events
2026-05-26T19:48:35.385+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:48:37.418+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:48:38.428+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:48:39.455+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:48:40.492+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T19:48:41.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:48:42.508+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:48:43.523+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:48:44.530+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:48:45.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:48:46.576+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:48:47.587+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:48:49.620+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T19:48:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172718,"time":{"ms":47}},"total":{"ticks":2114327,"time":{"ms":406},"value":2114327},"user":{"ticks":1941609,"time":{"ms":359}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108540666}},"memstats":{"gc_next":8432816,"memory_alloc":6366992,"memory_total":310286594896,"rss":-573440}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":899,"batches":27,"total":899},"read":{"bytes":162},"write":{"bytes":184738}},"pipeline":{"clients":3,"events":{"active":59,"published":910,"total":910},"queue":{"acked":899}}},"msg_file_cache":{"SecurityHits":910},"published_events":{"Security":899,"total":899}}}}
2026-05-26T19:48:50.652+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T19:48:51.653+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:48:52.658+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T19:48:53.692+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:48:54.712+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T19:48:56.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T19:48:57.774+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:48:58.791+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:48:59.817+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T19:49:00.824+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:49:01.859+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T19:49:02.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:49:03.885+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:49:04.892+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:49:06.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T19:49:07.927+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T19:49:08.936+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:49:09.976+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T19:49:11.009+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:49:12.022+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:49:13.027+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T19:49:15.043+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:49:16.057+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:49:17.073+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:49:18.090+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:49:19.119+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:49:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172718},"total":{"ticks":2114686,"time":{"ms":359},"value":2114686},"user":{"ticks":1941968,"time":{"ms":359}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108570665}},"memstats":{"gc_next":8377936,"memory_alloc":5024296,"memory_total":310354817704,"rss":335872}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":828,"batches":26,"total":828},"read":{"bytes":156},"write":{"bytes":174002}},"pipeline":{"clients":3,"events":{"active":22,"published":791,"total":791},"queue":{"acked":828}}},"msg_file_cache":{"SecurityHits":791},"published_events":{"Security":828,"total":828}}}}
2026-05-26T19:49:20.126+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:49:21.142+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:49:22.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T19:49:23.189+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T19:49:25.195+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T19:49:26.259+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T19:49:27.268+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:49:28.282+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:49:29.289+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:49:31.301+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:49:32.330+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:49:33.328+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:49:34.358+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:49:35.355+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:49:37.377+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:49:38.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T19:49:39.421+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:49:40.434+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:49:41.471+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T19:49:42.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T19:49:43.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:49:44.546+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:49:45.551+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:49:47.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T19:49:48.606+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:49:49.609+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:49:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172765,"time":{"ms":47}},"total":{"ticks":2115186,"time":{"ms":500},"value":2115186},"user":{"ticks":1942421,"time":{"ms":453}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108600665}},"memstats":{"gc_next":5204128,"memory_alloc":3848984,"memory_total":310424059624,"rss":24576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":797,"batches":26,"total":797},"read":{"bytes":156},"write":{"bytes":165572}},"pipeline":{"clients":3,"events":{"active":42,"published":817,"total":817},"queue":{"acked":797}}},"msg_file_cache":{"SecurityHits":817},"published_events":{"Security":797,"total":797}}}}
2026-05-26T19:49:50.638+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:49:51.649+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:49:52.653+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:49:53.676+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T19:49:54.688+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:49:56.710+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:49:57.730+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:49:59.752+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:50:00.768+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T19:50:00.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:50:01.782+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:50:02.797+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T19:50:02.797+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:50:03.825+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:50:04.829+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:50:05.850+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:50:07.899+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 71 events
2026-05-26T19:50:08.903+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:50:09.914+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:50:10.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T19:50:11.975+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:50:13.019+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T19:50:14.018+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:50:16.040+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:50:17.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T19:50:18.081+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:50:19.110+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:50:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172812,"time":{"ms":47}},"total":{"ticks":2115608,"time":{"ms":422},"value":2115608},"user":{"ticks":1942796,"time":{"ms":375}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108630665}},"memstats":{"gc_next":8334128,"memory_alloc":5222424,"memory_total":310492233608,"rss":20480}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":843,"batches":25,"total":843},"read":{"bytes":150},"write":{"bytes":177294}},"pipeline":{"clients":3,"events":{"active":28,"published":829,"total":829},"queue":{"acked":843}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":827,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":1,"Security":841,"System":1,"total":843}}}}
2026-05-26T19:50:20.124+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:50:21.122+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:50:23.154+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:50:24.158+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:50:25.171+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:50:26.190+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:50:27.221+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:50:28.241+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:50:29.260+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:50:31.274+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:50:32.296+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:50:33.326+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:50:34.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:50:35.333+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T19:50:36.369+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T19:50:37.371+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:50:38.395+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T19:50:39.426+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T19:50:40.439+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:50:41.463+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T19:50:42.472+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:50:43.515+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T19:50:44.519+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:50:45.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:50:47.551+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:50:48.601+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 75 events
2026-05-26T19:50:49.598+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T19:50:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172890,"time":{"ms":78}},"total":{"ticks":2116030,"time":{"ms":422},"value":2116030},"user":{"ticks":1943140,"time":{"ms":344}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108660665}},"memstats":{"gc_next":8620464,"memory_alloc":6927840,"memory_total":310564474296}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":868,"batches":27,"total":868},"read":{"bytes":162},"write":{"bytes":180487}},"pipeline":{"clients":3,"events":{"active":14,"published":854,"total":854},"queue":{"acked":868}}},"msg_file_cache":{"SecurityHits":854},"published_events":{"Security":868,"total":868}}}}
2026-05-26T19:50:50.608+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:50:52.646+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T19:50:53.649+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:50:54.657+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:50:55.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:50:56.686+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:50:58.719+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:50:59.735+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:51:00.747+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:51:01.774+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:51:02.775+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:51:03.791+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:51:04.808+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:51:06.814+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:51:07.836+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:51:08.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:51:09.872+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:51:10.893+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:51:11.922+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T19:51:13.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:51:14.968+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T19:51:15.961+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:51:16.995+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:51:17.993+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T19:51:19.008+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:51:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172921,"time":{"ms":31}},"total":{"ticks":2116483,"time":{"ms":453},"value":2116483},"user":{"ticks":1943562,"time":{"ms":422}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108690665}},"memstats":{"gc_next":5349504,"memory_alloc":3329104,"memory_total":310629144736,"rss":126976}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":705,"batches":25,"total":705},"read":{"bytes":150},"write":{"bytes":154538}},"pipeline":{"clients":3,"events":{"active":37,"published":728,"total":728},"queue":{"acked":705}}},"msg_file_cache":{"SecurityHits":728},"published_events":{"Security":705,"total":705}}}}
2026-05-26T19:51:20.032+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:51:21.043+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:51:22.054+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:51:24.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:51:25.100+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T19:51:26.095+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T19:51:27.116+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:51:28.113+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:51:29.151+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:51:30.174+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:51:32.168+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T19:51:33.204+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T19:51:34.214+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:51:36.229+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:51:37.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:51:38.243+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:51:39.274+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:51:40.267+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T19:51:41.288+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:51:43.303+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:51:44.314+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:51:45.361+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 72 events
2026-05-26T19:51:46.371+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:51:47.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:51:48.392+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:51:49.435+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-26T19:51:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172921},"total":{"ticks":2116796,"time":{"ms":313},"value":2116796},"user":{"ticks":1943875,"time":{"ms":313}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108720665}},"memstats":{"gc_next":7786416,"memory_alloc":4435408,"memory_total":310693910840,"rss":-561152}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":729,"batches":26,"total":729},"read":{"bytes":156},"write":{"bytes":157990}},"pipeline":{"clients":3,"events":{"active":3,"published":695,"total":695},"queue":{"acked":729}}},"msg_file_cache":{"SecurityHits":695},"published_events":{"Security":729,"total":729}}}}
2026-05-26T19:51:50.424+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:51:52.449+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:51:53.460+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:51:54.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T19:51:55.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:51:56.491+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:51:57.509+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:51:58.522+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:51:59.541+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:52:01.560+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:52:02.572+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:52:03.572+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T19:52:05.609+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:52:06.640+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:52:07.642+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T19:52:08.662+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:52:09.683+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:52:10.700+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:52:11.710+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:52:12.714+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:52:13.740+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:52:14.766+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:52:16.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:52:17.779+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:52:18.816+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T19:52:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172953,"time":{"ms":32}},"total":{"ticks":2117093,"time":{"ms":297},"value":2117093},"user":{"ticks":1944140,"time":{"ms":265}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108750665}},"memstats":{"gc_next":5817152,"memory_alloc":3189400,"memory_total":310755147256,"rss":495616}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":625,"batches":25,"total":625},"read":{"bytes":150},"write":{"bytes":138582}},"pipeline":{"clients":3,"events":{"active":13,"published":635,"total":635},"queue":{"acked":625}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":635,"SystemSize":-1},"published_events":{"Security":625,"total":625}}}}
2026-05-26T19:52:19.814+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:52:20.837+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:52:21.853+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:52:22.856+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:52:23.863+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:52:24.878+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:52:25.909+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:52:26.913+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:52:27.928+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:52:29.246+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T19:52:29.246+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T19:52:30.278+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 5 events
2026-05-26T19:52:30.278+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 96 events
2026-05-26T19:52:30.278+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T19:52:31.998+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:52:32.999+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:52:34.027+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T19:52:35.020+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-26T19:52:36.041+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:52:38.061+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:52:39.076+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:52:40.090+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:52:41.105+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:52:42.112+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:52:43.123+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:52:44.123+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T19:52:47.182+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 77 events
2026-05-26T19:52:48.172+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:52:49.183+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:52:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172984,"time":{"ms":31}},"total":{"ticks":2117343,"time":{"ms":250},"value":2117343},"user":{"ticks":1944359,"time":{"ms":219}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108780665}},"memstats":{"gc_next":5308192,"memory_alloc":3442192,"memory_total":310819094264,"rss":225280}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":642,"batches":26,"total":642},"read":{"bytes":156},"write":{"bytes":145754}},"pipeline":{"clients":3,"events":{"active":38,"published":667,"total":667},"queue":{"acked":642}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":660,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":635,"System":1,"total":642}}}}
2026-05-26T19:52:50.209+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:52:51.228+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T19:52:53.227+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T19:52:54.260+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:52:55.266+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:52:57.305+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T19:52:58.298+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:52:59.329+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T19:53:00.335+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T19:53:01.349+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:53:02.391+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T19:53:04.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T19:53:05.398+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T19:53:07.420+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:53:08.420+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:53:09.449+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:53:10.464+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:53:11.482+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:53:12.502+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:53:13.515+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:53:15.546+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:53:16.555+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:53:17.588+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:53:18.602+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:53:19.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:53:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173046,"time":{"ms":62}},"total":{"ticks":2117702,"time":{"ms":359},"value":2117702},"user":{"ticks":1944656,"time":{"ms":297}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108810665}},"memstats":{"gc_next":5650432,"memory_alloc":3705808,"memory_total":310883409568,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":732,"batches":25,"total":732},"read":{"bytes":150},"write":{"bytes":157143}},"pipeline":{"clients":3,"events":{"active":29,"published":723,"total":723},"queue":{"acked":732}}},"msg_file_cache":{"SecurityHits":723},"published_events":{"Security":732,"total":732}}}}
2026-05-26T19:53:20.645+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:53:21.670+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T19:53:22.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:53:23.711+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:53:24.732+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:53:25.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:53:27.764+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:53:28.777+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:53:29.778+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:53:30.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:53:31.826+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T19:53:33.838+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:53:34.853+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:53:35.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:53:36.888+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:53:38.917+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:53:39.928+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:53:40.940+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:53:41.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:53:42.974+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T19:53:44.001+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T19:53:45.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:53:47.014+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:53:48.071+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T19:53:49.067+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:53:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173078,"time":{"ms":32}},"total":{"ticks":2117999,"time":{"ms":297},"value":2117999},"user":{"ticks":1944921,"time":{"ms":265}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108840665}},"memstats":{"gc_next":5264176,"memory_alloc":2662144,"memory_total":310948578520}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":760,"batches":25,"total":760},"read":{"bytes":150},"write":{"bytes":158272}},"pipeline":{"clients":3,"events":{"active":13,"published":744,"total":744},"queue":{"acked":760}}},"msg_file_cache":{"SecurityHits":744},"published_events":{"Security":760,"total":760}}}}
2026-05-26T19:53:50.070+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:53:51.114+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T19:53:52.134+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:53:54.152+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:53:55.151+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T19:53:56.173+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:53:57.192+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:53:58.202+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:53:59.211+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T19:54:00.242+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:54:01.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:54:02.258+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:54:04.306+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T19:54:05.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:54:06.313+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:54:07.332+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:54:08.362+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:54:09.375+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:54:10.381+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:54:11.400+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:54:13.449+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T19:54:14.450+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:54:15.455+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T19:54:16.492+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T19:54:17.504+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:54:19.523+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:54:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173109,"time":{"ms":31}},"total":{"ticks":2118421,"time":{"ms":422},"value":2118421},"user":{"ticks":1945312,"time":{"ms":391}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108870666}},"memstats":{"gc_next":5315968,"memory_alloc":3391120,"memory_total":311015343536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":727,"batches":26,"total":727},"read":{"bytes":156},"write":{"bytes":156798}},"pipeline":{"clients":3,"events":{"active":35,"published":749,"total":749},"queue":{"acked":727}}},"msg_file_cache":{"SecurityHits":749},"published_events":{"Security":727,"total":727}}}}
2026-05-26T19:54:20.544+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:54:21.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:54:22.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T19:54:23.587+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T19:54:24.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:54:26.610+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:54:27.616+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T19:54:28.657+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T19:54:29.670+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:54:30.684+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 10 events
2026-05-26T19:54:30.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:54:31.702+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:54:31.702+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-26T19:54:32.725+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:54:33.735+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:54:34.750+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:54:35.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:54:37.781+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:54:38.817+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T19:54:39.825+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:54:40.847+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:54:41.877+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T19:54:42.888+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:54:43.905+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:54:44.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:54:46.936+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T19:54:47.963+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:54:48.991+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T19:54:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173125,"time":{"ms":16}},"total":{"ticks":2118781,"time":{"ms":360},"value":2118781},"user":{"ticks":1945656,"time":{"ms":344}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108900666}},"memstats":{"gc_next":8418768,"memory_alloc":5414312,"memory_total":311084943640}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":833,"batches":26,"total":833},"read":{"bytes":156},"write":{"bytes":175781}},"pipeline":{"clients":3,"events":{"active":32,"published":830,"total":830},"queue":{"acked":833}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":816,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":819,"System":4,"total":833}}}}
2026-05-26T19:54:50.015+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:54:51.048+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T19:54:53.050+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:54:54.080+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:54:55.093+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:54:56.102+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:54:57.112+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:54:58.124+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T19:54:59.147+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T19:55:00.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:55:01.184+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T19:55:03.191+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:55:04.202+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:55:05.232+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T19:55:06.250+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:55:07.263+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:55:08.270+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:55:09.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:55:10.316+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:55:12.338+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:55:13.338+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T19:55:14.395+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 82 events
2026-05-26T19:55:15.387+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T19:55:16.389+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T19:55:17.418+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:55:18.416+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T19:55:19.435+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T19:55:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173125},"total":{"ticks":2119031,"time":{"ms":250},"value":2119031},"user":{"ticks":1945906,"time":{"ms":250}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108930667}},"memstats":{"gc_next":5400336,"memory_alloc":2861144,"memory_total":311153855032,"rss":28672}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":766,"batches":27,"total":766},"read":{"bytes":162},"write":{"bytes":162513}},"pipeline":{"clients":3,"events":{"active":27,"published":761,"total":761},"queue":{"acked":766}}},"msg_file_cache":{"SecurityHits":761},"published_events":{"Security":766,"total":766}}}}
2026-05-26T19:55:20.452+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:55:21.490+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T19:55:23.500+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:55:24.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:55:25.527+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:55:27.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:55:28.548+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T19:55:29.559+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:55:30.597+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T19:55:31.597+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:55:33.623+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:55:34.679+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-26T19:55:35.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:55:36.696+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:55:38.709+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:55:39.732+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T19:55:40.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:55:41.750+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:55:42.791+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T19:55:43.790+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T19:55:44.812+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:55:46.846+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:55:47.864+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T19:55:48.872+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T19:55:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173171,"time":{"ms":46}},"total":{"ticks":2119483,"time":{"ms":452},"value":2119483},"user":{"ticks":1946312,"time":{"ms":406}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108960666}},"memstats":{"gc_next":5252736,"memory_alloc":2931000,"memory_total":311216955824}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":736,"batches":24,"total":736},"read":{"bytes":144},"write":{"bytes":156401}},"pipeline":{"clients":3,"events":{"active":23,"published":732,"total":732},"queue":{"acked":736}}},"msg_file_cache":{"SecurityHits":732},"published_events":{"Security":736,"total":736}}}}
2026-05-26T19:55:49.885+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T19:55:50.906+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:55:51.927+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T19:55:52.943+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T19:55:54.971+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:55:55.998+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T19:55:58.014+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:55:59.039+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T19:56:00.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:56:01.059+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T19:56:02.079+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:56:03.084+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T19:56:05.114+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T19:56:06.129+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:56:08.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T19:56:09.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T19:56:10.177+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T19:56:11.201+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T19:56:12.217+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:56:13.215+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T19:56:15.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T19:56:16.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:56:17.267+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:56:18.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T19:56:19.318+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T19:56:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":173203,"time":{"ms":32}},"total":{"ticks":2119890,"time":{"ms":407},"value":2119890},"user":{"ticks":1946687,"time":{"ms":375}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108990665}},"memstats":{"gc_next":8413552,"memory_alloc":6702568,"memory_total":311281154912}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":739,"batches":25,"total":739},"read":{"bytes":150},"write":{"bytes":156307}},"pipeline":{"clients":3,"events":{"active":0,"published":716,"total":716},"queue":{"acked":739}}},"msg_file_cache":{"SecurityHits":716},"published_events":{"Security":739,"total":739}}}}
2026-05-26T19:56:21.363+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T19:56:22.352+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T19:56:23.375+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:56:24.405+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T19:56:26.420+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T19:56:27.446+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:56:28.454+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:56:29.460+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:56:30.487+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T19:56:31.513+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T19:56:32.510+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T19:56:34.525+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T19:56:35.551+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T19:56:36.565+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T19:56:37.587+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T19:56:38.610+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T19:56:39.621+0800	INFO	beater/eventlogger.go:73	Even