א u:"nAYV#S@06sZ( ^"""_:  .w VBGX:I5Qzoay'jhZoHOVohމe="w"|71 베*^C n YΆESXy!B-t\g `xAxK>Ѩ#a\C?ty=-Qҵ5Sz=*fBr@&Z!@33ZՌb5Y*Ǟ ;3u?ҳ&b J;Ȃ?Kl3eGj, 7Ge_jzPEPb=#+o)LֹGCb;Go, N^^xIW;~aD qށuE(pt=JQSf=qQ3 qPEmH0Z.I$zcһj58`n>~P~bkk0⁖;0SSnYguSy9 WQW?t4Kɑ@:1GqSd Ěx(1=o[(aFhMfro<i<QE ((((LBϐ ޺{YrayvCXyހG0̀ž+j(j)8u7hz9x8`{f(RYH8,\t:"pw8ƻ(AZ5 .1IB:z@-faDgҴiFLUjA"9[OKa(z3T/tdf"u6-K gQiBǷ?cz00B9fx/2*cH4VqbyP8#ҷh(}NjJ!ؐ>SקJ h<k !@=2qZQETW7il7;ԵZcpP'##4J_F3OroX՛*F9?uUG3YOC @\8,g"r(y_Y$1\A*ಉc]͵G4W\ʿg+VUXu5^x X_#OVRBe޴EzPxݚݢdf{[P@@W-Ӝ}+L%7[:ϢT+n5EfvgEA5p̣EbxOA\A F$m+ҦIJa,87FTVGa8Van2m#8^#S#y8Ҁ:;xRV.OE@Q@5ėbI<iZIKvKk̤(83Zj1 Փ@5IF⫌W=~+QFp&]z}T5RAk[)I1o(*ZB\[MPvMJmbuПW=@ EPF[{3gjaUx,ƺǕnû_ך&9a:)mx""dZzM"DQ b/n8?Olx{N0kRu?CeN^յ`wCJ("kVOF@zW/բ1ΜjD@>&Ma|;oyZݤ%J*hMu9J^t2RgC^Px6,-Y~Bph(5.@Iܽzt?O晭cv֦UO9@}ßVE.]^Fz4 YdrXn< ܎CT'`մz`Vƛt;ԚG h~( gvߕsλպS+VUV@J>jKkڥj:ol">N3vdVElp>P?1@,u{Ւ%# [3·S]K#H{nM4HV'Sg3E&次JܤgjzfxSAd(,Wph1,8$?̾kы],˹<ַ+ce]wBY霒kkDQ*>c5 e7?m}27 b(5MJ?+L!k;7Hǫ*0F,VR}F1*C]sq>ّz1ஃ4Q((((((((((((((((((((~)~?J@T'}hR2Ơ>CMҏO}ʱ(((((((((((((((((((((((((((((+ Mۏ񮮹IWeqBR"7_fGS.ӅГhxt Ϙ@(_06ˏSoW/E?,/3C3@s#Y1t)at8y¯#m6@s: h2Dech2 p?lϥ\o ebB1gmEAPhƱ%%cP{EchW7DaG[4W) R,oݕ-?Tv}A 꺄^4}KS+)+չ_[B}x4̑9v7|v?Ơя}3cQ7nKr'ң+̲f("$0Xހ+>0rsV$0g>:+9+0*K8 5إ`w$ǥ`xR" 'ںk %@6k4Ei n@'M8 >_Tf4pD’x?]𵥵~bF&?l`0Š( Fؓ؊ӠQ@Fx1ΪWw/b1P|r@HҤ]oXlUE+ F3+tE s@ uAL`1UyʹnL,rJEt#v TW(Vg& l5C|RCCN-cbE3]s\tu >ȇ3zJ#WTYȶ=[WS…)(GggчW׹4_O}jϺ /#r@&m*7fPN꾕YNLg+^3c 9<&t Gi_gh8uuPX5hG`t~Vufbv#t>Oӭ>UK;6QOozm .>~rƶ袀 (eNeuPRgc\uu!#}M`Z5K ZPim5ŭ@o^g`T !==(fkN4}r=L >򞢳d!IP?wobuFv5jG +Ӟi/SUu/OU ܬps:`_?cTj{z,|7 XX=aXmXmko!d*|'(bv+Cڌoo V<=7yH@'@[]*޺-wo`lz( 1|}u[L𭼈S9xX6Lk 5b@Qt9 .=<+ǧt4QEQEQEQEUKI,Wsj=ST[% T43}?t)\}ZHOPumnr cSt.3f8)'9*MoCS %d_ @[f+EQʻ>0YHS89UtX5\ɱr`ϗt:ΖumҮAn-*ҥ JZ(NSVT3I%0ysr¨x%(՘2iUH6jmkDUYj=hoOnpq"bQ*.>֯PY᷺ǹ*ul?#Ŷ !Pe+^v.޿r^"'"&YufF[Z9kAxi&+SAPŒ '՞-VET<~uav? Q\߃bڲW򮒀 (9{Hkٕ0##8B0t䷽ƅvcwzálwKk'$#UQ]!G<Ԟ.lIFi(D\€9ZysN69l ޹AD$c]R #>(6"B vںYeOAɮsÖu,mюOa@ HܩI?֧rI9qw_Z$1?˷4kG}xV(;dkIΈ>sVQE`xAHas\*Mo_M(R:@#ɟxpGH\/\St]XUhP^do5=r\ֆ3ϭkQEzZןcB`V+]/8kwnQ?)ܽM7Wh!}2:z9oq۰ўKxT`PގӲ!]ۧojQnf9y@0, x`jtPcl|݁^I%4)WhuV._h{ y)َ{z~5iQ095b96ԧ矏l1iM wq@ϥido`IRA[oQʢz<n8{PwӏZ. g -P\埆wHʖttP$>mqqqO\d2pǩ?Ya%K\ k q=P[}6+lUAX2a砭[Ql qAQb+=t|1%|:Kc(g|FhnfdJZ͟`L71fG)F?™j9pJ(4P/uήl1?Ofy@xq6?C#HAҀ;? St2N3ֻ*(( r@}) VL]=uNublished 27 events 2026-05-26T20:29:22.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:29:23.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:29:24.163+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:29:25.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:29:26.189+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:29:27.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:29:28.216+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T20:29:29.241+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:29:31.256+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:29:32.262+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:29:34.285+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:29:36.315+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:29:37.325+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:29:38.340+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-05-26T20:29:40.350+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:29:41.370+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:29:43.273+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:29:43.273+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:29:44.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:29:45.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:29:46.463+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:29:47.462+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:29:48.480+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:29:49.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:29:49.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175625,"time":{"ms":79}},"total":{"ticks":2144953,"time":{"ms":392},"value":2144953},"user":{"ticks":1969328,"time":{"ms":313}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111000665}},"memstats":{"gc_next":8335088,"memory_alloc":4193456,"memory_total":315727139712,"rss":421888}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":656,"batches":24,"total":656},"read":{"bytes":144},"write":{"bytes":146107}},"pipeline":{"clients":3,"events":{"active":0,"published":656,"total":656},"queue":{"acked":656}}},"msg_file_cache":{"ApplicationHits":1,"SecurityHits":655},"published_events":{"Application":1,"Security":655,"total":656}}}} 2026-05-26T20:29:51.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:29:52.545+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:29:53.552+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:29:54.560+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:29:55.583+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:29:56.590+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:29:57.602+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:29:59.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:30:00.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:30:00.642+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:30:01.658+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:30:02.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:30:03.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:30:04.698+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:30:05.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-26T20:30:06.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:30:07.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:30:08.765+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:30:10.774+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:30:11.805+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:30:12.811+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:30:13.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:30:14.843+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:30:15.861+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:30:16.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:30:17.902+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T20:30:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175625},"total":{"ticks":2145203,"time":{"ms":250},"value":2145203},"user":{"ticks":1969578,"time":{"ms":250}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111030666}},"memstats":{"gc_next":8429616,"memory_alloc":4644768,"memory_total":315790023016,"rss":159744}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":672,"batches":25,"total":672},"read":{"bytes":150},"write":{"bytes":148390}},"pipeline":{"clients":3,"events":{"active":12,"published":684,"total":684},"queue":{"acked":672}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":683},"published_events":{"Application":1,"Security":671,"total":672}}}} 2026-05-26T20:30:19.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:30:20.903+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-26T20:30:21.929+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-26T20:30:22.954+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:30:23.961+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:30:24.985+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T20:30:26.010+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:30:27.007+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:30:28.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:30:29.046+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:30:31.076+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:30:32.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:30:33.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:30:34.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:30:35.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:30:36.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:30:37.177+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:30:39.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:30:40.201+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:30:41.225+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:30:42.234+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:30:43.265+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:30:44.274+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:30:45.290+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:30:46.313+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:30:47.336+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:30:48.367+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:30:49.373+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:30:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175671,"time":{"ms":46}},"total":{"ticks":2145764,"time":{"ms":561},"value":2145764},"user":{"ticks":1970093,"time":{"ms":515}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111060665}},"memstats":{"gc_next":5309088,"memory_alloc":3135448,"memory_total":315864362176,"rss":-57344}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":847,"batches":28,"total":847},"read":{"bytes":168},"write":{"bytes":177365}},"pipeline":{"clients":3,"events":{"active":34,"published":869,"total":869},"queue":{"acked":847}}},"msg_file_cache":{"SecurityHits":869},"published_events":{"Security":847,"total":847}}}} 2026-05-26T20:30:50.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:30:51.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:30:53.431+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:30:54.439+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:30:55.460+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:30:56.483+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:30:58.490+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:30:59.522+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:31:00.524+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:31:01.537+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:31:02.556+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:31:03.581+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:31:03.581+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:31:04.580+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:31:06.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:31:07.613+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:31:09.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:31:10.645+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:31:11.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:31:12.686+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:31:13.698+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:31:14.701+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:31:16.738+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T20:31:17.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:31:18.759+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:31:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175734,"time":{"ms":63}},"total":{"ticks":2146155,"time":{"ms":391},"value":2146155},"user":{"ticks":1970421,"time":{"ms":328}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111090665}},"memstats":{"gc_next":5405152,"memory_alloc":3294664,"memory_total":315925559320,"rss":45056}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":662,"batches":24,"total":662},"read":{"bytes":144},"write":{"bytes":146930}},"pipeline":{"clients":3,"events":{"active":49,"published":677,"total":677},"queue":{"acked":662}}},"msg_file_cache":{"ApplicationHits":1,"SecurityHits":676},"published_events":{"Application":1,"Security":661,"total":662}}}} 2026-05-26T20:31:19.802+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T20:31:20.798+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:31:21.830+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:31:23.839+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:31:24.851+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:31:25.866+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:31:26.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:31:27.894+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:31:28.915+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:31:29.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-26T20:31:31.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:31:32.990+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:31:34.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-26T20:31:35.027+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:31:37.036+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:31:39.063+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:31:40.081+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:31:42.099+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:31:43.099+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:31:45.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-26T20:31:46.142+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:31:47.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:31:48.190+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-26T20:31:49.186+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:31:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175796,"time":{"ms":62}},"total":{"ticks":2146499,"time":{"ms":344},"value":2146499},"user":{"ticks":1970703,"time":{"ms":282}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111120666}},"memstats":{"gc_next":5384144,"memory_alloc":2694008,"memory_total":315986167912,"rss":32768}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":684,"batches":24,"total":684},"read":{"bytes":144},"write":{"bytes":149188}},"pipeline":{"clients":3,"events":{"active":25,"published":660,"total":660},"queue":{"acked":684}}},"msg_file_cache":{"SecurityHits":660},"published_events":{"Security":684,"total":684}}}} 2026-05-26T20:31:50.205+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:31:51.235+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:31:53.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:31:54.271+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:31:55.280+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:31:56.318+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:31:58.341+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:31:59.350+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:32:00.389+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-26T20:32:01.387+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:32:02.394+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:32:03.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:32:05.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T20:32:06.457+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:32:07.455+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-26T20:32:09.477+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:32:10.504+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:32:11.513+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:32:13.540+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:32:14.544+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:32:15.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:32:16.597+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-26T20:32:18.594+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-26T20:32:19.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-26T20:32:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175812,"time":{"ms":16}},"total":{"ticks":2146890,"time":{"ms":391},"value":2146890},"user":{"ticks":1971078,"time":{"ms":375}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111150665}},"memstats":{"gc_next":8435216,"memory_alloc":5283952,"memory_total":316047917120,"rss":-172032}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":685,"batches":24,"total":685},"read":{"bytes":144},"write":{"bytes":148113}},"pipeline":{"clients":3,"events":{"active":29,"published":689,"total":689},"queue":{"acked":685}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":689},"published_events":{"Security":685,"total":685}}}} 2026-05-26T20:32:20.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-26T20:32:21.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:32:22.683+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:32:23.710+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-26T20:32:24.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-26T20:32:25.732+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:32:26.749+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:32:27.752+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:32:28.777+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:32:29.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:32:30.796+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:32:31.800+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:32:32.840+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:32:33.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:32:34.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:32:35.904+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-26T20:32:35.904+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:32:37.425+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:32:37.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:32:38.935+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:32:39.944+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:32:40.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-26T20:32:42.001+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-26T20:32:44.001+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:32:45.010+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:32:46.067+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-26T20:32:47.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:32:48.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:32:49.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-26T20:32:49.687+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175890,"time":{"ms":78}},"total":{"ticks":2147218,"time":{"ms":328},"value":2147218},"user":{"ticks":1971328,"time":{"ms":250}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111180666}},"memstats":{"gc_next":8345648,"memory_alloc":4963328,"memory_total":316115585896,"rss":225280}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":739,"batches":27,"total":739},"read":{"bytes":162},"write":{"bytes":160284}},"pipeline":{"clients":3,"events":{"active":21,"published":731,"total":731},"queue":{"acked":739}}},"msg_file_cache":{"ApplicationHits":1,"SecurityHits":729,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":1,"Security":737,"System":1,"total":739}}}} 2026-05-26T20:32:50.103+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:32:52.136+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:32:53.128+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-26T20:32:54.142+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:32:55.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:32:57.180+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:32:58.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T20:32:59.207+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-26T20:33:00.215+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-26T20:33:02.256+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:33:03.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:33:04.273+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:33:05.305+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:33:06.314+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-26T20:33:08.332+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:33:09.336+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:33:10.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:33:11.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:33:12.385+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:33:14.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:33:16.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:33:17.454+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:33:18.466+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-26T20:33:19.471+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-26T20:33:19.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175921,"time":{"ms":31}},"total":{"ticks":2147483,"time":{"ms":265},"value":2147483},"user":{"ticks":1971562,"time":{"ms":234}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111210666}},"memstats":{"gc_next":8141040,"memory_alloc":4087024,"memory_total":316173490192,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":605,"batches":24,"total":605},"read":{"bytes":144},"write":{"bytes":134942}},"pipeline":{"clients":3,"events":{"active":0,"published":584,"total":584},"queue":{"acked":605}}},"msg_file_cache":{"SecurityHits":584},"published_events":{"Security":605,"total":605}}}} 2026-05-26T20:33:21.504+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-26T20:33:22.515+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-26T20:33:23.537+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:33:25.535+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-26T20:33:26.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-26T20:33:27.595+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-26T20:33:28.597+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-26T20:33:29.603+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:33:30.628+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-26T20:33:31.640+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-26T20:33:33.659+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-26T20:33:34.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-26T20:33:35.696+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:33:36.724+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:33:37.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:33:39.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:33:40.770+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:33:41.779+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:33:42.819+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-26T20:33:43.815+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:33:45.833+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-26T20:33:46.856+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-26T20:33:46.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-26T20:33:47.874+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-26T20:33:48.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:33:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":175953,"time":{"ms":32}},"total":{"ticks":2147765,"time":{"ms":282},"value":2147765},"user":{"ticks":1971812,"time":{"ms":250}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":111240665}},"memstats":{"gc_next":8258864,"memory_alloc":4151920,"memory_total":316235788976,"rss":-573440}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":702,"batches":24,"total":702},"read":{"bytes":144},"write":{"bytes":153244}},"pipeline":{"clients":3,"events":{"active":0,"published":702,"total":702},"queue":{"acked":702}}},"msg_file_cache":{"ApplicationHits":1,"SecurityHits":701},"published_events":{"Application":1,"Security":701,"total":702}}}} 2026-05-26T20:33:50.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-26T20:33:51.925+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:33:52.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-26T20:33:53.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-26T20:33:54.984+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-26T20:33:55.997+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-26T20:33:58.011+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-26T20:33:59.044+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-26T20:34:00.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-26T20:34:01.052+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-26T20:34:02.088+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:34:04.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-26T20:34:05.130+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-26T20:34:06.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-26T20:34:07.175+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-26T20:34:08.196+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-26T20:34:09.197+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-26T20:34:11.202+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-26T20:34:12.236+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-26T20:34:13.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 event