õWÊ’¸ƒ‹xã”})a¶|tß±‹oý1˜¾?È¬r#CÊîNÅºHX¥E[hnt ÚFöçq(AÖ?&ÿ 5Öò9EÙÆüÃåc‰o0YÎõ\›–u¡jÜ>Ú8ˆ€N,¡ÙÃ×eX»]¹ƒ1ô·tÉïöH>™8—x‹µÛ.Yï*c™aPìs.ÍpšY±rÌ™#¶ûÉÚÉ^õ¥H(r=> çÕ\·¹˜ìÛ_Åm:—™ô†ŸUV´–®Û”3„œàÕ€ŽÙ«_úõ5è¯•³ëÕßæ¨X¦;Ç­C³q´;3‘cÿ ›Y.$Å¥Ût÷$Çˆ¨ºêSµ(ïÝHNí{BuŸ2ä¿ÔâÊõÙ)gœƒÊ_« 
»½7ŸÊ/Ü‡XuÇ3çâ×%åV¡¡€"$HaÙ]ËË0ÚD]ˆ8Ï'Òø~Ÿx¿¸,ËùsO"[ðN#ÈòLSÁ-Y×§.3R ·w¼®ç‡¤¡L·!øÎ ºÒƒ©m
JÓé/Ü/73”ì°$¼œ jÀŠã^¯Ó>™ò¾mÈ-juV5sq;~YÄ€J$‰‡ƒ‰ØAR=9úzôZ2¸~©½Iáœk’âtØmvÈÜÙhÅe[ÔÄ¤0¦Þ¶]1›ƒûÙ|¼—RŽª;Ò„¥fÞ°õï™^Ô@h¥(‘¹ƒa´{ˆ=ëªä>“r¨Y»-Oê1, ©“m¡¦î»ËŸýú'Åx§"w0Ym¼¶û–‡ñÂ÷É²31–žTT.év¬Ë?rbzWŠ÷¾\ªbV–špHúçÔÔç¾ó·W¥_s9ÄbEjØ²Ùi=.Ñ]Ó½‰F83xþÄ#Ä:ã>Kú~s¯ÏËì—öøo:ä¬i©Òr0Å/Ö;ÆPÀ³7T€Õ·òØJSŸ,é’†X[Í!JI*¹åÿ ¸Íªçõ´äc3µ(H¦ÃF8²×]ô+[FVofËü¹äõñ?â•™øã¼e÷¿“Æ8óEä@râ ÏŸŒã½ŽÃ†›¼»šåL“¼¢Õn-´‡
u)Û´BÒzµ¢€œì8 š X°;i½êË…¿éŽ¾ãBãdMw Hx³SµtŸú_Uú=Û)çò:‡sƒd³Å²Í·½ “{³ÎÈT¦ØÌöŸ6øpå¸´ºª8¡!:ó?Rqw´š,úP.\jÆ^P0|ÄŒjÎ[ê~Œz§ç\Ðiõ.Zˆ®h#@IfDbl4ÜWÑGý} g–ŽõpáØ¶|'ÔN'
ï+Óýâë”äÏc—¦íoÜ!Ï‡˜»|å7òÊCS`MmL—6)
°òïWþà:¶å«S±q¥™Œÿ TˆbÄÖ¸Sj½g”z[ÓVuó³(NPj0 ÑÀ ŽÖ$f®ÊÅ|³_1Åà¸æ3”¤Z,yEŽÇ¼âRÛ¹@¾‹Í¡-½/ÒÎ©N4û«j²èBÂH×Û=-ë0»Ë­\¾®e"H$µh)Üvâj¾lçÞ—JÖ²älù-™ W{àqùQb®Fg‰ŒÞâ|õÎªÈå[gQË›"áÂ`„¥¦“E¡Á½KR‡Mºêaë>œ à»iÎ›‡ñ\´ý5“’|ÁÃq®?%‰Ø¹³³?o¸_m˜ýÚâso]çK7²ÄhRäG~L™ÂSÊiÇšm¥nZRBwƒ„}e²NiD‡z‰Ïkm.E@£6þÌ¯þ†¦_¦R3H®Îõiÿ ’á*‹MÏ6°Lùyí?l¹"â¤²Éqé	nTÖþ©¢ú×ÀëmkÖS8ƒ!ðüjª—¦âÈOûÅ»0[·ñöM:sYFcÆ!Çj[Ü‹Í²è1…ÅæYm-ÖûlD¡m¡=ÜSåµ¤´”ƒ­75õ³S rZ‰í" Þq5U²Òúk	7šDmi³v;“àÞ5XyŸ’K’-¶L™‹æQs–¡ŠÇoËºMC;šb;,½nKˆ“<8ÄYpH#i8Rõ¯[È‰
†Îí¹ˆÄî‘;VXôÃKXÈÅª	WÅ©¼ ~J%æÙšbŒIÕ²õbÊ/°`ÜøÚÞÜ•ª>Gn¹Õq¤ÛÝ¹Æoº_,),)ƒ¹e*HmdPcCÖíg˜™y†@}ãØw‘LôæQhùN.Å¾8w¿x[×Ã÷	˜þ/yÊ›Åvožº[L¦"û¦2×1R&†$ÛnìÊž#8Ü¾àJã©}¦T²Út‡Õ]DÉ"$cLÓÚ\þ™ÉÈ`®ŸDÙÄ’[vÀÂ„<1gÚ²ÌÓ€-œcxjåÏPXŸÙáA‹"ÌáØ3\Ö	%.ÅLHÆãH·H¹D“H+Tº¶V
»ÕM| %de 1s9wbYÁÛ‰Ý¿7GÐšläL—wo/koƒå¯¬Ö¾;¹aCLóvgä{ThS ®òÞM½Mi‘:]žÜqR­n©ØŽ6ëîÊRmô";m
­áWÿ DÎnHPwb^B	|=ÎÕ¦*=¥ŒM$iƒÛ[´|z²X±Œ5«Õäl•<w:öÍéwshf6i." Fù¤Ä]µ‹ÔQ¨š.ÎÛB‚¤2µë.}wÍâ@Í"ôrpÇin÷÷*­ôöœÖ@åZ ~æ÷«õÎÙ‹Æ¹àøí›”dÜ.Y‚‹mºçdÁ1Ù‘‘y¹›dGá4Œ‚ì‰Žºôg‘!¤ÇKR]PC‰^±íõÿ 47%“‘l¸UöŠ4lQ¿ÓÚIÀ9\š³†¡€ÞÎv(V,JÉqÊéÈPžÃqÙ+É|•.Û´´d36>¦'Ï[iiL)”º—‚Õ°Ò{ßOù¥ÞgÌÉ»t}…¨™_¸æ$?–ˆÂBä¼³”¿LKÃÌbêw4·Óœ¶7l[7õ×Æ]=3Ý;g…»`‰Ê@âÀ’ëSLÊ£rg$ÚUß!ËÅ0ÈïÉÅqk{²ì+ƒ*[ÆßLº—.Çhí	l—è’jºu\›¨õOÖ!	Çì´¾kpŒØ[”HlÂ9¸„F'6“D†pºÞ“‡ItÛz‰fÖjŒ8÷$"3æcv01w«BrÌ|Ïá€{Åúûf´çqìóyî%‹Ž£Ë»&ÇÛZ½]ä&L%Ç¶D1!†™w.©)qÆÈH
)øRyŸWúæõÞ®¹šàµ<ŒZ&D8-”ÐW¥E¸ž»ÒÎž€é¸\•‡¿z1¸s4k*ü±vQÞéWûq¼KÇbó†9>Ã¥½|UŽt|‚ÁÙ¼YZqE‰ØRíq“tw!-.@ë’{,’’â‡˜ÙêÛî/æ»™¢+ç.â&4f®‚E¡ó.A`Ù/m¡Â1‘ò™&ÌA/˜;¶o%Ûï˜÷Ù³Ìk>‚¿•d1S|·ÞÜß?·\ .ûÛ	—[J{m©ù‹hû†;a°¤• }PêþcÓ³%¢ÚnY1¦$G5¶8y‹.6‚$>hôÃ§ê}n¢Z˜qt|»%»dŽ¦Râ	^hð¥ÑY"`¶eÅüŽcÌÉNeb‰‹ñV1ï’Û“ ¿z¿Î»Ïvó›È¶C’"ÄSˆ“t‚÷eÖ™i‚R¢ ­^u)år³Êï’cBá˜ˆÍná'4€ 	Ä“Q"æ„ÃÍÙzcÈ¬ókÚîqj"S½ª»–"2³e¡–¤¼f4Œ*"ãjq|Lß	Ëý?fÇ1x¿XîùVNÕ¿(º]¿ä8Æ7%vkö4{ó Ä&åh„Ë+¼¶VºÄt¿[k¹g8ÒÆéŒ£;„šF$Læq†_Ô_s-·­ž‘éúŸÓþa¢ÓÅõS³Ä‰ 	æŒ³F%›–Ñ¹«N/Ë\kšò¯q¦E
Å~á[ýêI²ò÷1yß”*«æ9ÛN:gÏ»¦S±£Gm—WTvNÀîñìž»óëºkq„xp"3Kd	ÆAâÄ¼å
¼<”É^]ûlêPYÓÞ›ƒ¬Ó‹à ZW¢8ZˆlÂü¦RžÖUe3îøŽmÉ–Òf>ì<¶YfsÅµ¬²2®w;œÆ£¶‰xôÚc­ëÕª<ƒl$…¶¤F[O)/6Ë§ç¨úrÆ­É"†@DhÊ!˜H³í‰À/¥oôLnØâØ!X	ff&±“lÕ¼„™ F`rn\„•r^S|ôÃ†eyß¦VUjŒr\¡¶.—IqW+Š˜íÓm¨Ï>¹2ÐŠÛ+v:@mÆÃ¨]3ïuŸ:Ó9‘7Á„²žÐ]û>öUhzC©qåýAÆhöÌ7½ÞqXÅñÎhË,Wgq^$ü‰Œ";ÎA$O„ð¿3)) Æ@Ìe|ã5Ž§‘×¥wJBV°5rõšOôH>Ú`Oxø¾«¬ë}+¢„«"\– Ãu6wÔžå³¡ã9Þ/p—±NFw„Ÿ8ú½Aµˆ@„Ï~+¥_™³oy›íÊÞY‚~a¶%:àÞk¶ìtoSmãëýCæsŽPAº]ƒPï«¸j>Í•
Èt©L]”FX¯þN%ŽópVÏøJÿ tÃeúsä^R»ÞÐÄ‡96Ï“Z0‡]mûîÛÜ²·k»Î­½ <òJ»®‚¥†ÂÐ'ª¹ýËRž¯,(@‚ã°–>1~ÖUž›åöš6£˜Wõ8«àYé…6ÍËMÂÆ³ìvÝ‰äyœ»­ƒÈÓ!‹Mî&>nj’ì“ò(Ç‰0,wŠÊq`ŸÔÖ)êKÖ %"Xÿ ‹oqpë"<†ÍÙˆ‡ïÝÞ*Ýž*j±Œýë:%¿2Ñ\B]³ÝîÌâ¥J¸Åm0ä¸ÕñÖö¥ôîSj“Úm[:-GXqëëÙXÈ°Øäv=~¬º_þ‡`Xâ¼ ¡ Nö¥}Ê÷m¶òuþã‘ÝíddpíénVM|·:ÍÚ'.lµ>]½Cd6½ÉWF’*
ŠÁ{c«î]‘"ä½ûöf\¨ä6a 2Ä¶ç£wïÃzÃí³rœôÇ´;k¼ˆ¦åªæ›lx¢…¤;)ÈèÞú®×yH-*CkRŠF“þ§½*FãÒ•Ãã·µ†5WK‘Ú ¼Ýèþ>²‹2¾ÅÌø’Ïo½d±¬zãm¶Üá=2d/›T¹Ž4hy¥©Ç
eç{klT„ŸâÓžo©´Í€m Óp®5­
Å³Ë¬\“ ä“°Š§éµGÇýHßÈn’bñFu¸öÞƒÀ™
ÐÅ¢Ì™OlŒ¦Ÿ+Ü¤²·HmõH
ZKo8¶·#Z»¼ÚüæNgÀ¸€Ù³eÁlŠÌEbÑjŠ’v÷üÿ cÜÑÌp¬³q«6eŒ¸ÍÑãËÂÁ7q‰	R¥3%>˜.•lmtBPRŠ|:Å–£Q2#+™·y‡‹v{nY`æ0Ë¼±÷Ûí½c÷©e¸çl2×¨›wr.go:73	EventLog[Security] successfully published 6 events
2026-05-26T23:45:12.770+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:45:13.781+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T23:45:14.792+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T23:45:15.817+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T23:45:16.815+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T23:45:18.838+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:45:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":189453,"time":{"ms":47}},"total":{"ticks":2292234,"time":{"ms":407},"value":2292234},"user":{"ticks":2102781,"time":{"ms":360}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":122730665}},"memstats":{"gc_next":5773664,"memory_alloc":4029904,"memory_total":342580271792}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":602,"batches":24,"total":602},"read":{"bytes":144},"write":{"bytes":133736}},"pipeline":{"clients":3,"events":{"active":41,"published":613,"total":613},"queue":{"acked":602}}},"msg_file_cache":{"SecurityHits":612,"SystemMisses":1,"SystemSize":1},"published_events":{"Security":601,"System":1,"total":602}}}}
2026-05-26T23:45:19.863+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T23:45:20.871+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T23:45:22.898+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T23:45:23.914+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T23:45:25.936+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:45:26.948+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T23:45:27.950+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T23:45:28.983+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T23:45:30.006+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T23:45:31.019+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T23:45:32.025+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T23:45:34.045+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T23:45:35.071+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T23:45:36.090+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T23:45:37.087+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T23:45:38.127+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T23:45:39.133+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T23:45:41.158+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T23:45:42.171+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T23:45:43.171+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T23:45:44.207+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T23:45:46.204+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T23:45:47.223+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T23:45:48.240+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:45:49.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T23:45:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":189468,"time":{"ms":15}},"total":{"ticks":2292561,"time":{"ms":327},"value":2292561},"user":{"ticks":2103093,"time":{"ms":312}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":122760665}},"memstats":{"gc_next":5284480,"memory_alloc":4287392,"memory_total":342642618960,"rss":-499712}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":712,"batches":25,"total":712},"read":{"bytes":150},"write":{"bytes":154107}},"pipeline":{"clients":3,"events":{"active":0,"published":671,"total":671},"queue":{"acked":712}}},"msg_file_cache":{"SecurityHits":671},"published_events":{"Security":712,"total":712}}}}
2026-05-26T23:45:51.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T23:45:52.285+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T23:45:54.321+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T23:45:55.343+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T23:45:56.342+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T23:45:57.367+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T23:45:58.381+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T23:45:59.394+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T23:46:01.413+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T23:46:02.417+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T23:46:03.448+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T23:46:04.457+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T23:46:06.467+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T23:46:07.509+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 60 events
2026-05-26T23:46:08.506+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T23:46:09.518+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T23:46:10.536+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:46:11.546+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T23:46:13.566+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T23:46:14.581+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T23:46:15.603+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T23:46:16.628+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T23:46:17.633+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T23:46:18.669+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T23:46:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":189578,"time":{"ms":110}},"total":{"ticks":2292953,"time":{"ms":392},"value":2292953},"user":{"ticks":2103375,"time":{"ms":282}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":122790666}},"memstats":{"gc_next":5978304,"memory_alloc":4686696,"memory_total":342710496016,"rss":1163264}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":725,"batches":24,"total":725},"read":{"bytes":144},"write":{"bytes":151160}},"pipeline":{"clients":3,"events":{"active":139,"published":864,"total":864},"queue":{"acked":725}}},"msg_file_cache":{"SecurityHits":864},"published_events":{"Security":725,"total":725}}}}
2026-05-26T23:46:19.740+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 139 events
2026-05-26T23:46:20.805+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 116 events
2026-05-26T23:46:21.880+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 186 events
2026-05-26T23:46:22.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 217 events
2026-05-26T23:46:24.109+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 160 events
2026-05-26T23:46:25.201+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 164 events
2026-05-26T23:46:26.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 151 events
2026-05-26T23:46:27.337+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 83 events
2026-05-26T23:46:28.397+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 85 events
2026-05-26T23:46:29.460+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 125 events
2026-05-26T23:46:30.518+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 126 events
2026-05-26T23:46:31.582+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 119 events
2026-05-26T23:46:32.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 308 events
2026-05-26T23:46:33.809+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 153 events
2026-05-26T23:46:34.877+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 127 events
2026-05-26T23:46:35.951+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 169 events
2026-05-26T23:46:37.000+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 77 events
2026-05-26T23:46:38.046+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 70 events
2026-05-26T23:46:39.080+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 72 events
2026-05-26T23:46:40.114+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T23:46:41.136+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T23:46:42.162+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T23:46:43.169+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T23:46:44.204+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T23:46:45.244+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 71 events
2026-05-26T23:46:46.243+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T23:46:47.271+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T23:46:48.310+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T23:46:49.308+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T23:46:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":189687,"time":{"ms":109}},"total":{"ticks":2294202,"time":{"ms":1249},"value":2294202},"user":{"ticks":2104515,"time":{"ms":1140}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":122820665}},"memstats":{"gc_next":5327296,"memory_alloc":3248264,"memory_total":342862324680,"rss":532480}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":3086,"batches":29,"total":3086},"read":{"bytes":174},"write":{"bytes":456025}},"pipeline":{"clients":3,"events":{"active":35,"published":2982,"total":2982},"queue":{"acked":3086}}},"msg_file_cache":{"SecurityHits":2982},"published_events":{"Security":3086,"total":3086}}}}
2026-05-26T23:46:50.330+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T23:46:51.362+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T23:46:52.365+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T23:46:53.384+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T23:46:54.413+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T23:46:55.443+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T23:46:56.451+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T23:46:58.479+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 39 events
2026-05-26T23:46:59.482+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T23:47:00.500+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T23:47:01.537+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T23:47:02.532+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T23:47:03.558+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T23:47:04.590+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T23:47:05.597+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T23:47:06.616+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T23:47:07.634+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:47:08.666+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T23:47:09.667+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T23:47:11.700+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T23:47:12.707+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T23:47:13.706+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T23:47:14.730+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T23:47:15.731+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T23:47:16.766+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T23:47:17.778+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T23:47:18.783+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T23:47:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":189734,"time":{"ms":47}},"total":{"ticks":2294671,"time":{"ms":469},"value":2294671},"user":{"ticks":2104937,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":122850665}},"memstats":{"gc_next":8184752,"memory_alloc":4810592,"memory_total":342934525480,"rss":-475136}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":873,"batches":27,"total":873},"read":{"bytes":162},"write":{"bemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114450666}},"memstats":{"gc_next":8241936,"memory_alloc":5267792,"memory_total":323416790592,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":700,"batches":24,"total":700},"read":{"bytes":144},"write":{"bytes":153483}},"pipeline":{"clients":3,"events":{"active":32,"published":697,"total":697},"queue":{"acked":700}}},"msg_file_cache":{"SecurityHits":697},"published_events":{"Security":700,"total":700}}}}
2026-05-26T21:27:20.665+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:27:21.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:27:22.686+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:27:23.717+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T21:27:25.716+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T21:27:26.765+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-26T21:27:27.755+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T21:27:28.768+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T21:27:29.782+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:27:31.811+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T21:27:32.819+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:27:34.836+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:27:35.858+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:27:36.883+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:27:37.885+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:27:39.927+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T21:27:40.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T21:27:41.934+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T21:27:42.945+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:27:43.956+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:27:45.959+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T21:27:46.982+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:27:47.989+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:27:48.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:27:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180000},"total":{"ticks":2187171,"time":{"ms":171},"value":2187171},"user":{"ticks":2007171,"time":{"ms":171}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114480665}},"memstats":{"gc_next":8187888,"memory_alloc":5159856,"memory_total":323474686536,"rss":-585728}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":585,"batches":24,"total":585},"read":{"bytes":144},"write":{"bytes":131037}},"pipeline":{"clients":3,"events":{"active":30,"published":583,"total":583},"queue":{"acked":585}}},"msg_file_cache":{"SecurityHits":583},"published_events":{"Security":585,"total":585}}}}
2026-05-26T21:27:50.016+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:27:51.015+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T21:27:52.064+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 66 events
2026-05-26T21:27:53.058+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:27:54.078+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:27:55.111+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T21:27:56.129+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:27:57.154+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:27:59.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:28:00.192+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:28:01.197+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T21:28:02.232+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T21:28:03.237+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:28:04.268+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:28:05.286+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:28:07.284+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T21:28:08.309+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:28:09.321+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:28:10.343+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:28:11.358+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:28:12.400+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 70 events
2026-05-26T21:28:13.400+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:28:14.416+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T21:28:15.433+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:28:16.457+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T21:28:17.475+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T21:28:18.477+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:28:19.485+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:28:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180031,"time":{"ms":31}},"total":{"ticks":2187624,"time":{"ms":453},"value":2187624},"user":{"ticks":2007593,"time":{"ms":422}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114510665}},"memstats":{"gc_next":5310720,"memory_alloc":3679240,"memory_total":323549038136,"rss":536576}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":858,"batches":28,"total":858},"read":{"bytes":168},"write":{"bytes":180294}},"pipeline":{"clients":3,"events":{"active":44,"published":872,"total":872},"queue":{"acked":858}}},"msg_file_cache":{"SecurityHits":872},"published_events":{"Security":858,"total":858}}}}
2026-05-26T21:28:20.529+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T21:28:21.539+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:28:22.563+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:28:24.594+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 52 events
2026-05-26T21:28:25.604+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:28:26.625+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:28:27.666+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T21:28:28.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:28:29.684+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:28:30.703+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:28:31.725+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T21:28:32.749+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T21:28:33.777+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T21:28:35.784+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:28:36.800+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:28:37.836+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T21:28:38.834+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T21:28:39.845+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 13 events
2026-05-26T21:28:40.886+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 61 events
2026-05-26T21:28:41.881+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T21:28:42.914+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:28:43.925+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:28:43.925+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 6 events
2026-05-26T21:28:44.975+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 1 events
2026-05-26T21:28:44.975+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 68 events
2026-05-26T21:28:45.988+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:28:46.997+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:28:49.014+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:28:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180078,"time":{"ms":47}},"total":{"ticks":2188015,"time":{"ms":391},"value":2188015},"user":{"ticks":2007937,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114540665}},"memstats":{"gc_next":8300624,"memory_alloc":6446528,"memory_total":323622419488,"rss":36864}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":910,"batches":26,"total":910},"read":{"bytes":156},"write":{"bytes":188830}},"pipeline":{"clients":3,"events":{"active":63,"published":929,"total":929},"queue":{"acked":910}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":922,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":903,"System":1,"total":910}}}}
2026-05-26T21:28:50.042+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T21:28:52.074+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:28:53.089+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:28:54.111+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:28:55.106+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T21:28:56.140+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T21:28:57.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:28:58.175+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:29:00.193+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:29:01.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:02.214+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:29:03.236+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:29:04.256+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T21:29:06.290+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T21:29:07.283+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T21:29:08.298+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:29:09.335+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T21:29:10.328+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 3 events
2026-05-26T21:29:12.364+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 49 events
2026-05-26T21:29:13.375+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:14.373+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T21:29:16.398+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T21:29:17.406+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:29:18.425+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:29:19.461+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 55 events
2026-05-26T21:29:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180140,"time":{"ms":62}},"total":{"ticks":2188343,"time":{"ms":328},"value":2188343},"user":{"ticks":2008203,"time":{"ms":266}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114570665}},"memstats":{"gc_next":8483088,"memory_alloc":5194912,"memory_total":323686194696,"rss":-4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":742,"batches":25,"total":742},"read":{"bytes":150},"write":{"bytes":160038}},"pipeline":{"clients":3,"events":{"active":26,"published":705,"total":705},"queue":{"acked":742}}},"msg_file_cache":{"SecurityHits":705},"published_events":{"Security":742,"total":742}}}}
2026-05-26T21:29:20.466+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T21:29:21.496+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T21:29:22.514+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:29:23.532+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T21:29:24.547+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:25.579+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T21:29:26.578+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:29:27.612+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T21:29:28.658+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T21:29:29.676+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T21:29:30.688+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:29:31.706+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:29:33.718+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:29:34.753+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T21:29:35.755+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:29:36.767+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:29:37.794+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T21:29:38.813+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:29:39.834+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:29:40.855+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T21:29:41.877+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:29:42.889+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:44.926+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T21:29:45.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T21:29:46.945+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:29:47.957+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:29:48.973+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:49.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180140},"total":{"ticks":2188718,"time":{"ms":375},"value":2188718},"user":{"ticks":2008578,"time":{"ms":375}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114600665}},"memstats":{"gc_next":8280592,"memory_alloc":5433600,"memory_total":323760567048}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":908,"batches":27,"total":908},"read":{"bytes":162},"write":{"bytes":185889}},"pipeline":{"clients":3,"events":{"active":35,"published":917,"total":917},"queue":{"acked":908}}},"msg_file_cache":{"SecurityHits":917},"published_events":{"Security":908,"total":908}}}}
2026-05-26T21:29:49.991+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T21:29:51.005+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:29:53.014+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T21:29:54.040+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T21:29:55.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:29:56.061+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T21:29:57.080+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:29:59.107+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T21:30:00.110+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T21:30:01.129+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T21:30:01.129+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 1 events
2026-05-26T21:30:02.131+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:30:03.138+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T21:30:04.150+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:30:05.171+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:30:07.206+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 51 events
2026-05-26T21:30:08.203+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T21:30:09.225+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:30:10.251+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 45 events
2026-05-26T21:30:11.248+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:30:13.275+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:30:14.287+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 26 events
2026-05-26T21:30:15.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T21:30:16.329+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:30:18.349+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:30:19.370+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:30:19.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180234,"time":{"ms":94}},"total":{"ticks":2189030,"time":{"ms":312},"value":2189030},"user":{"ticks":2008796,"time":{"ms":218}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114630666}},"memstats":{"gc_next":8316080,"memory_alloc":5261040,"memory_total":323823772512}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":698,"batches":25,"total":698},"read":{"bytes":150},"write":{"bytes":155367}},"pipeline":{"clients":3,"events":{"active":30,"published":693,"total":693},"queue":{"acked":698}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":692},"published_events":{"Application":1,"Security":697,"total":698}}}}
2026-05-26T21:30:20.384+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:30:21.389+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:30:22.421+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 48 events
2026-05-26T21:30:23.416+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 2 events
2026-05-26T21:30:24.426+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 10 events
2026-05-26T21:30:25.467+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T21:30:27.471+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:30:28.485+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:30:29.511+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T21:30:30.530+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T21:30:32.540+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:30:33.551+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T21:30:34.560+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:30:35.616+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 76 events
2026-05-26T21:30:36.617+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:30:37.636+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:30:38.670+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 50 events
2026-05-26T21:30:40.680+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:30:41.691+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:30:42.713+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T21:30:43.733+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T21:30:44.774+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 63 events
2026-05-26T21:30:44.774+0800	INFO	beater/eventlogger.go:73	EventLog[Application] successfully published 10 events
2026-05-26T21:30:45.810+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 57 events
2026-05-26T21:30:45.810+0800	INFO	beater/eventlogger.go:73	EventLog[System] successfully published 4 events
2026-05-26T21:30:46.819+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:30:47.844+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 38 events
2026-05-26T21:30:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180234},"total":{"ticks":2189437,"time":{"ms":407},"value":2189437},"user":{"ticks":2009203,"time":{"ms":407}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114660666}},"memstats":{"gc_next":8341552,"memory_alloc":4453104,"memory_total":323891389664,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":839,"batches":25,"total":839},"read":{"bytes":150},"write":{"bytes":179853}},"pipeline":{"clients":3,"events":{"active":7,"published":816,"total":816},"queue":{"acked":839}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":802,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":825,"System":4,"total":839}}}}
2026-05-26T21:30:49.842+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 7 events
2026-05-26T21:30:50.857+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:30:51.884+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 40 events
2026-05-26T21:30:52.879+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 6 events
2026-05-26T21:30:53.893+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T21:30:54.920+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:30:55.951+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:30:56.956+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 17 events
2026-05-26T21:30:57.975+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:31:00.013+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T21:31:01.022+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:31:02.033+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T21:31:03.052+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:31:04.075+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:31:05.079+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 12 events
2026-05-26T21:31:07.107+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:31:08.135+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T21:31:09.153+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:31:10.160+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:31:11.199+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T21:31:12.209+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:31:13.212+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 11 events
2026-05-26T21:31:14.247+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:31:15.291+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T21:31:17.307+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T21:31:18.311+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:31:19.319+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:31:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180296,"time":{"ms":62}},"total":{"ticks":2189827,"time":{"ms":390},"value":2189827},"user":{"ticks":2009531,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114690665}},"memstats":{"gc_next":5212608,"memory_alloc":3979560,"memory_total":323962256312}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":780,"batches":27,"total":780},"read":{"bytes":162},"write":{"bytes":165687}},"pipeline":{"clients":3,"events":{"active":44,"published":817,"total":817},"queue":{"acked":780}}},"msg_file_cache":{"SecurityHits":817},"published_events":{"Security":780,"total":780}}}}
2026-05-26T21:31:20.350+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 44 events
2026-05-26T21:31:21.357+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 23 events
2026-05-26T21:31:22.367+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T21:31:23.386+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:31:24.393+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 19 events
2026-05-26T21:31:25.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 18 events
2026-05-26T21:31:26.433+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T21:31:28.443+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:31:29.464+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 29 events
2026-05-26T21:31:30.479+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:31:32.508+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:31:33.522+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:31:34.521+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T21:31:35.537+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 21 events
2026-05-26T21:31:36.572+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T21:31:37.572+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 15 events
2026-05-26T21:31:39.597+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:31:40.630+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 56 events
2026-05-26T21:31:41.625+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 8 events
2026-05-26T21:31:42.672+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T21:31:44.680+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:31:45.714+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 47 events
2026-05-26T21:31:46.728+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:31:47.749+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:31:48.770+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:31:49.686+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180312,"time":{"ms":16}},"total":{"ticks":2190187,"time":{"ms":360},"value":2190187},"user":{"ticks":2009875,"time":{"ms":344}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114720667}},"memstats":{"gc_next":8345584,"memory_alloc":4920864,"memory_total":324027545256,"rss":-368640}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":769,"batches":25,"total":769},"read":{"bytes":150},"write":{"bytes":165175}},"pipeline":{"clients":3,"events":{"active":20,"published":745,"total":745},"queue":{"acked":769}}},"msg_file_cache":{"SecurityHits":745},"published_events":{"Security":769,"total":769}}}}
2026-05-26T21:31:49.776+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:31:50.777+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T21:31:51.782+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 5 events
2026-05-26T21:31:52.833+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 62 events
2026-05-26T21:31:53.825+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T21:31:55.854+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:31:56.869+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 32 events
2026-05-26T21:31:57.881+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 20 events
2026-05-26T21:31:58.901+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:31:59.918+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:32:01.936+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 31 events
2026-05-26T21:32:02.969+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T21:32:03.987+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:32:05.004+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 25 events
2026-05-26T21:32:06.027+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 43 events
2026-05-26T21:32:07.029+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:32:08.071+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 54 events
2026-05-26T21:32:09.079+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:32:11.094+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 27 events
2026-05-26T21:32:12.115+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 35 events
2026-05-26T21:32:13.139+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 41 events
2026-05-26T21:32:14.152+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 30 events
2026-05-26T21:32:15.172+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 24 events
2026-05-26T21:32:16.204+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 46 events
2026-05-26T21:32:17.226+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 42 events
2026-05-26T21:32:18.243+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 37 events
2026-05-26T21:32:19.239+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 4 events
2026-05-26T21:32:19.684+0800	INFO	[monitoring]	log/log.go:144	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":180328,"time":{"ms":16}},"total":{"ticks":2190531,"time":{"ms":344},"value":2190531},"user":{"ticks":2010203,"time":{"ms":328}}},"handles":{"open":319},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":114750665}},"memstats":{"gc_next":8108752,"memory_alloc":4075120,"memory_total":324096764024}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":793,"batches":27,"total":793},"read":{"bytes":162},"write":{"bytes":168825}},"pipeline":{"clients":3,"events":{"active":0,"published":773,"total":773},"queue":{"acked":793}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":773},"published_events":{"Security":793,"total":793}}}}
2026-05-26T21:32:21.287+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 59 events
2026-05-26T21:32:22.280+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 9 events
2026-05-26T21:32:23.304+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:32:24.324+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 34 events
2026-05-26T21:32:25.336+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 28 events
2026-05-26T21:32:26.341+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 14 events
2026-05-26T21:32:28.365+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 33 events
2026-05-26T21:32:29.370+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 16 events
2026-05-26T21:32:30.382+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:32:31.404+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 36 events
2026-05-26T21:32:32.413+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 22 events
2026-05-26T21:32:34.450+0800	INFO	beater/eventlogger.go:73	EventLog[Security] successfully published 53 events
2026-05-26T21:32:35.441+0800	INFO	beater/eventlogger.go:73	EventLo