150},"write":{"bytes":154892}},"pipeline":{"clients":3,"events":{"active":42,"published":723,"total":723},"queue":{"acked":732}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":723},"published_events":{"Security":732,"total":732}}}}
2026-05-26T20:02:20.013+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:02:21.013+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:02:22.037+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:02:23.055+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:02:25.063+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:02:26.092+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T20:02:27.119+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:02:28.125+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:02:29.151+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:02:30.151+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:02:31.177+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:02:32.187+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:02:34.222+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:02:35.244+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:02:36.256+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T20:02:37.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T20:02:38.266+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T20:02:39.306+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T20:02:40.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:02:41.337+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T20:02:42.331+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T20:02:44.349+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T20:02:45.378+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T20:02:46.391+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:02:47.400+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:02:48.440+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-26T20:02:49.444+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:02:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173734,"time":{"ms":16}},"total":{"ticks":2125327,"time":{"ms":344},"value":2125327},"user":{"ticks":1951593,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109380665}},"memstats":{"gc_next":8506672,"memory_alloc":7119288,"memory_total":312176435424,"rss":442368}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":785,"batches":27,"total":785},"read":{"bytes":162},"write":{"bytes":168059}},"pipeline":{"clients":3,"events":{"active":14,"published":757,"total":757},"queue":{"acked":785}}},"msg_file_cache":{"SecurityHits":757,"SystemSize":-1},"published_events":{"Security":785,"total":785}}}}
2026-05-26T20:02:50.454+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T20:02:51.490+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T20:02:52.487+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T20:02:54.518+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T20:02:55.537+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T20:02:56.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:02:57.559+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:02:58.580+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:02:59.592+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:03:00.630+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T20:03:01.630+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:03:03.649+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:03:04.675+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:03:05.682+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:03:06.705+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:03:08.725+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:03:09.730+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:03:10.761+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:03:11.778+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T20:03:12.786+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:03:13.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:03:15.827+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:03:16.855+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:03:17.867+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:03:18.867+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T20:03:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173765,"time":{"ms":31}},"total":{"ticks":2125686,"time":{"ms":359},"value":2125686},"user":{"ticks":1951921,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109410665}},"memstats":{"gc_next":5313952,"memory_alloc":4766776,"memory_total":312243473440,"rss":110592}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":731,"batches":25,"total":731},"read":{"bytes":150},"write":{"bytes":155023}},"pipeline":{"clients":3,"events":{"active":76,"published":793,"total":793},"queue":{"acked":731}}},"msg_file_cache":{"SecurityHits":793},"published_events":{"Security":731,"total":731}}}}
2026-05-26T20:03:19.923+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 76 events
2026-05-26T20:03:20.926+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:03:21.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:03:23.952+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T20:03:24.958+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T20:03:25.976+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:03:26.989+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:03:28.004+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:03:29.021+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:03:30.021+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T20:03:31.039+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:03:32.070+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:03:33.067+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:03:35.100+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T20:03:36.122+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:03:37.143+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:03:38.162+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:03:39.191+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T20:03:40.218+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:03:41.237+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:03:42.257+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:03:43.264+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:03:45.298+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:03:46.316+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T20:03:47.320+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:03:49.345+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:03:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173796,"time":{"ms":31}},"total":{"ticks":2125983,"time":{"ms":297},"value":2125983},"user":{"ticks":1952187,"time":{"ms":266}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109440665}},"memstats":{"gc_next":8367472,"memory_alloc":4936880,"memory_total":312310537568,"rss":-270336}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":809,"batches":26,"total":809},"read":{"bytes":156},"write":{"bytes":170741}},"pipeline":{"clients":3,"events":{"active":20,"published":753,"total":753},"queue":{"acked":809}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":753},"published_events":{"Security":809,"total":809}}}}
2026-05-26T20:03:50.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:03:52.380+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:03:53.397+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T20:03:54.394+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T20:03:55.438+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:03:56.443+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:03:57.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:03:58.481+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:03:59.489+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:04:00.517+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:04:02.554+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:04:03.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:04:04.575+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:04:05.604+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:04:06.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:04:07.635+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:04:08.655+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:04:09.667+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T20:04:10.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T20:04:11.698+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:04:12.712+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:04:14.730+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:04:15.732+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:04:16.762+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T20:04:17.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T20:04:18.789+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:04:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173828,"time":{"ms":32}},"total":{"ticks":2126343,"time":{"ms":360},"value":2126343},"user":{"ticks":1952515,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109470665}},"memstats":{"gc_next":8469584,"memory_alloc":6142200,"memory_total":312375421696,"rss":-131072}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":710,"batches":26,"total":710},"read":{"bytes":156},"write":{"bytes":154188}},"pipeline":{"clients":3,"events":{"active":0,"published":690,"total":690},"queue":{"acked":710}}},"msg_file_cache":{"SecurityHits":690},"published_events":{"Security":710,"total":710}}}}
2026-05-26T20:04:20.818+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:04:21.855+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T20:04:22.849+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T20:04:23.874+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T20:04:24.880+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:04:26.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T20:04:28.921+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T20:04:29.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:04:30.955+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:04:31.962+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:04:32.968+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:04:34.001+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:04:34.994+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T20:04:37.028+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T20:04:38.049+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:04:39.059+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:04:40.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:04:41.092+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:04:42.123+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:04:43.139+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:04:44.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T20:04:45.154+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:04:47.181+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:04:48.186+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:04:49.214+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T20:04:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173859,"time":{"ms":31}},"total":{"ticks":2126655,"time":{"ms":312},"value":2126655},"user":{"ticks":1952796,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109500667}},"memstats":{"gc_next":8350544,"memory_alloc":5058352,"memory_total":312440332104}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":709,"batches":25,"total":709},"read":{"bytes":150},"write":{"bytes":153533}},"pipeline":{"clients":3,"events":{"active":25,"published":734,"total":734},"queue":{"acked":709}}},"msg_file_cache":{"SecurityHits":734},"published_events":{"Security":709,"total":709}}}}
2026-05-26T20:04:50.224+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:04:51.233+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:04:52.274+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T20:04:53.285+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:04:54.287+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T20:04:56.306+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T20:04:57.314+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:04:58.337+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:04:59.360+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:05:00.360+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:05:01.393+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:05:02.424+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T20:05:04.422+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T20:05:05.436+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:05:06.458+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:05:07.478+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T20:05:08.499+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:05:09.513+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T20:05:10.521+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:05:12.559+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T20:05:13.565+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:05:14.605+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T20:05:15.601+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:05:16.616+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:05:18.652+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:05:19.654+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:05:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173890,"time":{"ms":31}},"total":{"ticks":2127030,"time":{"ms":375},"value":2127030},"user":{"ticks":1953140,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109530666}},"memstats":{"gc_next":5606848,"memory_alloc":3490320,"memory_total":312508352712,"rss":-389120}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":781,"batches":26,"total":781},"read":{"bytes":156},"write":{"bytes":165045}},"pipeline":{"clients":3,"events":{"active":26,"published":782,"total":782},"queue":{"acked":781}}},"msg_file_cache":{"SecurityHits":782},"published_events":{"Security":781,"total":781}}}}
2026-05-26T20:05:20.673+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:05:21.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T20:05:22.727+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T20:05:23.729+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:05:25.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:05:26.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:05:27.799+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:05:28.805+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T20:05:30.839+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:05:32.838+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T20:05:33.862+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:05:34.890+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:05:35.892+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:05:36.898+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:05:37.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:05:38.946+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:05:40.969+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:05:41.979+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:05:43.007+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:05:44.030+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:05:45.031+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:05:47.046+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:05:48.075+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:05:49.096+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:05:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173906,"time":{"ms":16}},"total":{"ticks":2127531,"time":{"ms":501},"value":2127531},"user":{"ticks":1953625,"time":{"ms":485}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109560665}},"memstats":{"gc_next":8385904,"memory_alloc":7118408,"memory_total":312571355584,"rss":344064}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":745,"batches":24,"total":745},"read":{"bytes":144},"write":{"bytes":157133}},"pipeline":{"clients":3,"events":{"active":8,"published":727,"total":727},"queue":{"acked":745}}},"msg_file_cache":{"SecurityHits":727},"published_events":{"Security":745,"total":745}}}}
2026-05-26T20:05:50.099+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T20:05:51.132+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:05:52.140+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T20:05:53.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:05:54.181+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:05:56.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:05:57.196+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:05:59.219+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:06:00.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T20:06:01.255+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:06:02.262+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T20:06:03.311+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T20:06:04.315+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:06:05.325+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T20:06:06.356+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T20:06:08.367+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:06:09.431+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 86 events
2026-05-26T20:06:10.418+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T20:06:11.462+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T20:06:12.477+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:06:13.488+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:06:15.502+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:06:16.525+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:06:17.524+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T20:06:18.544+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T20:06:19.571+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:06:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173953,"time":{"ms":47}},"total":{"ticks":2127921,"time":{"ms":390},"value":2127921},"user":{"ticks":1953968,"time":{"ms":343}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109590666}},"memstats":{"gc_next":8379408,"memory_alloc":4214288,"memory_total":312639248312,"rss":90112}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":784,"batches":26,"total":784},"read":{"bytes":156},"write":{"bytes":166566}},"pipeline":{"clients":3,"events":{"active":0,"published":776,"total":776},"queue":{"acked":784}}},"msg_file_cache":{"SecurityHits":776},"published_events":{"Security":784,"total":784}}}}
2026-05-26T20:06:21.566+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T20:06:22.596+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:06:23.606+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:06:24.637+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:06:25.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:06:27.653+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:06:28.688+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T20:06:29.708+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:06:30.714+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T20:06:31.743+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:06:33.741+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T20:06:34.758+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T20:06:35.781+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T20:06:36.796+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:06:37.801+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T20:06:38.828+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:06:39.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T20:06:40.873+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T20:06:41.879+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:06:42.878+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-26T20:06:44.915+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:06:45.919+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:06:46.926+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T20:06:47.953+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T20:06:48.958+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:06:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173953},"total":{"ticks":2128171,"time":{"ms":250},"value":2128171},"user":{"ticks":1954218,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109620665}},"memstats":{"gc_next":5621984,"memory_alloc":3899920,"memory_total":312701994000,"rss":-962560}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":644,"batches":25,"total":644},"read":{"bytes":150},"write":{"bytes":143325}},"pipeline":{"clients":3,"events":{"active":33,"published":677,"total":677},"queue":{"acked":644}}},"msg_file_cache":{"SecurityHits":677},"published_events":{"Security":644,"total":644}}}}
2026-05-26T20:06:49.979+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:06:50.993+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T20:06:52.026+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:06:54.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T20:06:55.046+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:06:56.075+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T20:06:57.082+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T20:06:58.105+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:06:59.100+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T20:07:01.141+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T20:07:02.137+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T20:07:04.167+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:07:05.179+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T20:07:06.180+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T20:07:07.207+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T20:07:09.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T20:07:10.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:07:11.258+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T20:07:12.269+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:07:13.298+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:07:14.292+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-26T20:07:15.326+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T20:07:16.354+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T20:07:17.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T20:07:19.366+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T20:07:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173968,"time":{"ms":15}},"total":{"ticks":2128468,"time":{"ms":297},"value":2128468},"user":{"ticks":1954500,"time":{"ms":282}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109650665}},"memstats":{"gc_next":8191504,"memory_alloc":5130784,"memory_total":312765844296,"rss":413696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":708,"batches":25,"total":708},"read":{"bytes":150},"write":{"bytes":151960}},"pipeline":{"clients":3,"events":{"active":28,"published":703,"total":703},"queue":{"acked":708}}},"msg_file_cache":{"SecurityHits":703},"published_events":{"Security":708,"total":708}}}}
2026-05-26T20:07:20.385+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T20:07:21.408+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T20:07:22.410+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:07:23.432+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:07:24.430+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T20:07:25.473+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T20:07:26.486+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T20:07:27.492+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T20:07:28.511+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T20:07:29.527+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T20:07:31.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T20:07:32.553+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:07:33.582+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T20:07:34.596+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:07:35.622+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T20:07:36.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T20:07:37.656+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T20:07:39.689+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T20:07:40.685+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T20:07:41.737+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 71 events
2026-05-26T20:07:42.737+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T20:07:43.743+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T20:07:45.785+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T20:07:46.800+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T20:07:47.810+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T20:07:48.839+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T20:07:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173984,"time":{"ms":16}},"total":{"ticks":2128905,"time":{"ms":437},"value":2128905},"user":{"ticks":1954921,"time":{"ms":421}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":109680666}},"memstats":{"gc_next":5156848,"memory_alloc":2584904,"memory_total":312833589600,"rss":69632}},"libbeat":{"config":{",G��h��O��\���)���Q�x^�v��&�zWh��
I��m�Y>�/������w�,~%�
�ޜ��n�u�Ҵ���I��yH�l"c>��̯�v��Ev�+o�N|/gyxD�ql�{��Uo8`D�zz��5�����-o��𷎬�k����V�5��=5������ĝ�z��
>��Q�x{�_�jg��|9�W��c2����#S��Հ@0=+�)���U-��j��e�ݣ��^>�����
`�4����x)CF⽜�R]�K���w�g���x�I��>|7��K��,������G�4S���M��DiYjv̪�h�H�H
�h��b-6�+l��\��5��"�0ś�?�;m�=k���>.��b���?�:d:��M�Р����m ���+e�b��h���7��b�;1���v�Y��id��&�m�[�U�A;ƾQ���U��IQ$h�9>C^�a�*���TS|�+%e��M�eo������
�\/�����P������OY6��-��~������ه➅�ï�]ZY�[����e���:!��hè�rG<R6����ф����R�+��5��ݿ�<R.���;-\�i�
_N���ڔ�����G���`���$,��p"�t�_�3��>+������g�u��~iV����H�u��qoa{�j���6�8h^-�j�B�d��vm��4�
	]'p>b��
�rK��
:?��zs�)��eg���V~�U�487���9��u|J�Q������"8j��ݢ������9ok%��y��	�uղ��u����çO��a��O;��+�!|4��K�,ֺ��p�97\^y���8�S�ҿ����m_J
J��ȱ:��K��6��u�Lw��w�o�W��| Ҽ�K��(��4�-þA��A�យ�_�|ei��^^��v���W�ob����
���"m~X�����P�|Q��ɾ�K�գ�,�1����ӧH�6�<=*�-��c�
in?�ߠ�1�+[��oio2K.�C��>޿�����'%,,<�/qݿ?�~��
�[��+
6��@#6�c8�?Zo�,
L�8�O�uh�v$1����VƟ���2$�.�<x�^
��?����=:�u��-�N�-�Wɳ
��#���]t<���&�_�m�<"��e��F�u�iD�elH6�2<o���G��E�����%^M��
s�����n%���������I$Q(���(�kV��P���!f���̊"ƒ|�P�8�ZH�����C�W����/���(a�Ѽw��ϓ<3�V�_�n�
m�G�lЍ��W��W���č�������֥Eq*K���B�$��������N��;�����$�!���f����d��v��[i(�.�9��Y��X~-�(�.<a�-F��5��6��v�Y@Ӥ�����+$q�,J��$�ӿ�E}J�L����%��n�?��\����U!�����8(�:
�o�-���;�>�\�k��/5
����H���[>�uy��V4{sR>��/b���W��K�{w��}&1�^��T]Iٽ������?
,��ɖX'����##��}���l����#H����+�KO���$��u��P�$�Y#^xv���i�3�$2�ŧ^Kcf�5ޡ�����-A���Έ��T�胭z'�]/Z�'��hZV�w�^k���m��s�#X��F8T�do�|������o
>D������~=�~'�(.�qYv&�v��W,�I{��Բ����m��m�C���4C�i�e��tĎ�l%���gs�N�Fn%�w�VO����[�`Դ�"�έ$��dG�B��g5��~��Vt��wok��ւ_�v���Ff��*���"?v��l�Y�ֽ6��M�;�lg�充�h"ݴ�?v&�0�۠����p�2�迀���a��#�GǕ~���F'�i���O�����R~�~#�Z��>4��K����PI
|��/%�#�-�V�L<+(���n�9>X��Xq��y��=��~K�kQ�W�?��(�QLj�w�K�@h|A�$@
�"H��6���i��)a��;y$0�s��\���c �Y��~�-7�"��uiʼ��ku����3V��^\��������
��˹����CW�#����0C��������<���;�	'�>K�x�ğ5����`���;���mML1����Лx�����V�y�������?c?�����[�x��:W����6�x�<B�|�u8Y�6z��ܰI?���ɍ,�	Z2��N�.��o
�>�?��L�tK8��.�F��8�4����V]��s$�K#�>v���ns��1QISPpN=�~�]#��?�~�^9`p�}n��B��ƪ����W-
N1N�~���7j�Ow_�R�|��t��9˲7+��By>�+��c����5|���+�
�H�%�Ʃgo|M4k47)�6�YᲒ.N�c6�:����t�>Ns�D�<u����+:;��?h�>IO c�Xc�;s�W�x�/>�/�3���D�J��j�\-��ȳ��3�&���Я�r��ɶ�m/}��c�J�MGE������5}P�ү��n!���H���$pǛ�
�=���v�}�ZynйD�Y�N��e�Edb�dP�>
���)��}C��%s�*������mb#
��(�Im&�s1��4{W����xvr$����Uu6�`1� ���N=~��q_�نx<v"�N�U�����z4��{s���.�83&��N�'�u%Z���og:n��8�'������J����l�eώ�*�c��|C��W�_6?�iw�v\Έ�-���q���_��W�U�٭�g|j��`	Oܖ`0�������_�����Z�����j:m����BQg��"��c�1�Ŗ,��S3_�g�g����i\xǗ�K�G����~`7> �-���PG�4H�nq�#��_�p_�zq�1�Q�B)P�&���9z��N_捺�S���U����;�|�U�����L5ij�T���j=d�^�wOݛ������/����k�;/A�Γ{���\�B"��O�Ν䑼��%r��!}�̀�_��9�q|�_�mo�m��ia�=�Q��������:s��'�!�K�A�Q�AW&�Z�Kgx�c�|��o�5~Ǿ4n��D�5MD���R�m���X/��P��尖9�o(;e
�0�{�ͥ�+.�x���K�t��+�.6���T2$!dv��6�A'_�}|�GN*P�9N.RI��Zܭ�]u�n�7�_F���y�w��8�z�K��Q���+��{ܰ_�����~~՟�P��?�Tڿ��!)�o��Y���Zܤ:�k������
����!5����c1��g�_��3H����2�I�Gie�W��W��?{��j�ŝ�V��E���pl	����Ǫdb�i̭hcE����ȣr�����vm�o?{<~I�̱��z��Ք�߻�,Uݒ��?�N�n�\��[���2��)ʬ!^�����Q��~_-��Kx�V�IOL��¤�f;���|�G���G
O�c��ϥ}��*�ß?h��u�"�<l񶩪_��V��1��b./	��!2yQ3��B��࡟<
�4�Q�]�%͵��<�_��.�y�<���ϒ/��y,���ѧ���"�{����U�S����?O#��x��8�Ʒ噂�f�V�)Р�Iӄ}������º��)�-����~�|5��^Ѵ�x�ƺt�~V�mޙ��{k���;{[���y��M3G�;'ي{�Nn��X�!��l�|�Fd�E����UD\*��>���5�H5�����[X^���$_/�^�Do�dDX�F������Sh�%�S�~l�\�t��������wB����N��g+�k�++�;%k(���!<fͳ�׏3��:�h`����%)8S��m'��k����v��u]=�fA�Mg����(����c�a������hZ�~п�i�����H���pV7r"��q����$�� �i|�&�#
Dr��������ʢ�����^�;X�G�i������zW�Ɵ�-�����G��D���&m�[��U�|!�R}?��û�h&��|O��.D��V�H�e]�$NY��~�Em���w��s�ve<�e�ci~s�����E~β����G�s��)L�jq�q���8���|=���ź厉��+I��P��qV���DZK�;�H�0�(�!X���EJt���F��:r�i���~����qX��!�����V����Ss�9�R�"����;k�T���$�Qy�;XT
�s��t�	���e2�!�ǯ��8�+���
��C��X�ox��9Z#�i�3������-��2��&���N
}������h+���x����P\*�����~�&s�E��/�v����Vػ񏻆s��|�����$��v�|'�/���b�W4�����?���J��G�^��ܰG�;b�=K���M�1��ʹc=r;t�;T[��i��F܈`��M�A�z
Ӷ1Z"h\����G�N��1YM%�SovY<��:Q�ӊ�)�[y}�o�������Fd�>�`�������3��}h~$q�>�	0?0~�:zU�u+&��>R㪤9?�O�j�<]�i<���񑖷��V�ti{r�����=���TR�+H����;��� �3��F��;�v��c�qW��׍��%z��nx�<S[�T5��GI�y�DY6�#�`�ʬw'�ݿȯɟ�+�����_���G���̯0*Gb�W�ƙ��"��źI!�͈������~M��d-����b���#^x�C,Q�.���:ߧ�_9Ŀ�*���?��G���No_�c}���34�4��*��|�E�v�����ɐ;Z���2���O��N��[+)�]�]�V�tۡ�{��>�t��t�?xmӪ���+��.�8�6������ri���O�?�K(M�����<�v�`�-�OM�wsӥ~1�S����on����G���a�Ϊ�Y�
Y�o��)���}}�c_�u?��U�-��0~�ݍ6�{}����|��siz��+|^��V��x|���%�+,0%�3�(��E_��d�J���~����q
���D g�������qk�|q�y*�R�-��q��E�q�?�ѓ��
_�c𒫕է	^N�*�v�������D�~iO�YV6�y)�5����K�W�r�]�v��\�{O�U���N��q}��{���������|b�鸛�:Ѝ#N��[c^��Zw�
���,ĩq���ĺǰy����ϊ_~�7�+�s.�w��/
�og�]E4׭F�b�tr�J"ߖ��Ŵ-C�'��o�v�=?E���mV��n��?=ܐZY��ier^IX�!f$��8{�^!�+W�?%ge(����w�Iyr������/�p9&S�cyqY�<EH���E�>�}�Y���s_em~~�����N��u�:�Z�Eu����6�%ԱY�������1_������k���O��6��̲�����И��|=-Ħ��ٲ�d$�?�"�8�h~^k������M��[M7���5ҹ������,�!�I
Մl7}�1h�>u��Ю���������7wlf�xf�WT��/�e�!�U��F��<�1��-.ץ/���QJ�K�oO�t������`r�£�GA$�9I�|��F���K����|�x�\�l�cVk��{nW'�W+q�[UL�$���eW���5�S�����9�Ei�#֭�U�5��Lu�������DeP��*F������_ͧ�{����j�f|a�4�z�w�ی��?�U�f��i�q$pK(X�"��E��Ł=:�W�U�KK��RW����5��Et?3�_q~;
O.�)ԝ:8���f�?��|�i-aJR����?���+�i�q�2k~%�	������(����
=���R�j�3�5���m�b~�R�����y��l-��hU�D�Ѐ=�J�ⵯ
�ƾ�|!�(>٢��L�Ү�EF+،lH`�������è�B�h�ٗ�>*x�����5)������u]-&�ӵ
��O���]�x��3�1��7�Ie�.�U�V�x7/~q��iss_��o��}�Nɰ�=����K
��*��?=D��$�k��m��'�J��C�<85+�M��b����i�p<�rIyX�`����5���4>
�^��/��ƃ.�����4Ȩ��E5��<�Y@�%�m�Y�G�C�@��<{�!�|W�I��{k>�t�6�o�L���,ZA�yL����U�X+�� ��|-�xgG�+]'G����51��8�G�V�"]��Ͳ8��FH�ei��6!Wx�R�4��������X����3�نW[�rg�+ר�c�O��5w�֋�����]��K_�ROޅr���;��+�mO�Y!p9�8�=:����iu+tr:�O���U94K�X,GoA�����?�U�J�z#��{���'�Kywe��.@�8A�8�1�V�\А
������������\xM�;��w=�Iq��c��Ҫ?�u�M�M���fiO��s�~T��A�ip���R�eR7V?�{���:oZ�ToU��1 .1���{W
���$�wl��_��*��KY�K��iIG䟘#@�ʰ`�
Τ�?�Lv�㰨��I̭����
�����X�V��Mm4XC��<�=��oi�i�G�`�3��=�\�5��G����-��{��i<��x�e؞`{���=���ǧ�~�~��M��M[����#���Qe3
��޿�~ �`�)�8�	a��>�}��Vk��(Sj��Z�����9C��ٿ൭�K3���.��RF����q����������
��܌��f��\BeM.��ܛ�X$u	��⿚/�&��]��7S�h�e�O��m낸�5m�����ߗ���#D������Z�VM6�!+&�ZK7@������c�	�kh��1�s�?�%��q1�`2[Ꚓ�0#������"��|��3�w�川���s�����ֱܫ
�rV3���Sдu-9�����Uۯ���qQ�<��
_�>��W��c�v�����b]��!*����n9����s�+��#����z��)�]�n�Tك�'��NK=H{{Vn�nۅ�?�R6i�g���