Untitled

[root@node-auto-006-dcp-euw1a-prod filebeat]# cat filebeat.log-20230503
{"level":"info","timestamp":"2023-05-02T03:42:03.240Z","caller":"log/harvester.go:312","message":"File was truncated. Begin reading file from offset 0: /ebs/logs/dns_monitoring.log"}
{"level":"info","timestamp":"2023-05-02T03:42:03.257Z","caller":"log/harvester.go:312","message":"File was truncated. Begin reading file from offset 0: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T03:42:04.184Z","caller":"log/harvester.go:312","message":"File was truncated. Begin reading file from offset 0: /ebs/ws_reconnecting_proxy.log"}
{"level":"info","timestamp":"2023-05-02T03:42:04.317Z","caller":"log/harvester.go:312","message":"File was truncated. Begin reading file from offset 0: /ebs/iotop.log"}
{"level":"info","timestamp":"2023-05-02T03:42:05.338Z","caller":"log/harvester.go:312","message":"File was truncated. Begin reading file from offset 0: /ebs/logs/filebeat/filebeat.log"}
{"level":"info","timestamp":"2023-05-02T03:42:08.299Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/logs/filebeat/filebeat.log"}
{"level":"info","timestamp":"2023-05-02T03:42:08.318Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/logs/collectd.log"}
{"level":"info","timestamp":"2023-05-02T03:42:10.841Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T03:42:14.595Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/logs/dns_monitoring.log"}
{"level":"info","timestamp":"2023-05-02T03:42:18.258Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/ws_reconnecting_proxy.log"}
{"level":"info","timestamp":"2023-05-02T03:43:04.597Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/iotop.log"}
{"level":"info","timestamp":"2023-05-02T03:47:13.326Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/logs/collectd.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T03:47:15.858Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T03:50:08.263Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T03:52:20.868Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T03:55:13.273Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T03:57:25.884Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:00:06.341Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/selenium-node-2023-05-02-04.log.norotate"}
{"level":"info","timestamp":"2023-05-02T04:00:08.282Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:05:06.013Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/selenium-node-2023-05-02-03.log.norotate. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:05:13.290Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:10:08.294Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:15:13.302Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:20:08.309Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:25:13.319Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:30:08.324Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:35:13.339Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:40:08.339Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:45:13.348Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:50:08.355Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T04:52:21.073Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T04:55:13.362Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T04:57:26.088Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:00:06.577Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/selenium-node-2023-05-02-05.log.norotate"}
{"level":"info","timestamp":"2023-05-02T05:00:08.368Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:05:05.488Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/selenium-node-2023-05-02-04.log.norotate. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:05:13.378Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:10:08.382Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:15:13.390Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:20:08.400Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:25:13.422Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:30:08.426Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:35:13.446Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:40:08.448Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:45:13.458Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:50:08.477Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T05:52:21.268Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T05:55:13.484Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T05:57:26.288Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:00:06.785Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/selenium-node-2023-05-02-06.log.norotate"}
{"level":"info","timestamp":"2023-05-02T06:00:08.494Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:05:05.783Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/selenium-node-2023-05-02-05.log.norotate. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:05:13.501Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:10:08.516Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:15:13.524Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:20:08.533Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:25:13.543Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:30:08.549Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:35:13.556Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:40:08.569Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:45:14.345Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:50:08.592Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T06:52:21.458Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T06:55:13.601Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T06:57:26.474Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:00:06.966Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/selenium-node-2023-05-02-07.log.norotate"}
{"level":"info","timestamp":"2023-05-02T07:00:08.602Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:05:05.349Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/selenium-node-2023-05-02-06.log.norotate. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:05:14.360Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:10:08.625Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:15:14.735Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:20:08.638Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:25:13.645Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:30:08.654Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:35:15.851Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:40:08.670Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:45:13.687Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:50:08.683Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T07:52:21.653Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T07:55:13.690Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T07:57:26.668Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:00:07.186Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/selenium-node-2023-05-02-08.log.norotate"}
{"level":"info","timestamp":"2023-05-02T08:00:08.695Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T08:05:05.833Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/selenium-node-2023-05-02-07.log.norotate. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:05:13.715Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:10:08.712Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T08:15:13.721Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:20:08.741Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T08:22:01.802Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T08:25:13.769Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:27:31.828Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:30:09.258Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T08:31:31.814Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/wazuh/ossec.log"}
{"level":"info","timestamp":"2023-05-02T08:35:14.283Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:36:39.841Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/wazuh/ossec.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:40:09.284Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}
{"level":"info","timestamp":"2023-05-02T08:45:14.294Z","caller":"log/harvester.go:324","message":"File is inactive: /ebs/root_cron.log. Closing because close_inactive of 5m0s reached."}
{"level":"info","timestamp":"2023-05-02T08:50:09.302Z","caller":"log/harvester.go:297","message":"Harvester started for file: /ebs/root_cron.log"}