tlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:24:35.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:24:36.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T07:24:37.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:24:39.627+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:24:40.665+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T07:24:41.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:24:42.674+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:24:43.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:24:44.704+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:24:45.751+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-05-27T07:24:46.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:24:47.767+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:24:48.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:24:49.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":224125,"time":{"ms":32}},"total":{"ticks":2634640,"time":{"ms":407},"value":2634640},"user":{"ticks":2410515,"time":{"ms":375}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":150300666}},"memstats":{"gc_next":8522640,"memory_alloc":4602928,"memory_total":405047952864,"rss":-663552}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":922,"batches":27,"total":922},"read":{"bytes":162},"write":{"bytes":187985}},"pipeline":{"clients":3,"events":{"active":9,"published":914,"total":914},"queue":{"acked":922}}},"msg_file_cache":{"SecurityHits":914},"published_events":{"Security":922,"total":922}}}} 2026-05-27T07:24:49.801+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:24:51.818+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:24:52.834+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:24:54.855+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:24:55.892+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T07:24:55.892+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-27T07:24:56.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:24:57.905+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:24:58.944+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T07:24:59.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:25:00.983+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:25:02.999+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:25:04.015+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:25:05.039+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:25:06.058+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:25:07.066+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:25:08.085+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:25:09.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T07:25:10.128+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:25:11.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:25:12.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:25:14.170+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:25:15.204+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T07:25:16.237+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T07:25:17.239+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:25:18.261+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:25:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":224125},"total":{"ticks":2635046,"time":{"ms":406},"value":2635046},"user":{"ticks":2410921,"time":{"ms":406}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":150330665}},"memstats":{"gc_next":5335984,"memory_alloc":2802152,"memory_total":405114389928,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":770,"batches":25,"total":770},"read":{"bytes":150},"write":{"bytes":161710}},"pipeline":{"clients":3,"events":{"active":21,"published":782,"total":782},"queue":{"acked":770}}},"msg_file_cache":{"SecurityHits":781,"SystemHits":1},"published_events":{"Security":769,"System":1,"total":770}}}} 2026-05-27T07:25:20.271+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:25:21.294+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:25:22.313+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:25:23.312+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T07:25:24.318+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:25:25.362+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:25:26.359+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:25:27.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:25:28.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:25:29.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:25:30.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:25:32.449+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:25:33.472+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:25:34.497+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:25:35.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:25:36.532+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:25:37.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:25:39.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T07:25:40.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-27T07:25:41.630+080":20480}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":818,"batches":25,"total":818},"read":{"bytes":150},"write":{"bytes":169311}},"pipeline":{"clients":3,"events":{"active":20,"published":816,"total":816},"queue":{"acked":818}}},"msg_file_cache":{"SecurityHits":816},"published_events":{"Security":818,"total":818}}}} 2026-05-27T07:38:49.963+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:38:50.976+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:38:51.990+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:38:53.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:38:54.024+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:38:55.029+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:38:56.040+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:38:58.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:39:00.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:39:01.116+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:39:02.133+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:39:03.168+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T07:39:04.175+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:39:05.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:39:07.230+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-05-27T07:39:08.233+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:39:09.256+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:39:10.292+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T07:39:11.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:39:12.316+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:39:13.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:39:14.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T07:39:16.356+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:39:17.359+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:39:18.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:39:19.411+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:39:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225218,"time":{"ms":31}},"total":{"ticks":2646796,"time":{"ms":375},"value":2646796},"user":{"ticks":2421578,"time":{"ms":344}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151170666}},"memstats":{"gc_next":8428016,"memory_alloc":4986416,"memory_total":407032029496}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":764,"batches":26,"total":764},"read":{"bytes":156},"write":{"bytes":166274}},"pipeline":{"clients":3,"events":{"active":21,"published":765,"total":765},"queue":{"acked":764}}},"msg_file_cache":{"SecurityHits":765},"published_events":{"Security":764,"total":764}}}} 2026-05-27T07:39:20.415+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:39:22.452+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T07:39:23.462+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:39:24.471+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:39:25.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:39:26.510+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:39:27.518+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:39:29.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-27T07:39:30.567+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:39:31.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T07:39:32.601+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:39:33.609+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:39:34.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:39:35.637+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:39:36.647+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:39:38.694+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 68 events 2026-05-27T07:39:39.701+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:39:40.704+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:39:41.733+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:39:42.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:39:44.777+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:39:45.793+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:39:46.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:39:47.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:39:48.842+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:39:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225281,"time":{"ms":63}},"total":{"ticks":2647077,"time":{"ms":281},"value":2647077},"user":{"ticks":2421796,"time":{"ms":218}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151200666}},"memstats":{"gc_next":5281216,"memory_alloc":3537448,"memory_total":407098252120}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":761,"batches":25,"total":761},"read":{"bytes":150},"write":{"bytes":159488}},"pipeline":{"clients":3,"events":{"active":36,"published":776,"total":776},"queue":{"acked":761}}},"msg_file_cache":{"SecurityHits":776},"published_events":{"Security":761,"total":761}}}} 2026-05-27T07:39:49.869+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:39:50.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T07:39:51.912+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:39:52.925+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:39:54.966+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-05-27T07:39:55.962+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:39:56.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:39:58.999+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:40:00.007+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:40:01.022+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T07:40:01.022+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:40:02.250+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-05-27T07:40:02.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:40:05.061+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:40:07.089+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:40:08.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:40:09.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:40:10.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T07:40:11.155+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:40:12.182+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:40:13.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:40:14.217+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:40:16.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:40:17.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:40:18.267+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:40:18.267+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 4 events 2026-05-27T07:40:18.267+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 10 events 2026-05-27T07:40:19.295+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:40:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225281},"total":{"ticks":2647359,"time":{"ms":282},"value":2647359},"user":{"ticks":2422078,"time":{"ms":282}}},"handles":{"open":323},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151230665}},"memstats":{"gc_next":5792992,"memory_alloc":4286800,"memory_total":407163078336,"rss":-12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":781,"batches":24,"total":781},"read":{"bytes":144},"write":{"bytes":170629}},"pipeline":{"clients":3,"events":{"active":40,"published":785,"total":785},"queue":{"acked":781}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":4,"ApplicationSize":1,"SecurityHits":769,"SystemHits":5},"published_events":{"Application":11,"Security":765,"System":5,"total":781}}}} 2026-05-27T07:40:20.314+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:40:22.288+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T07:40:22.288+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:40:22.288+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-05-27T07:40:23.365+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T07:40:24.376+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:40:25.385+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:40:27.412+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:40:28.426+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:40:29.429+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T07:40:30.478+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T07:40:31.485+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:40:32.505+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:40:34.514+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:40:35.541+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:40:36.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:40:37.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:40:38.567+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:40:39.608+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:40:40.617+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:40:41.618+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T07:40:42.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:40:44.647+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:40:45.669+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:40:46.675+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:40:47.697+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:40:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225312,"time":{"ms":31}},"total":{"ticks":2647765,"time":{"ms":406},"value":2647765},"user":{"ticks":2422453,"time":{"ms":375}}},"handles":{"open":323},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151260665}},"memstats":{"gc_next":5173616,"memory_alloc":3531912,"memory_total":407223661928,"rss":8192}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":675,"batches":24,"total":675},"read":{"bytes":144},"write":{"bytes":149494}},"pipeline":{"clients":3,"events":{"active":26,"published":661,"total":661},"queue":{"acked":675}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":656,"SystemHits":1},"published_events":{"Application":4,"Security":670,"System":1,"total":675}}}} 2026-05-27T07:40:49.714+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:40:50.714+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T07:40:51.745+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:40:52.762+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 2 events 2026-05-27T07:40:52.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:40:53.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:40:53.762+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T07:40:54.790+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:40:55.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T07:40:56.821+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:40:58.840+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:40:59.860+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:41:00.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:41:01.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:41:03.893+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:41:04.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:41:06.936+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:41:07.973+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-05-27T07:41:08.975+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:41:09.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:41:11.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:41:12.051+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:41:14.065+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:41:15.091+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:41:16.129+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T07:41:17.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:41:18.164+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:41:19.179+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:41:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225343,"time":{"ms":31}},"total":{"ticks":2648218,"time":{"ms":453},"value":2648218},"user":{"ticks":2422875,"time":{"ms":422}}},"handles":{"open":323},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151290665}},"memstats":{"gc_next":5324864,"memory_alloc":3172904,"memory_total":407291679976,"rss":118784}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":776,"batches":26,"total":776},"read":{"bytes":156},"write":{"bytes":166669}},"pipeline":{"clients":3,"events":{"active":30,"published":780,"total":780},"queue":{"acked":776}}},"msg_file_cache":{"ApplicationHits":2,"SecurityHits":777,"SystemHits":1},"published_events":{"Application":2,"Security":773,"System":1,"total":776}}}} 2026-05-27T07:41:20.198+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:41:21.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:41:22.227+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:41:24.246+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:41:25.262+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:41:26.278+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:41:27.299+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:41:28.324+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:41:29.323+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:41:30.343+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:41:31.358+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:41:32.374+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:41:34.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:41:35.394+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T07:41:36.426+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:41:37.433+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:41:38.444+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:41:39.464+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:41:41.493+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T07:41:42.506+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:41:43.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:41:44.528+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:41:45.536+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:41:46.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:41:48.578+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:41:49.589+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:41:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225359,"time":{"ms":16}},"total":{"ticks":2648468,"time":{"ms":250},"value":2648468},"user":{"ticks":2423109,"time":{"ms":234}}},"handles":{"open":323},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151320665}},"memstats":{"gc_next":8325680,"memory_alloc":6529976,"memory_total":407354348304}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":661,"batches":26,"total":661},"read":{"bytes":156},"write":{"bytes":148991}},"pipeline":{"clients":3,"events":{"active":0,"published":631,"total":631},"queue":{"acked":661}}},"msg_file_cache":{"SecurityHits":631},"published_events":{"Security":661,"total":661}}}} 2026-05-27T07:41:51.594+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T07:41:52.630+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-05-27T07:41:53.626+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:41:54.629+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:41:56.681+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T07:41:57.697+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:41:58.713+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:41:59.716+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:42:00.732+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:42:01.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:42:03.762+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:42:04.765+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T07:42:05.791+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:42:06.796+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:42:07.814+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:42:08.848+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:42:09.854+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:42:11.894+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-05-27T07:42:12.902+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:42:13.922+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:42:14.936+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:42:15.932+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T07:42:16.950+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:42:17.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:42:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225421,"time":{"ms":62}},"total":{"ticks":2648842,"time":{"ms":374},"value":2648842},"user":{"ticks":2423421,"time":{"ms":312}}},"handles":{"open":323},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151350665}},"memstats":{"gc_next":8416656,"memory_alloc":4636624,"memory_total":407415399368,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":663,"batches":24,"total":663},"read":{"bytes":144},"write":{"bytes":142511}},"pipeline":{"clients":3,"events":{"active":11,"published":674,"total":674},"queue":{"acked":663}}},"msg_file_cache":{"ApplicationSize":-4,"SecurityHits":674},"published_events":{"Security":663,"total":663}}}} 2026-05-27T07:42:19.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:42:21.008+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:42:23.020+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:42:24.042+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:42:25.053+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:42:28.097+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-05-27T07:42:29.091+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T07:42:30.116+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:42:31.139+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:42:32.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:42:33.158+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:42:34.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-05-27T07:42:35.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:42:36.202+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:42:37.240+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T07:42:38.247+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:42:40.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:42:41.274+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:42:42.286+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:42:43.309+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:42:44.324+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:42:45.327+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:42:46.359+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:42:47.364+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:42:48.379+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:42:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225437,"time":{"ms":16}},"total":{"ticks":2649187,"time":{"ms":345},"value":2649187},"user":{"ticks":2423750,"time":{"ms":329}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151380666}},"memstats":{"gc_next":8287088,"memory_alloc":5791392,"memory_total":407479861064,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":686,"batches":25,"total":686},"read":{"bytes":150},"write":{"bytes":149292}},"pipeline":{"clients":3,"events":{"active":45,"published":720,"total":720},"queue":{"acked":686}}},"msg_file_cache":{"SecurityHits":720},"published_events":{"Security":686,"total":686}}}} 2026-05-27T07:42:50.408+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:42:51.405+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-05-27T07:42:53.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:42:54.455+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T07:42:55.456+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:42:56.471+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:42:57.482+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:42:58.544+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 82 events 2026-05-27T07:42:59.540+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:43:00.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:43:02.562+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:43:03.590+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:43:04.608+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:43:05.628+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:43:06.658+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T07:43:07.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T07:43:08.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 84 events 2026-05-27T07:43:09.728+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:43:10.750+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:43:11.760+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:43:13.779+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:43:14.811+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-05-27T07:43:15.832+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:43:16.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:43:17.876+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:43:18.928+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 79 events 2026-05-27T07:43:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225484,"time":{"ms":47}},"total":{"ticks":2649515,"time":{"ms":328},"value":2649515},"user":{"ticks":2424031,"time":{"ms":281}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151410665}},"memstats":{"gc_next":6160096,"memory_alloc":3320224,"memory_total":407553079176,"rss":53248}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":941,"batches":26,"total":941},"read":{"bytes":156},"write":{"bytes":190093}},"pipeline":{"clients":3,"events":{"active":24,"published":920,"total":920},"queue":{"acked":941}}},"msg_file_cache":{"ApplicationSize":-1,"SecurityHits":920,"SystemSize":-1},"published_events":{"Security":941,"total":941}}}} 2026-05-27T07:43:19.933+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:43:20.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:43:21.969+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:43:22.989+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:43:24.004+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:43:25.018+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:43:27.059+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T07:43:28.062+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:43:29.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-27T07:43:30.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:43:31.133+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:43:32.144+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:43:34.164+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:43:35.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:43:37.207+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:43:38.241+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T07:43:39.260+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:43:40.273+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:43:41.303+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:43:42.306+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:43:43.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:43:44.395+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 88 events 2026-05-27T07:43:45.382+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-05-27T07:43:47.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T07:43:48.446+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:43:49.464+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:43:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225500,"time":{"ms":16}},"total":{"ticks":2649812,"time":{"ms":297},"value":2649812},"user":{"ticks":2424312,"time":{"ms":281}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151440665}},"memstats":{"gc_next":5273152,"memory_alloc":3647896,"memory_total":407624642544,"rss":12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":864,"batches":26,"total":864},"read":{"bytes":156},"write":{"bytes":176033}},"pipeline":{"clients":3,"events":{"active":42,"published":882,"total":882},"queue":{"acked":864}}},"msg_file_cache":{"SecurityHits":882},"published_events":{"Security":864,"total":864}}}} 2026-05-27T07:43:50.488+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:43:51.503+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:43:53.509+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:43:54.529+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:43:55.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:43:56.554+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:43:57.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:43:58.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:43:59.631+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 72 events 2026-05-27T07:44:00.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:44:02.651+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:44:03.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T07:44:04.690+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:44:05.705+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:44:06.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:44:07.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:44:09.741+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T07:44:10.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-05-27T07:44:11.789+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:44:12.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:44:13.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:44:14.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-05-27T07:44:15.845+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:44:16.867+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:44:18.875+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-05-27T07:44:19.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225546,"time":{"ms":46}},"total":{"ticks":2650202,"time":{"ms":390},"value":2650202},"user":{"ticks":2424656,"time":{"ms":344}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151470666}},"memstats":{"gc_next":5331552,"memory_alloc":3596856,"memory_total":407687989136}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":698,"batches":25,"total":698},"read":{"bytes":150},"write":{"bytes":150880}},"pipeline":{"clients":3,"events":{"active":40,"published":696,"total":696},"queue":{"acked":698}}},"msg_file_cache":{"SecurityHits":696},"published_events":{"Security":698,"total":698}}}} 2026-05-27T07:44:19.903+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:44:20.925+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:44:21.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:44:22.970+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:44:23.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:44:24.993+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:44:26.026+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-05-27T07:44:27.026+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T07:44:28.054+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:44:30.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:44:31.101+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T07:44:32.120+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:44:33.143+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:44:34.144+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:44:35.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:44:36.191+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:44:38.189+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T07:44:39.216+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:44:40.225+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:44:41.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:44:42.263+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:44:43.269+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:44:45.292+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:44:46.345+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-05-27T07:44:47.333+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:44:48.361+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:44:49.373+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:44:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225625,"time":{"ms":79}},"total":{"ticks":2650593,"time":{"ms":391},"value":2650593},"user":{"ticks":2424968,"time":{"ms":312}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151500665}},"memstats":{"gc_next":5626432,"memory_alloc":3237856,"memory_total":407757700064}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":816,"batches":27,"total":816},"read":{"bytes":162},"write":{"bytes":174293}},"pipeline":{"clients":3,"events":{"active":12,"published":788,"total":788},"queue":{"acked":816}}},"msg_file_cache":{"SecurityHits":788},"published_events":{"Security":816,"total":816}}}} 2026-05-27T07:44:50.377+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:44:51.406+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:44:53.416+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:44:54.421+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:44:55.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:44:56.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T07:44:58.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:44:59.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-05-27T07:45:00.508+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:45:01.549+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-05-27T07:45:02.552+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:45:04.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:45:05.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:45:06.593+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:45:07.606+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:45:08.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:45:09.654+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T07:45:10.660+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:45:11.688+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:45:12.704+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-05-27T07:45:13.718+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:45:14.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:45:15.751+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-05-27T07:45:16.808+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 78 events 2026-05-27T07:45:17.812+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:45:18.814+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:45:19.685+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225671,"time":{"ms":46}},"total":{"ticks":2650983,"time":{"ms":390},"value":2650983},"user":{"ticks":2425312,"time":{"ms":344}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151530665}},"memstats":{"gc_next":5497248,"memory_alloc":4105600,"memory_total":407823930176}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":744,"batches":26,"total":744},"read":{"bytes":156},"write":{"bytes":155734}},"pipeline":{"clients":3,"events":{"active":0,"published":732,"total":732},"queue":{"acked":744}}},"msg_file_cache":{"SecurityHits":732},"published_events":{"Security":744,"total":744}}}} 2026-05-27T07:45:20.841+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:45:21.851+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:45:22.863+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:45:23.882+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:45:24.899+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:45:25.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:45:26.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-05-27T07:45:27.952+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:45:28.966+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:45:30.985+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:45:32.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:45:33.029+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:45:34.026+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:45:36.043+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:45:37.076+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-05-27T07:45:38.096+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:45:39.108+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:45:40.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-05-27T07:45:42.131+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:45:43.166+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-05-27T07:45:44.159+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:45:45.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-05-27T07:45:46.205+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:45:47.227+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T07:45:49.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:45:49.686+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225734,"time":{"ms":63}},"total":{"ticks":2651327,"time":{"ms":344},"value":2651327},"user":{"ticks":2425593,"time":{"ms":281}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151560666}},"memstats":{"gc_next":8397392,"memory_alloc":5493808,"memory_total":407890061736,"rss":-626688}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":735,"batches":25,"total":735},"read":{"bytes":150},"write":{"bytes":158122}},"pipeline":{"clients":3,"events":{"active":36,"published":771,"total":771},"queue":{"acked":735}}},"msg_file_cache":{"SecurityHits":771},"published_events":{"Security":735,"total":735}}}} 2026-05-27T07:45:50.274+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-05-27T07:45:51.269+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-05-27T07:45:52.303+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-05-27T07:45:53.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:45:54.317+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:45:56.338+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-05-27T07:45:57.339+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-05-27T07:45:58.369+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-05-27T07:45:59.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:46:00.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T07:46:01.414+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-05-27T07:46:03.455+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-05-27T07:46:04.458+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-05-27T07:46:05.475+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:46:06.498+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:46:07.511+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:46:08.542+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-05-27T07:46:10.555+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-05-27T07:46:11.583+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-05-27T07:46:12.584+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-05-27T07:46:13.610+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:46:14.632+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:46:16.636+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-05-27T07:46:17.650+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:46:17.650+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-05-27T07:46:18.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 67 events 2026-05-27T07:46:19.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":225796,"time":{"ms":62}},"total":{"ticks":2651624,"time":{"ms":297},"value":2651624},"user":{"ticks":2425828,"time":{"ms":235}}},"handles":{"open":325},"info":{"ephemeral_id":"b55e52da-9ae7-4162-b39d-62ee521b137d","uptime":{"ms":151590665}},"memstats":{"gc_next":8598224,"memory_alloc":4401792,"memory_total":407952163416,"rss":245760}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":693,"batches":25,"total":693},"read":{"bytes":150},"write":{"bytes":151111}},"pipeline":{"clients":3,"events":{"active":2,"published":659,"total":659},"queue":{"acked":693}}},"msg_file_cache":{"SecurityHits":658,"SystemMisses":1,"SystemSize":1},"published_events":{"Security":692,"System":1,"total":693}}}} 2026-05-27T07:46:19.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-05-27T07:46:21.705+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-05-27T07:46:22.711+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-05-27T07:46:23.727+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:46:24.742+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:46:26.760+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-05-27T07:46:27.789+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-05-27T07:46:28.794+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-05-27T07:46:30.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-05-27T07:46:31.838+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:46:32.855+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-05-27T07:46:33.900+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-05-27T07:46:34.916+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-05-27T07:46:35.920+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-05-27T07:46:36.946+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-05-27T07:46:37.968+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-05-27T07:46:38.982+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-05-27T07:46:40.012+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-05-27T07:46:42.015+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-05-27T07:46:43.031+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-05-27T07:46:44.053+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-05-27T07:46:45.056+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-05-27T07:46:46.075+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-05-27T07:46:47.102+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-05-27T07:46:49.124+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-05-27T07:46:49.684+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metri