Kafdrop: Topic: logstash-local-network: Messages

Offset: 646169 Key: Timestamp: 2025-12-10 03:34:29.385 Headers: empty

{"@version":"1","event":{"hash":"48ebbed8c0cb7812d72712f6f625f1141a8997705e649f788f1f325596979e26"},"ecs":{"version":"1.6.0"},"message":"1765337666.986830\tCcmbV62iIZo8zfgaB8\t172.30.1.12\t36236\t8.8.8.8\t53\tudp\t55331\t0.028611\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t7.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:28.278Z","host":{"name":"f6b540842a86"},"log":{"offset":538033,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646170 Key: Timestamp: 2025-12-10 03:34:29.385 Headers: empty

{"@version":"1","event":{"hash":"59158e2f667c0207015bc79a6e6be16cf3da07f2d0a0b42a4f9ca20d91975fa2"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337656.550687\tCU0UN848tYRwY6qzu7\t172.30.1.35\t49970\t172.30.1.254\t53\tudp\tdns\t0.006115\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:28.715Z","host":{"name":"f6b540842a86"},"log":{"offset":535188,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646171 Key: Timestamp: 2025-12-10 03:34:29.385 Headers: empty

{"@version":"1","event":{"hash":"9b901a4e4af2dfc4f489e7f75103cc0d55977479727c49a9f4ad41a6025d449a"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337373.149274\tCy4ueSJkPEEknjRNf\t172.30.1.254\t47630\t255.255.255.255\t29810\tudp\t-\t234.670065\t9912\t0\tS0\tT\tF\t0\tD\t24\t10584\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:28.715Z","host":{"name":"f6b540842a86"},"log":{"offset":535443,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646172 Key: Timestamp: 2025-12-10 03:34:29.385 Headers: empty

{"@version":"1","event":{"hash":"6148b03aba5d8845387cabdbc6b7dbd7cc6e3c6206124f94d439e8d5a5d8adfc"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337656.626700\tCtgsJe4Rn6sr7v1gO4\t172.30.1.12\t45563\t8.8.8.8\t53\tudp\tdns\t0.028034\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:28.715Z","host":{"name":"f6b540842a86"},"log":{"offset":535319,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646173 Key: Timestamp: 2025-12-10 03:34:30.386 Headers: empty

{"@version":"1","event":{"hash":"94bfdb44af73c46055624ed88e77eac4155d3cf64ea4b74b1d5154c3b59941bd"},"ecs":{"version":"1.6.0"},"message":"1765337668.027063\tCukopi4yD4X2dF7FY9\t172.30.1.12\t35211\t8.8.8.8\t53\tudp\t55332\t0.028884\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t6.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:29.281Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":538206},"tags":["beats_input_codec_plain_applied"]}

Offset: 646174 Key: Timestamp: 2025-12-10 03:34:30.386 Headers: empty

{"@version":"1","event":{"hash":"0a64ac104bdba2a3e56aaa2973f2e3f79b8a2b035ca90bfe7b935656c1d22c4a"},"ecs":{"version":"1.6.0"},"message":"1765337665.083955\tChm81o3MkF7MsXg778\t172.30.1.35\t52177\t150.171.27.11\t443\tTLSv12\tTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\tsecp384r1\tedge.microsoft.com\tF\t-\th2\tT\tFl1r453RtsLDSBMOH,F5Me5JWLQq7osKBH4\t(empty)\tCN=edge.microsoft.com,O=Microsoft Corporation,L=Redmond,ST=WA,C=US\tCN=Microsoft Azure RSA TLS Issuing CA 07,O=Microsoft Corporation,C=US\t-\t-\tok\t663d779a26d5afa277ccf5f7a11687db\t0f14538e1c9070becdad7739c67d6363","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:29.796Z","host":{"name":"f6b540842a86"},"log":{"offset":36116,"file":{"path":"/usr/share/filebeat/logs/ssl.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646175 Key: Timestamp: 2025-12-10 03:34:30.386 Headers: empty

{"@version":"1","event":{"hash":"4a0d3482b79e7c0eea44cae118e9110044c09216b625f81fdf5a658c55b61885"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337663.603368\tC7RDqB4RYXo4IDkxR3\t172.30.1.2\t52284\t172.30.4.139\t1514\ttcp\t-\t2.995751\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:29.715Z","host":{"name":"f6b540842a86"},"log":{"offset":535705,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646176 Key: Timestamp: 2025-12-10 03:34:30.386 Headers: empty

{"@version":"1","event":{"hash":"001bcd2f0b01cb4e768338a90fe87bbdfe17c6ad0bf64f537ddd35094e7cad14"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337657.656821\tCzs0WJ1xdR9G6dE6Fg\t172.30.1.12\t38637\t8.8.8.8\t53\tudp\tdns\t0.029410\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:29.715Z","host":{"name":"f6b540842a86"},"log":{"offset":535581,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646177 Key: Timestamp: 2025-12-10 03:34:31.391 Headers: empty

{"@version":"1","event":{"hash":"94972da85b4ac0aa9e080d017ad86734523b84d26bbb7eaba24bbabcdfb1c833"},"ecs":{"version":"1.6.0"},"message":"1765337669.066800\tCKpHF9g1HyDZO5Qwj\t172.30.1.12\t38499\t8.8.8.8\t53\tudp\t55333\t0.027653\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t163.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:30.287Z","host":{"name":"f6b540842a86"},"log":{"offset":538379,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646178 Key: Timestamp: 2025-12-10 03:34:31.391 Headers: empty

{"@version":"1","event":{"hash":"cc83951c3e80480ee98393427df2ee252cd1b07726c8f91b70ff9c48d53389aa"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337659.726760\tCNstEx1s05sRk9adX1\t172.30.1.12\t33683\t8.8.8.8\t53\tudp\tdns\t0.027994\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:30.717Z","host":{"name":"f6b540842a86"},"log":{"offset":535954,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646179 Key: Timestamp: 2025-12-10 03:34:31.391 Headers: empty

{"@version":"1","event":{"hash":"8a9ca6d40faf032ed7dbb2f8d6211e43ee541dc5ffc38faa4d8e903400a3d9f9"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337658.696749\tCXp6eH3WXCUSrOY1Ug\t172.30.1.12\t49911\t8.8.8.8\t53\tudp\tdns\t0.027605\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:30.717Z","host":{"name":"f6b540842a86"},"log":{"offset":535830,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646180 Key: Timestamp: 2025-12-10 03:34:32.391 Headers: empty

{"@version":"1","event":{"hash":"2ce0f5aa563cee5f3fe185a6c2416790522becc467f4ab41e908cc6dbc5ef516"},"ecs":{"version":"1.6.0"},"message":"1765337670.097119\tCCcar24H58Rsykp1j1\t172.30.1.12\t56361\t8.8.8.8\t53\tudp\t55334\t0.029729\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t248.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:31.288Z","host":{"name":"f6b540842a86"},"log":{"offset":538553,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646181 Key: Timestamp: 2025-12-10 03:34:33.393 Headers: empty

{"@version":"1","event":{"hash":"1297877c4a7fd46de51b30a0b875b9e7cd950d55dce22d2ff4844d3d2be895fc"},"ecs":{"version":"1.6.0"},"message":"1765337672.166849\tCwPSkrFp510FadZ3\t172.30.1.12\t39936\t8.8.8.8\t53\tudp\t55336\t0.030085\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t246.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.290Z","host":{"name":"f6b540842a86"},"log":{"offset":539062,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646182 Key: Timestamp: 2025-12-10 03:34:33.393 Headers: empty

{"@version":"1","event":{"hash":"1a17e07bdae537b612aa8d08b4bc3319ab677b5eac4aeecc97dad2db7c7d9a5e"},"ecs":{"version":"1.6.0"},"message":"1765337671.136996\tCk5BHd32jdyZjDScv8\t172.30.1.12\t42183\t8.8.8.8\t53\tudp\t55335\t0.026664\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t247.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:32.289Z","host":{"name":"f6b540842a86"},"log":{"offset":538728,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646183 Key: Timestamp: 2025-12-10 03:34:33.393 Headers: empty

{"@version":"1","event":{"hash":"707f1d16f9b43a8dafb1c172445eaa39f6b813a7aa9076df7b25f6eff8403d25"},"ecs":{"version":"1.6.0"},"message":"1765337670.048796\tCWO90x4MgAU5biNTsf\t141.98.11.170\t50716\t172.30.1.2\t80\t1\t-\t-\t-\t-\t1.1\t-\t-\t0\t211\t302\tFound\t-\t-\t(empty)\t-\t-\t-\t-\t-\t-\tFulIpG2lo9Q8N4jFec\t-\ttext/html","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:32.721Z","host":{"name":"f6b540842a86"},"log":{"offset":21643,"file":{"path":"/usr/share/filebeat/logs/http.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646184 Key: Timestamp: 2025-12-10 03:34:33.394 Headers: empty

{"@version":"1","event":{"hash":"5c4dc1c4b8493d7833a95a3bbb72e04cb413bb83951b4e68fa27888fed6f551d"},"ecs":{"version":"1.6.0"},"message":"1765337671.636402\tCK6EOzSPanJHQDY2\t172.30.1.35\t56745\t8.8.8.8\t53\tudp\t8681\t-\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2698.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:32.289Z","host":{"name":"f6b540842a86"},"log":{"offset":538903,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646185 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"2f4d9bfec47ee996b2af11f55b914bbdf20a25e982f99ad82c1cd44ce4cb6550"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337665.901902\tCbrcvdeXn6ouIs7O6\t172.30.1.63\t34960\t172.30.2.171\t5044\ttcp\t-\t2.047939\t0\t0\tS0\tT\tT\t0\tS\t2\t120\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":536202},"tags":["beats_input_codec_plain_applied"]}

Offset: 646186 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"c72f6bc3f83fffb76475ab33fa7630e356adebee22c91a4d4713bf9605f2a2bc"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337665.932728\tCK8Kji358Usccpl1v1\t172.30.1.35\t52178\t172.30.2.17\t7680\ttcp\t-\t0.002575\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"offset":536327,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646187 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"b3f903e13231b6213b15014189d7cfc940315f16deb2f048a908088cf12d88b9"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337661.595790\tCSINch18he2pQ4yD0a\t172.30.1.35\t58601\t8.8.8.8\t53\tudp\tdns\t0.024065\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"offset":536585,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646188 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"a46c5eebffbbaad76c2f6c2a985e034e1c9d0f195d67b5a00a12257ffc5112f1"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337667.952458\tCNKs3iFXjNvqzER4b\t172.30.1.2\t59958\t172.30.4.136\t5044\ttcp\t-\t2.998379\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"offset":536711,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646189 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"afa48a36c48020720d2aee055205b506fddfb2f6a1fc8e96031b77ec8e398981"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337661.796790\tCdwDyU3yfGRKeTvHya\t172.30.1.12\t55720\t8.8.8.8\t53\tudp\tdns\t0.027350\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"offset":536461,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646190 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"2b968f97db731297b09c5cd045652eaf54c68c949a09bf9948d84eb44564e1b8"},"ecs":{"version":"1.6.0"},"message":"1765337673.206878\tCKFewW13jx5w56nZy5\t172.30.1.12\t37755\t8.8.8.8\t53\tudp\t55337\t0.028706\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t1.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:34.290Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":539235},"tags":["beats_input_codec_plain_applied"]}

Offset: 646191 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"baebf680e9565f8605549164fadee1a9bf961163ff45fc052dafb10bdcda718c"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337660.756870\tCZShXW1hdvejasNSp6\t172.30.1.12\t59803\t8.8.8.8\t53\tudp\tdns\t0.028956\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:33.717Z","host":{"name":"f6b540842a86"},"log":{"offset":536078,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646192 Key: Timestamp: 2025-12-10 03:34:34.823 Headers: empty

{"@version":"1","event":{"hash":"a5ee366ed21ae833d736d518667f2c10fe6b5b768735647fbe07359286d540d2"},"ecs":{"version":"1.6.0"},"message":"1765337671.553298\tCXZuYvX9nTx3aqZWd\t172.30.1.35\t56745\t172.30.1.254\t53\tudp\t8681\t2.015742\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2795.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:34.290Z","host":{"name":"f6b540842a86"},"log":{"offset":539408,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646193 Key: Timestamp: 2025-12-10 03:34:35.823 Headers: empty

{"@version":"1","event":{"hash":"8591d89e9be01fea6b4030abc2a491fc99768004b218f620404ff7659e70cf75"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337662.826805\tCTIQ221JFNWxB6Z7X9\t172.30.1.12\t55065\t8.8.8.8\t53\tudp\tdns\t0.027964\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:34.718Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":536835},"tags":["beats_input_codec_plain_applied"]}

Offset: 646194 Key: Timestamp: 2025-12-10 03:34:36.823 Headers: empty

{"@version":"1","event":{"hash":"3faf0d007b85d77bac646bb5172537a69d9e3c773ee39eb2eb90a72898e06660"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337663.856769\tCXx5BWbxYaFexUmqc\t172.30.1.12\t54017\t8.8.8.8\t53\tudp\tdns\t0.026992\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:35.720Z","host":{"name":"f6b540842a86"},"log":{"offset":536959,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646195 Key: Timestamp: 2025-12-10 03:34:36.823 Headers: empty

{"@version":"1","event":{"hash":"4276f5589db2565597c0773d4081c4a047dfec2da119f64223c2193d0f0ed862"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337663.885223\tCIfDS5oEsGnANFuK6\t172.30.1.12\t48708\t8.8.8.8\t53\tudp\tdns\t0.026928\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:35.720Z","host":{"name":"f6b540842a86"},"log":{"offset":537082,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646196 Key: Timestamp: 2025-12-10 03:34:37.825 Headers: empty

{"@version":"1","event":{"hash":"28d95fd733adddf3ee4c77f0f28e404e7fee52d0ec23ea98935756b167f8478b"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337664.916806\tC9ykX8f32RG4tTyr9\t172.30.1.12\t48407\t8.8.8.8\t53\tudp\tdns\t0.029136\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:36.721Z","host":{"name":"f6b540842a86"},"log":{"offset":537464,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646197 Key: Timestamp: 2025-12-10 03:34:37.825 Headers: empty

{"@version":"1","event":{"hash":"03172bb2f044cea79fcd9af6f13af8456101a9c952a7989dd2563948d2d597c5"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337665.013998\tCapzdW2kEkslTlKivd\t172.30.1.35\t60256\t172.30.1.254\t53\tudp\tdns\t0.003638\t28\t104\tSF\tT\tT\t0\tDd\t1\t56\t1\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:36.721Z","host":{"name":"f6b540842a86"},"log":{"offset":537205,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646198 Key: Timestamp: 2025-12-10 03:34:37.825 Headers: empty

{"@version":"1","event":{"hash":"e8f40560c242845b98e0c52b0261c6df2e3963a67d5da8b08beb0777fe607143"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337669.611572\tCkOKod34YsKpnpLvKb\t141.98.11.170\t57229\t172.30.1.2\t80\ttcp\t-\t0.210056\t0\t0\tRSTO\tF\tT\t0\tShR\t2\t84\t1\t44\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:36.721Z","host":{"name":"f6b540842a86"},"log":{"offset":537336,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646199 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"caf1e12dc20c7e3e968d990b04fc06aefd9eae816243269d81af8c617c363938"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337665.014023\tC4FWXr2qn1XTwVm6we\t172.30.1.35\t57925\t172.30.1.254\t53\tudp\tdns\t0.003412\t28\t60\tSF\tT\tT\t0\tDd\t1\t56\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:36.721Z","host":{"name":"f6b540842a86"},"log":{"offset":537587,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646200 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"998ad49cdaa9cdf896336abdf83ac0c419d5c00873deb0063090807e97e3e7d1"},"ecs":{"version":"1.6.0"},"message":"1765337674.246924\tCddFA33k8IQEnNt934\t172.30.1.12\t52540\t8.8.8.8\t53\tudp\t55338\t0.027904\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t244.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.291Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":539580},"tags":["beats_input_codec_plain_applied"]}

Offset: 646201 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"12711bacb620dd922c71c01fa5f2ba5b4f85d7189e4950e023c1c304c37bfe99"},"ecs":{"version":"1.6.0"},"message":"1765337675.276916\tCdS45X1PfZIgCk3A5g\t172.30.1.12\t37459\t8.8.8.8\t53\tudp\t55339\t0.028141\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t243.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.291Z","host":{"name":"f6b540842a86"},"log":{"offset":539755,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646202 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"8fa6d79deb228ffd678b0bb0a05ea13b57ec99a96a3d154119c5a91a9b48d345"},"ecs":{"version":"1.6.0"},"message":"1765337665.229935\tC1yanE2Yw3FBPNqwkc\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\t0\t-\t_esphomelib._tcp.local\t-\t-\t-\t-\t0\tNOERROR\tT\tF\tF\tF\t0\ttemperature-server-ssc._esphomelib._tcp.local\t0.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.291Z","host":{"name":"f6b540842a86"},"log":{"offset":539930,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646203 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"ec561a8444a2cc52d83af4ce20fc6c27b8625393b9b1750276e7d9b040425afe"},"ecs":{"version":"1.6.0"},"message":"1765337665.230498\tC1yanE2Yw3FBPNqwkc\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\t0\t-\t_esphomelib._tcp.local\t-\t-\t-\t-\t0\tNOERROR\tT\tF\tF\tF\t0\ttemperature-server-ssc._esphomelib._tcp.local\t0.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.291Z","host":{"name":"f6b540842a86"},"log":{"offset":540118,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646204 Key: Timestamp: 2025-12-10 03:34:37.826 Headers: empty

{"@version":"1","event":{"hash":"389edd356488bf40ea49b433a7a3c2368d435b94a30a052d1b46107766acf5ef"},"ecs":{"version":"1.6.0"},"message":"1765337676.306918\tCHZVF4t6qUzBB4G84\t172.30.1.12\t55529\t8.8.8.8\t53\tudp\t55340\t0.029223\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t242.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.291Z","host":{"name":"f6b540842a86"},"log":{"offset":540306,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646205 Key: Timestamp: 2025-12-10 03:34:38.827 Headers: empty

{"@version":"1","event":{"hash":"4b0e552308fb3dc2b5249b00fcbeac151fce1f8f6242c9b28c4e72d0625b2f20"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337665.229935\tC1yanE2Yw3FBPNqwkc\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\tdns\t0.000563\t142\t0\tS0\tT\tF\t0\tD\t2\t198\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.723Z","host":{"name":"f6b540842a86"},"log":{"offset":537840,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646206 Key: Timestamp: 2025-12-10 03:34:38.827 Headers: empty

{"@version":"1","event":{"hash":"ac07fa9327c9cdbf548c0957fe7516bba3b468e606e4d8b0ecd8b6ff1908a568"},"ecs":{"version":"1.6.0"},"message":"1765337676.541129\tCQluoN23o7whBp5GD7\t172.30.1.35\t53687\t172.30.1.254\t53\tudp\t63266\t0.011723\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2120.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:38.291Z","host":{"name":"f6b540842a86"},"log":{"offset":540480,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646207 Key: Timestamp: 2025-12-10 03:34:38.827 Headers: empty

{"@version":"1","event":{"hash":"96b25b5461763119e8c695b7ee202ece1cd0eb43728c91d5dd60a02640d72959"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337666.594141\tCwl1Pi1Yql9s6OPXtj\t172.30.1.35\t60264\t8.8.8.8\t53\tudp\tdns\t0.028431\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.723Z","host":{"name":"f6b540842a86"},"log":{"offset":537969,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646208 Key: Timestamp: 2025-12-10 03:34:38.828 Headers: empty

{"@version":"1","event":{"hash":"cd536b5c30869787915ec71f0a1138f6b2740f53cba40905fbc49e4a1a266d8a"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337665.956840\tCNQkDB38IJoO2PA2mb\t172.30.1.12\t39317\t8.8.8.8\t53\tudp\tdns\t0.026249\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:37.723Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":537716},"tags":["beats_input_codec_plain_applied"]}

Offset: 646209 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"a84058e275f8426b19179246452b1334da35d813b96cb73e6275c30b4a40b49f"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337666.986830\tCcmbV62iIZo8zfgaB8\t172.30.1.12\t36236\t8.8.8.8\t53\tudp\tdns\t0.028611\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:38.724Z","host":{"name":"f6b540842a86"},"log":{"offset":538226,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646210 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"b6651078da650d83eaf87fd48ed397dea9cd4e865dc22a571b8817b574763dd1"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337671.981847\tCta0wFmrfVlHdPm21\t172.30.1.63\t34960\t172.30.2.171\t5044\ttcp\t-\t-\t-\t-\tS0\tT\tT\t0\tS\t1\t60\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:38.724Z","host":{"name":"f6b540842a86"},"log":{"offset":538350,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646211 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"5a4864282008137c4020abac9087e4d1d72f1be09df65c2443a0988b10f8b95a"},"ecs":{"version":"1.6.0"},"message":"1765337677.346923\tCDpj6l14kEphhcozAg\t172.30.1.12\t42570\t8.8.8.8\t53\tudp\t55341\t0.029620\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t241.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:39.292Z","host":{"name":"f6b540842a86"},"log":{"offset":540654,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646212 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"9332fcccba33677ff287ed9b977bb18b573b9ee29c0c6c234c9f7d8c67ae2e55"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337666.552701\tCWadeY3sHdxx19dZi3\t172.30.1.35\t60264\t172.30.1.254\t53\tudp\tdns\t0.048978\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:38.724Z","host":{"name":"f6b540842a86"},"log":{"offset":538095,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646213 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"b094fab3aafb3de5adf57f8c68e38a08dac299149f9f3d7df1bd21725331f838"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337668.027063\tCukopi4yD4X2dF7FY9\t172.30.1.12\t35211\t8.8.8.8\t53\tudp\tdns\t0.028884\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:39.724Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":538467},"tags":["beats_input_codec_plain_applied"]}

Offset: 646214 Key: Timestamp: 2025-12-10 03:34:39.827 Headers: empty

{"@version":"1","event":{"hash":"04db53bbab80a8d9a28015614b9e49e5a8b4699d2e9e59ed422c81f7fb8e9d42"},"ecs":{"version":"1.6.0"},"message":"1765337678.386915\tC0iuWs2A5GulUjHYHc\t172.30.1.12\t37439\t8.8.8.8\t53\tudp\t55342\t0.028550\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t240.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:39.292Z","host":{"name":"f6b540842a86"},"log":{"offset":540829,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646215 Key: Timestamp: 2025-12-10 03:34:41.828 Headers: empty

{"@version":"1","event":{"hash":"b7969c4971397f95e231a7930198aa2f71217343f3c87e573ada4f6b9a853a81"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337669.066800\tCKpHF9g1HyDZO5Qwj\t172.30.1.12\t38499\t8.8.8.8\t53\tudp\tdns\t0.027653\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:40.724Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":538591},"tags":["beats_input_codec_plain_applied"]}

Offset: 646216 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"5ef3459c3313c4d7001bb870bf997c0ffb72f466839f06b2de8c3e3bb102e505"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337670.097119\tCCcar24H58Rsykp1j1\t172.30.1.12\t56361\t8.8.8.8\t53\tudp\tdns\t0.029729\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:41.725Z","host":{"name":"f6b540842a86"},"log":{"offset":538714,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646217 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"574d002fc0aa862533663d0e36c0d258ac3852fbd132fc1d2707fce0750d3d17"},"ecs":{"version":"1.6.0"},"message":"1765337679.426964\tCfaTxv8BCiuGmhLq\t172.30.1.12\t41900\t8.8.8.8\t53\tudp\t55343\t0.027733\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t153.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.292Z","host":{"name":"f6b540842a86"},"log":{"offset":541004,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646218 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"df1d134b9ccc65598aa41d0b2338c74988bd3b1938aee201b5739d62cc9bf921"},"ecs":{"version":"1.6.0"},"message":"1765337680.457184\tCINLjL3KvxhMye9mgl\t172.30.1.12\t47141\t8.8.8.8\t53\tudp\t55344\t0.029173\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t238.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.293Z","host":{"name":"f6b540842a86"},"log":{"offset":541726,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646219 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"b829a0ce3c82fbf12bc668adf9a5103fbe8022610d96719633562b9fe4a6070c"},"ecs":{"version":"1.6.0"},"message":"1765337678.551777\tCXqKWoZhQ7QNVQpFb\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\t0\t0.903119\ttemperature-server-ssc.local\t32769\tqclass-32769\t255\t*\t0\tNOERROR\tT\tF\tF\tF\t0\t_esphomelib._tcp.local,temperature-server-ssc._esphomelib._tcp.local,temperature-server-ssc.local,TXT 51 api_encryption=Noise_NNpsk0_25519_ChaChaPoly_SHA256 TXT 12 network=wifi TXT 17 board=ttgo-t-beam TXT 14 platform=ESP32 TXT 16 mac=c049ef1df9b8 TXT 16 version=2023.6.5 TXT 36 friendly_name=Temperature-Server-SSC,172.30.1.190\t4500.000000,4500.000000,120.000000,4500.000000,120.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.293Z","host":{"name":"f6b540842a86"},"log":{"offset":541177,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646220 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"fb4889b89e0369aa44ebd94d4e5918d9b9980422c51735919b36fddf6dc1fd4a"},"ecs":{"version":"1.6.0"},"message":"1765337681.551266\tCiwiO03CcvLsB0trZd\t172.30.1.35\t64015\t172.30.1.254\t53\tudp\t266\t0.011967\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2115.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.293Z","host":{"name":"f6b540842a86"},"log":{"offset":542444,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646221 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"089621a2a6f0ef3cee0cfccddddb45c78c0479e27108840d21405da910eb0289"},"ecs":{"version":"1.6.0"},"message":"1765337678.859337\tCXqKWoZhQ7QNVQpFb\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\t0\t1.692300\ttemperature-server-ssc.local\t1\tC_INTERNET\t255\t*\t0\tNOERROR\tT\tF\tF\tF\t0\t_esphomelib._tcp.local,temperature-server-ssc._esphomelib._tcp.local,temperature-server-ssc.local,TXT 51 api_encryption=Noise_NNpsk0_25519_ChaChaPoly_SHA256 TXT 12 network=wifi TXT 17 board=ttgo-t-beam TXT 14 platform=ESP32 TXT 16 mac=c049ef1df9b8 TXT 16 version=2023.6.5 TXT 36 friendly_name=Temperature-Server-SSC,172.30.1.190\t4500.000000,4500.000000,120.000000,4500.000000,120.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.293Z","host":{"name":"f6b540842a86"},"log":{"offset":541901,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646222 Key: Timestamp: 2025-12-10 03:34:42.828 Headers: empty

{"@version":"1","event":{"hash":"b69466e7f1562d746f458a5a6fe050b25be9d0b33d5b5db64990a0c7c978906c"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337669.842301\tCWO90x4MgAU5biNTsf\t141.98.11.170\t50716\t172.30.1.2\t80\ttcp\t-\t5.416685\t426\t447\tSF\tF\tT\t426\tShaGdADfF\t5\t694\t5\t715\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:41.725Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":538838},"tags":["beats_input_codec_plain_applied"]}

Offset: 646223 Key: Timestamp: 2025-12-10 03:34:43.828 Headers: empty

{"@version":"1","event":{"hash":"1298f254cf3efa8ebf1e656e8413b5505b362e36b7728d8a9eff6d1e9ac4cf3c"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337671.136996\tCk5BHd32jdyZjDScv8\t172.30.1.12\t42183\t8.8.8.8\t53\tudp\tdns\t0.026664\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.725Z","host":{"name":"f6b540842a86"},"log":{"offset":538978,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646224 Key: Timestamp: 2025-12-10 03:34:43.828 Headers: empty

{"@version":"1","event":{"hash":"9c5c0f72499d2571a4c78762644a2dd2404c439b4cb09ed92d246293f7c1477c"},"ecs":{"version":"1.6.0"},"message":"1765337679.241203\tCXqKWoZhQ7QNVQpFb\t172.30.1.190\t5353\t224.0.0.251\t5353\tudp\t0\t2.411657\ttemperature-server-ssc.local\t1\tC_INTERNET\t255\t*\t0\tNOERROR\tT\tF\tF\tF\t0\t_esphomelib._tcp.local,temperature-server-ssc._esphomelib._tcp.local,temperature-server-ssc.local,TXT 51 api_encryption=Noise_NNpsk0_25519_ChaChaPoly_SHA256 TXT 12 network=wifi TXT 17 board=ttgo-t-beam TXT 14 platform=ESP32 TXT 16 mac=c049ef1df9b8 TXT 16 version=2023.6.5 TXT 36 friendly_name=Temperature-Server-SSC,172.30.1.190\t4500.000000,4500.000000,120.000000,4500.000000,120.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:43.293Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":542790},"tags":["beats_input_codec_plain_applied"]}

Offset: 646225 Key: Timestamp: 2025-12-10 03:34:43.828 Headers: empty

{"@version":"1","event":{"hash":"712c62b27fad95e374b940f26416573512386388f9a9a5646563d8db12c547f9"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337676.600021\tCp9cON3qgOZt3nQ0c5\t172.30.1.2\t52288\t172.30.4.139\t1514\ttcp\t-\t2.999074\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:42.725Z","host":{"name":"f6b540842a86"},"log":{"offset":539102,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646226 Key: Timestamp: 2025-12-10 03:34:43.828 Headers: empty

{"@version":"1","event":{"hash":"2d219f98b1160709b2a67a44f8e6e5e8b88a4774229cf9068078fa24c62ffd3a"},"ecs":{"version":"1.6.0"},"message":"1765337681.497000\tCadZLP8ICVOG22mIc\t172.30.1.12\t60134\t8.8.8.8\t53\tudp\t55345\t0.027328\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t237.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:43.293Z","host":{"name":"f6b540842a86"},"log":{"offset":542616,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646227 Key: Timestamp: 2025-12-10 03:34:44.832 Headers: empty

{"@version":"1","event":{"hash":"17ac088a4e60393135a622eee7371c11f10e9c7c1f604e4d666a34f86baff809"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337661.554146\tC84Qhp3Zaas3YVxdge\t172.30.1.35\t58601\t172.30.1.254\t53\tudp\tdns\t1.517227\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:43.726Z","host":{"name":"f6b540842a86"},"log":{"offset":539227,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646228 Key: Timestamp: 2025-12-10 03:34:44.833 Headers: empty

{"@version":"1","event":{"hash":"eed7d22fda1d88830f5d9be0de66efa28b6aed357c0f7bda1b0eb2928acedb72"},"ecs":{"version":"1.6.0"},"message":"1765337683.567490\tCUfVm24rxNlFyKoUc2\t172.30.1.12\t53522\t8.8.8.8\t53\tudp\t55347\t0.026945\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t235.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:44.294Z","host":{"name":"f6b540842a86"},"log":{"offset":543508,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646229 Key: Timestamp: 2025-12-10 03:34:44.833 Headers: empty

{"@version":"1","event":{"hash":"a03f3925e1bed8d81b70ea170e282399c386ba8f94b0a3ca9791fc94eb37992d"},"ecs":{"version":"1.6.0"},"message":"1765337682.527040\tCYwFSP3EenUiZ0qh06\t172.30.1.12\t42220\t8.8.8.8\t53\tudp\t55346\t0.029397\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t236.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:44.294Z","host":{"name":"f6b540842a86"},"log":{"offset":543333,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646230 Key: Timestamp: 2025-12-10 03:34:44.832 Headers: empty

{"@version":"1","event":{"hash":"174b636263c9680725898458660873203a74832cc383de7a681ecd6c70e84592"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337672.166849\tCwPSkrFp510FadZ3\t172.30.1.12\t39936\t8.8.8.8\t53\tudp\tdns\t0.030085\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:43.726Z","host":{"name":"f6b540842a86"},"log":{"offset":539482,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646231 Key: Timestamp: 2025-12-10 03:34:44.832 Headers: empty

{"@version":"1","event":{"hash":"57d5d28f45d56118d38b3e5a24ad6fa132f49690892a896f32f0026a248baa58"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337671.592010\tCK6EOzSPanJHQDY2\t172.30.1.35\t56745\t8.8.8.8\t53\tudp\tdns\t0.028088\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:43.726Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":539358},"tags":["beats_input_codec_plain_applied"]}

Offset: 646232 Key: Timestamp: 2025-12-10 03:34:45.830 Headers: empty

{"@version":"1","event":{"hash":"84607cac239e4b4cbbcc50ff4b09ef3a38aa61f34e601060c2817b8b2fd22141"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337673.206878\tCKFewW13jx5w56nZy5\t172.30.1.12\t37755\t8.8.8.8\t53\tudp\tdns\t0.028706\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:44.727Z","host":{"name":"f6b540842a86"},"log":{"offset":539604,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646233 Key: Timestamp: 2025-12-10 03:34:46.830 Headers: empty

{"@version":"1","event":{"hash":"df1ec4116ce47add4247e9c51085bbecc4ec6aacd7cb4c719184e81d8e5cafd4"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337674.246924\tCddFA33k8IQEnNt934\t172.30.1.12\t52540\t8.8.8.8\t53\tudp\tdns\t0.027904\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:45.727Z","host":{"name":"f6b540842a86"},"log":{"offset":539728,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646234 Key: Timestamp: 2025-12-10 03:34:47.832 Headers: empty

{"@version":"1","event":{"hash":"a6f14ab034f5c0c4ee712ba3af73db109692ef4bc311114cb40f96a6c9ecc317"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337680.429722\tCTogVPMUtlssZYK5k\t172.30.1.63\t34960\t172.30.2.171\t5044\ttcp\t-\t-\t-\t-\tS0\tT\tT\t0\tS\t1\t60\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:46.727Z","host":{"name":"f6b540842a86"},"log":{"offset":539976,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646235 Key: Timestamp: 2025-12-10 03:34:47.832 Headers: empty

{"@version":"1","event":{"hash":"afcfeb7f32e86c9c273ca83eebb30413eea8d83227cc8b3ab08fb3ebfa43f40c"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337675.276916\tCdS45X1PfZIgCk3A5g\t172.30.1.12\t37459\t8.8.8.8\t53\tudp\tdns\t0.028141\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:46.727Z","host":{"name":"f6b540842a86"},"log":{"offset":539852,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646236 Key: Timestamp: 2025-12-10 03:34:47.833 Headers: empty

{"@version":"1","event":{"hash":"0ed2b4005ad18790bbc6a06adc1b2b88b2c8b614029a515ff122376a2e83247a"},"ecs":{"version":"1.6.0"},"message":"1765337684.597028\tCpqY252hxzZJz3cYod\t172.30.1.12\t41115\t8.8.8.8\t53\tudp\t55348\t0.029583\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t148.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:47.294Z","host":{"name":"f6b540842a86"},"log":{"offset":543683,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646237 Key: Timestamp: 2025-12-10 03:34:47.833 Headers: empty

{"@version":"1","event":{"hash":"a3463f8eea12649e365f11b7e17948416263d46503220f4cee1e3d2af898c10a"},"ecs":{"version":"1.6.0"},"message":"1765337685.637005\tCcCo8H3KfkbZFoek0h\t172.30.1.12\t49855\t8.8.8.8\t53\tudp\t55349\t0.027577\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t233.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:47.294Z","host":{"name":"f6b540842a86"},"log":{"offset":543858,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646238 Key: Timestamp: 2025-12-10 03:34:47.833 Headers: empty

{"@version":"1","event":{"hash":"d00e00c23b319e1755baeb8fdaf512b71979eec247df4c1dd19f11c9f7202ae5"},"ecs":{"version":"1.6.0"},"message":"1765337686.587924\tCjMgiA2Fn4hDCq7c41\t172.30.1.35\t52640\t8.8.8.8\t53\tudp\t35806\t0.030154\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t658.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:47.294Z","host":{"name":"f6b540842a86"},"log":{"offset":544033,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646239 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"d361b83bfc56b2aeca23b7b440bfb075cae5aa6ad0dbc29cfc9a3e81a303fef7"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337626.068360\tCPoZjB3BeeBaFWxSY8\t172.30.1.132\t3\t172.30.1.254\t3\ticmp\t-\t-\t-\t-\tOTH\tT\tT\t0\t-\t1\t99\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:47.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540223,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646240 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"ffadfb61517387a07effd7480c5a177d12d3d2aa50d3bd0957d827838fae7d21"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337679.461204\tCpJJik4SOYc3HZvY46\t10.10.10.1\t33218\t10.10.10.203\t8000\ttcp\t-\t1.559060\t32\t0\tSH\tT\tT\t0\tSADTF\t8\t488\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:47.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540093,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646241 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"d155d6a502ed61a814dfa3ef5392f27544bc88d91fda14ad5740443ef834137d"},"ecs":{"version":"1.6.0"},"message":"1765337686.667060\tCVJFLC2WsKFsiNbJtd\t172.30.1.12\t53286\t8.8.8.8\t53\tudp\t55350\t0.027665\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t232.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:48.295Z","host":{"name":"f6b540842a86"},"log":{"offset":544201,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646242 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"90816e38f31bc855583b254d57b34f36bf9c4a68da068d3c317ddfb461bdb8c9"},"ecs":{"version":"1.6.0"},"message":"1765337686.627508\tCA1MoS9L9wABjoM64\t172.30.1.35\t52640\t172.30.1.254\t53\tudp\t35806\t0.523816\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2109.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:48.295Z","host":{"name":"f6b540842a86"},"log":{"offset":544376,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646243 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"8c321673ac15e8f063a35a72b6624e19c99f3cf56b618d415485e5b068eed7fb"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337676.306918\tCHZVF4t6qUzBB4G84\t172.30.1.12\t55529\t8.8.8.8\t53\tudp\tdns\t0.029223\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:48.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540337,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646244 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"bad285f6b1b21a8dc377e822713609a894c9e6300a076303d9b4633209783fcb"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337676.541129\tCQluoN23o7whBp5GD7\t172.30.1.35\t53687\t172.30.1.254\t53\tudp\tdns\t0.006209\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:48.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540460,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646245 Key: Timestamp: 2025-12-10 03:34:48.832 Headers: empty

{"@version":"1","event":{"hash":"fc32bc139530720fa6d7287365b29c46b73379ae8cb5eb6382f60bf8e11553e8"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337677.346923\tCDpj6l14kEphhcozAg\t172.30.1.12\t42570\t8.8.8.8\t53\tudp\tdns\t0.029620\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:48.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540591,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646246 Key: Timestamp: 2025-12-10 03:34:50.398 Headers: empty

{"@version":"1","event":{"hash":"94af035680d52413d650594fc54daecb8f44c851c3618b1c397b1ad3b8d0003e"},"ecs":{"version":"1.6.0"},"message":"1765337687.697050\tC4XCqgn5rpBGQnY6l\t172.30.1.12\t33948\t8.8.8.8\t53\tudp\t55351\t0.028033\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t145.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:49.295Z","host":{"name":"f6b540842a86"},"log":{"offset":544549,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646247 Key: Timestamp: 2025-12-10 03:34:51.399 Headers: empty

{"@version":"1","event":{"hash":"fd0811ba8355aadb86af045a29458674d69ec3542a856132eecefa0fc3e95f2a"},"ecs":{"version":"1.6.0"},"message":"1765337688.727111\tCbOwiUBBczvhLQsZ6\t172.30.1.12\t50964\t8.8.8.8\t53\tudp\t55352\t0.027316\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t230.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:50.296Z","host":{"name":"f6b540842a86"},"log":{"offset":544723,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646248 Key: Timestamp: 2025-12-10 03:34:52.399 Headers: empty

{"@version":"1","event":{"hash":"6af542ad57d9b8ef08e3a083fcc34c267525fc09dc01597ee5e40c4b6c970574"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337678.386915\tC0iuWs2A5GulUjHYHc\t172.30.1.12\t37439\t8.8.8.8\t53\tudp\tdns\t0.028550\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:51.728Z","host":{"name":"f6b540842a86"},"log":{"offset":540715,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646249 Key: Timestamp: 2025-12-10 03:34:52.399 Headers: empty

{"@version":"1","event":{"hash":"f37f6ef7b00a7fd95ad4ec18129cf37f5ecdc24ba2ae1719c19d051665c006d9"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337679.426964\tCfaTxv8BCiuGmhLq\t172.30.1.12\t41900\t8.8.8.8\t53\tudp\tdns\t0.027733\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:51.729Z","host":{"name":"f6b540842a86"},"log":{"offset":540839,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646250 Key: Timestamp: 2025-12-10 03:34:52.399 Headers: empty

{"@version":"1","event":{"hash":"44ff083fee983e3dfe036c7fe210fdf8ec6553aafecc6d2d57a9b3777532ff21"},"ecs":{"version":"1.6.0"},"message":"1765337689.757054\tCc2GHJ1pbKZLWuUkB5\t172.30.1.12\t36899\t8.8.8.8\t53\tudp\t55353\t0.027456\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t229.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:51.296Z","host":{"name":"f6b540842a86"},"log":{"offset":544897,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646251 Key: Timestamp: 2025-12-10 03:34:53.399 Headers: empty

{"@version":"1","event":{"hash":"89db67facd49a3a3371f837d8bcc74f61fc9458c14a8034c30536495ff0a59cb"},"ecs":{"version":"1.6.0"},"message":"1765337690.787114\tCXb17x3Ebdd17f9gQk\t172.30.1.12\t51152\t8.8.8.8\t53\tudp\t55354\t0.028675\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t228.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:52.296Z","host":{"name":"f6b540842a86"},"log":{"offset":545072,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646252 Key: Timestamp: 2025-12-10 03:34:53.400 Headers: empty

{"@version":"1","event":{"hash":"07c86c8b9316e31ba2d0afe85e61133200c5165b42c0515c3d6eb5346c73e0ec"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337681.551266\tCiwiO03CcvLsB0trZd\t172.30.1.35\t64015\t172.30.1.254\t53\tudp\tdns\t0.011967\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:52.729Z","host":{"name":"f6b540842a86"},"log":{"offset":541085,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646253 Key: Timestamp: 2025-12-10 03:34:53.399 Headers: empty

{"@version":"1","event":{"hash":"6269097b4cfce7418b4abc74214820c1d8d3e696ac83b88f42f3685de6054c97"},"ecs":{"version":"1.6.0"},"message":"1765337691.583503\tCWESX747LlUSBdRIze\t172.30.1.35\t55202\t8.8.8.8\t53\tudp\t47481\t0.027844\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2191.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:52.296Z","host":{"name":"f6b540842a86"},"log":{"offset":545247,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646254 Key: Timestamp: 2025-12-10 03:34:53.399 Headers: empty

{"@version":"1","event":{"hash":"d08a009bbd5173772f71746c895d50dd9ea99739353f5e4713f20ad347bd524f"},"ecs":{"version":"1.6.0"},"message":"1765337691.827091\tCHGZp83o6daG4jQeD3\t172.30.1.12\t52953\t8.8.8.8\t53\tudp\t55355\t0.029499\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t141.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:52.296Z","host":{"name":"f6b540842a86"},"log":{"offset":545416,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646255 Key: Timestamp: 2025-12-10 03:34:53.400 Headers: empty

{"@version":"1","event":{"hash":"897ab45db25170bcc82babc339ee3f3c715b3c51465a125721e668db171d1520"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337680.457184\tCINLjL3KvxhMye9mgl\t172.30.1.12\t47141\t8.8.8.8\t53\tudp\tdns\t0.029173\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:52.729Z","host":{"name":"f6b540842a86"},"log":{"offset":540961,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646256 Key: Timestamp: 2025-12-10 03:34:54.402 Headers: empty

{"@version":"1","event":{"hash":"2e81f8e85c9c93ca6b2f693b8074df03bcf24970f7c8237abdb89c7106a86d04"},"ecs":{"version":"1.6.0"},"message":"1765337691.576901\tCc0eKk1JoukUpPrwh5\t172.30.1.35\t55202\t172.30.1.254\t53\tudp\t47481\t0.168918\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2105.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:53.297Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":545591},"tags":["beats_input_codec_plain_applied"]}

Offset: 646257 Key: Timestamp: 2025-12-10 03:34:54.402 Headers: empty

{"@version":"1","event":{"hash":"1303031a01be66f27fcf16e2ffdb5ff53f065dc2062377b8c57ed6a1a4354aca"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337671.553298\tCXZuYvX9nTx3aqZWd\t172.30.1.35\t56745\t172.30.1.254\t53\tudp\tdns\t2.015742\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:34:53.729Z","host":{"name":"f6b540842a86"},"log":{"offset":541216,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646258 Key: Timestamp: 2025-12-10 03:39:16.601 Headers: empty

{"@version":"1","event":{"hash":"d3b8778a99c3afce51b6f9d08fbefe997eaae420bb2750cfd78f0cf439c16af2"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337949.269766\tCdy2tf1DYKpxtqEvml\t172.30.2.16\t52647\t172.30.1.35\t7680\ttcp\t-\t0.002130\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:15.956Z","host":{"name":"f6b540842a86"},"log":{"offset":606630,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646259 Key: Timestamp: 2025-12-10 03:39:16.601 Headers: empty

{"@version":"1","event":{"hash":"8f9d29d10829fcf4179dbdde9c36b6bbda60099e364914b02ff8b8c15974216a"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337944.869554\tCxrL0U3ZphCHlwyYz4\t172.30.1.12\t55471\t8.8.8.8\t53\tudp\tdns\t0.027126\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:15.956Z","host":{"name":"f6b540842a86"},"log":{"offset":606764,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646260 Key: Timestamp: 2025-12-10 03:39:17.598 Headers: empty

{"@version":"1","event":{"hash":"76c8c52f83af894d22e6ead90e675134f191fa9d4076f60a3faf169a2facdfc3"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337944.898226\tCiYnULD5AeaW9ccd4\t172.30.1.12\t59120\t8.8.8.8\t53\tudp\tdns\t0.027505\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:16.956Z","host":{"name":"f6b540842a86"},"log":{"offset":606888,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646261 Key: Timestamp: 2025-12-10 03:39:17.598 Headers: empty

{"@version":"1","event":{"hash":"094d44e80f07f17d5bd955fe173b48bf2cabf2021bbbfded4df43e5763499282"},"ecs":{"version":"1.6.0"},"message":"1765337955.239647\tCBnzxY2bpCoveC0cil\t172.30.1.12\t48034\t8.8.8.8\t53\tudp\t55612\t0.026562\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t263.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:16.495Z","host":{"name":"f6b540842a86"},"log":{"offset":608513,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646262 Key: Timestamp: 2025-12-10 03:39:18.599 Headers: empty

{"@version":"1","event":{"hash":"3f534f7dc61e40893b7e2a9cf069bbd87a6edfb1fac73e2f8a2d7191fa75c46a"},"ecs":{"version":"1.6.0"},"message":"1765337956.269768\tCFPGbJ2TuTMBtwuVId\t172.30.1.12\t49036\t8.8.8.8\t53\tudp\t55613\t0.027287\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t262.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:17.496Z","host":{"name":"f6b540842a86"},"log":{"offset":608688,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646263 Key: Timestamp: 2025-12-10 03:39:18.599 Headers: empty

{"@version":"1","event":{"hash":"310b5db8d1608df43a5a8d261751fb42f9077245a53835676a1a6cb6505767f0"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337945.929577\tCXwnQT3JRKDJOyzVmb\t172.30.1.12\t50783\t8.8.8.8\t53\tudp\tdns\t0.028682\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:17.957Z","host":{"name":"f6b540842a86"},"log":{"offset":607137,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646264 Key: Timestamp: 2025-12-10 03:39:18.599 Headers: empty

{"@version":"1","event":{"hash":"d9820b55fbb3fbec8b5c32128fa809b9dca0b08c65ea5a08dba385db2488c6ae"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337946.593804\tC54Vjx1ZKk7E1gGR9c\t172.30.1.35\t52475\t8.8.8.8\t53\tudp\tdns\t0.029791\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:17.957Z","host":{"name":"f6b540842a86"},"log":{"offset":607011,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646265 Key: Timestamp: 2025-12-10 03:39:18.599 Headers: empty

{"@version":"1","event":{"hash":"8451e53c64e0397f287cd874be8ea54a17b4c3f6c32584288f55ab6d32fac6e8"},"ecs":{"version":"1.6.0"},"message":"1765337956.588528\tCN4XpN1xCy5PLZi4z1\t172.30.1.35\t50708\t8.8.8.8\t53\tudp\t49867\t0.028130\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2413.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:17.496Z","host":{"name":"f6b540842a86"},"log":{"offset":608863,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646266 Key: Timestamp: 2025-12-10 03:39:19.603 Headers: empty

{"@version":"1","event":{"hash":"a1d3a282a59f421dad407949c05e2efe0788f09d03496972debcdc6e00f4288b"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337896.715070\tCiOfqUt8pbzE4d1S5\t172.30.1.4\t52072\t255.255.255.255\t7989\tudp\t-\t-\t-\t-\tS0\tT\tF\t0\tD\t1\t176\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:18.957Z","host":{"name":"f6b540842a86"},"log":{"offset":607392,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646267 Key: Timestamp: 2025-12-10 03:39:19.603 Headers: empty

{"@version":"1","event":{"hash":"85fd21085d447af5e31f99a6015fc923c9b0d79301e89080104b071f5028dd44"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337946.969561\tCdyiPF2MdGHc5wkOHg\t172.30.1.12\t35638\t8.8.8.8\t53\tudp\tdns\t0.027559\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:18.957Z","host":{"name":"f6b540842a86"},"log":{"offset":607633,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 646268 Key: Timestamp: 2025-12-10 03:39:19.603 Headers: empty

{"@version":"1","event":{"hash":"61ac6a20fcae33142305ad80ba2683a45adbe37dda37df546dcdc4ba55c5f107"},"ecs":{"version":"1.6.0"},"message":"1765337956.608199\tC9LDQZ2Ay3ChsV7Mbj\t172.30.1.35\t50708\t172.30.1.254\t53\tudp\t49867\t0.000035\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1008.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:39:18.496Z","host":{"name":"f6b540842a86"},"log":{"offset":609032,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Kafdrop

Topic Messages: logstash-local-network