j f! .CiBSq晿Fn)x}?j1w6l!iR} #Eh.";gfq EQtI$a_Ɨ)\~fw֟SE<^H?&1AOu-H]%p0P; T םѭosI wÙ:T`JpLЈ:Cq_}V;+~,ugyˊ1).:LbkH¡I'5!ٌ Z5'SFߔjy[q47H(Vkwą*7YZn! inRO=I)ѵ4׈{66ٕV s| U9AQ.^Rb A۫A']/k-yK [%2܂Ф"qIKHv_q SKAԠ49)qkһT3P7jO4q۰ %l[AMAZ5i?l#̮nG+e'ڇjRuz@'q@ 衤uJ.lYID{PGMV#GAis5nzc'ol:u=\.2e=$C xŒBgnۣUO|Wy3wz*Z 2g*G r{N#@HB5W3K% )E77PI<8iK6q !PAH Hv朻?~n|ےZ]I !59-qҼn^_biouԯ<ɔ]#"4X%ָ:pBB¾ܬΡ x~Llh&tkB$r \Jrߖ>C |'[/D8nGql!8,|.̑J [xVEA#Q9QbF8sCĪƾC>l浥\v^Bڵ/ȸ^-+Ϙ~<#;oO67/1U/[%{[hԚ#r=D;Gron%@TY|(ct߷ Ͻp\@'r۹8p=Nr~00r|_}3mMnIY&a': -V񳙕suN7K'ySO 3 %ѱ`pPE"xο1ìؼ:\cl8[9H 3]nj,JP0%~C8u_scc岖p+3<!Fn8l_XXmsV+Uf'_ ZJ@*CZM <45K/+{K+ї2f5 9$$#pcJ*(S^.dy"Ϙ6l<>>E/0Y? lr_IF1=X4eh'QB?wv#2^ײ$ "G7LYa(kЇw98]X j99R"(,-m\ܰZE us:ʢꚒxOm{e2^^#[#Z~~8q~x$^yv2S^.+gE݅S>:wE.nd-FQ+;!kB( bNfN\r&i1^rݤ-kCCO5Zr~c̦a7)Xn2C {}ikvw/$`KHv+D0llG9Yĩ |۬etn厭Z.'#cIcB57}+7([YĹJb![2_bYniݚdRi-n+譳u57tH0!l Hɸ B~Hܽ_:W \+&X %y ir>eűcdoy)#_5e//i*He j5Ʊ7`F Fm83^He*RO~sCnqἺqWxKq:AhYd,!OfPS0Di` stJHh)ȼt)j7__6q3Sr@>p{fmbyE5G]cn;je 1rj{3" 9C@sTyUSiPEjǵů ڈ[sH xZlS䋬\U4/o쯣a.>$L+ZI2q!)z~/I`vpԝJY-Ld"V@ hA[j7sٱ/|i=a{" e2O+f8mxeAGWxxvַ Q\5t׾}&9?Rʅl%ӆWaf/q^O>dx7>:3<<.k+f9XfEO[ΕF@" /t~ 29b+C~!BPYȏƿ>%;ߚ7'ds>Kq>zK;۫8m/"I쮢G]#r4+&<n҂PĀH88卑X+kǔ]_#_~I1zaDRtN?_ݕcurity] successfully published 16 events 2026-05-27T01:26:55.435+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-27T01:26:56.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:26:57.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:26:58.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T01:26:59.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:27:00.552+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-27T01:27:01.565+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:27:02.571+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:27:03.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:27:04.613+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T01:27:06.636+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:27:07.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:27:08.674+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:27:09.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:27:10.710+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:27:11.739+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:27:12.736+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:27:13.756+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:27:14.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:27:16.793+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:27:17.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:27:18.818+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:27:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197312,"time":{"ms":62}},"total":{"ticks":2369593,"time":{"ms":281},"value":2369593},"user":{"ticks":2172281,"time":{"ms":219}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128850665}},"memstats":{"gc_next":5545104,"memory_alloc":4166752,"memory_total":356554153408}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":805,"batches":26,"total":805},"read":{"bytes":156},"write":{"bytes":169323}},"pipeline":{"clients":3,"events":{"active":39,"published":818,"total":818},"queue":{"acked":805}}},"msg_file_cache":{"SecurityHits":818},"published_events":{"Security":805,"total":805}}}} 2026-05-27T01:27:19.842+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:27:20.896+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-27T01:27:21.893+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:27:22.907+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:27:23.932+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-27T01:27:24.935+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:27:26.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:27:27.989+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T01:27:28.987+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:27:29.997+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:27:31.032+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T01:27:32.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:27:33.057+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:27:34.079+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:27:35.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T01:27:36.113+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-27T01:27:38.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:27:39.134+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:27:40.185+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T01:27:41.201+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:27:42.215+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:27:43.225+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:27:44.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:27:45.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:27:46.295+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-27T01:27:47.295+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:27:49.311+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:27:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197343,"time":{"ms":31}},"total":{"ticks":2370046,"time":{"ms":453},"value":2370046},"user":{"ticks":2172703,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128880665}},"memstats":{"gc_next":5303168,"memory_alloc":3091560,"memory_total":356625125984}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":834,"batches":27,"total":834},"read":{"bytes":162},"write":{"bytes":172437}},"pipeline":{"clients":3,"events":{"active":31,"published":826,"total":826},"queue":{"acked":834}}},"msg_file_cache":{"SecurityHits":826},"published_events":{"Security":834,"total":834}}}} 2026-05-27T01:27:50.354+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:27:51.365+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:27:52.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:27:53.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:27:54.395+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:27:55.415+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:27:56.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:27:57.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T01:27:58.454+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:28:00.453+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:28:01.496+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-27T01:28:02.516+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:28:03.523+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:28:04.552+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:28:05.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:28:07.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:28:08.606+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:28:09.620+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:28:10.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:28:11.668+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T01:28:13.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:28:14.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:28:15.711+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:28:16.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:28:17.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:28:18.763+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:28:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197390,"time":{"ms":47}},"total":{"ticks":2370421,"time":{"ms":375},"value":2370421},"user":{"ticks":2173031,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128910665}},"memstats":{"gc_next":8289712,"memory_alloc":4701424,"memory_total":356691867248}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":759,"batches":26,"total":759},"read":{"bytes":156},"write":{"bytes":161310}},"pipeline":{"clients":3,"events":{"active":15,"published":743,"total":743},"queue":{"acked":759}}},"msg_file_cache":{"SecurityHits":743},"published_events":{"Security":759,"total":759}}}} 2026-05-27T01:28:19.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:28:20.799+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:28:21.820+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:28:22.828+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:28:23.850+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:28:25.871+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:28:26.875+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:28:27.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T01:28:28.906+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T01:28:29.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:28:30.945+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:28:31.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:28:32.996+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:28:35.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:28:36.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T01:28:37.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:28:38.069+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:28:39.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T01:28:40.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:28:41.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:28:42.135+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:28:44.160+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:28:45.171+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:28:46.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:28:47.217+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:28:48.259+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:28:49.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:28:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197515,"time":{"ms":125}},"total":{"ticks":2370968,"time":{"ms":547},"value":2370968},"user":{"ticks":2173453,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128940665}},"memstats":{"gc_next":5339488,"memory_alloc":3782680,"memory_total":356763825432}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":812,"batches":27,"total":812},"read":{"bytes":162},"write":{"bytes":170043}},"pipeline":{"clients":3,"events":{"active":49,"published":846,"total":846},"queue":{"acked":812}}},"msg_file_cache":{"SecurityHits":846},"published_events":{"Security":812,"total":812}}}} 2026-05-27T01:28:50.290+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:28:51.301+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:28:52.311+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:28:53.345+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:28:54.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:28:55.352+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:28:56.379+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:28:58.398+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:29:00.420+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:29:01.420+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:29:02.454+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:29:03.482+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T01:29:04.477+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:29:05.508+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:29:06.525+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:29:08.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:29:09.571+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:29:10.587+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:29:11.595+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:29:12.630+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:29:13.649+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:29:14.659+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:29:16.686+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:29:17.685+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:29:18.735+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events 2026-05-27T01:29:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197562,"time":{"ms":47}},"total":{"ticks":2371280,"time":{"ms":312},"value":2371280},"user":{"ticks":2173718,"time":{"ms":265}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":128970665}},"memstats":{"gc_next":8541616,"memory_alloc":5357648,"memory_total":356830544560,"rss":-327680}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":804,"batches":25,"total":804},"read":{"bytes":150},"write":{"bytes":168528}},"pipeline":{"clients":3,"events":{"active":31,"published":786,"total":786},"queue":{"acked":804}}},"msg_file_cache":{"ApplicationMisses":2,"ApplicationSize":2,"SecurityHits":784},"published_events":{"Security":804,"total":804}}}} 2026-05-27T01:29:19.744+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 2 events 2026-05-27T01:29:19.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:29:20.752+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-05-27T01:29:20.752+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T01:29:20.752+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:29:21.785+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:29:22.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-05-27T01:29:23.834+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:29:24.859+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:29:25.882+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T01:29:27.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:29:28.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:29:29.938+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:29:30.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:29:31.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-27T01:29:33.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T01:29:35.048+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:29:36.045+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:29:37.055+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:29:38.085+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:29:39.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:29:40.098+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T01:29:42.114+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:29:43.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:29:44.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:29:45.166+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:29:46.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T01:29:47.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T01:29:48.206+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:29:49.244+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T01:29:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197656,"time":{"ms":94}},"total":{"ticks":2371624,"time":{"ms":344},"value":2371624},"user":{"ticks":2173968,"time":{"ms":250}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":129000666}},"memstats":{"gc_next":8493744,"memory_alloc":5218736,"memory_total":356903074528}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":867,"batches":27,"total":867},"read":{"bytes":162},"write":{"bytes":184050}},"pipeline":{"clients":3,"events":{"active":25,"published":861,"total":861},"queue":{"acked":867}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":856,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":860,"System":1,"total":867}}}} 2026-05-27T01:29:50.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:29:51.275+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:29:52.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:29:53.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:29:54.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:29:55.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:29:56.335+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:29:57.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:29:58.389+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:29:59.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:30:01.394+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-27T01:30:01.394+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T01:30:02.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:30:03.439+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:30:04.462+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:30:05.478+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:30:06.499+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T01:30:07.512+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:30:08.535+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:30:09.564+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:30:11.591+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:30:12.595+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:30:13.646+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-27T01:30:14.651+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:30:15.676+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-05-27T01:30:16.689+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T01:30:17.700+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:30:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197687,"time":{"ms":31}},"total":{"ticks":2371968,"time":{"ms":344},"value":2371968},"user":{"ticks":2174281,"time":{"ms":313}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":129030665}},"memstats":{"gc_next":5445712,"memory_alloc":2954888,"memory_total":356972025128}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":795,"batches":26,"total":795},"read":{"bytes":156},"write":{"bytes":165316}},"pipeline":{"clients":3,"events":{"active":39,"published":809,"total":809},"queue":{"acked":795}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":808},"published_events":{"Application":1,"Security":794,"total":795}}}} 2026-05-27T01:30:19.725+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:30:20.766+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:30:21.761+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T01:30:22.787+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:30:23.797+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:30:24.808+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:30:25.830+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:30:27.844+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:30:28.849+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:30:29.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T01:30:30.894+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:30:31.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:30:32.936+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:30:33.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:30:34.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:30:36.020+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 70 events 2026-05-27T01:30:37.022+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:30:38.027+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:30:39.060+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:30:40.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T01:30:41.088+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T01:30:42.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:30:43.120+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:30:45.152+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:30:46.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:30:47.175+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:30:48.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:30:49.214+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:30:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197734,"time":{"ms":47}},"total":{"ticks":2372249,"time":{"ms":281},"value":2372249},"user":{"ticks":2174515,"time":{"ms":234}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":129060666}},"memstats":{"gc_next":8427824,"memory_alloc":5242512,"memory_total":357047055240}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":900,"batches":28,"total":900},"read":{"bytes":168},"write":{"bytes":187440}},"pipeline":{"clients":3,"events":{"active":29,"published":890,"total":890},"queue":{"acked":900}}},"msg_file_cache":{"SecurityHits":890},"published_events":{"Security":900,"total":900}}}} 2026-05-27T01:30:50.227+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:30:51.238+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T01:30:52.290+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 73 events 2026-05-27T01:30:53.287+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:30:54.325+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T01:30:56.337+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T01:30:57.368+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:30:58.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:30:59.398+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:31:00.420+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:31:01.439+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:31:02.447+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:31:03.460+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:31:04.498+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T01:31:05.515+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:31:07.528+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:31:08.544+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T01:31:09.543+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:31:10.576+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:31:12.598+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T01:31:13.597+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T01:31:14.625+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:31:15.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:31:16.677+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-27T01:31:17.678+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:31:19.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197765,"time":{"ms":31}},"total":{"ticks":2372593,"time":{"ms":344},"value":2372593},"user":{"ticks":2174828,"time":{"ms":313}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":129090666}},"memstats":{"gc_next":8208080,"memory_alloc":4142856,"memory_total":357114748552}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":783,"active":15,"batches":26,"total":798},"read":{"bytes":150},"write":{"bytes":167248}},"pipeline":{"clients":3,"events":{"active":15,"published":769,"total":769},"queue":{"acked":783}}},"msg_file_cache":{"ApplicationSize":-2,"SecurityHits":771},"published_events":{"Security":783,"total":783}}}} 2026-05-27T01:31:19.686+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T01:31:20.711+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:31:21.737+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 10 events 2026-05-27T01:31:21.737+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 4 events 2026-05-27T01:31:21.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T01:31:22.765+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T01:31:23.784+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:31:24.780+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T01:31:25.813+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T01:31:26.840+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T01:31:27.846+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:31:28.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:31:29.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:31:30.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:31:31.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T01:31:32.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:31:34.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:31:35.967+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:31:37.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 70 events 2026-05-27T01:31:38.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:31:39.031+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:31:40.060+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:31:41.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:31:42.086+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:31:43.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T01:31:44.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T01:31:45.143+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T01:31:46.184+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T01:31:48.182+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T01:31:49.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T01:31:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":197812,"time":{"ms":47}},"total":{"ticks":2373077,"time":{"ms":484},"value":2373077},"user":{"ticks":2175265,"time":{"ms":437}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":129120665}},"memstats":{"gc_next":8414320,"memory_alloc":5438288,"memory_total":357190448312}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":940,"active":-15,"batches":27,"total":925},"read":{"bytes":168},"write":{"bytes":194522}},"pipeline":{"clients":3,"events":{"active":33,"published":958,"total":958},"queue":{"acked":940}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"ApplicationSize":2,"SecurityHits":942,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":926,"System":4,"total":940}}}} 2026-05-27T01:31:50.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:31:51.230+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T01:31:52.294+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-05-27T01:31:53.296+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T01:31:54.311+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T01:31:55.329+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T01:31:57.350+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T01:31:58.371+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T01:31:59.389+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T01:32:00.395+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T01:32:01.424+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T01:32:02.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T01:32:03.458+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T01:32:04.481+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T01:32:05.491+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T01:32:06.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T01:32:07.533+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T01:32:08.556+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-0