Kafdrop: Topic: logstash-local-network: Messages

Offset: 649840 Key: Timestamp: 2025-12-10 03:37:31.975 Headers: empty

{"@version":"1","event":{"hash":"6a655dd93350999b469269dc7d417fbf593ca63b631be6cc4857520bde04a998"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337837.798540\tCXkhAffnBmcLnCQ56\t172.30.1.12\t53479\t8.8.8.8\t53\tudp\tdns\t0.028577\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:30.868Z","host":{"name":"f6b540842a86"},"log":{"offset":580825,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649841 Key: Timestamp: 2025-12-10 03:37:31.975 Headers: empty

{"@version":"1","event":{"hash":"588d455167c03f94b14b76407bd3a859bbce31d101b72ededdd7602fd4b6c6a4"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337838.838556\tCFYeS4ZDDvgvhYVwb\t172.30.1.12\t40021\t8.8.8.8\t53\tudp\tdns\t0.029076\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:30.868Z","host":{"name":"f6b540842a86"},"log":{"offset":580948,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649842 Key: Timestamp: 2025-12-10 03:37:32.972 Headers: empty

{"@version":"1","event":{"hash":"84df8aff17cc8bc23ab8a3a568c6965b4ab3e606e5ea32da0ebdc23495cc72a4"},"ecs":{"version":"1.6.0"},"message":"1765337849.202742\tCTvDHY2ipqr6UTDEX7\t172.30.1.12\t47733\t8.8.8.8\t53\tudp\t55510\t0.023225\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t69.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:32.406Z","host":{"name":"f6b540842a86"},"log":{"offset":582653,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649843 Key: Timestamp: 2025-12-10 03:37:32.972 Headers: empty

{"@version":"1","event":{"hash":"34fe1b303a0b2bb24ba88353017257b24907505b790af9c1cf372e916beb5126"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337839.878727\tCSAJswIRp6K1uXhWk\t172.30.1.12\t44100\t8.8.8.8\t53\tudp\tdns\t0.026823\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:31.869Z","host":{"name":"f6b540842a86"},"log":{"offset":581071,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649844 Key: Timestamp: 2025-12-10 03:37:32.973 Headers: empty

{"@version":"1","event":{"hash":"cf3bb808b55a240e0d101b07d0d067dd21a6aeeb40783d54c52f34731e141f56"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337841.557494\tCBBcg42GQ8f9DpXmY1\t172.30.1.35\t52361\t172.30.1.254\t53\tudp\tdns\t0.552358\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:32.869Z","host":{"name":"f6b540842a86"},"log":{"offset":581318,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649845 Key: Timestamp: 2025-12-10 03:37:32.973 Headers: empty

{"@version":"1","event":{"hash":"ea5f587975262130ceda2b46159af401476582dbccba358068d7760066e25a0f"},"ecs":{"version":"1.6.0"},"message":"1765337850.266939\tCUjew5tphw1fFDxA5\t172.30.1.12\t54448\t8.8.8.8\t53\tudp\t55511\t-\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t18.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:32.406Z","host":{"name":"f6b540842a86"},"log":{"offset":582827,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649846 Key: Timestamp: 2025-12-10 03:37:32.973 Headers: empty

{"@version":"1","event":{"hash":"1a363fa7a98d2a22b3ba2169ed96fb3d8a969f891d2ba07cc3300ab499f32ec6"},"ecs":{"version":"1.6.0"},"message":"1765337851.268613\tCUKc2L37ilPYpMdDCc\t172.30.1.12\t46606\t8.8.8.8\t53\tudp\t55512\t0.029108\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t67.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:32.406Z","host":{"name":"f6b540842a86"},"log":{"offset":582993,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649847 Key: Timestamp: 2025-12-10 03:37:32.973 Headers: empty

{"@version":"1","event":{"hash":"e0de816d5d190b6fddd2425c3a0d51182f1bef31209795e5f7af7008c2a4ca3e"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337840.908547\tCoXJ481h7ys7cjrOig\t172.30.1.12\t48172\t8.8.8.8\t53\tudp\tdns\t0.029648\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:32.869Z","host":{"name":"f6b540842a86"},"log":{"offset":581194,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649848 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"4c12da321553d81488ce19cd5bc0d301eff998d6ea6352b65a724140015425ce"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337841.597052\tCyR7qvbazw0Bf5uTe\t172.30.1.35\t52361\t8.8.8.8\t53\tudp\tdns\t0.028082\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:33.871Z","host":{"name":"f6b540842a86"},"log":{"offset":581449,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649849 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"859b08495a0374b32523843c760fc45b2a8de4f8a94c1d5739924a81dfacc642"},"ecs":{"version":"1.6.0"},"message":"1765337851.612611\tCDAbJa3QkbLbyBCngi\t172.30.1.35\t65119\t8.8.8.8\t53\tudp\t36533\t0.005877\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2518.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:33.406Z","host":{"name":"f6b540842a86"},"log":{"offset":583167,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649850 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"85a1c9f92f84dbe765e4ac128e7143f85bd459659ddc0c360038afd660e9aa7c"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337841.948646\tCk4XaBwwwuQlYpjV\t172.30.1.12\t53988\t8.8.8.8\t53\tudp\tdns\t0.029508\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:33.871Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":581574},"tags":["beats_input_codec_plain_applied"]}

Offset: 649851 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"5e11716dab0ca4f4c5f1bfff83d8834af0cfacba8e39ea7766c8da91b4f95d2c"},"ecs":{"version":"1.6.0"},"message":"1765337851.545483\tCvNpSe3P9nTWp8VGn7\t172.30.1.35\t65119\t172.30.1.254\t53\tudp\t36533\t1.104606\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1113.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:33.406Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":583336},"tags":["beats_input_codec_plain_applied"]}

Offset: 649852 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"1bd8a5d0168c5bd011dbfb96f47d654689adb3d8e7c03441438066a71cc270c9"},"ecs":{"version":"1.6.0"},"message":"1765337853.355745\tCjPrwE13sI6Y3QiLl8\t172.30.1.12\t59977\t8.8.8.8\t53\tudp\t55514\t0.022288\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t79.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:34.407Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":583684},"tags":["beats_input_codec_plain_applied"]}

Offset: 649853 Key: Timestamp: 2025-12-10 03:37:34.510 Headers: empty

{"@version":"1","event":{"hash":"c8871699510de9b4d645c3f1602f6f7c583b2e8b4b168c4a6a2999ed4a1869a4"},"ecs":{"version":"1.6.0"},"message":"1765337852.308639\tCxhSTh30abiwYTISTd\t172.30.1.12\t56719\t8.8.8.8\t53\tudp\t55513\t0.028145\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t66.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:34.407Z","host":{"name":"f6b540842a86"},"log":{"offset":583510,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649854 Key: Timestamp: 2025-12-10 03:37:35.977 Headers: empty

{"@version":"1","event":{"hash":"5fc71518f9c6f9c696665c53e5cce32eb843d1b53cc805c672a5617395f64ab2"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337842.989009\tCbtGue32peFqelQ3t1\t172.30.1.12\t42472\t8.8.8.8\t53\tudp\tdns\t0.027372\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:34.872Z","host":{"name":"f6b540842a86"},"log":{"offset":581696,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649855 Key: Timestamp: 2025-12-10 03:37:35.978 Headers: empty

{"@version":"1","event":{"hash":"ed195852a9263401e8e2c4c6bfaf004158fd208571ed4318c503ca80808a0287"},"ecs":{"version":"1.6.0"},"message":"1765337854.392695\tCJ7NtfJSKzzIkGKdi\t172.30.1.12\t39169\t8.8.8.8\t53\tudp\t55515\t0.023229\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t64.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:35.407Z","host":{"name":"f6b540842a86"},"log":{"offset":583858,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649856 Key: Timestamp: 2025-12-10 03:37:35.977 Headers: empty

{"@version":"1","event":{"hash":"339bde81582556fc3dee4db7590082f771c5ff2cb4b336c8810b9f683e37ae60"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337844.018597\tCunCZY1Oe3dqxqk3ee\t172.30.1.12\t46641\t8.8.8.8\t53\tudp\tdns\t0.028061\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:34.872Z","host":{"name":"f6b540842a86"},"log":{"offset":581820,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649857 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"db24cd78ebc95feecbd6bcbb836af26957ade86e86ebf4d059d87e216355a5fd"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337836.543992\tC0pmIi1a3eZwxvANbc\t172.30.1.35\t50692\t172.30.1.254\t53\tudp\tdns\t1.051813\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"offset":582582,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649858 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"91df990e4cbd7e9fd33d027042b856899cf8ad17372a7533bd8238987ae03c27"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337845.048672\tC7KPWs1z4vtxlEKjO8\t172.30.1.12\t49842\t8.8.8.8\t53\tudp\tdns\t0.028516\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":581944},"tags":["beats_input_codec_plain_applied"]}

Offset: 649859 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"aec053033aefbf09e4980c171723731bc6df39a668e6872b3ca77f0805b3b0ad"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337851.600084\tCavccD1EroH2Gp2QW5\t172.30.1.2\t52324\t172.30.4.139\t1514\ttcp\t-\t2.999119\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"offset":582843,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649860 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"c9e962dcba63f41f16aa057a7d6fd1cf5e1b472c65af59d971b8ad147e19166e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337846.088936\tCNaSHn3KCfN8NeR5V3\t172.30.1.12\t38678\t8.8.8.8\t53\tudp\tdns\t0.027530\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"offset":582068,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649861 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"6b6edc8fb51eb864a3efab2d7e71081a7d95ceb65e64ed145e361cf7d071a5cd"},"ecs":{"version":"1.6.0"},"message":"1765337855.418677\tC0Z40W9qZVljIg7Uh\t172.30.1.12\t40224\t8.8.8.8\t53\tudp\t55516\t0.028222\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t119.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:38.408Z","host":{"name":"f6b540842a86"},"log":{"offset":584031,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649862 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"2ad3fff55716a7a75f9ca5aa2ea36be2b5ec0a9b40f29b3dec45a83c02f94837"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337846.285358\tCrHmLy1OIJXJlJPQH5\t172.30.1.35\t50105\t172.30.1.254\t53\tudp\tdns\t0.003359\t28\t60\tSF\tT\tT\t0\tDd\t1\t56\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":582192},"tags":["beats_input_codec_plain_applied"]}

Offset: 649863 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"bbf642bb489aa6c567733587c1da1c6e59d721a3d92161fd3a764cf613314a8f"},"ecs":{"version":"1.6.0"},"message":"1765337856.458647\tC8hItP8sDri5NgDuf\t172.30.1.12\t38124\t8.8.8.8\t53\tudp\t55517\t0.027193\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t62.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:38.408Z","host":{"name":"f6b540842a86"},"log":{"offset":584205,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649864 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"a28f4ce7d853ca0e074f8198c9ddd6b8ad84f15b42c62871d75bce40802d01d1"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337846.549517\tCJMOG5X9H9hAiOQE2\t172.30.1.35\t64133\t172.30.1.254\t53\tudp\tdns\t0.020270\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":582713},"tags":["beats_input_codec_plain_applied"]}

Offset: 649865 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"a6e7bfc07df746e1fea126da074fc06ffd95322e83e6ca92b5565e630d48d60a"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337796.235815\tCExRRi2AYV09jLM1\t172.30.1.132\t35227\t216.239.35.12\t123\tudp\tntp\t0.031883\t48\t48\tSF\tT\tF\t0\tDd\t1\t76\t1\t76\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":582321},"tags":["beats_input_codec_plain_applied"]}

Offset: 649866 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"f8e5fab9d2e3891e3eee6b188e043fc02af5876b38f4a8ced6a99d1eadd180e2"},"ecs":{"version":"1.6.0"},"message":"1765337856.552587\tCRp0xt30D4X1JOy22g\t172.30.1.35\t62045\t172.30.1.254\t53\tudp\t8266\t0.004707\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1108.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:38.408Z","host":{"name":"f6b540842a86"},"log":{"offset":584378,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649867 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"96d5ce3bf7ebdfafad54f4f000dd60612d5009151fb0c4d87a6a35e1d32fa78a"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337846.285168\tCi1KA31cYBGJWvfzH8\t172.30.1.35\t51133\t172.30.1.254\t53\tudp\tdns\t0.003766\t28\t104\tSF\tT\tT\t0\tDd\t1\t56\t1\t132\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:37.873Z","host":{"name":"f6b540842a86"},"log":{"offset":582451,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649868 Key: Timestamp: 2025-12-10 03:37:38.977 Headers: empty

{"@version":"1","event":{"hash":"ccb6f021a661f5797a5317c403b7c4346986060f925cc6aeb38be03fdc255e2a"},"ecs":{"version":"1.6.0"},"message":"1765337857.488664\tCaaBoJ3JfXEsfMtmni\t172.30.1.12\t40266\t8.8.8.8\t53\tudp\t55518\t0.027513\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t61.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:38.408Z","host":{"name":"f6b540842a86"},"log":{"offset":584551,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649869 Key: Timestamp: 2025-12-10 03:37:39.976 Headers: empty

{"@version":"1","event":{"hash":"dc6a640ca3a4319b6d96ea960a4c52643ff51ed6cf9b1726440cecdd1698b5d5"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337847.118604\tCNtmrB3c7xVpk6758g\t172.30.1.12\t50721\t8.8.8.8\t53\tudp\tdns\t0.029996\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:38.873Z","host":{"name":"f6b540842a86"},"log":{"offset":582968,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649870 Key: Timestamp: 2025-12-10 03:37:39.976 Headers: empty

{"@version":"1","event":{"hash":"c382feaa11f2cf607237775d083a602e37f41c1c7d60111cf8da627b90a0db3e"},"ecs":{"version":"1.6.0"},"message":"1765337858.518721\tC1dLJD4SEBUtVcJImg\t172.30.1.12\t59708\t8.8.8.8\t53\tudp\t55519\t0.028407\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t10.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:39.408Z","host":{"name":"f6b540842a86"},"log":{"offset":584725,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649871 Key: Timestamp: 2025-12-10 03:37:40.978 Headers: empty

{"@version":"1","event":{"hash":"05b5b40734ddaeb7e6b55d07bdd75f603a1fc1183b77b2d77c466c4cbaa85277"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337848.158588\tCWo2RR1hraLSZsXeQg\t172.30.1.12\t50367\t8.8.8.8\t53\tudp\tdns\t0.029162\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:39.874Z","host":{"name":"f6b540842a86"},"log":{"offset":583092,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649872 Key: Timestamp: 2025-12-10 03:37:41.977 Headers: empty

{"@version":"1","event":{"hash":"165d432947d360ebd82c25583405ef7c1eec5f207df7c90910cb99db2783a4e2"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337849.198761\tCTvDHY2ipqr6UTDEX7\t172.30.1.12\t47733\t8.8.8.8\t53\tudp\tdns\t0.027206\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:40.874Z","host":{"name":"f6b540842a86"},"log":{"offset":583216,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649873 Key: Timestamp: 2025-12-10 03:37:41.978 Headers: empty

{"@version":"1","event":{"hash":"5bf12477334d4047486ec7aeeb8f9c79c35990a989e46aff9f263177800ac433"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337850.228829\tCUjew5tphw1fFDxA5\t172.30.1.12\t54448\t8.8.8.8\t53\tudp\tdns\t0.029164\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:41.874Z","host":{"name":"f6b540842a86"},"log":{"offset":583464,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649874 Key: Timestamp: 2025-12-10 03:37:41.978 Headers: empty

{"@version":"1","event":{"hash":"58dbf7bbe1ac6b1254af6d673a5dfa1f305bb9ca1eb7c69eed66640efa842b42"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337854.599813\tCu30wvPJqEiAfuUki\t172.30.1.2\t58602\t172.30.4.139\t1515\ttcp\t-\t2.999309\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:40.874Z","host":{"name":"f6b540842a86"},"log":{"offset":583340,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649875 Key: Timestamp: 2025-12-10 03:37:43.513 Headers: empty

{"@version":"1","event":{"hash":"62f62cc6065e588843f30c6c675c2d6280721152f70d9823cac96eda65f987d2"},"ecs":{"version":"1.6.0"},"message":"1765337860.599704\tC6mnjy1M2zWOv5phgh\t172.30.1.12\t51426\t8.8.8.8\t53\tudp\t55521\t0.028665\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t114.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:42.409Z","host":{"name":"f6b540842a86"},"log":{"offset":585073,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649876 Key: Timestamp: 2025-12-10 03:37:43.513 Headers: empty

{"@version":"1","event":{"hash":"6fdb0b46d0dd16812fa7181d1da78a6c484e15e259092f2379de4c2ca60a6b0d"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337856.479026\tCdEy6b4vE0o4IPIiS7\t172.30.1.2\t60000\t172.30.4.136\t5044\ttcp\t-\t3.000141\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:42.875Z","host":{"name":"f6b540842a86"},"log":{"offset":583587,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649877 Key: Timestamp: 2025-12-10 03:37:43.513 Headers: empty

{"@version":"1","event":{"hash":"1520a8ac98c1acbd5ea557bbaebba102218d0911fa08c94c2809697f9869f1c4"},"ecs":{"version":"1.6.0"},"message":"1765337859.558825\tCWgdZbWXHvHeJicr3\t172.30.1.12\t46274\t8.8.8.8\t53\tudp\t55520\t0.028356\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t115.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:42.409Z","host":{"name":"f6b540842a86"},"log":{"offset":584899,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649878 Key: Timestamp: 2025-12-10 03:37:43.513 Headers: empty

{"@version":"1","event":{"hash":"40665f592a8d058de56e53d6eaa08bfe4f09ccc9849fcd85b74e1bb3df655ef0"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337851.268613\tCUKc2L37ilPYpMdDCc\t172.30.1.12\t46606\t8.8.8.8\t53\tudp\tdns\t0.029108\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:42.875Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":583712},"tags":["beats_input_codec_plain_applied"]}

Offset: 649879 Key: Timestamp: 2025-12-10 03:37:43.513 Headers: empty

{"@version":"1","event":{"hash":"4112cb0cec78b84faf7ad40ba0f002339a58c74780e22a650e5bce8547245e06"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337856.257392\tC7VQEo1RBTCYtZQ0P6\t10.10.10.1\t35818\t10.10.10.202\t8000\ttcp\t-\t0.655001\t32\t0\tSH\tT\tT\t0\tSADF\t5\t300\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:42.875Z","host":{"name":"f6b540842a86"},"log":{"offset":583836,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649880 Key: Timestamp: 2025-12-10 03:37:44.514 Headers: empty

{"@version":"1","event":{"hash":"5c1283f2bebd0f02198f5c1b36ead7e2ba1bc9c862f33cad8a835603124b4eb0"},"ecs":{"version":"1.6.0"},"message":"1765337861.638706\tCu0995HfoPiueLH32\t172.30.1.12\t54977\t8.8.8.8\t53\tudp\t55522\t0.028643\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t7.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:43.410Z","host":{"name":"f6b540842a86"},"log":{"offset":585248,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649881 Key: Timestamp: 2025-12-10 03:37:44.515 Headers: empty

{"@version":"1","event":{"hash":"30ad096324ac22c907bf6c8d9b9df2efc7de314d045d90507d07a2b24675d457"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337851.587430\tCDAbJa3QkbLbyBCngi\t172.30.1.35\t65119\t8.8.8.8\t53\tudp\tdns\t0.031058\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:43.877Z","host":{"name":"f6b540842a86"},"log":{"offset":583965,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649882 Key: Timestamp: 2025-12-10 03:37:44.515 Headers: empty

{"@version":"1","event":{"hash":"9cd61ee2dc24ebdbd7355e649abf599cd186db1d527f4920c7eb231025f6546b"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337852.308639\tCxhSTh30abiwYTISTd\t172.30.1.12\t56719\t8.8.8.8\t53\tudp\tdns\t0.028145\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:43.877Z","host":{"name":"f6b540842a86"},"log":{"offset":584091,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649883 Key: Timestamp: 2025-12-10 03:37:44.515 Headers: empty

{"@version":"1","event":{"hash":"3768d14e385db82888c6f5be6a14173375b618bb562f938cf17973e7e11c27e5"},"ecs":{"version":"1.6.0"},"message":"1765337861.548560\tCfqPy64FR37rrXh9o2\t172.30.1.35\t64044\t172.30.1.254\t53\tudp\t48459\t0.064161\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1103.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:43.410Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":585420},"tags":["beats_input_codec_plain_applied"]}

Offset: 649884 Key: Timestamp: 2025-12-10 03:37:45.514 Headers: empty

{"@version":"1","event":{"hash":"3312ed94788f29dfa1d19bbcdee9be82fd30c4d0ccc7b826c2057ea13a6e842d"},"ecs":{"version":"1.6.0"},"message":"1765337862.678883\tC2ehVy3ZAHKJZLxeL3\t172.30.1.12\t40220\t8.8.8.8\t53\tudp\t55523\t0.027237\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t56.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:44.410Z","host":{"name":"f6b540842a86"},"log":{"offset":585594,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649885 Key: Timestamp: 2025-12-10 03:37:45.514 Headers: empty

{"@version":"1","event":{"hash":"02432b36899e61ce53b5ec71e82e7a488138da2bf6abffde2457e3b4e97178d8"},"ecs":{"version":"1.6.0"},"message":"1765337863.709971\tC2hBbq2orJm4qJoDFd\t172.30.1.12\t60833\t8.8.8.8\t53\tudp\t55524\t0.026841\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t55.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:44.410Z","host":{"name":"f6b540842a86"},"log":{"offset":585768,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649886 Key: Timestamp: 2025-12-10 03:37:47.981 Headers: empty

{"@version":"1","event":{"hash":"a88d5a80f00213444b9734c3a78b181849f30cd51ee6e6ae8993b42f903cb76e"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337853.355745\tCjPrwE13sI6Y3QiLl8\t172.30.1.12\t59977\t8.8.8.8\t53\tudp\tdns\t0.022288\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:46.878Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":584215},"tags":["beats_input_codec_plain_applied"]}

Offset: 649887 Key: Timestamp: 2025-12-10 03:37:47.981 Headers: empty

{"@version":"1","event":{"hash":"190c487d4621362215b5fa8466905567e131d2ef4d15256234c4458edd6fa336"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337854.392695\tCJ7NtfJSKzzIkGKdi\t172.30.1.12\t39169\t8.8.8.8\t53\tudp\tdns\t0.023229\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:46.878Z","host":{"name":"f6b540842a86"},"log":{"offset":584339,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649888 Key: Timestamp: 2025-12-10 03:37:47.981 Headers: empty

{"@version":"1","event":{"hash":"9d2a4e19355698b7e80392b8bad2767331e9b12303231998e1b9590de73cd153"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337855.418677\tC0Z40W9qZVljIg7Uh\t172.30.1.12\t40224\t8.8.8.8\t53\tudp\tdns\t0.028222\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:46.878Z","host":{"name":"f6b540842a86"},"log":{"offset":584462,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649889 Key: Timestamp: 2025-12-10 03:37:47.982 Headers: empty

{"@version":"1","event":{"hash":"f42e0f42d01fcc2817ad0c6541d8468626f3c6efa58190899242e418d9894924"},"ecs":{"version":"1.6.0"},"message":"1765337864.738770\tCwFc6l4P1vBU9vqlOb\t172.30.1.12\t37112\t8.8.8.8\t53\tudp\t55525\t0.028271\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t4.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:47.411Z","host":{"name":"f6b540842a86"},"log":{"offset":585942,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649890 Key: Timestamp: 2025-12-10 03:37:47.982 Headers: empty

{"@version":"1","event":{"hash":"e5f8c150210e21ae51aa2b4f8fa979d3141987330dee135a519c8709bf7184d7"},"ecs":{"version":"1.6.0"},"message":"1765337865.778914\tCV6d5Bg9SemND9HNk\t172.30.1.12\t50647\t8.8.8.8\t53\tudp\t55526\t0.029530\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t109.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:47.411Z","host":{"name":"f6b540842a86"},"log":{"offset":586115,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649891 Key: Timestamp: 2025-12-10 03:37:47.982 Headers: empty

{"@version":"1","event":{"hash":"7393f0af30141189864f8eaf6d34e02cea68e6c88e56f4c7bda6f33bf002e457"},"ecs":{"version":"1.6.0"},"message":"1765337866.577225\tCk4666SFmhXEdeGc4\t172.30.1.35\t49716\t172.30.1.254\t53\tudp\t30227\t-\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1098.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:47.412Z","host":{"name":"f6b540842a86"},"log":{"offset":586289,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649892 Key: Timestamp: 2025-12-10 03:37:47.982 Headers: empty

{"@version":"1","event":{"hash":"d3fbf9ce69734a30e6bff36a8b1ce4a1303805423a73603b0bfa770b0901acbb"},"ecs":{"version":"1.6.0"},"message":"1765337866.818790\tCUzL3v4MJRpwvTdoq2\t172.30.1.12\t33685\t8.8.8.8\t53\tudp\t55527\t0.029953\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t66.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:47.412Z","host":{"name":"f6b540842a86"},"log":{"offset":586455,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649893 Key: Timestamp: 2025-12-10 03:37:48.983 Headers: empty

{"@version":"1","event":{"hash":"baaf2a7cc4c0fefc134a3257e3ddfc71db5cb2637187633fd3d0101fd2e5284e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337856.552587\tCRp0xt30D4X1JOy22g\t172.30.1.35\t62045\t172.30.1.254\t53\tudp\tdns\t0.004707\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:47.878Z","host":{"name":"f6b540842a86"},"log":{"offset":584585,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649894 Key: Timestamp: 2025-12-10 03:37:49.982 Headers: empty

{"@version":"1","event":{"hash":"ac27f21b0f623d7cfe767e5899f850adfbb5f3e5a5335be43e98cb71d5a2373b"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337856.458647\tC8hItP8sDri5NgDuf\t172.30.1.12\t38124\t8.8.8.8\t53\tudp\tdns\t0.027193\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:48.879Z","host":{"name":"f6b540842a86"},"log":{"offset":584716,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649895 Key: Timestamp: 2025-12-10 03:37:49.982 Headers: empty

{"@version":"1","event":{"hash":"05965654a68ee74e5dccbb474148f263408fff0aa32995f072bd62865f27d023"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337857.488664\tCaaBoJ3JfXEsfMtmni\t172.30.1.12\t40266\t8.8.8.8\t53\tudp\tdns\t0.027513\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:48.879Z","host":{"name":"f6b540842a86"},"log":{"offset":584839,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649896 Key: Timestamp: 2025-12-10 03:37:51.516 Headers: empty

{"@version":"1","event":{"hash":"0aec98750e6e3547ec11c12aed96e35124ba66b2f236cd2b397b5280524fec22"},"ecs":{"version":"1.6.0"},"message":"1765337867.860416\tCO6UmW3BRbhTus2Tu5\t172.30.1.12\t42035\t8.8.8.8\t53\tudp\t55528\t0.026426\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t107.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:50.413Z","host":{"name":"f6b540842a86"},"log":{"offset":586629,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649897 Key: Timestamp: 2025-12-10 03:37:51.516 Headers: empty

{"@version":"1","event":{"hash":"d6d5b1987cfecbbea8174bf8269c61df8d42739b94be2f62420e5d4c0c485e18"},"ecs":{"version":"1.6.0"},"message":"1765337868.918857\tC9OxBZ2vw6M0nVmuM3\t172.30.1.12\t32873\t8.8.8.8\t53\tudp\t55530\t0.030113\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t106.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:50.413Z","host":{"name":"f6b540842a86"},"log":{"offset":586977,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649898 Key: Timestamp: 2025-12-10 03:37:51.516 Headers: empty

{"@version":"1","event":{"hash":"65b3503f131e52a10c25392076d28682afd16ca0b494e35a04db794d0b5d5639"},"ecs":{"version":"1.6.0"},"message":"1765337867.888427\tCgQLGJSSfdqjrfFub\t172.30.1.12\t53175\t8.8.8.8\t53\tudp\t55529\t0.026515\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t51.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:50.413Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":586804},"tags":["beats_input_codec_plain_applied"]}

Offset: 649899 Key: Timestamp: 2025-12-10 03:37:52.516 Headers: empty

{"@version":"1","event":{"hash":"b5559090f71cbd1b3936076a41c69d15599424431c563c459b3cef92c1478487"},"ecs":{"version":"1.6.0"},"message":"1765337869.959491\tCchAmD2AR6OnhxemA8\t172.30.1.12\t37077\t8.8.8.8\t53\tudp\t55531\t0.026653\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t49.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:51.413Z","host":{"name":"f6b540842a86"},"log":{"offset":587152,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649900 Key: Timestamp: 2025-12-10 03:37:52.517 Headers: empty

{"@version":"1","event":{"hash":"e8053c6e2d4bc49116ab6770819f78de47c2bb4ac69b49e2f1ccb4107c233100"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337858.518721\tC1dLJD4SEBUtVcJImg\t172.30.1.12\t59708\t8.8.8.8\t53\tudp\tdns\t0.028407\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:51.880Z","host":{"name":"f6b540842a86"},"log":{"offset":584963,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649901 Key: Timestamp: 2025-12-10 03:37:52.517 Headers: empty

{"@version":"1","event":{"hash":"c943aa311d08bb0966fe3ff272125bdf5c7923217a38ea8fcfba5d6e2c8bdd7a"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337859.558825\tCWgdZbWXHvHeJicr3\t172.30.1.12\t46274\t8.8.8.8\t53\tudp\tdns\t0.028356\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:51.880Z","host":{"name":"f6b540842a86"},"log":{"offset":585087,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649902 Key: Timestamp: 2025-12-10 03:37:52.517 Headers: empty

{"@version":"1","event":{"hash":"d35cf4d3902472d920251afddf3745f7089e53e7576fbfe1d960416b90d3736c"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337860.599704\tC6mnjy1M2zWOv5phgh\t172.30.1.12\t51426\t8.8.8.8\t53\tudp\tdns\t0.028665\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:51.880Z","host":{"name":"f6b540842a86"},"log":{"offset":585210,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649903 Key: Timestamp: 2025-12-10 03:37:53.516 Headers: empty

{"@version":"1","event":{"hash":"52d7116f910a04ee7cd236899da3a39df36437c73c217eb90850b03be8b78d70"},"ecs":{"version":"1.6.0"},"message":"1765337871.043532\tCawlEr4KibjbfbuyO8\t172.30.1.12\t51280\t8.8.8.8\t53\tudp\t55532\t-\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t61.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:52.413Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":587326},"tags":["beats_input_codec_plain_applied"]}

Offset: 649904 Key: Timestamp: 2025-12-10 03:37:53.517 Headers: empty

{"@version":"1","event":{"hash":"3130d909b4cea5c9e6b6c2bbe1bcf2f2ab5d495c244b9e76f21d8d24833b4b33"},"ecs":{"version":"1.6.0"},"message":"1765337871.549400\tCIYBHU1heEUdalHVG8\t172.30.1.35\t63844\t172.30.1.254\t53\tudp\t36438\t0.169375\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1093.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:52.413Z","host":{"name":"f6b540842a86"},"log":{"offset":587493,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649905 Key: Timestamp: 2025-12-10 03:37:53.517 Headers: empty

{"@version":"1","event":{"hash":"dcfa3e85bf8056da6d6328eb0d30fc740660296fe9717705b744cabfa175e793"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337861.548560\tCfqPy64FR37rrXh9o2\t172.30.1.35\t64044\t172.30.1.254\t53\tudp\tdns\t0.005543\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:52.880Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":585334},"tags":["beats_input_codec_plain_applied"]}

Offset: 649906 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"88902d12e782884eba35f8739af99fa968d83c733a576fe6632e1a4ffd2f9491"},"ecs":{"version":"1.6.0"},"message":"1765337871.638963\tCwglqn3pszKQtHaD26\t172.30.1.35\t63844\t8.8.8.8\t53\tudp\t36438\t-\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t990.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.414Z","host":{"name":"f6b540842a86"},"log":{"offset":587667,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649907 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"4bb1d5941981673de7eb56aa5aa3f21dfea949efb7f1709f6d5af6dbc22dce1e"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337861.638706\tCu0995HfoPiueLH32\t172.30.1.12\t54977\t8.8.8.8\t53\tudp\tdns\t0.028643\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.881Z","host":{"name":"f6b540842a86"},"log":{"offset":585596,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649908 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"520b26f7f072b256036e68e639c2f77e78b5129e84bc8f816448d04c8db8def3"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337867.502889\tCByM6H2L8INoHWFLr4\t172.30.1.35\t52184\t172.30.2.17\t7680\ttcp\t-\t0.004307\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.881Z","host":{"name":"f6b540842a86"},"log":{"offset":585719,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649909 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"b958879614e66fd5547dda16b3114ea8a2d896e879a7b7394a48bf31b372907f"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337867.600366\tCYIUeh1eXuqWLdHcN9\t172.30.1.2\t52330\t172.30.4.139\t1514\ttcp\t-\t2.998761\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.881Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":585853},"tags":["beats_input_codec_plain_applied"]}

Offset: 649910 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"bfde738b1b2af61d07533e65e36f5e625f0ad8b3c285cff70adea96e817e1e12"},"ecs":{"version":"1.6.0"},"message":"1765337872.070363\tCoHuQ62ZurCOukeUs1\t172.30.1.12\t54325\t8.8.8.8\t53\tudp\t55533\t-\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t260.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.414Z","host":{"name":"f6b540842a86"},"log":{"offset":587828,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649911 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"58e2f3523e54c176a974545b0a610371a06ad3bc2eb6981ae101665f36738da4"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337862.678883\tC2ehVy3ZAHKJZLxeL3\t172.30.1.12\t40220\t8.8.8.8\t53\tudp\tdns\t0.027237\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.881Z","host":{"name":"f6b540842a86"},"log":{"offset":585978,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649912 Key: Timestamp: 2025-12-10 03:37:54.517 Headers: empty

{"@version":"1","event":{"hash":"e0c792a188c31883336bc1a8c4f5f4a8174ff5fab737beedcd2e1d4929758089"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337851.545483\tCvNpSe3P9nTWp8VGn7\t172.30.1.35\t65119\t172.30.1.254\t53\tudp\tdns\t1.104606\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:53.881Z","host":{"name":"f6b540842a86"},"log":{"offset":585465,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649913 Key: Timestamp: 2025-12-10 03:37:55.521 Headers: empty

{"@version":"1","event":{"hash":"ec3052e45f6e318e8ae9847d930f159aae461a53ff0a159a864703229fabb4b8"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337812.375209\tCm9VSmtjcPKiRcY0d\tfe80::b2be:76ff:fec9:7610\t130\tff02::1\t131\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:54.882Z","host":{"name":"f6b540842a86"},"log":{"offset":586102,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649914 Key: Timestamp: 2025-12-10 03:37:55.521 Headers: empty

{"@version":"1","event":{"hash":"f98efd6ee93041dddfc557e5b4de398199b3388023764c7bb9b2f8c220a94802"},"ecs":{"version":"1.6.0"},"message":"1765337873.059076\tC2ZW0F4KJUcZYOIhZ9\t172.30.1.12\t59994\t8.8.8.8\t53\tudp\t55534\t0.028274\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t45.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:54.414Z","host":{"name":"f6b540842a86"},"log":{"offset":587996,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649915 Key: Timestamp: 2025-12-10 03:37:55.522 Headers: empty

{"@version":"1","event":{"hash":"d21c7c5d22c214d3e8bb422b69151da76a8b31e3a32f13d91b8a86f2bc7056e9"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337863.709971\tC2hBbq2orJm4qJoDFd\t172.30.1.12\t60833\t8.8.8.8\t53\tudp\tdns\t0.026841\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:54.882Z","host":{"name":"f6b540842a86"},"log":{"offset":586353,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649916 Key: Timestamp: 2025-12-10 03:37:55.522 Headers: empty

{"@version":"1","event":{"hash":"55b96e46417abecdf2d546278db32bb40975aa950c83a123e1fef804e8ce02b3"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337812.765958\tCJgrzC13EfqOhQKsNk\tfe80::ca1f:66ff:fecb:6f36\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:54.882Z","host":{"name":"f6b540842a86"},"log":{"offset":586227,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649917 Key: Timestamp: 2025-12-10 03:37:55.522 Headers: empty

{"@version":"1","event":{"hash":"0dcdcaefe1d0749b6ee7ae74be18953d3b413ab3d7d6e3a0d3eabec7021931d8"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337868.532988\tC0rD6H1hvuY2kPJhq1\t172.30.2.16\t52643\t172.30.1.35\t7680\ttcp\t-\t0.002762\t75\t0\tSF\tT\tT\t0\tShADfFa\t5\t287\t3\t132\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:54.882Z","host":{"name":"f6b540842a86"},"log":{"offset":586477,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649918 Key: Timestamp: 2025-12-10 03:37:56.522 Headers: empty

{"@version":"1","event":{"hash":"9b1f0cecac32110c79bf13e7ba38648b48a31d60f284a3deea7dd74d44ddf437"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337813.698992\tCT4pdN3TJ828tTjhW9\tfe80::2a87:baff:fee8:8f52\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:55.882Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":586611},"tags":["beats_input_codec_plain_applied"]}

Offset: 649919 Key: Timestamp: 2025-12-10 03:37:56.523 Headers: empty

{"@version":"1","event":{"hash":"ae24d733813f48ad32173d63a4fa8651a801a7ed6b7f374f3496550d4dd05311"},"ecs":{"version":"1.6.0"},"message":"1765337875.128965\tCtEhfXxAfRWHHtu9e\t172.30.1.12\t58997\t8.8.8.8\t53\tudp\t55536\t0.028604\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t43.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:56.419Z","host":{"name":"f6b540842a86"},"log":{"offset":588673,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649920 Key: Timestamp: 2025-12-10 03:37:56.523 Headers: empty

{"@version":"1","event":{"hash":"9fce52052679e526b99bca2801ec417a2c51ad8f127abbb008594d24be0b2e7a"},"ecs":{"version":"1.6.0"},"message":"1765337874.852935\tCL05GJ271w4WuBZsI7\t172.30.1.35\t57322\t172.30.1.254\t53\tudp\t55356\t0.002910\tsadownload.mcafee.com\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\tsadownload-r53.awsconsumer.mcafee.com,sadownload.mcafee.com.edgesuite.net,a866.dscd.akamai.net,61.91.166.41,61.91.166.50\t3434.000000,3565.000000,3366.000000,10.000000,10.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:56.419Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":588345},"tags":["beats_input_codec_plain_applied"]}

Offset: 649921 Key: Timestamp: 2025-12-10 03:37:56.522 Headers: empty

{"@version":"1","event":{"hash":"75873a5aadce1cf34f38814cadda695c4d817053e65be92f5854ac398824559b"},"ecs":{"version":"1.6.0"},"message":"1765337874.098863\tCfRv6i10p6M1RSKtX8\t172.30.1.12\t52815\t8.8.8.8\t53\tudp\t55535\t0.026822\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t100.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:55.418Z","host":{"name":"f6b540842a86"},"log":{"offset":588170,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649922 Key: Timestamp: 2025-12-10 03:37:57.986 Headers: empty

{"@version":"1","event":{"hash":"62e5e76f9387286cadf17bd92ecacffcd3f50394a22814fb5392efc0ab3c50e6"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337814.559827\tCUReCM1T7Da47BV7f5\tfe80::c55e:ff17:5ec1:f6be\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:56.883Z","host":{"name":"f6b540842a86"},"log":{"offset":586737,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649923 Key: Timestamp: 2025-12-10 03:37:57.986 Headers: empty

{"@version":"1","event":{"hash":"5a5b19ba2c49dc64d4de808667e78eca8a85adb8ae288e14a6442ec8435f97c3"},"ecs":{"version":"1.6.0"},"message":"1765337876.168873\tCIhr8V3ASCwTirA2I3\t172.30.1.12\t56214\t8.8.8.8\t53\tudp\t55537\t0.029492\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t42.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.420Z","host":{"name":"f6b540842a86"},"log":{"offset":588846,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649924 Key: Timestamp: 2025-12-10 03:37:57.986 Headers: empty

{"@version":"1","event":{"hash":"1e04f019307fe0857f9c917f40b563df7678661ece1457814845ac95b70ebf0e"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337864.738770\tCwFc6l4P1vBU9vqlOb\t172.30.1.12\t37112\t8.8.8.8\t53\tudp\tdns\t0.028271\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:56.883Z","host":{"name":"f6b540842a86"},"log":{"offset":586862,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649925 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"526973c3952ebd01babf7b4c9fe5490b329b5fe99427e9285b75f8219fe5c957"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337816.336757\tCDb8bD26hAzvdLEg85\tfe80::c251:7eff:fefb:e9d7\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t96\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"offset":587234,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649926 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"ec2f17eab0a0f3150975cb7afdd71ec93682d67480c57778529ccbbe0f5fd86b"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337815.968048\tCJH3Y035ilk74pIC2k\tfe80::a272:2cff:fef5:f5fb\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t116\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":587483},"tags":["beats_input_codec_plain_applied"]}

Offset: 649927 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"2758251a74f6bcd8286cffa6899ab9b52d03eb9c5d736257a08a3e859e89d5ec"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337815.504536\tCZYzI44W3bTBto6ada\tfe80::2c41:11ff:fe33:ac74\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"offset":586986,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649928 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"7d678f2d9eef4a74e2e9f09afcae772c061356db213cd1c47b6fba64b8fcade7"},"ecs":{"version":"1.6.0"},"message":"1765337876.588694\tC6rgv89rHIGvMpF41\t172.30.1.35\t58432\t8.8.8.8\t53\tudp\t57782\t0.029275\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t468.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:58.420Z","host":{"name":"f6b540842a86"},"log":{"offset":589194,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649929 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"2c047bc577bc4d81db66e553d8adbb4a61241a2c195300346379b7f9d3622ba3"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337866.818790\tCUzL3v4MJRpwvTdoq2\t172.30.1.12\t33685\t8.8.8.8\t53\tudp\tdns\t0.029953\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"offset":587609,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649930 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"40710cc44e7d55343e8e11f689f936285211953b3562141c5ef5a14174434ba3"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337816.337216\tCuQgHhnIjaw0xWSw\tfe80::6263:4cff:febc:17c6\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"offset":587359,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649931 Key: Timestamp: 2025-12-10 03:37:58.987 Headers: empty

{"@version":"1","event":{"hash":"3b774b2198b4cb46e6181918e066e347a72dbb9447a60aa04ad66b12d1509830"},"ecs":{"version":"1.6.0"},"message":"1765337877.208896\tCSkwq51HGxtIfrMxJc\t172.30.1.12\t52124\t8.8.8.8\t53\tudp\t55538\t0.054086\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t41.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:58.420Z","host":{"name":"f6b540842a86"},"log":{"offset":589020,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649932 Key: Timestamp: 2025-12-10 03:37:58.988 Headers: empty

{"@version":"1","event":{"hash":"b133f4265e28386f5a5fdaa1218b5ba42091f2580d790d76497223d781fa5d89"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337865.778914\tCV6d5Bg9SemND9HNk\t172.30.1.12\t50647\t8.8.8.8\t53\tudp\tdns\t0.029530\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:57.883Z","host":{"name":"f6b540842a86"},"log":{"offset":587111,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649933 Key: Timestamp: 2025-12-10 03:37:58.988 Headers: empty

{"@version":"1","event":{"hash":"a9aa6d2c6ac22f27f03ebfa704e3d3dad8bc6785e71659fe323668ce84a900be"},"ecs":{"version":"1.6.0"},"message":"1765337876.549390\tCzzMlVdAtaVw8Jl7\t172.30.1.35\t58432\t172.30.1.254\t53\tudp\t57782\t0.564484\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t1087.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:58.420Z","host":{"name":"f6b540842a86"},"log":{"offset":589361,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649934 Key: Timestamp: 2025-12-10 03:41:33.183 Headers: empty

{"@version":"1","event":{"hash":"2ceeb1596965c94b4d93757ffe50005c072ae5c75d787ee97a94fbe79f96d569"},"ecs":{"version":"1.6.0"},"message":"1765338091.961101\tChsFti3DHdwlypl935\t172.30.1.12\t35424\t8.8.8.8\t53\tudp\t55748\t0.030455\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t127.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:32.651Z","host":{"name":"f6b540842a86"},"log":{"offset":641302,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649935 Key: Timestamp: 2025-12-10 03:41:34.185 Headers: empty

{"@version":"1","event":{"hash":"96006fca33aeda5c85a7809cdbe138911647ff0ff01d751261659f1251bb6bea"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765338080.530854\tCe1cPC7ZYljSR5gic\t172.30.1.12\t46533\t8.8.8.8\t53\tudp\tdns\t0.029505\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:33.074Z","host":{"name":"f6b540842a86"},"log":{"offset":639457,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649936 Key: Timestamp: 2025-12-10 03:41:34.185 Headers: empty

{"@version":"1","event":{"hash":"78d79f424d1232c5956f05f8fb71378e955d461b40907fb0cd92d43431a6b865"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765338081.559584\tCPkUJM1UOz6cL6BYOa\t172.30.1.35\t64956\t172.30.1.254\t53\tudp\tdns\t0.005644\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:33.075Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":639580},"tags":["beats_input_codec_plain_applied"]}

Offset: 649937 Key: Timestamp: 2025-12-10 03:41:34.185 Headers: empty

{"@version":"1","event":{"hash":"eafa63ef358737f21b5d09f337e0b47a3067860cbaadb52a54df37d7f209bce1"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765338081.571063\tCGGlbD3cCj2Lt6y6j2\t172.30.1.12\t46978\t8.8.8.8\t53\tudp\tdns\t0.027750\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:33.075Z","host":{"name":"f6b540842a86"},"log":{"offset":639711,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649938 Key: Timestamp: 2025-12-10 03:41:34.185 Headers: empty

{"@version":"1","event":{"hash":"3c8d0002b70d21ec409ca411eea16d65d42b572fbd3a7b7e5040753b02c703f7"},"ecs":{"version":"1.6.0"},"message":"1765338092.418603\tCE0DnJ2hsYkOhKUzq7\t172.30.1.132\t30843\t172.30.1.254\t53\tudp\t64344\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:33.651Z","host":{"name":"f6b540842a86"},"log":{"offset":641477,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 649939 Key: Timestamp: 2025-12-10 03:41:34.185 Headers: empty

{"@version":"1","event":{"hash":"b680e6b4be2f970b3b9dfe1e1d75409e5a149378494df8500429ce2bbfe573f8"},"ecs":{"version":"1.6.0"},"message":"1765338092.422977\tCF3n9n2dHFIJU3Xnnk\t172.30.1.132\t30843\t8.8.8.8\t53\tudp\t64344\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:41:33.651Z","host":{"name":"f6b540842a86"},"log":{"offset":641634,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Kafdrop

Topic Messages: logstash-local-network