bytes":150},"write":{"bytes":162186}},"pipeline":{"clients":3,"events":{"active":11,"published":799,"total":799},"queue":{"acked":788}}},"msg_file_cache":{"SecurityHits":799},"published_events":{"Security":788,"total":788}}}} 2026-05-26T19:39:20.587+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:39:21.619+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T19:39:22.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:39:23.650+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:39:24.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:39:25.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:39:26.702+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:39:27.726+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:39:28.734+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:39:29.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:39:30.771+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:39:31.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:39:32.806+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:39:33.827+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:39:34.834+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:39:36.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:39:37.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:39:38.895+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:39:39.914+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:39:40.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:39:41.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:39:42.980+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T19:39:44.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:39:46.001+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:39:47.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:39:48.036+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:39:49.068+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T19:39:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172031,"time":{"ms":63}},"total":{"ticks":2107359,"time":{"ms":360},"value":2107359},"user":{"ticks":1935328,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108000665}},"memstats":{"gc_next":8428688,"memory_alloc":5432976,"memory_total":309046355952,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":819,"batches":27,"total":819},"read":{"bytes":162},"write":{"bytes":173385}},"pipeline":{"clients":3,"events":{"active":33,"published":841,"total":841},"queue":{"acked":819}}},"msg_file_cache":{"SecurityHits":841},"published_events":{"Security":819,"total":819}}}} 2026-05-26T19:39:50.081+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:39:51.090+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:39:52.113+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:39:53.127+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:39:54.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:39:56.171+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:39:57.188+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:39:58.216+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:39:59.241+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:40:00.239+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:40:01.629+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T19:40:01.629+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T19:40:01.629+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T19:40:03.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:40:04.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T19:40:05.317+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:40:06.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:40:08.413+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 92 events 2026-05-26T19:40:09.416+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:40:10.435+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:40:12.489+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 105 events 2026-05-26T19:40:14.525+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T19:40:15.546+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:40:16.563+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-05-26T19:40:16.563+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:40:17.596+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T19:40:17.596+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:40:18.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 102 events 2026-05-26T19:40:19.658+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:40:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172062,"time":{"ms":31}},"total":{"ticks":2107749,"time":{"ms":390},"value":2107749},"user":{"ticks":1935687,"time":{"ms":359}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108030667}},"memstats":{"gc_next":8422576,"memory_alloc":5133136,"memory_total":309122324840,"rss":536576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1051,"batches":25,"total":1051},"read":{"bytes":150},"write":{"bytes":208477}},"pipeline":{"clients":3,"events":{"active":25,"published":1043,"total":1043},"queue":{"acked":1051}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":2,"ApplicationSize":2,"SecurityHits":1036,"SystemHits":2},"published_events":{"Application":5,"Security":1044,"System":2,"total":1051}}}} 2026-05-26T19:40:20.669+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:40:21.712+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events 2026-05-26T19:40:22.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:40:23.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:40:24.755+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:40:25.765+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:40:26.790+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:40:27.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T19:40:28.861+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T19:40:29.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:40:30.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T19:40:32.904+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T19:40:33.927+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:40:34.970+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T19:40:35.968+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:40:36.984+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:40:38.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:40:39.041+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T19:40:40.055+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:40:41.078+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:40:42.085+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:40:43.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T19:40:44.156+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T19:40:45.151+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:40:46.175+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:40:47.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:40:47.193+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 2 events 2026-05-26T19:40:49.026+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T19:40:49.026+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:40:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172093,"time":{"ms":31}},"total":{"ticks":2108343,"time":{"ms":594},"value":2108343},"user":{"ticks":1936250,"time":{"ms":563}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108060666}},"memstats":{"gc_next":5235552,"memory_alloc":3621240,"memory_total":309199534560}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":983,"batches":27,"total":983},"read":{"bytes":162},"write":{"bytes":197253}},"pipeline":{"clients":3,"events":{"active":38,"published":996,"total":996},"queue":{"acked":983}}},"msg_file_cache":{"ApplicationHits":2,"ApplicationSize":-3,"SecurityHits":993,"SystemHits":1},"published_events":{"Application":2,"Security":980,"System":1,"total":983}}}} 2026-05-26T19:40:50.246+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:40:51.257+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:40:52.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:40:53.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:40:55.326+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:40:56.318+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T19:40:57.371+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-26T19:40:58.373+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:40:59.413+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T19:41:00.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:41:01.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T19:41:02.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:41:04.449+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:41:05.465+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:41:06.476+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:41:08.498+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:41:09.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:41:10.537+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:41:11.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:41:12.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:41:13.608+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:41:14.638+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:41:15.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:41:16.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:41:17.688+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:41:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172125,"time":{"ms":32}},"total":{"ticks":2108734,"time":{"ms":391},"value":2108734},"user":{"ticks":1936609,"time":{"ms":359}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108090665}},"memstats":{"gc_next":8215888,"memory_alloc":5942184,"memory_total":309264331944,"rss":-536576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":727,"batches":25,"total":727},"read":{"bytes":150},"write":{"bytes":156581}},"pipeline":{"clients":3,"events":{"active":49,"published":738,"total":738},"queue":{"acked":727}}},"msg_file_cache":{"SecurityHits":738},"published_events":{"Security":727,"total":727}}}} 2026-05-26T19:41:19.719+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T19:41:20.729+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:41:21.734+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:41:22.760+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:41:23.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:41:24.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T19:41:25.798+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:41:26.793+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:41:28.839+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T19:41:29.841+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:41:30.851+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:41:31.876+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:41:33.872+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-05-26T19:41:35.906+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T19:41:36.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:41:37.939+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:41:38.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:41:39.967+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:41:41.004+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T19:41:42.002+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:41:43.017+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:41:44.056+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T19:41:46.066+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:41:47.074+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:41:48.104+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:41:49.106+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:41:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172140,"time":{"ms":15}},"total":{"ticks":2109061,"time":{"ms":327},"value":2109061},"user":{"ticks":1936921,"time":{"ms":312}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108120666}},"memstats":{"gc_next":5569856,"memory_alloc":2787752,"memory_total":309329089248,"rss":413696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":713,"batches":26,"total":713},"read":{"bytes":156},"write":{"bytes":155432}},"pipeline":{"clients":3,"events":{"active":26,"published":690,"total":690},"queue":{"acked":713}}},"msg_file_cache":{"SecurityHits":690},"published_events":{"Security":713,"total":713}}}} 2026-05-26T19:41:50.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:41:51.150+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:41:53.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:41:54.183+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:41:55.187+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:41:56.220+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:41:58.231+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:41:59.266+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:42:00.261+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:42:01.300+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T19:42:02.299+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:42:03.331+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:42:04.354+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:42:05.361+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:42:06.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T19:42:08.396+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:42:09.427+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:42:10.453+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:42:11.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:42:12.476+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:42:13.514+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T19:42:14.523+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:42:15.527+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:42:16.577+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T19:42:17.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:42:19.588+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:42:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172171,"time":{"ms":31}},"total":{"ticks":2109561,"time":{"ms":500},"value":2109561},"user":{"ticks":1937390,"time":{"ms":469}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108150665}},"memstats":{"gc_next":5334336,"memory_alloc":3718856,"memory_total":309397882008,"rss":32768}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":784,"batches":26,"total":784},"read":{"bytes":156},"write":{"bytes":163643}},"pipeline":{"clients":3,"events":{"active":44,"published":802,"total":802},"queue":{"acked":784}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":802},"published_events":{"Security":784,"total":784}}}} 2026-05-26T19:42:20.621+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:42:21.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:42:22.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:42:23.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:42:24.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:42:25.688+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:42:26.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:42:27.717+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:42:28.726+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:42:29.757+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:42:30.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:42:31.787+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:42:32.804+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:42:33.826+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:42:34.825+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T19:42:35.846+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:42:37.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:42:38.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:42:39.897+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:42:40.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:42:41.962+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T19:42:42.971+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:42:44.978+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:42:46.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-26T19:42:47.035+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:42:48.061+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:42:49.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:42:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172234,"time":{"ms":63}},"total":{"ticks":2109952,"time":{"ms":391},"value":2109952},"user":{"ticks":1937718,"time":{"ms":328}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108180666}},"memstats":{"gc_next":5726160,"memory_alloc":3875616,"memory_total":309468032800,"rss":16384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":811,"batches":27,"total":811},"read":{"bytes":162},"write":{"bytes":172545}},"pipeline":{"clients":3,"events":{"active":29,"published":796,"total":796},"queue":{"acked":811}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":796,"SystemSize":-1},"published_events":{"Security":811,"total":811}}}} 2026-05-26T19:42:50.096+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:42:51.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:42:52.127+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:42:53.137+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:42:54.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:42:55.173+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:42:57.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T19:42:58.208+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T19:42:59.214+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:43:01.237+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:43:02.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:43:03.259+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:43:04.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:43:06.303+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:43:07.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:43:08.338+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:43:09.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:43:10.366+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:43:11.386+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:43:12.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:43:14.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T19:43:15.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T19:43:16.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:43:17.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:43:18.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:43:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172296,"time":{"ms":62}},"total":{"ticks":2110296,"time":{"ms":344},"value":2110296},"user":{"ticks":1938000,"time":{"ms":282}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108210665}},"memstats":{"gc_next":8377968,"memory_alloc":7327872,"memory_total":309530327448}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":676,"batches":25,"total":676},"read":{"bytes":150},"write":{"bytes":146908}},"pipeline":{"clients":3,"events":{"active":13,"published":660,"total":660},"queue":{"acked":676}}},"msg_file_cache":{"SecurityHits":660},"published_events":{"Security":676,"total":676}}}} 2026-05-26T19:43:20.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:43:21.512+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:43:22.525+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:43:23.562+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T19:43:24.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:43:26.587+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:43:27.601+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:43:28.627+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:43:29.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:43:30.650+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:43:31.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:43:33.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:43:34.709+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:43:35.712+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:43:36.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:43:37.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:43:38.792+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T19:43:39.803+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:43:41.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:43:42.832+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:43:43.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:43:44.857+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:43:45.879+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:43:46.907+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T19:43:47.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:43:48.943+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:43:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172343,"time":{"ms":47}},"total":{"ticks":2110546,"time":{"ms":250},"value":2110546},"user":{"ticks":1938203,"time":{"ms":203}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108240665}},"memstats":{"gc_next":5375888,"memory_alloc":2758888,"memory_total":309598170120}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":771,"batches":26,"total":771},"read":{"bytes":156},"write":{"bytes":164495}},"pipeline":{"clients":3,"events":{"active":20,"published":778,"total":778},"queue":{"acked":771}}},"msg_file_cache":{"SecurityHits":778},"published_events":{"Security":771,"total":771}}}} 2026-05-26T19:43:49.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:43:50.970+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:43:51.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:43:52.998+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:43:54.007+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:43:55.035+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:43:56.051+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:43:57.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:43:58.077+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:43:59.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T19:44:01.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:44:02.134+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:44:03.169+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:44:04.200+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:44:05.204+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:44:06.222+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:44:07.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:44:08.267+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:44:09.289+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:44:11.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T19:44:12.314+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:44:13.316+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:44:14.342+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:44:16.367+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:44:17.367+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:44:18.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T19:44:19.443+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:44:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172406,"time":{"ms":63}},"total":{"ticks":2111046,"time":{"ms":500},"value":2111046},"user":{"ticks":1938640,"time":{"ms":437}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108270666}},"memstats":{"gc_next":8515536,"memory_alloc":7536832,"memory_total":309668563880,"rss":77824}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":825,"batches":27,"total":825},"read":{"bytes":162},"write":{"bytes":173277}},"pipeline":{"clients":3,"events":{"active":0,"published":805,"total":805},"queue":{"acked":825}}},"msg_file_cache":{"SecurityHits":805},"published_events":{"Security":825,"total":825}}}} 2026-05-26T19:44:21.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:44:22.474+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:44:23.498+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:44:24.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:44:26.519+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:44:27.530+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:44:28.564+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T19:44:28.564+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T19:44:29.585+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:44:30.594+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:44:31.616+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:44:32.625+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:44:33.654+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:44:34.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:44:36.694+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:44:37.714+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:44:38.743+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:44:39.763+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:44:40.794+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T19:44:41.794+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:44:43.825+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:44:44.841+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:44:45.846+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:44:46.875+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:44:47.872+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T19:44:48.906+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:44:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172421,"time":{"ms":15}},"total":{"ticks":2111436,"time":{"ms":390},"value":2111436},"user":{"ticks":1939015,"time":{"ms":375}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108300665}},"memstats":{"gc_next":5791168,"memory_alloc":4809288,"memory_total":309737478744,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":789,"batches":25,"total":789},"read":{"bytes":150},"write":{"bytes":164937}},"pipeline":{"clients":3,"events":{"active":56,"published":845,"total":845},"queue":{"acked":789}}},"msg_file_cache":{"SecurityHits":844,"SystemMisses":1,"SystemSize":1},"published_events":{"Security":788,"System":1,"total":789}}}} 2026-05-26T19:44:49.940+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T19:44:50.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:44:51.961+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:44:52.988+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:44:54.984+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T19:44:56.000+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:44:57.028+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:44:58.023+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T19:44:59.040+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:45:00.084+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-26T19:45:01.077+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T19:45:02.103+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:45:03.119+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:45:04.162+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events 2026-05-26T19:45:05.168+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:45:07.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:45:08.189+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T19:45:09.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:45:10.234+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:45:11.233+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:45:12.277+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events 2026-05-26T19:45:13.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T19:45:15.289+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:45:16.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:45:17.327+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:45:18.325+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T19:45:19.365+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:45:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172484,"time":{"ms":63}},"total":{"ticks":2111905,"time":{"ms":469},"value":2111905},"user":{"ticks":1939421,"time":{"ms":406}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108330665}},"memstats":{"gc_next":5865792,"memory_alloc":4219056,"memory_total":309806963216,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":805,"batches":27,"total":805},"read":{"bytes":162},"write":{"bytes":170443}},"pipeline":{"clients":3,"events":{"active":35,"published":784,"total":784},"queue":{"acked":805}}},"msg_file_cache":{"SecurityHits":784},"published_events":{"Security":805,"total":805}}}} 2026-05-26T19:45:20.380+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:45:21.396+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:45:22.409+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:45:24.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:45:25.461+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T19:45:26.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:45:27.481+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:45:28.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:45:29.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:45:30.547+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:45:32.567+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:45:33.582+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:45:34.592+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:45:35.617+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:45:36.640+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:45:37.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T19:45:38.695+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:45:40.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:45:41.749+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-26T19:45:42.745+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:45:43.761+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:45:44.786+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:45:45.822+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:45:46.821+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:45:47.871+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T19:45:48.879+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:45:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172546,"time":{"ms":62}},"total":{"ticks":2112249,"time":{"ms":344},"value":2112249},"user":{"ticks":1939703,"time":{"ms":282}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108360665}},"memstats":{"gc_next":5301696,"memory_alloc":2915408,"memory_total":309876268624}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":826,"batches":26,"total":826},"read":{"bytes":156},"write":{"bytes":170212}},"pipeline":{"clients":3,"events":{"active":30,"published":821,"total":821},"queue":{"acked":826}}},"msg_file_cache":{"SecurityHits":821},"published_events":{"Security":826,"total":826}}}} 2026-05-26T19:45:49.896+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:45:51.932+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T19:45:52.923+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T19:45:53.948+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:45:54.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:45:55.967+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T19:45:56.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:45:58.007+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:45:59.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:46:00.031+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:46:02.055+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:46:03.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T19:46:04.078+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:46:05.088+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:46:06.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:46:07.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:46:08.142+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:46:09.160+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:46:10.196+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-26T19:46:12.200+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:46:13.225+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:46:14.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T19:46:15.249+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:46:16.275+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:46:17.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:46:18.298+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:46:19.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:46:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172546},"total":{"ticks":2112546,"time":{"ms":297},"value":2112546},"user":{"ticks":1940000,"time":{"ms":297}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108390665}},"memstats":{"gc_next":8364592,"memory_alloc":4208560,"memory_total":309944790600,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":783,"batches":27,"total":783},"read":{"bytes":162},"write":{"bytes":167279}},"pipeline":{"clients":3,"events":{"active":0,"published":753,"total":753},"queue":{"acked":783}}},"msg_file_cache":{"SecurityHits":753},"published_events":{"Security":783,"total":783}}}} 2026-05-26T19:46:21.341+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:46:22.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-05-26T19:46:23.381+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T19:46:24.387+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:46:26.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:46:27.433+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T19:46:28.437+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:46:29.469+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:46:30.475+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:46:32.515+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:46:33.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T19:46:34.529+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:46:35.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:46:36.562+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:46:37.571+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T19:46:39.622+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events 2026-05-26T19:46:40.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T19:46:41.629+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T19:46:42.672+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T19:46:43.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:46:45.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:46:46.690+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T19:46:47.709+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:46:48.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:46:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172562,"time":{"ms":16}},"total":{"ticks":2112843,"time":{"ms":297},"value":2112843},"user":{"ticks":1940281,"time":{"ms":281}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108420665}},"memstats":{"gc_next":8473904,"memory_alloc":5062648,"memory_total":310008490320,"rss":-638976}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":728,"batches":24,"total":728},"read":{"bytes":144},"write":{"bytes":155128}},"pipeline":{"clients":3,"events":{"active":21,"published":749,"total":749},"queue":{"acked":728}}},"msg_file_cache":{"SecurityHits":749,"SystemSize":-1},"published_events":{"Security":728,"total":728}}}} 2026-05-26T19:46:49.748+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:46:50.772+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T19:46:51.823+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T19:46:52.831+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:46:53.833+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T19:46:54.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T19:46:56.865+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:46:57.879+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:46:58.905+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:46:59.921+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T19:47:00.946+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:47:01.945+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:47:03.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T19:47:04.984+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T19:47:05.981+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-05-26T19:47:07.025+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-26T19:47:08.039+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:47:10.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:47:11.069+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T19:47:12.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T19:47:13.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:47:14.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T19:47:15.142+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:47:16.139+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:47:18.170+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:47:19.188+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:47:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172593,"time":{"ms":31}},"total":{"ticks":2113186,"time":{"ms":343},"value":2113186},"user":{"ticks":1940593,"time":{"ms":312}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108450665}},"memstats":{"gc_next":5736160,"memory_alloc":3539984,"memory_total":310075329624}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":739,"batches":26,"total":739},"read":{"bytes":156},"write":{"bytes":158509}},"pipeline":{"clients":3,"events":{"active":28,"published":746,"total":746},"queue":{"acked":739}}},"msg_file_cache":{"SecurityHits":746},"published_events":{"Security":739,"total":739}}}} 2026-05-26T19:47:20.206+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:47:21.225+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T19:47:22.245+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:47:23.292+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T19:47:24.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:47:26.298+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T19:47:27.329+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T19:47:29.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:47:30.364+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:47:31.369+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T19:47:32.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:47:33.429+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-26T19:47:34.442+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T19:47:35.464+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:47:37.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T19:47:38.500+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:47:39.524+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T19:47:40.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:47:41.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:47:42.564+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:47:43.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:47:44.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T19:47:45.618+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:47:46.625+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T19:47:47.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:47:49.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:47:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":172625,"time":{"ms":32}},"total":{"ticks":2113468,"time":{"ms":282},"value":2113468},"user":{"ticks":1940843,"time":{"ms":250}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":108480665}},"memstats":{"gc_next":8413648,"memory_alloc":4341792,"memory_total":310144236416,"rss":180224}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":830,"batches":26,"total":830},"read":{"bytes":156},"write":{"bytes":174889}},"pipeline":{"clients":3,"events":{"active":3,"published":805,"total":805},"queue":{"acked":830}}},"msg_file_cache":{"SecurityHits":805},"published_events":{"Security":830,"total":830}}}} 2026-05-26T19:47:50.669+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:47:51.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T19:47:52.725+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T19:47:53.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T19:47:54.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T19:47:55.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-26T19:47:56.774+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:47:58.786+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T19:47:59.819+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T19:48:00.822+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T19:48:01.842+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T19:48:02.843+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T19:48:04.893+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events 2026-05-26T19:48:05.886+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T19:48:07.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T19:48:08.939+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-26T19:48:09.940+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T19:48:10.939+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T19:48:11.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T19:48:12.980+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:48:13.992+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T19:48:15.025+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T19:48:16.035+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T19:48:17.057+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T19:48:18.090+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T19:48:19.111+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T19:48:19.686+0800 INFO [monitoring] log/