fùøá#cÐóƒ]UÔÍoeFàM¡=·²¯ëYñèßmMz#‘Â²"Ê"È>qógqoºX•"å· K#êw2eA1+6 f_5Ûo<æŸ\ŽÕ¡wuŒ/,‡Š]'
£$ñYVºMÞ—x>Îêm_—†MÅ£!p'²ž2‡…ÇÉ×b`ì„!°v–€=²23ù­ E§êj°,ð0tq•aþ1ÔXªöI§Ä#RO,Ä·VgbÌÇ±'€ Š±@ÝLÖñ–TiþÚóÛ{*þµÍk:•ÚÜÚy‰DÊZ$–väÅ"m!aeççÃv¸WKu$‘FLi½¿…r©Ç'°Oã 'ƒV×LÝ ¸¸
ó»Ýbcly÷Óp_¾j(&o©h]>bW“Êt’Ê"DC·lf(·bü‡œõe`z;$¸ÑÛ<ÐÆ1ô/'óü*¦¹¡¦²ŠCåŒî†eûÈßÕOFSÃÀ: +”ø[ÿ  oûiÿ £^º[«e¼Œ£ ÿ qš6àç†B¬?:¥£øvÓAmÃª€@C$®ƒ''
ÎTsßüè—Ò4+mY53~¿òó:ù“uŽ=‰µ“ÌÈO“0õ
¸ê<13Üi–®ä³41³3’J.I4Ëÿ Øê2<’#•BK²I#Þ „eÁÇ9ãŽ•­@qónšÁ MÁæ¿‘U—oËåÞI37ÏÇ	‡œê®¦kxË*4„myí½•ZÏFûl‚kÑŽ‘.QAó›;‹}ÒÄ¨á-¸ ²YS¹£*á‰Y°2ù®Ûyä4úäv­jÄµÒnô»ÁöwSjü¼2n-€!=”ñ”<.>N¸t QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QE QEÿÙ                                                                                                                                                                                                                                                                                                  Q J 2 0 2 4 / 2 / 2 2 0 2 1 / 2 / 3 0 A ÛÉ à        4Çð¤  V©Þ°  üÄ@·®      m­   a k e I n v o iF úÀÿ/ÿÿ?* ¢ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ª ¬ ´ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ Ö ò            $0Rg4 5 0 r o o t r o o t S¬NnW„Åˆp™å]z	gP–lQøS  0 0 5 2 1 Q J 0 3 3 8 R 0 M C N A S - Q J 2 0 2 4 / 1 / 2 1 2 0 2 1 / 1 / 2 2 0 A ÑÉ à        Çð¤  ÐËÞ°  ¬Ä@·®      m­   a k e I n v o iF úÀÿ/ÿÿ?* ¢ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ ª ¬ ´ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ ¼ Ô ð            $0Rg4 5 0 r o o t r o ing]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195078,"time":{"ms":47}},"total":{"ticks":2347499,"time":{"ms":328},"value":2347499},"user":{"ticks":2152421,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127080665}},"memstats":{"gc_next":8407248,"memory_alloc":4228944,"memory_total":352480441696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":620,"batches":25,"total":620},"read":{"bytes":150},"write":{"bytes":138898}},"pipeline":{"clients":3,"events":{"active":0,"published":587,"total":587},"queue":{"acked":620}}},"msg_file_cache":{"SecurityHits":587},"published_events":{"Security":620,"total":620}}}}
2026-05-27T00:57:51.294+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T00:57:52.315+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T00:57:53.312+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-27T00:57:54.343+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T00:57:55.363+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T00:57:56.378+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T00:57:57.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T00:57:58.417+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T00:57:59.428+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T00:58:01.451+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T00:58:02.473+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T00:58:03.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T00:58:04.499+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T00:58:05.535+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-27T00:58:06.549+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T00:58:07.568+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T00:58:08.577+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T00:58:10.602+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T00:58:11.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-27T00:58:12.632+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T00:58:13.637+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T00:58:14.683+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-27T00:58:16.677+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-27T00:58:17.709+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T00:58:18.719+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T00:58:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195140,"time":{"ms":62}},"total":{"ticks":2347827,"time":{"ms":328},"value":2347827},"user":{"ticks":2152687,"time":{"ms":266}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127110665}},"memstats":{"gc_next":5401952,"memory_alloc":2757384,"memory_total":352546146496,"rss":-163840}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":732,"batches":25,"total":732},"read":{"bytes":150},"write":{"bytes":159076}},"pipeline":{"clients":3,"events":{"active":27,"published":759,"total":759},"queue":{"acked":732}}},"msg_file_cache":{"SecurityHits":759},"published_events":{"Security":732,"total":732}}}}
2026-05-27T00:58:19.739+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T00:58:20.759+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T00:58:21.776+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T00:58:22.773+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-27T00:58:23.800+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T00:58:24.808+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T00:58:25.824+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T00:58:26.843+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T00:58:27.860+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T00:58:29.871+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T00:58:30.893+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T00:58:31.922+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T00:58:32.924+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T00:58:33.940+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T00:58:35.966+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T00:58:36.980+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T00:58:37.983+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T00:58:39.004+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T00:58:41.032+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-27T00:58:42.032+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-27T00:58:43.066+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T00:58:45.062+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T00:58:46.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T00:58:47.120+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-27T00:58:48.137+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T00:58:49.137+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T00:58:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195203,"time":{"ms":63}},"total":{"ticks":2348093,"time":{"ms":266},"value":2348093},"user":{"ticks":2152890,"time":{"ms":203}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127140665}},"memstats":{"gc_next":5400608,"memory_alloc":2775416,"memory_total":352611062904,"rss":90112}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":697,"batches":26,"total":697},"read":{"bytes":156},"write":{"bytes":153761}},"pipeline":{"clients":3,"events":{"active":26,"published":696,"total":696},"queue":{"acked":697}}},"msg_file_cache":{"SecurityHits":696},"published_events":{"Security":697,"total":697}}}}
2026-05-27T00:58:50.160+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T00:58:51.180+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T00:58:53.196+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T00:58:55.196+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-27T00:58:56.230+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T00:58:57.234+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T00:58:58.245+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T00:59:00.277+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-27T00:59:01.288+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T00:59:02.290+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T00:59:03.323+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T00:59:04.341+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T00:59:05.353+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T00:59:06.391+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-27T00:59:07.400+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T00:59:08.418+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T00:59:09.442+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T00:59:10.440+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T00:59:11.487+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-27T00:59:12.490+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T00:59:13.491+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T00:59:14.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-27T00:59:15.517+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T00:59:16.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T00:59:16.540+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 4 events
2026-05-27T00:59:17.754+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-27T00:59:17.754+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T00:59:17.754+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 6 events
2026-05-27T00:59:19.573+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T00:59:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195234,"time":{"ms":31}},"total":{"ticks":2348405,"time":{"ms":312},"value":2348405},"user":{"ticks":2153171,"time":{"ms":281}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127170665}},"memstats":{"gc_next":8313392,"memory_alloc":4929632,"memory_total":352676307432,"rss":-1142784}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":717,"batches":26,"total":717},"read":{"bytes":156},"write":{"bytes":156779}},"pipeline":{"clients":3,"events":{"active":21,"published":712,"total":712},"queue":{"acked":717}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":698,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":703,"System":4,"total":717}}}}
2026-05-27T00:59:20.583+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T00:59:21.614+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T00:59:22.621+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-27T00:59:23.627+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T00:59:24.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-27T00:59:25.663+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T00:59:27.706+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-27T00:59:28.728+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-27T00:59:29.736+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T00:59:30.742+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T00:59:31.771+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T00:59:32.788+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T00:59:33.808+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T00:59:34.835+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-27T00:59:35.839+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T00:59:36.870+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T00:59:37.882+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T00:59:38.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T00:59:41.916+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T00:59:42.933+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T00:59:43.953+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T00:59:44.974+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T00:59:45.978+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T00:59:47.027+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-27T00:59:48.017+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-27T00:59:49.050+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T00:59:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195312,"time":{"ms":78}},"total":{"ticks":2348780,"time":{"ms":375},"value":2348780},"user":{"ticks":2153468,"time":{"ms":297}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127200666}},"memstats":{"gc_next":8427472,"memory_alloc":4239072,"memory_total":352746020224,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":851,"batches":26,"total":851},"read":{"bytes":156},"write":{"bytes":174993}},"pipeline":{"clients":3,"events":{"active":0,"published":830,"total":830},"queue":{"acked":851}}},"msg_file_cache":{"SecurityHits":830},"published_events":{"Security":851,"total":851}}}}
2026-05-27T00:59:51.073+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T00:59:52.068+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-27T00:59:53.110+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-27T00:59:54.122+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T00:59:55.124+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T00:59:56.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T00:59:57.187+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-27T00:59:58.176+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 1 events
2026-05-27T00:59:59.191+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:00:01.205+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-27T01:00:01.205+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:00:02.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T01:00:03.244+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T01:00:04.258+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:00:05.276+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:00:06.299+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:00:07.315+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:00:08.335+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:00:09.359+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:00:11.385+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:00:12.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-27T01:00:13.437+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 72 events
2026-05-27T01:00:14.430+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:00:15.436+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:00:16.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:00:17.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:00:19.522+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:00:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195343,"time":{"ms":31}},"total":{"ticks":2349171,"time":{"ms":391},"value":2349171},"user":{"ticks":2153828,"time":{"ms":360}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127230665}},"memstats":{"gc_next":5724928,"memory_alloc":3832208,"memory_total":352815596584}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":791,"batches":26,"total":791},"read":{"bytes":156},"write":{"bytes":162726}},"pipeline":{"clients":3,"events":{"active":34,"published":825,"total":825},"queue":{"acked":791}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":824},"published_events":{"Application":1,"Security":790,"total":791}}}}
2026-05-27T01:00:20.545+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:00:21.550+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:00:22.567+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:00:23.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:00:24.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:00:25.612+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:00:26.621+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:00:27.660+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:00:28.685+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-27T01:00:29.696+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:00:30.710+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:00:32.737+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:00:33.749+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:00:34.789+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-27T01:00:35.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:00:36.817+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:00:37.855+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-27T01:00:38.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T01:00:39.884+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:00:40.901+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:00:41.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:00:43.943+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:00:44.952+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T01:00:45.967+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:00:46.983+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:00:48.006+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:00:49.031+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:00:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195359,"time":{"ms":16}},"total":{"ticks":2349499,"time":{"ms":328},"value":2349499},"user":{"ticks":2154140,"time":{"ms":312}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127260665}},"memstats":{"gc_next":5772000,"memory_alloc":3448624,"memory_total":352887171936,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":850,"batches":27,"total":850},"read":{"bytes":162},"write":{"bytes":178668}},"pipeline":{"clients":3,"events":{"active":24,"published":840,"total":840},"queue":{"acked":850}}},"msg_file_cache":{"SecurityHits":840},"published_events":{"Security":850,"total":850}}}}
2026-05-27T01:00:50.045+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:00:51.081+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-27T01:00:52.082+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-27T01:00:53.099+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-27T01:00:55.137+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 58 events
2026-05-27T01:00:56.132+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T01:00:57.138+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-27T01:00:58.176+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T01:00:59.189+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:01:00.193+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:01:01.216+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:01:03.229+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:01:04.260+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-27T01:01:05.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T01:01:06.289+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:01:07.302+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:01:09.325+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:01:10.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-27T01:01:12.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:01:13.367+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:01:14.402+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T01:01:15.414+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:01:16.421+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:01:17.448+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:01:18.467+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:01:19.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-27T01:01:19.685+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195406,"time":{"ms":47}},"total":{"ticks":2349827,"time":{"ms":328},"value":2349827},"user":{"ticks":2154421,"time":{"ms":281}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127290665}},"memstats":{"gc_next":5260448,"memory_alloc":3359432,"memory_total":352954771112}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":764,"batches":26,"total":764},"read":{"bytes":156},"write":{"bytes":162481}},"pipeline":{"clients":3,"events":{"active":31,"published":771,"total":771},"queue":{"acked":764}}},"msg_file_cache":{"ApplicationSize":-3,"SecurityHits":771,"SystemSize":-1},"published_events":{"Security":764,"total":764}}}}
2026-05-27T01:01:20.495+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-27T01:01:22.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T01:01:23.558+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-27T01:01:24.560+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:01:25.565+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:01:26.591+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T01:01:27.597+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:01:28.599+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-27T01:01:30.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-27T01:01:31.643+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:01:32.673+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:01:33.676+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:01:35.719+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-27T01:01:36.725+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:01:37.752+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:01:38.749+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:01:39.786+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-27T01:01:40.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:01:41.796+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-27T01:01:42.819+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:01:43.820+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:01:45.847+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-27T01:01:46.847+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:01:47.869+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:01:48.888+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:01:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195453,"time":{"ms":47}},"total":{"ticks":2350046,"time":{"ms":219},"value":2350046},"user":{"ticks":2154593,"time":{"ms":172}}},"handles":{"open":317},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127320666}},"memstats":{"gc_next":5507472,"memory_alloc":4309192,"memory_total":353016631800,"rss":-229376}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":680,"batches":25,"total":680},"read":{"bytes":150},"write":{"bytes":145439}},"pipeline":{"clients":3,"events":{"active":0,"published":649,"total":649},"queue":{"acked":680}}},"msg_file_cache":{"SecurityHits":649},"published_events":{"Security":680,"total":680}}}}
2026-05-27T01:01:50.897+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-27T01:01:51.912+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:01:52.941+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:01:53.948+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:01:54.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-27T01:01:55.990+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:01:56.990+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-27T01:01:59.021+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-27T01:02:00.030+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:01.046+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-27T01:02:02.060+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:02:03.069+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:04.082+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:05.106+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:02:07.117+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-27T01:02:08.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-27T01:02:09.160+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-27T01:02:10.158+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:02:11.190+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-27T01:02:12.191+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:02:15.219+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:02:16.243+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-27T01:02:17.261+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:02:18.276+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:02:19.286+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195453},"total":{"ticks":2350453,"time":{"ms":407},"value":2350453},"user":{"ticks":2155000,"time":{"ms":407}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127350665}},"memstats":{"gc_next":5315296,"memory_alloc":3952840,"memory_total":353082072792,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":690,"batches":25,"total":690},"read":{"bytes":150},"write":{"bytes":149708}},"pipeline":{"clients":3,"events":{"active":60,"published":750,"total":750},"queue":{"acked":690}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":750},"published_events":{"Security":690,"total":690}}}}
2026-05-27T01:02:20.330+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-27T01:02:21.325+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:02:22.344+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-27T01:02:24.394+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 64 events
2026-05-27T01:02:26.416+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:02:27.437+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:02:28.455+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-27T01:02:29.456+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-27T01:02:30.490+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-27T01:02:31.486+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:02:32.506+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-27T01:02:34.524+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-27T01:02:35.522+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-27T01:02:35.522+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-27T01:02:36.552+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:02:37.573+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-27T01:02:38.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:40.601+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-27T01:02:41.620+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-27T01:02:42.629+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:43.648+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-27T01:02:44.661+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:02:46.690+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-27T01:02:47.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-27T01:02:48.705+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-27T01:02:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":195453},"total":{"ticks":2350765,"time":{"ms":312},"value":2350765},"user":{"ticks":2155312,"time":{"ms":312}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":127380666}},"memstats":{"gc_next":8212112,"memory_alloc":5461632,"memory_total":353143383080}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":700,"batches":24,"total":700},"read":{"bytes":144},"write":{"bytes":152093}},"pipeline":{"clients":3,"events":{"active":36,"published":676,"total":676},"queue":{"acked":700}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":675},"published_events":{"Application":1,"Security":699,"total":700}}}}
2026-05-27T01:02:49.736+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-27T01:02:51.745+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-27T01:02:52.761+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T01:02:53.802+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-27T01:02:55.795+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-27T01:02:56.828+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-27T01:02:57.824+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-27T01:02:58.832+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-27T01:02:59.849+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-27T01:03:00.860+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-27T01:03:01.889+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-27T01:03:02.884+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-27T01:03:05.910+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-27T01:03:07.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-27T01:03:08.964+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-27T01:03:09.955+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7