ventlogger.go:73 EventLog[Security] successfully published 21 events 2026-06-05T08:27:31.963+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 2 events 2026-06-05T08:27:31.963+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:27:33.016+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-06-05T08:27:33.016+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-06-05T08:27:33.016+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 81 events 2026-06-05T08:27:34.027+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:27:34.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317453,"time":{"ms":32}},"total":{"ticks":3228062,"time":{"ms":407},"value":3228062},"user":{"ticks":2910609,"time":{"ms":375}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":258930520}},"memstats":{"gc_next":9292432,"memory_alloc":7600416,"memory_total":584256288640,"rss":65536}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":776,"batches":27,"total":776},"read":{"bytes":162},"write":{"bytes":168505}},"pipeline":{"clients":3,"events":{"active":0,"published":776,"total":776},"queue":{"acked":776}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":3,"ApplicationSize":3,"SecurityHits":769,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":6,"Security":769,"System":1,"total":776}}}} 2026-06-05T08:27:36.058+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 47 events 2026-06-05T08:27:37.061+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:27:38.092+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:27:39.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 78 events 2026-06-05T08:27:40.145+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:27:41.157+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:27:42.180+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-06-05T08:27:43.213+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:27:44.222+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:27:45.263+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:27:46.277+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:27:47.321+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-06-05T08:27:48.363+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 74 events 2026-06-05T08:27:49.365+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:27:50.393+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:27:51.410+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:27:53.437+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:27:54.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:27:55.482+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-06-05T08:27:56.491+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:27:57.500+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:27:58.540+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-06-05T08:27:59.562+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:28:00.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:28:01.599+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:28:02.600+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-06-05T08:28:03.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:28:04.667+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-06-05T08:28:04.815+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317500,"time":{"ms":47}},"total":{"ticks":3228546,"time":{"ms":484},"value":3228546},"user":{"ticks":2911046,"time":{"ms":437}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":258960521}},"memstats":{"gc_next":5775456,"memory_alloc":4454872,"memory_total":584338733568,"rss":40960}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":1093,"batches":28,"total":1093},"read":{"bytes":168},"write":{"bytes":217547}},"pipeline":{"clients":3,"events":{"active":5,"published":1098,"total":1098},"queue":{"acked":1093}}},"msg_file_cache":{"SecurityHits":1098},"published_events":{"Security":1093,"total":1093}}}} 2026-06-05T08:28:05.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-06-05T08:28:06.708+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-06-05T08:28:07.727+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-06-05T08:28:08.744+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:28:09.757+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:28:11.789+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:28:12.782+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-06-05T08:28:13.797+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:28:14.824+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:28:15.835+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:28:16.847+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-06-05T08:28:17.870+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:28:18.885+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-06-05T08:28:19.938+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-06-05T08:28:20.954+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:28:22.960+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:28:24.006+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 65 events 2026-06-05T08:28:25.003+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:28:26.023+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:28:28.044+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-06-05T08:28:29.058+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:28:31.082+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-06-05T08:28:32.104+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:28:33.117+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:28:34.141+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:28:34.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317531,"time":{"ms":31}},"total":{"ticks":3228827,"time":{"ms":281},"value":3228827},"user":{"ticks":2911296,"time":{"ms":250}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":258990521}},"memstats":{"gc_next":6161776,"memory_alloc":5365640,"memory_total":584405402344}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":770,"batches":25,"total":770},"read":{"bytes":150},"write":{"bytes":160131}},"pipeline":{"clients":3,"events":{"active":20,"published":785,"total":785},"queue":{"acked":770}}},"msg_file_cache":{"SecurityHits":785},"published_events":{"Security":770,"total":770}}}} 2026-06-05T08:28:35.147+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:28:36.176+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-06-05T08:28:38.183+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-06-05T08:28:39.198+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:28:40.235+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-06-05T08:28:41.228+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-06-05T08:28:42.261+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:28:43.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:28:45.307+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-06-05T08:28:46.326+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:28:47.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:28:48.351+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:28:49.381+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:28:51.391+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:28:52.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-06-05T08:28:53.427+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:28:54.455+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:28:56.474+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:28:57.494+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:28:58.502+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:28:59.534+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-06-05T08:29:00.543+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:29:01.558+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:29:02.576+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:29:04.586+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-06-05T08:29:04.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317562,"time":{"ms":31}},"total":{"ticks":3229155,"time":{"ms":328},"value":3229155},"user":{"ticks":2911593,"time":{"ms":297}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259020520}},"memstats":{"gc_next":5820768,"memory_alloc":5244952,"memory_total":584473547384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":777,"batches":25,"total":777},"read":{"bytes":150},"write":{"bytes":162335}},"pipeline":{"clients":3,"events":{"active":71,"published":828,"total":828},"queue":{"acked":777}}},"msg_file_cache":{"SecurityHits":828},"published_events":{"Security":777,"total":777}}}} 2026-06-05T08:29:05.641+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events 2026-06-05T08:29:06.652+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:29:07.654+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:29:08.700+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:29:09.705+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:29:11.740+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:29:12.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:29:14.763+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:29:15.801+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:29:16.803+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:29:17.814+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:29:18.836+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:29:19.845+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:29:20.881+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-06-05T08:29:21.919+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 58 events 2026-06-05T08:29:22.922+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-06-05T08:29:23.958+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:29:24.994+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-06-05T08:29:26.000+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:29:27.017+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:29:28.032+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:29:29.046+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:29:30.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:29:32.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:29:33.100+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:29:34.140+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 4 events 2026-06-05T08:29:34.140+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 10 events 2026-06-05T08:29:34.140+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:29:34.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317609,"time":{"ms":47}},"total":{"ticks":3229624,"time":{"ms":469},"value":3229624},"user":{"ticks":2912015,"time":{"ms":422}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259050521}},"memstats":{"gc_next":9159792,"memory_alloc":5112656,"memory_total":584542068792}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":858,"batches":26,"total":858},"read":{"bytes":156},"write":{"bytes":179223}},"pipeline":{"clients":3,"events":{"active":13,"published":800,"total":800},"queue":{"acked":858}}},"msg_file_cache":{"ApplicationHits":7,"ApplicationMisses":3,"SecurityHits":786,"SystemHits":3,"SystemMisses":1},"published_events":{"Application":10,"Security":844,"System":4,"total":858}}}} 2026-06-05T08:29:35.136+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:29:36.152+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:29:37.194+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:29:38.190+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:29:39.193+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-06-05T08:29:40.224+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-06-05T08:29:41.248+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:29:42.242+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:29:43.283+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:29:45.297+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:29:46.328+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:29:47.350+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-06-05T08:29:48.350+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-06-05T08:29:50.390+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-06-05T08:29:51.391+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-06-05T08:29:52.409+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:29:53.445+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-06-05T08:29:54.446+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:29:56.466+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:29:57.486+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-06-05T08:29:58.501+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:29:59.522+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:30:00.527+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:30:01.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:30:02.572+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:30:04.591+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:30:04.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317625,"time":{"ms":16}},"total":{"ticks":3229906,"time":{"ms":282},"value":3229906},"user":{"ticks":2912281,"time":{"ms":266}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259080520}},"memstats":{"gc_next":5841552,"memory_alloc":3084792,"memory_total":584608680864}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":740,"batches":26,"total":740},"read":{"bytes":156},"write":{"bytes":159620}},"pipeline":{"clients":3,"events":{"active":13,"published":740,"total":740},"queue":{"acked":740}}},"msg_file_cache":{"SecurityHits":740},"published_events":{"Security":740,"total":740}}}} 2026-06-05T08:30:05.598+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:30:06.635+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-06-05T08:30:07.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:30:09.671+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:30:10.685+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:30:11.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:30:12.706+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-06-05T08:30:14.737+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:30:15.760+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:30:16.770+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:30:17.793+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:30:18.816+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:30:19.832+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-06-05T08:30:20.848+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:30:22.884+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-06-05T08:30:23.899+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:30:24.905+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:30:25.935+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:30:26.957+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-06-05T08:30:27.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:30:28.994+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-06-05T08:30:29.990+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-06-05T08:30:31.017+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:30:32.039+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:30:34.069+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:30:34.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317687,"time":{"ms":62}},"total":{"ticks":3230249,"time":{"ms":343},"value":3230249},"user":{"ticks":2912562,"time":{"ms":281}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259110521}},"memstats":{"gc_next":9026672,"memory_alloc":4987312,"memory_total":584675862032}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":800,"batches":25,"total":800},"read":{"bytes":150},"write":{"bytes":166913}},"pipeline":{"clients":3,"events":{"active":13,"published":800,"total":800},"queue":{"acked":800}}},"msg_file_cache":{"SecurityHits":800},"published_events":{"Security":800,"total":800}}}} 2026-06-05T08:30:35.071+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:30:37.094+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:30:38.131+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:30:39.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:30:41.139+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:30:42.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 78 events 2026-06-05T08:30:43.203+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:30:45.215+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:30:46.226+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:30:47.251+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:30:48.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:30:49.284+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:30:50.293+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:30:51.313+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:30:52.330+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:30:53.372+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:30:55.391+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:30:56.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-06-05T08:30:57.430+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:30:59.441+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:31:00.456+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:31:01.463+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:31:02.477+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:31:03.509+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:31:04.512+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:31:04.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317718,"time":{"ms":31}},"total":{"ticks":3230577,"time":{"ms":328},"value":3230577},"user":{"ticks":2912859,"time":{"ms":297}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259140520}},"memstats":{"gc_next":8998736,"memory_alloc":6512376,"memory_total":584740030600}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":728,"batches":25,"total":728},"read":{"bytes":150},"write":{"bytes":156977}},"pipeline":{"clients":3,"events":{"active":0,"published":715,"total":715},"queue":{"acked":728}}},"msg_file_cache":{"SecurityHits":715},"published_events":{"Security":728,"total":728}}}} 2026-06-05T08:31:06.517+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-06-05T08:31:07.562+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 63 events 2026-06-05T08:31:08.557+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:31:09.579+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:31:10.601+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:31:11.617+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:31:12.639+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:31:13.651+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:31:14.662+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:31:15.684+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-06-05T08:31:16.707+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:31:18.721+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:31:19.742+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:31:20.754+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 21 events 2026-06-05T08:31:21.756+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-06-05T08:31:22.803+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 46 events 2026-06-05T08:31:23.822+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-06-05T08:31:24.831+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:31:25.850+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:31:27.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:31:28.879+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:31:29.899+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:31:30.907+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:31:31.927+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:31:32.959+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:31:33.967+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:31:34.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317796,"time":{"ms":78}},"total":{"ticks":3230983,"time":{"ms":406},"value":3230983},"user":{"ticks":2913187,"time":{"ms":328}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259170520}},"memstats":{"gc_next":5924336,"memory_alloc":2959976,"memory_total":584807544568}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":739,"batches":26,"total":739},"read":{"bytes":156},"write":{"bytes":161753}},"pipeline":{"clients":3,"events":{"active":28,"published":767,"total":767},"queue":{"acked":739}}},"msg_file_cache":{"ApplicationSize":-3,"SecurityHits":767,"SystemSize":-1},"published_events":{"Security":739,"total":739}}}} 2026-06-05T08:31:34.988+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:31:36.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:31:37.023+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:31:39.072+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 74 events 2026-06-05T08:31:41.103+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-06-05T08:31:42.116+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:31:43.126+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:31:44.162+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 53 events 2026-06-05T08:31:45.167+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:31:46.178+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:31:48.179+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 11 events 2026-06-05T08:31:49.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-06-05T08:31:50.232+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:31:51.248+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:31:53.277+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-06-05T08:31:54.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:31:55.337+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 71 events 2026-06-05T08:31:56.342+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:31:57.341+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-06-05T08:31:58.392+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 74 events 2026-06-05T08:32:00.394+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:32:01.432+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 54 events 2026-06-05T08:32:02.436+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:32:04.457+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:32:04.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317843,"time":{"ms":47}},"total":{"ticks":3231452,"time":{"ms":469},"value":3231452},"user":{"ticks":2913609,"time":{"ms":422}}},"handles":{"open":328},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259200521}},"memstats":{"gc_next":6043360,"memory_alloc":3593976,"memory_total":584875243496}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":839,"batches":24,"total":839},"read":{"bytes":144},"write":{"bytes":170684}},"pipeline":{"clients":3,"events":{"active":49,"published":860,"total":860},"queue":{"acked":839}}},"msg_file_cache":{"SecurityHits":860},"published_events":{"Security":839,"total":839}}}} 2026-06-05T08:32:05.490+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-06-05T08:32:06.501+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:32:07.507+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:32:08.525+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 26 events 2026-06-05T08:32:09.567+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:32:10.559+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 5 events 2026-06-05T08:32:11.601+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 57 events 2026-06-05T08:32:12.606+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:32:13.618+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 6 events 2026-06-05T08:32:13.618+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:32:14.661+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 62 events 2026-06-05T08:32:15.661+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-06-05T08:32:15.661+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:32:16.688+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-06-05T08:32:16.688+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:32:17.714+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 1 events 2026-06-05T08:32:17.714+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:32:18.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:32:19.758+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:32:20.779+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:32:22.792+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:32:23.808+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:32:24.833+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-06-05T08:32:25.836+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 10 events 2026-06-05T08:32:26.856+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:32:28.868+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:32:29.907+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 55 events 2026-06-05T08:32:30.911+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:32:31.920+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:32:32.953+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:32:33.976+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:32:34.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317859,"time":{"ms":16}},"total":{"ticks":3231718,"time":{"ms":266},"value":3231718},"user":{"ticks":2913859,"time":{"ms":250}}},"handles":{"open":326},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259230521}},"memstats":{"gc_next":9003824,"memory_alloc":7681728,"memory_total":584945841928,"rss":-12288}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":866,"batches":27,"total":866},"read":{"bytes":162},"write":{"bytes":182850}},"pipeline":{"clients":3,"events":{"active":0,"published":817,"total":817},"queue":{"acked":866}}},"msg_file_cache":{"ApplicationHits":6,"ApplicationMisses":2,"ApplicationSize":2,"SecurityHits":808,"SystemMisses":1,"SystemSize":1},"published_events":{"Application":8,"Security":857,"System":1,"total":866}}}} 2026-06-05T08:32:35.971+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-06-05T08:32:37.002+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-06-05T08:32:38.019+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 32 events 2026-06-05T08:32:39.022+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 13 events 2026-06-05T08:32:40.070+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 64 events 2026-06-05T08:32:41.075+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:32:42.099+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:32:43.112+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:32:44.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-06-05T08:32:44.149+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-06-05T08:32:44.149+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 4 events 2026-06-05T08:32:46.165+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 39 events 2026-06-05T08:32:47.171+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:32:48.172+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 4 events 2026-06-05T08:32:49.200+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 40 events 2026-06-05T08:32:50.218+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:32:51.217+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-06-05T08:32:53.245+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:32:54.268+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:32:55.288+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:32:56.302+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:32:57.334+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 48 events 2026-06-05T08:32:58.332+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 8 events 2026-06-05T08:32:59.355+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:33:00.383+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:33:01.403+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:33:02.413+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:33:04.425+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:33:04.814+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317906,"time":{"ms":47}},"total":{"ticks":3232124,"time":{"ms":406},"value":3232124},"user":{"ticks":2914218,"time":{"ms":359}}},"handles":{"open":326},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259260521}},"memstats":{"gc_next":8799728,"memory_alloc":6424944,"memory_total":585016336472,"rss":16384}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":795,"batches":26,"total":795},"read":{"bytes":156},"write":{"bytes":171276}},"pipeline":{"clients":3,"events":{"active":56,"published":851,"total":851},"queue":{"acked":795}}},"msg_file_cache":{"ApplicationHits":3,"ApplicationMisses":1,"ApplicationSize":1,"SecurityHits":846,"SystemHits":1},"published_events":{"Application":4,"Security":790,"System":1,"total":795}}}} 2026-06-05T08:33:05.478+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 56 events 2026-06-05T08:33:06.482+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:33:07.508+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:33:08.521+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:33:09.532+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:33:10.548+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:33:12.565+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:33:13.576+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:33:14.611+0800 INFO beater/eventlogger.go:73 EventLog[Application] successfully published 2 events 2026-06-05T08:33:14.611+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 60 events 2026-06-05T08:33:15.629+0800 INFO beater/eventlogger.go:73 EventLog[System] successfully published 1 events 2026-06-05T08:33:15.629+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 37 events 2026-06-05T08:33:16.643+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:33:17.680+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:33:19.682+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-06-05T08:33:20.695+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:33:21.723+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 42 events 2026-06-05T08:33:22.738+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 30 events 2026-06-05T08:33:23.746+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:33:24.770+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:33:25.795+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 43 events 2026-06-05T08:33:26.807+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:33:27.844+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 50 events 2026-06-05T08:33:28.850+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 24 events 2026-06-05T08:33:29.858+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-06-05T08:33:31.906+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:33:32.898+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 2 events 2026-06-05T08:33:34.815+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317953,"time":{"ms":47}},"total":{"ticks":3232453,"time":{"ms":329},"value":3232453},"user":{"ticks":2914500,"time":{"ms":282}}},"handles":{"open":326},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259290521}},"memstats":{"gc_next":5949056,"memory_alloc":3901768,"memory_total":585081533000,"rss":4096}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":757,"batches":25,"total":757},"read":{"bytes":150},"write":{"bytes":160598}},"pipeline":{"clients":3,"events":{"active":49,"published":750,"total":750},"queue":{"acked":757}}},"msg_file_cache":{"ApplicationHits":2,"SecurityHits":747,"SystemHits":1},"published_events":{"Application":2,"Security":754,"System":1,"total":757}}}} 2026-06-05T08:33:34.934+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 49 events 2026-06-05T08:33:35.941+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:33:36.944+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 7 events 2026-06-05T08:33:37.972+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 38 events 2026-06-05T08:33:38.977+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 18 events 2026-06-05T08:33:40.999+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:33:42.011+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 25 events 2026-06-05T08:33:43.051+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:33:44.062+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 29 events 2026-06-05T08:33:46.078+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:33:47.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 59 events 2026-06-05T08:33:48.118+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 12 events 2026-06-05T08:33:49.132+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:33:50.149+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 33 events 2026-06-05T08:33:51.174+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 36 events 2026-06-05T08:33:53.185+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:33:54.207+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:33:55.223+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:33:56.233+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 20 events 2026-06-05T08:33:57.252+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 27 events 2026-06-05T08:33:58.291+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 52 events 2026-06-05T08:33:59.334+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 69 events 2026-06-05T08:34:00.320+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 9 events 2026-06-05T08:34:02.336+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 19 events 2026-06-05T08:34:03.365+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 41 events 2026-06-05T08:34:04.376+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:34:04.813+0800 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":317953},"total":{"ticks":3232734,"time":{"ms":281},"value":3232734},"user":{"ticks":2914781,"time":{"ms":281}}},"handles":{"open":326},"info":{"ephemeral_id":"58881915-8cda-4a2c-99ee-58db7f09ca1e","uptime":{"ms":259320520}},"memstats":{"gc_next":6414016,"memory_alloc":5313872,"memory_total":585148369264}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":797,"batches":26,"total":797},"read":{"bytes":156},"write":{"bytes":168310}},"pipeline":{"clients":3,"events":{"active":3,"published":751,"total":751},"queue":{"acked":797}}},"msg_file_cache":{"SecurityHits":751},"published_events":{"Security":797,"total":797}}}} 2026-06-05T08:34:05.375+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 3 events 2026-06-05T08:34:06.418+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:34:07.420+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 16 events 2026-06-05T08:34:09.444+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:34:10.449+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-06-05T08:34:11.470+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:34:12.498+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 44 events 2026-06-05T08:34:13.500+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 14 events 2026-06-05T08:34:14.533+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 34 events 2026-06-05T08:34:16.566+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 51 events 2026-06-05T08:34:17.580+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:34:18.593+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 23 events 2026-06-05T08:34:19.636+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 61 events 2026-06-05T08:34:20.642+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 15 events 2026-06-05T08:34:21.656+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 28 events 2026-06-05T08:34:22.673+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 31 events 2026-06-05T08:34:23.693+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 35 events 2026-06-05T08:34:24.699+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 17 events 2026-06-05T08:34:25.721+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 22 events 2026-06-05T08:34:27.753+0800 INFO beater/eventlogger.go:73 EventLog[Security] successfully published 45 events 2026-06-05T08:34:28.764+0800 INFO beater/eventlogger.go:73 EventLog[Security] suX|p6p)( <2026-06-07.logX|p6Xp)( <2026-06-07.logX|p6p) <2026-06-07.logX|p6q) <2026-06-07.logX|p6`q) <2026-06-07.logX|p6q) <2026-06-07.logX|p6r) <2026-06-07.logX|p6hr) <2026-06-07.logX|p6r) <2026-06-07.logX|p6s) <2026-06-07.logX|p6ps)% <2026-06-07.logX|p6s)% <2026-06-07.logX|p6 t)K <2026-06-07.logX|p6xt)K <2026-06-07.logX|p6t)K <2026-06-07.logX|p6(u)K <2026-06-07.logX|p6u)q <2026-06-07.logX|p6u)q <2026-06-07.logX|p60v) <2026-06-07.logX|p6v) <2026-06-07.logX|p6v)-P <2026-06-07.logX|p68w)-P <2026-06-07.logX|p6w)I <2026-06-07.logX|p6w)I <2026-06-07.logX|p6@x)9 <2026-06-07.logX|p6x)9 <2026-06-07.logX|p6x) <2026-06-07.logX|p6Hy) <2026-06-07.logX|p6y)[ <2026-06-07.logX|p6y)[ <2026-06-07.logX|p6Pz)K <2026-06-07.logX|p6z)a <2026-06-07.logX|p6{) <2026-06-07.logX|p6X{) <2026-06-07.logX|p6{)V <2026-06-07.logX|p6|) <2026-06-07.logX|p6`|)? <2026-06-07.logX|p6|)? <2026-06-07.logX|p6})f <2026-06-07.logX|p6h})f <2026-06-07.loghy;#})| &<.winlogbeat.yml.newhy;#(~)q &<.winlogbeat.yml.newh