r.go:73 EventLog[Security] successfully published 27 events 2026-07-13T05:29:13.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-13T05:29:14.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-13T05:29:15.089+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T05:29:17.102+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-07-13T05:29:18.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-13T05:29:19.138+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-13T05:29:21.177+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 90 events 2026-07-13T05:29:23.196+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-13T05:29:24.232+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-07-13T05:29:25.240+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T05:29:26.250+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T05:29:27.281+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-13T05:29:28.297+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T05:29:29.315+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T05:29:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":304593,"time":{"ms":31}},"total":{"ticks":3116186,"time":{"ms":328},"value":3116186},"user":{"ticks":2811593,"time":{"ms":297}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":245730617}},"memstats":{"gc_next":5881312,"memory_alloc":3445864,"memory_total":558859602696}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":650,"batches":23,"total":650},"read":{"bytes":138},"write":{"bytes":141987}},"pipeline":{"clients":3,"events":{"active":38,"published":665,"total":665},"queue":{"acked":650}}},"msg_file_cache":{"SecurityHits":665},"published_events":{"Security":650,"total":650}}}} 2026-07-13T05:29:31.341+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-13T05:29:32.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T05:29:33.397+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-07-13T05:29:35.384+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-07-13T05:29:37.422+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-13T05:29:39.432+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-13T05:29:40.442+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T05:29:41.459+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T05:29:42.457+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-07-13T05:29:43.492+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-13T05:29:45.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-13T05:29:46.516+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-13T05:29:47.514+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-13T05:29:48.529+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T05:29:49.553+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-13T05:29:51.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-13T05:29:52.585+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-13T05:29:53.615+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-07-13T05:29:54.626+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T05:29:55.636+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-13T05:29:56.653+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-13T05:29:57.670+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T05:29:58.696+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-13T05:30:00.701+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-13T05:30:01.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":304656,"time":{"ms":63}},"total":{"ticks":3116624,"time":{"ms":438},"value":3116624},"user":{"ticks":2811968,"time":{"ms":375}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":245760618}},"memstats":{"gc_next":8972240,"memory_alloc":7259088,"memory_total":558919638448,"rss":36864}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":665,"batches":24,"total":665},"read":{"bytes":144},"write":{"bytes":145337}},"pipeline":{"clients":3,"events":{"active":18,"published":645,"total":645},"queue":{"acked":665}}},"msg_file_cache":{"SecurityHits":645},"published_events":{"Security":665,"total":665}}}} 2026-07-13T05:30:01.715+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-13T05:30:02.735+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-13T05:30:03.739+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-13T05:30:05.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-13T05:30:07.783+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-13T05:30:09.815+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-13T05:30:10.824+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T05:30:11.849+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-07-13T05:30:13.853+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-13T05:30:14.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-13T05:30:15.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-13T05:30:16.910+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T05:30:17.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-07-13T05:30:18.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-13T05:30:19.986+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-13T05:30:21.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-13T05:30:22.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-13T05:30:23.047+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-07-13T05:30:25.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-07-13T05:30:26.084+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-13T05:30:27.100+0800 INFO beater/eventloggo:73 EventLog[Security] successfully published 33 events 2026-07-12T12:42:26.077+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:42:27.085+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:42:28.096+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:42:29.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:42:30.156+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-07-12T12:42:31.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230343,"time":{"ms":15}},"total":{"ticks":2363108,"time":{"ms":312},"value":2363108},"user":{"ticks":2132765,"time":{"ms":297}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":185310617}},"memstats":{"gc_next":6365680,"memory_alloc":3195840,"memory_total":421879911328}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":806,"batches":27,"total":806},"read":{"bytes":162},"write":{"bytes":178806}},"pipeline":{"clients":3,"events":{"active":0,"published":763,"total":763},"queue":{"acked":806}}},"msg_file_cache":{"SecurityHits":763},"published_events":{"Security":806,"total":806}}}} 2026-07-12T12:42:32.158+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T12:42:33.186+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:42:34.195+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-07-12T12:42:35.209+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:42:37.233+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-12T12:42:38.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:42:39.255+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:42:40.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-12T12:42:41.298+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:42:42.304+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:42:43.319+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:42:44.322+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T12:42:45.354+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:42:46.374+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:42:47.379+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:42:48.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:42:49.413+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-07-12T12:42:50.437+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:42:51.444+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:42:52.473+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:42:53.491+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:42:55.514+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:42:56.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:42:57.538+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:42:58.561+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:42:59.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:43:00.616+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-07-12T12:43:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230359,"time":{"ms":16}},"total":{"ticks":2363437,"time":{"ms":329},"value":2363437},"user":{"ticks":2133078,"time":{"ms":313}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":185340617}},"memstats":{"gc_next":6438656,"memory_alloc":4512880,"memory_total":421952091728}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":812,"batches":27,"total":812},"read":{"bytes":162},"write":{"bytes":174293}},"pipeline":{"clients":3,"events":{"active":43,"published":855,"total":855},"queue":{"acked":812}}},"msg_file_cache":{"SecurityHits":855},"published_events":{"Security":812,"total":812}}}} 2026-07-12T12:43:01.641+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:43:03.644+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:43:04.663+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-07-12T12:43:05.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:43:06.687+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:43:08.719+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-07-12T12:43:09.723+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-07-12T12:43:10.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-07-12T12:43:12.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:43:13.766+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-07-12T12:43:14.789+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:43:16.809+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-12T12:43:17.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-12T12:43:18.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:43:20.870+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:43:22.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T12:43:23.883+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:43:24.909+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:43:25.931+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-07-12T12:43:26.936+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-07-12T12:43:27.956+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-07-12T12:43:28.951+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 1 events 2026-07-12T12:43:30.973+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:43:31.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230390,"time":{"ms":31}},"total":{"ticks":2363811,"time":{"ms":374},"value":2363811},"user":{"ticks":2133421,"time":{"ms":343}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":185370618}},"memstats":{"gc_next":6241984,"memory_alloc":4257680,"memory_total":422008249608}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":582,"batches":23,"total":582},"read":{"bytes":138},"write":{"bytes":135650}},"pipeline":{"clients":3,"events":{"active":39,"published":578,"total":578},"queue":{"acked":582}}},"msg_file_cache":{"SecurityHits":578},"published_events":{"Security":582,"total":582}}}} 2026-07-12T12:43:31.998+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:43:34.014+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:43:35.015+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-07-12T12:43:36.029+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:43:37.056+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:43:38.065+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:43:39.075+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-07-12T12:43:41.097+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-07-12T12:43:42.113+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:43:43.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:43:44.146+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:43:45.153+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-07-12T12:43:46.188+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-12T12:43:47.222+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:43:48.227+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:43:49.243+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:43:51.258+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:43:52.281+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-07-12T12:43:53.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-07-12T12:43:54.316+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-07-12T12:43:55.328+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:43:56.357+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:43:57.377+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:43:58.388+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:43:59.417+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-07-12T12:44:00.421+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-07-12T12:44:01.049+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230421,"time":{"ms":31}},"total":{"ticks":2364108,"time":{"ms":297},"value":2364108},"user":{"ticks":2133687,"time":{"ms":266}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":185400617}},"memstats":{"gc_next":8937744,"memory_alloc":7361248,"memory_total":422075330144}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":777,"batches":26,"total":777},"read":{"bytes":156},"write":{"bytes":170077}},"pipeline":{"clients":3,"events":{"active":19,"published":757,"total":757},"queue":{"acked":777}}},"msg_file_cache":{"SecurityHits":757,"SystemSize":-1},"published_events":{"Security":777,"total":777}}}} 2026-07-12T12:44:01.434+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-07-12T12:44:02.479+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 66 events 2026-07-12T12:44:03.482+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:44:04.494+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-07-12T12:44:05.512+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:44:06.537+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-07-12T12:44:07.551+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-07-12T12:44:08.570+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:44:09.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-07-12T12:44:10.582+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-07-12T12:44:12.630+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-07-12T12:44:12.630+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 70 events 2026-07-12T12:44:13.622+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 6 events 2026-07-12T12:44:14.637+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:44:15.657+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-07-12T12:44:16.672+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:44:17.704+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-07-12T12:44:18.728+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-07-12T12:44:19.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-07-12T12:44:20.742+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-07-12T12:44:22.775+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-07-12T12:44:23.776+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-07-12T12:44:24.799+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-07-12T12:44:25.805+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-07-12T12:44:26.818+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-07-12T12:44:27.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-07-12T12:44:28.864+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-07-12T12:44:29.865+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-07-12T12:44:30.901+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-07-12T12:44:31.050+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":230468,"time":{"ms":47}},"total":{"ticks":2364514,"time":{"ms":406},"value":2364514},"user":{"ticks":2134046,"time":{"ms":359}}},"handles":{"open":322},"info":{"ephemeral_id":"2d2b0e21-2101-4a2a-ac65-3d1a25c0148d","uptime":{"ms":185430618}},"memstats":{"gc_next":8692464,"memory_alloc":7168504,"memory_total":422146934384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":820,"batches":28,"total":820},"read":{"bytes":168},"write":{"bytes":177693}},"pipeline":{"clients":3,"events":{"active":0,"published":801,"total":801},"queue":{"acked":820}}},"msg_file_cache":{"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":800},"published_events":{"Application":1,"Security":819,"total":820}}}} 2026-07-12T12:44:32.925+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-07-12T12:44:33.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-07-12T12:44:34.963+0800 INFO beater/eventlogger.go:73 EventL