Kafdrop: Topic: logstash-local-network: Messages

Offset: 654000 Key: Timestamp: 2025-12-10 03:31:26.717 Headers: empty

{"@version":"1","event":{"hash":"83ce345d5a602c5296bffc07e7e380eb5a5f1d09eeed61099447853137349242"},"ecs":{"version":"1.6.0"},"message":"1765337485.405143\tCBRmdmqnv7aptWIub\t172.30.1.12\t39135\t8.8.8.8\t53\tudp\t55153\t0.028937\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t47.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:26.150Z","host":{"name":"f6b540842a86"},"log":{"offset":491827,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654001 Key: Timestamp: 2025-12-10 03:31:27.717 Headers: empty

{"@version":"1","event":{"hash":"07f7c87572ee4f015a4b5a9895b4e0ceafe08c9adc536ab9b42226c72735fbeb"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337475.045072\tC0CH1t2rrpNzfA4lH2\t172.30.1.12\t48914\t8.8.8.8\t53\tudp\tdns\t0.027955\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:26.614Z","host":{"name":"f6b540842a86"},"log":{"offset":488773,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654002 Key: Timestamp: 2025-12-10 03:31:28.718 Headers: empty

{"@version":"1","event":{"hash":"be12aa86f97b9422d1ac924c439409dc987bf57d2f48e88ad0daa370f8809524"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337476.074963\tCKV7Ts1HjdWj96prZ\t172.30.1.12\t36228\t8.8.8.8\t53\tudp\tdns\t0.029509\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:27.615Z","host":{"name":"f6b540842a86"},"log":{"offset":488897,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654003 Key: Timestamp: 2025-12-10 03:31:28.718 Headers: empty

{"@version":"1","event":{"hash":"aef46008cffe9d43356f19bf19393a60e512efd38ab665e4e3996753c2793279"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337466.547937\tCbWGYE1jMnXAwteH65\t172.30.1.35\t57890\t172.30.1.254\t53\tudp\tdns\t2.011089\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:27.615Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":489020},"tags":["beats_input_codec_plain_applied"]}

Offset: 654004 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"1016af447e5dd9de4342a5cca8691323837b84769fa8c6e1cc95a83c826c56c1"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337476.544379\tCZiCdh3X95x3gYZNUc\t172.30.1.35\t51348\t172.30.1.254\t53\tudp\tdns\t0.006397\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:28.615Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":489151},"tags":["beats_input_codec_plain_applied"]}

Offset: 654005 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"7171ab746d5b7ceae0eb21f432077bc7edd8a4f6833d916d383338b82c22830e"},"ecs":{"version":"1.6.0"},"message":"1765337486.549466\tCKBgoFyvhZbl9N5Q\t172.30.1.35\t52152\t172.30.1.254\t53\tudp\t54238\t0.004482\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2310.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:29.150Z","host":{"name":"f6b540842a86"},"log":{"offset":492000,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654006 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"d115c0bf59124d8f490b14dcbeb62bc507d1a4d7e66ae4abc9ec2bec2484c7ef"},"ecs":{"version":"1.6.0"},"message":"1765337486.445044\tC0Qggf2ohEY1AsM1l3\t172.30.1.12\t46513\t8.8.8.8\t53\tudp\t55154\t0.028898\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t188.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:29.150Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":492172},"tags":["beats_input_codec_plain_applied"]}

Offset: 654007 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"d994a5293228e2cc8637053aed4c99f8335c9753117b905dd90ef1d9c3a03444"},"ecs":{"version":"1.6.0"},"message":"1765337487.485069\tCpDPnc2j5KPNL3nuOe\t172.30.1.12\t35494\t8.8.8.8\t53\tudp\t55155\t0.027307\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t45.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:29.150Z","host":{"name":"f6b540842a86"},"log":{"offset":492347,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654008 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"710d0c81dce0d3fd9fafee0bf10413d4b194ac9da8b7d6b84b5e8a69edd7a00e"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337477.114952\tCecZhF3xMMIxFDdAXa\t172.30.1.12\t45811\t8.8.8.8\t53\tudp\tdns\t0.027291\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:28.615Z","host":{"name":"f6b540842a86"},"log":{"offset":489282,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654009 Key: Timestamp: 2025-12-10 03:31:29.719 Headers: empty

{"@version":"1","event":{"hash":"f26fd39c35195cc33f2313ebcae45c5bbd820d068ac070027a159c0912e44f99"},"ecs":{"version":"1.6.0"},"message":"1765337488.515044\tCYN5Du3iX9dg0sFX1i\t172.30.1.12\t53669\t8.8.8.8\t53\tudp\t55156\t0.026350\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t186.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:29.150Z","host":{"name":"f6b540842a86"},"log":{"offset":492521,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654010 Key: Timestamp: 2025-12-10 03:31:31.254 Headers: empty

{"@version":"1","event":{"hash":"153f252e869dd19eaa730b46143b3d354adf41328109f77d352f74172e96d655"},"ecs":{"version":"1.6.0"},"message":"1765337489.545502\tCkd6qmS7mRcvHljPh\t172.30.1.12\t37265\t8.8.8.8\t53\tudp\t55157\t0.027096\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t185.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:30.151Z","host":{"name":"f6b540842a86"},"log":{"offset":492696,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654011 Key: Timestamp: 2025-12-10 03:31:32.720 Headers: empty

{"@version":"1","event":{"hash":"36b9d5afb98d106bac3ff6acace90da0c21edddf91ef7fd64c095b7c8873e7b6"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337478.144938\tCKbAZH1ptQgnwV4nje\t172.30.1.12\t40315\t8.8.8.8\t53\tudp\tdns\t0.029540\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:31.616Z","host":{"name":"f6b540842a86"},"log":{"offset":489406,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654012 Key: Timestamp: 2025-12-10 03:31:32.720 Headers: empty

{"@version":"1","event":{"hash":"6c99778a343a8abed543e88b34424bd95b5b6767099c7b507c9f90c2a83d4f73"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337479.184950\tCtVKQv1SIYZ730qzu4\t172.30.1.12\t50022\t8.8.8.8\t53\tudp\tdns\t0.027410\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:31.616Z","host":{"name":"f6b540842a86"},"log":{"offset":489530,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654013 Key: Timestamp: 2025-12-10 03:31:32.720 Headers: empty

{"@version":"1","event":{"hash":"3fe78dedee108092c87145485b4d0ad5efc3b166466b46a83416771ddc3a8515"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337480.214974\tCth7D31uayUNsx08X5\t172.30.1.12\t35802\t8.8.8.8\t53\tudp\tdns\t0.030137\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:31.616Z","host":{"name":"f6b540842a86"},"log":{"offset":489654,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654014 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"a059fa92c6e7e149a915f8d7426b3189df171019f09d1845fb9216a9b7a8b291"},"ecs":{"version":"1.6.0"},"message":"1765337491.554179\tCN3wxb3al6fbcz08Mi\t172.30.1.35\t60726\t172.30.1.254\t53\tudp\t30011\t0.004190\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2305.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.152Z","host":{"name":"f6b540842a86"},"log":{"offset":493045,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654015 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"6222367ee72af1ad5862d71959c43d7843b38a3aa6a4a251fe6e65ae8634642b"},"ecs":{"version":"1.6.0"},"message":"1765337491.605081\tCqCXPm1fw8t6stxnAb\t172.30.1.12\t48091\t8.8.8.8\t53\tudp\t55159\t0.028213\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t127.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.152Z","host":{"name":"f6b540842a86"},"log":{"offset":493219,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654016 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"d70f6ef23aebd9d98bf46f39af4ab9ada68b9aaddea4e6d824de59bda80b3b21"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337481.255046\tC7IlVS3cDEjQrPORQ5\t172.30.1.12\t51062\t8.8.8.8\t53\tudp\tdns\t0.029618\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.619Z","host":{"name":"f6b540842a86"},"log":{"offset":490029,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654017 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"274ba7f27bcf1e20909bfb187b5d47544d64e1ca754c08195ea766f08cead162"},"ecs":{"version":"1.6.0"},"message":"1765337490.575110\tCzFYpw2M6XwbTLnXMd\t172.30.1.12\t55785\t8.8.8.8\t53\tudp\t55158\t0.026037\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t184.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.152Z","host":{"name":"f6b540842a86"},"log":{"offset":492870,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654018 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"aa4d0c427808a7d0f2f26cf2f940ada463e64bacd49e0cf862ed475f96daa440"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337482.295460\tC3qwbk4mOSfqv14Yz4\t172.30.1.12\t47562\t8.8.8.8\t53\tudp\tdns\t0.028375\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.619Z","host":{"name":"f6b540842a86"},"log":{"offset":490571,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654019 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"cc6beb266062c2746a66238f2010805777e0d0fa83e79db5dc399e4f96c0049b"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337471.539205\tCw2iLM1cTIOPjASmI\t172.30.1.35\t58362\t172.30.1.254\t53\tudp\tdns\t2.009839\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.619Z","host":{"name":"f6b540842a86"},"log":{"offset":490153,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654020 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"c3ca0d0dc6a9fa2ed50451bd2d6dfa7d77ad82d4ca2ff45081ce90f57bca7f5b"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337485.572094\tCn30rH34cQwE12cl29\t172.30.1.2\t52246\t172.30.4.139\t1514\ttcp\t-\t2.995819\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:32.619Z","host":{"name":"f6b540842a86"},"log":{"offset":489778,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654021 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"b3385369674be78c377d16bab430a04d61b702d54e0ca15393fe11020c2f50ed"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337427.034719\tCWw8AE3PFOSYQkptvg\t172.30.1.35\t52163\t142.250.66.99\t80\ttcp\thttp\t60.053305\t200\t1706\tSF\tT\tF\t0\tShADadFf\t6\t452\t5\t1918\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.619Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":490283},"tags":["beats_input_codec_plain_applied"]}

Offset: 654022 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"7951ea3222b30a4a97382d0c6809fe8b8989f6237e7617f77810c6bed86cfe88"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337481.593536\tCvyD5G4fmd9Ytm4Gbb\t172.30.1.35\t60621\t8.8.8.8\t53\tudp\tdns\t0.027736\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:32.619Z","host":{"name":"f6b540842a86"},"log":{"offset":489903,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654023 Key: Timestamp: 2025-12-10 03:31:33.726 Headers: empty

{"@version":"1","event":{"hash":"2aa6f219a586165f632deee24bd0033c8a24bfa6a922b818b900ffe7403742e7"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337427.069022\tCiU6sQ3WGXLjtSxDnk\t172.30.1.35\t52164\t199.232.166.172\t80\ttcp\thttp\t60.019327\t282\t202\tSF\tT\tF\t0\tShADadFf\t6\t534\t5\t414\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:33.619Z","host":{"name":"f6b540842a86"},"log":{"offset":490427,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654024 Key: Timestamp: 2025-12-10 03:31:35.256 Headers: empty

{"@version":"1","event":{"hash":"13d949f0458f20323348a92dc650f5eae30f2c777a736ed4faa2d7b62157153c"},"ecs":{"version":"1.6.0"},"message":"1765337493.666264\tCRI8552cXCoKq8x5Zc\t172.30.1.12\t45060\t8.8.8.8\t53\tudp\t55161\t0.026670\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t181.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:34.153Z","host":{"name":"f6b540842a86"},"log":{"offset":493568,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654025 Key: Timestamp: 2025-12-10 03:31:35.256 Headers: empty

{"@version":"1","event":{"hash":"2ebb3cc14e0c2273f96437e37384dfed8fdd2d0dc6d172bd03ee791c45222836"},"ecs":{"version":"1.6.0"},"message":"1765337492.635110\tCs7ecbbNPmIru33X6\t172.30.1.12\t48128\t8.8.8.8\t53\tudp\t55160\t0.026824\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t126.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:34.153Z","host":{"name":"f6b540842a86"},"log":{"offset":493394,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654026 Key: Timestamp: 2025-12-10 03:31:35.256 Headers: empty

{"@version":"1","event":{"hash":"0d9327bd964555967a36301abfd89511b70ee40715d15a5f34cf137abeac2dcf"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337432.949007\tChP7UM1EmFJrz4cnjb\t172.30.1.132\t3\t172.30.1.254\t3\ticmp\t-\t-\t-\t-\tOTH\tT\tT\t0\t-\t1\t99\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:34.620Z","host":{"name":"f6b540842a86"},"log":{"offset":490695,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654027 Key: Timestamp: 2025-12-10 03:31:36.725 Headers: empty

{"@version":"1","event":{"hash":"3b670bd01adc2dad25c32d3c37e28c8878e19cc6e2ced2ef7d1f8e018bf559c3"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337484.375077\tC0REKh41E0SGsnJ7N2\t172.30.1.12\t37577\t8.8.8.8\t53\tudp\tdns\t0.027574\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:35.620Z","host":{"name":"f6b540842a86"},"log":{"offset":490933,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654028 Key: Timestamp: 2025-12-10 03:31:36.725 Headers: empty

{"@version":"1","event":{"hash":"52615e070f1443db7be4ee3ca9a066fce472138ac487a25c14a034dbdde62f7e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337483.339884\tCU3n2L2G7MFWsYS8K3\t172.30.1.12\t59798\t8.8.8.8\t53\tudp\tdns\t0.028380\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:35.620Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":490809},"tags":["beats_input_codec_plain_applied"]}

Offset: 654029 Key: Timestamp: 2025-12-10 03:31:37.725 Headers: empty

{"@version":"1","event":{"hash":"0b2731d30d41993d7b23ffe96cbe19c3639cf6fd24c06482ab28718312e2b035"},"ecs":{"version":"1.6.0"},"message":"1765337494.695122\tC3fQHy4kBjNmRfsDze\t172.30.1.12\t35764\t8.8.8.8\t53\tudp\t55162\t0.029762\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t124.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:37.154Z","host":{"name":"f6b540842a86"},"log":{"offset":493743,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654030 Key: Timestamp: 2025-12-10 03:31:37.725 Headers: empty

{"@version":"1","event":{"hash":"929917b66fd59eb713e8a7ed2b6e8e635464b7b4cc8f3ff229c3a64dd96ec617"},"ecs":{"version":"1.6.0"},"message":"1765337495.735134\tCGxImN3wxkdLAlwmpe\t172.30.1.12\t36207\t8.8.8.8\t53\tudp\t55163\t0.028287\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t179.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:37.154Z","host":{"name":"f6b540842a86"},"log":{"offset":493918,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654031 Key: Timestamp: 2025-12-10 03:31:37.725 Headers: empty

{"@version":"1","event":{"hash":"815a75942ce6a8f99db71bfe2d80bf364c489095adec80d4d5cf12828f2b7832"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337485.405143\tCBRmdmqnv7aptWIub\t172.30.1.12\t39135\t8.8.8.8\t53\tudp\tdns\t0.028937\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:36.622Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":491057},"tags":["beats_input_codec_plain_applied"]}

Offset: 654032 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"80e2dd7dd0320664c2afb4ee0af7b67ff0548d35041d60d4f907b95face82705"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337486.549466\tCKBgoFyvhZbl9N5Q\t172.30.1.35\t52152\t172.30.1.254\t53\tudp\tdns\t0.004482\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.623Z","host":{"name":"f6b540842a86"},"log":{"offset":491430,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654033 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"65daece0b2fd26ead9a33f6c9c3db52e157874d21f921e39ab40d680c02fbf65"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337436.572821\tClvitD2JOD9BS1STgj\tfe80::222:19ff:fe59:6c3c\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.623Z","host":{"name":"f6b540842a86"},"log":{"offset":491559,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654034 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"cfa80bca6f974815f363f6db4965920982984f0d5d029c8c0c692accb33c6e60"},"ecs":{"version":"1.6.0"},"message":"1765337496.586202\tC0BYBF4FGojNbtRNH\t172.30.1.35\t55521\t8.8.8.8\t53\tudp\t5998\t0.028084\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2873.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.154Z","host":{"name":"f6b540842a86"},"log":{"offset":494093,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654035 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"337f577a3a2ba03e18b8ad4d00add4f03e6d4b2486ffc5021c095d0665c101c2"},"ecs":{"version":"1.6.0"},"message":"1765337496.775344\tCJJCyy4rWRtU2YPUrl\t172.30.1.12\t55142\t8.8.8.8\t53\tudp\t55164\t0.030515\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t122.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.154Z","host":{"name":"f6b540842a86"},"log":{"offset":494260,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654036 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"e989805e48fc60181d0c3c1a396a1e6eae570e7cbab6913b46c900fb51fd3114"},"ecs":{"version":"1.6.0"},"message":"1765337496.547034\tCT9Z732vIO1HS3an4g\t172.30.1.35\t55521\t172.30.1.254\t53\tudp\t5998\t1.152461\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2299.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.154Z","host":{"name":"f6b540842a86"},"log":{"offset":494435,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654037 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"7059827f9eacbc20aa41817bf9d12ccc79c276cc98997785754c6a585313b4f8"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337436.423817\tCAzoEm1MiaQpNfHnwa\tfe80::b2be:76ff:fec9:7610\t130\tff02::1\t131\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:37.623Z","host":{"name":"f6b540842a86"},"log":{"offset":491180,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654038 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"0d51b3e69476d3fc81cb3fd7cef0ef03047bf40ecdac069b3d5b5b3e8ea5b9e0"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337486.445044\tC0Qggf2ohEY1AsM1l3\t172.30.1.12\t46513\t8.8.8.8\t53\tudp\tdns\t0.028898\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:37.623Z","host":{"name":"f6b540842a86"},"log":{"offset":491306,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654039 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"aa220a7a2a11008bd426212fc5d648f773acdc4c4149bc5773b9448ab454c6ac"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337366.556842\tCfkzwQ3gjCZIRNY0Yd\t172.30.1.35\t52159\t150.171.28.11\t443\ttcp\tssl\t125.965627\t3592\t9911\tRSTR\tT\tF\t411\tShADadgTr\t15\t4206\t20\t10747\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.623Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":491809},"tags":["beats_input_codec_plain_applied"]}

Offset: 654040 Key: Timestamp: 2025-12-10 03:31:38.727 Headers: empty

{"@version":"1","event":{"hash":"8c7f75da0d432a53887207da2907cb0e3293bba8b77359339f5378ff51f64547"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337436.861574\tCSMpfG118nJ95b8Vd8\tfe80::c251:7eff:fe56:e095\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:38.623Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":491684},"tags":["beats_input_codec_plain_applied"]}

Offset: 654041 Key: Timestamp: 2025-12-10 03:31:40.261 Headers: empty

{"@version":"1","event":{"hash":"6bdd9296ddcd75e69ef28b26e46d22ffe51eec75794923a4405d5e42c4b8ba82"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337488.515044\tCYN5Du3iX9dg0sFX1i\t172.30.1.12\t53669\t8.8.8.8\t53\tudp\tdns\t0.026350\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:39.623Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":492214},"tags":["beats_input_codec_plain_applied"]}

Offset: 654042 Key: Timestamp: 2025-12-10 03:31:40.261 Headers: empty

{"@version":"1","event":{"hash":"8d7627ee122ed8bc7c48e72c75384d1a619fc29ebd674b50ff7e2fad6d9241f7"},"ecs":{"version":"1.6.0"},"message":"1765337497.815238\tCwOgit3yzAJ5TDuYcc\t172.30.1.12\t45487\t8.8.8.8\t53\tudp\t55165\t0.028135\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t35.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:39.154Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":494608},"tags":["beats_input_codec_plain_applied"]}

Offset: 654043 Key: Timestamp: 2025-12-10 03:31:40.261 Headers: empty

{"@version":"1","event":{"hash":"d55cff43bb6b918ad967a5aee2071e404adc77929e664142f2a2448366e508e5"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337487.485069\tCpDPnc2j5KPNL3nuOe\t172.30.1.12\t35494\t8.8.8.8\t53\tudp\tdns\t0.027307\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:39.623Z","host":{"name":"f6b540842a86"},"log":{"offset":491964,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654044 Key: Timestamp: 2025-12-10 03:31:40.261 Headers: empty

{"@version":"1","event":{"hash":"590555f257d2ce6ed4b891406779be658dcf7ad379b152665750dad758db6cc4"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337438.335593\tC5N6Rp3EphEHRZEv2b\tfe80::ca1f:66ff:fecb:6f36\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:39.623Z","host":{"name":"f6b540842a86"},"log":{"offset":492088,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654045 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"7414df8643935cecbf9dbfe7b30db096ca952ba281cf63ff32910352294a1673"},"ecs":{"version":"1.6.0"},"message":"1765337498.845174\tCxDvW1iHKqNLHJIQ1\t172.30.1.12\t52842\t8.8.8.8\t53\tudp\t55166\t0.029184\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t176.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.158Z","host":{"name":"f6b540842a86"},"log":{"offset":494956,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654046 Key: Timestamp: 2025-12-10 03:31:41.261 Headers: empty

{"@version":"1","event":{"hash":"cfc59ce5cca301ce7fd91b456f6557500a1e47989cebbbe24a25dcc3a4c2e806"},"ecs":{"version":"1.6.0"},"message":"1765337498.876004\tCXtLWL1MRCEGOCdezi\t172.30.1.12\t54800\t8.8.8.8\t53\tudp\t55167\t0.027857\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t34.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.158Z","host":{"name":"f6b540842a86"},"log":{"offset":494782,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654047 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"7ae2515e249e0e6f9fadc58aeb0fffe399e0ffc18e2f7cc67d7b38fa5a32877f"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337438.494298\tCA9C3m48SPqtEFtjZa\tfe80::a272:2cff:fef5:f5fb\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t116\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.624Z","host":{"name":"f6b540842a86"},"log":{"offset":492338,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654048 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"d15f2be4d5f9990771adacebebf6ac2755393db3b4530f651ee78ad4b5f35a9d"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337493.789996\tC7C9st11HhOY6Zifxc\t172.30.1.2\t59920\t172.30.4.136\t5044\ttcp\t-\t2.999149\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.624Z","host":{"name":"f6b540842a86"},"log":{"offset":492464,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654049 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"7c01e1bac6d5243db5aa8347a470307611d8adec05f40e9763f5b27d773f8861"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337439.103789\tCCP6IM21AgjAnow0Sb\tfe80::c55e:ff17:5ec1:f6be\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.624Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":492589},"tags":["beats_input_codec_plain_applied"]}

Offset: 654050 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"45360ca717ebf8a0229551aca7a5eed9334428d97850079e6c85dac9471f2427"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337489.545502\tCkd6qmS7mRcvHljPh\t172.30.1.12\t37265\t8.8.8.8\t53\tudp\tdns\t0.027096\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.624Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":492714},"tags":["beats_input_codec_plain_applied"]}

Offset: 654051 Key: Timestamp: 2025-12-10 03:31:41.262 Headers: empty

{"@version":"1","event":{"hash":"e883b72ba45507a7f79a6e30494c968883f679107429a096d76383959b0baf85"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337494.797373\tCSCFmk1cjYxS7UD7A2\t172.30.1.63\t40412\t172.30.2.171\t5044\ttcp\t-\t4.130156\t0\t0\tS0\tT\tT\t0\tS\t5\t300\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:40.624Z","host":{"name":"f6b540842a86"},"log":{"offset":492837,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654052 Key: Timestamp: 2025-12-10 03:31:42.262 Headers: empty

{"@version":"1","event":{"hash":"8299ca0f3988d1aa4e34cac1af8a1e153a4a2afc5db1ca7b892e7f4a01e2820f"},"ecs":{"version":"1.6.0"},"message":"1765337499.368830\tCw1Jrmzej9qzswKFh\t172.30.1.132\t14633\t172.30.1.254\t53\tudp\t11293\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:41.159Z","host":{"name":"f6b540842a86"},"log":{"offset":495130,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654053 Key: Timestamp: 2025-12-10 03:31:42.262 Headers: empty

{"@version":"1","event":{"hash":"d9414c948c0507eef8abb58c0735f24d754669cf8757a61e8ae91e8d39f56138"},"ecs":{"version":"1.6.0"},"message":"1765337499.368817\tC1nY1H2vkiqlj3fyll\t172.30.1.132\t14633\t8.8.8.8\t53\tudp\t11293\t-\t132.1.30.172.in-addr.arpa\t1\tC_INTERNET\t12\tPTR\t3\tNXDOMAIN\tF\tF\tT\tF\t0\t-\t-\tT","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:41.159Z","host":{"name":"f6b540842a86"},"log":{"offset":495460,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654054 Key: Timestamp: 2025-12-10 03:31:42.262 Headers: empty

{"@version":"1","event":{"hash":"a193c997089eb589331dfb1f0eeefd8887b3667bba651caa2503985daf1c7be8"},"ecs":{"version":"1.6.0"},"message":"1765337499.915182\tCfS4VRpvZD6tiGB14\t172.30.1.12\t37960\t8.8.8.8\t53\tudp\t55168\t0.028592\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t119.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:41.159Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":495286},"tags":["beats_input_codec_plain_applied"]}

Offset: 654055 Key: Timestamp: 2025-12-10 03:31:42.263 Headers: empty

{"@version":"1","event":{"hash":"da8e5d15f9b5884a5315060db414854a34c2e65a78804da8ddf13194636dfc64"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337440.142679\tC2phTEY3tkqvQW3c6\tfe80::5ec5:63ff:fe93:7e19\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:41.624Z","host":{"name":"f6b540842a86"},"log":{"offset":492963,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654056 Key: Timestamp: 2025-12-10 03:31:42.263 Headers: empty

{"@version":"1","event":{"hash":"3ff56cdda4a24f00941cf03db0cedf8be7be1dbbc066af5a13f057d7baf3720d"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337490.575110\tCzFYpw2M6XwbTLnXMd\t172.30.1.12\t55785\t8.8.8.8\t53\tudp\tdns\t0.026037\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:41.624Z","host":{"name":"f6b540842a86"},"log":{"offset":493087,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654057 Key: Timestamp: 2025-12-10 03:31:43.264 Headers: empty

{"@version":"1","event":{"hash":"c7c9b3ba1bd4f68076f1724199182df67705dfb2c676ea48ea006bcf9942cf8a"},"ecs":{"version":"1.6.0"},"message":"1765337500.955214\tCTJD6CRGs3vRjj2u9\t172.30.1.12\t42758\t8.8.8.8\t53\tudp\t55169\t0.028757\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t32.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:42.160Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":495612},"tags":["beats_input_codec_plain_applied"]}

Offset: 654058 Key: Timestamp: 2025-12-10 03:31:43.264 Headers: empty

{"@version":"1","event":{"hash":"687f426cc1efb91e9d719af71db584f98796b0a62569fc2fd153de364834092a"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337491.554179\tCN3wxb3al6fbcz08Mi\t172.30.1.35\t60726\t172.30.1.254\t53\tudp\tdns\t0.004190\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:42.625Z","host":{"name":"f6b540842a86"},"log":{"offset":493211,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654059 Key: Timestamp: 2025-12-10 03:31:43.264 Headers: empty

{"@version":"1","event":{"hash":"46579b63ea30f26fad8969356c8db30dfa9d5df1e2538ea37d4277d0173b30d9"},"ecs":{"version":"1.6.0"},"message":"1765337501.595252\tCuNLms3zxuMBtda2fe\t172.30.1.35\t55626\t172.30.1.254\t53\tudp\t52092\t-\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2295.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:42.160Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":495785},"tags":["beats_input_codec_plain_applied"]}

Offset: 654060 Key: Timestamp: 2025-12-10 03:31:44.271 Headers: empty

{"@version":"1","event":{"hash":"6150c4460f35daa1c884b1fe9c7ab66f5653954ab1ceeb50f89d4142b97317f3"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337491.605081\tCqCXPm1fw8t6stxnAb\t172.30.1.12\t48091\t8.8.8.8\t53\tudp\tdns\t0.028213\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:43.625Z","host":{"name":"f6b540842a86"},"log":{"offset":493472,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654061 Key: Timestamp: 2025-12-10 03:31:44.271 Headers: empty

{"@version":"1","event":{"hash":"88f747cc4b1c4a8b1bf701322a25dbd7c67ca0484d1f78d07841c905627b0ce8"},"ecs":{"version":"1.6.0"},"message":"1765337501.995209\tCWY9iy3qhbBQrGKuld\t172.30.1.12\t60398\t8.8.8.8\t53\tudp\t55170\t0.031348\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t116.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:43.167Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/dns.log"},"offset":495952},"tags":["beats_input_codec_plain_applied"]}

Offset: 654062 Key: Timestamp: 2025-12-10 03:31:44.271 Headers: empty

{"@version":"1","event":{"hash":"42a3d12a05ca60dfc3fd7ecda944c4fb97c24312d0c53f1d31c3c38abcb1f78b"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337481.553050\tCLyg7HfuuTZ8wcK55\t172.30.1.35\t60621\t172.30.1.254\t53\tudp\tdns\t1.216738\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:43.625Z","host":{"name":"f6b540842a86"},"log":{"offset":493342,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654063 Key: Timestamp: 2025-12-10 03:31:44.271 Headers: empty

{"@version":"1","event":{"hash":"baa35b856cb58b7596b9170020c688b33c745ba3023687c0cbc5fc5f9de5f418"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337442.647580\tCuv7Ey1kraTuHAjdmf\tfe80::6263:4cff:febc:17c6\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:43.625Z","host":{"name":"f6b540842a86"},"log":{"offset":493596,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654064 Key: Timestamp: 2025-12-10 03:31:45.271 Headers: empty

{"@version":"1","event":{"hash":"e5fd3f0fced3e8c749dbd50ba021d15800334b5c8f04bc7fbf53e17db8e49783"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337443.129391\tCq3kf54ZihOFToztZh\tfe80::86c9:b2ff:fe5c:232\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t96\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:44.626Z","host":{"name":"f6b540842a86"},"log":{"offset":493845,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654065 Key: Timestamp: 2025-12-10 03:31:45.271 Headers: empty

{"@version":"1","event":{"hash":"355c18f5761c65a3435d58aa91dc6061c74d71862bbb202ce8c949ac67e0d308"},"ecs":{"version":"1.6.0"},"message":"1765337366.562717\tCfkzwQ3gjCZIRNY0Yd\t172.30.1.35\t52159\t150.171.28.11\t443\tTLSv12\tTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384\tsecp384r1\tedge.microsoft.com\tF\t-\th2\tF\tFSQpMA3zBIHHWCQ6g2,FCe6AI2NpC3FPbj222\t(empty)\t-\t-\t-\t-\tok\tf118de74b3f8e56d6935af639f090678\t0f14538e1c9070becdad7739c67d6363","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:44.776Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/ssl.log"},"offset":34578},"tags":["beats_input_codec_plain_applied"]}

Offset: 654066 Key: Timestamp: 2025-12-10 03:31:45.271 Headers: empty

{"@version":"1","event":{"hash":"bc34d4c1263e3cc5f7160a4c6bceb7881de9d46dc6ee127ee88d3f57cc3342cf"},"ecs":{"version":"1.6.0"},"message":"1765337503.035360\tC3yTJk4qN1MiUSHnva\t172.30.1.12\t54753\t8.8.8.8\t53\tudp\t55171\t0.027632\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t115.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:44.167Z","host":{"name":"f6b540842a86"},"log":{"offset":496127,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654067 Key: Timestamp: 2025-12-10 03:31:45.271 Headers: empty

{"@version":"1","event":{"hash":"753f0b7193a2a029e0361c1bc15d4fa087817666ba0c46d80bc7d157081fb479"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337492.635110\tCs7ecbbNPmIru33X6\t172.30.1.12\t48128\t8.8.8.8\t53\tudp\tdns\t0.026824\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:44.626Z","host":{"name":"f6b540842a86"},"log":{"offset":493722,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654068 Key: Timestamp: 2025-12-10 03:31:46.274 Headers: empty

{"@version":"1","event":{"hash":"a8993ee3bc9a8c752177c900407caabd440261568b3ffbde3e999c79be3d2108"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337498.570152\tCJEZnz4Y0LbZTHUxN6\t172.30.1.2\t52250\t172.30.4.139\t1514\ttcp\t-\t2.998907\t0\t0\tS0\tT\tT\t0\tS\t3\t180\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:45.626Z","host":{"name":"f6b540842a86"},"log":{"offset":493969,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654069 Key: Timestamp: 2025-12-10 03:31:46.274 Headers: empty

{"@version":"1","event":{"hash":"a8e7de18aa803fc72a182614f100e507a62bf8afcca3cc6a7539c7c833f9eb17"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337493.666264\tCRI8552cXCoKq8x5Zc\t172.30.1.12\t45060\t8.8.8.8\t53\tudp\tdns\t0.026670\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:45.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494094,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654070 Key: Timestamp: 2025-12-10 03:31:46.274 Headers: empty

{"@version":"1","event":{"hash":"5f1047a8c4b8dad7849fbbfc8d0bcf8e26e91b04786493e3ab9b5ac6e2019a7b"},"ecs":{"version":"1.6.0"},"message":"1765337504.065341\tClMbk11tDt3cQlT9md\t172.30.1.12\t35557\t8.8.8.8\t53\tudp\t55172\t0.027848\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t114.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:45.168Z","host":{"name":"f6b540842a86"},"log":{"offset":496302,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654071 Key: Timestamp: 2025-12-10 03:31:46.274 Headers: empty

{"@version":"1","event":{"hash":"4a439877e1ff8a85fb500860ffe70cca99d62b70ad988c95ffa96682001546bd"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337444.562021\tCO7b5QydpXpUtjTYg\tfe80::2c41:11ff:fe33:ac74\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t76\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:45.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494218,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654072 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"ea8ed4295b5845cf98959b93d4fd7690918062633933cc61ff272aa206ca3d51"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337439.259360\tCwKaZF0DQpYIA6dQf\tfe80::68b5:14e3:6da1:5bd8\t143\tff02::16\t0\ticmp\t-\t5.499750\t80\t0\tOTH\tF\tF\t0\t-\t4\t304\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494466,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654073 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"45c44d5b8b9c650ed4cbe67a79ddd70b4bd0210759c50d38103c165b3f92d50d"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337444.891474\tCKz0z9171ASmmpfUeg\tfe80::c251:7eff:fefb:e9d7\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t96\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494599,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654074 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"ba032b4fde3f27f57ce65343ee38f3036ea1f9821f166d0974eb109031733454"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337440.105635\tCVliMoECygY7vI7H6\tfe80::c86:954f:5d3e:13c9\t143\tff02::16\t0\ticmp\t-\t5.000349\t80\t0\tOTH\tF\tF\t0\t-\t3\t248\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":495114,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654075 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"ec971c634ff33d02e1609e21070b862fe2fc92fd40355d1df7a63770e5700f5d"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337445.020536\tCdhy3jCEdx4hNZuil\t172.30.1.132\t59236\t216.239.35.12\t123\tudp\tntp\t0.031126\t48\t48\tSF\tT\tF\t0\tDd\t1\t76\t1\t76\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494983,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654076 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"0eaccc842387df5d917a904d17b8936d10f6b02f31512b4ce0d71a8ae6dccf6a"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337499.951453\tCtVenM2cSAXlFmDpn5\t172.30.1.63\t40412\t172.30.2.171\t5044\ttcp\t-\t2.048015\t0\t0\tS0\tT\tT\t0\tS\t2\t120\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494724,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654077 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"ef0d35bec72a6594e201d2a44983a51ea71d4dfa0918ea31d8055cf26dcca8b7"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337437.540878\tC3SyvK1nmv5amWIla\tfe80::a629:9f54:45ee:d1d5\t143\tff02::16\t0\ticmp\t-\t7.510331\t80\t0\tOTH\tF\tF\t0\t-\t4\t304\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494850,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654078 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"25a6fb7489a4d444cb955e21467ad1ee4a74bb8440940de3fcb7c4442e0852c0"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337494.695122\tC3fQHy4kBjNmRfsDze\t172.30.1.12\t35764\t8.8.8.8\t53\tudp\tdns\t0.029762\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":494342,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654079 Key: Timestamp: 2025-12-10 03:31:47.730 Headers: empty

{"@version":"1","event":{"hash":"7553126980724d817fa93683dc5f26035bc2558cd6f8ff51b223d9e6a7a1b5da"},"ecs":{"version":"1.6.0"},"message":"worker-1-1\t1765337495.735134\tCGxImN3wxkdLAlwmpe\t172.30.1.12\t36207\t8.8.8.8\t53\tudp\tdns\t0.028287\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:46.626Z","host":{"name":"f6b540842a86"},"log":{"offset":495246,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654080 Key: Timestamp: 2025-12-10 03:31:48.730 Headers: empty

{"@version":"1","event":{"hash":"53dfc613e4f57131f37b5ff444cef776e2e5b153fce7e481bfe405e4caabee3c"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337445.862137\tCWWMVE2XT7oeF95njc\tfe80::22e4:300:8a61:450b\t143\tff02::16\t0\ticmp\t-\t0.000475\t40\t0\tOTH\tF\tF\t0\t-\t2\t152\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:47.627Z","host":{"name":"f6b540842a86"},"log":{"offset":495370,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654081 Key: Timestamp: 2025-12-10 03:31:48.730 Headers: empty

{"@version":"1","event":{"hash":"958ab60a00e52480578f64dead590e9ae1aed0e0359c78e74c2c45a51951d25e"},"ecs":{"version":"1.6.0"},"message":"1765337505.095290\tC425wI1M4vkC69ifQh\t172.30.1.12\t49209\t8.8.8.8\t53\tudp\t55173\t0.027522\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t113.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.168Z","host":{"name":"f6b540842a86"},"log":{"offset":496477,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654082 Key: Timestamp: 2025-12-10 03:31:48.730 Headers: empty

{"@version":"1","event":{"hash":"1efdd64eaf78f9535f513f5e5925f700efdb0381272a966c212a1eb2c12c3915"},"ecs":{"version":"1.6.0"},"message":"1765337506.133909\tCSeLhB1UIdkE625Fy4\t172.30.1.12\t46862\t8.8.8.8\t53\tudp\t55174\t0.019320\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t26.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.169Z","host":{"name":"f6b540842a86"},"log":{"offset":496652,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654083 Key: Timestamp: 2025-12-10 03:31:48.730 Headers: empty

{"@version":"1","event":{"hash":"7c52d891beffc4d20b4779b7dc1fc7338e593a5e8f0b9f834aa17cace08e6ef9"},"ecs":{"version":"1.6.0"},"message":"1765337506.544397\tCympU82jul4hMkE40e\t172.30.1.35\t64391\t172.30.1.254\t53\tudp\t26198\t0.005025\tg.ceipmsn.com\t1\tC_INTERNET\t1\tA\t3\tNXDOMAIN\tF\tF\tT\tT\t0\tg.search.live.com\t2290.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.169Z","host":{"name":"f6b540842a86"},"log":{"offset":496826,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654084 Key: Timestamp: 2025-12-10 03:31:49.736 Headers: empty

{"@version":"1","event":{"hash":"79979e19b81262bd8a576ac35a40edd27f8ba28f08e00e6d12d7ca1f2eb3305c"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337496.586202\tC0BYBF4FGojNbtRNH\t172.30.1.35\t55521\t8.8.8.8\t53\tudp\tdns\t0.028084\t31\t129\tSF\tT\tF\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.627Z","host":{"name":"f6b540842a86"},"log":{"offset":495629,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654085 Key: Timestamp: 2025-12-10 03:31:49.736 Headers: empty

{"@version":"1","event":{"hash":"335baed730b77b8e2dcd022a847164c6c879a779cde5c8c356ee571c6369a52a"},"ecs":{"version":"1.6.0"},"message":"worker-1-2\t1765337446.130374\tC2iuqT1n6amNt2zLYi\tfe80::2a87:baff:fee8:8f52\t143\tff02::16\t0\ticmp\t-\t-\t-\t-\tOTH\tF\tF\t0\t-\t1\t136\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.627Z","host":{"name":"f6b540842a86"},"log":{"offset":495503,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654086 Key: Timestamp: 2025-12-10 03:31:49.736 Headers: empty

{"@version":"1","event":{"hash":"82dba2313dfa319a2f4c45aa5501e7fa46e34cb9fc812b0c68a33d172848d565"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337496.775344\tCJJCyy4rWRtU2YPUrl\t172.30.1.12\t55142\t8.8.8.8\t53\tudp\tdns\t0.030515\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:48.628Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":495754},"tags":["beats_input_codec_plain_applied"]}

Offset: 654087 Key: Timestamp: 2025-12-10 03:31:49.736 Headers: empty

{"@version":"1","event":{"hash":"2611b59b3f9955a097bd9fcdcb80006af20982b4b7f47013f1825d103a2e27f4"},"ecs":{"version":"1.6.0"},"message":"1765337507.155260\tCLDxWU15gYCMlXQfic\t172.30.1.12\t38471\t8.8.8.8\t53\tudp\t55175\t0.029121\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t111.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:49.169Z","host":{"name":"f6b540842a86"},"log":{"offset":497000,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654088 Key: Timestamp: 2025-12-10 03:31:49.736 Headers: empty

{"@version":"1","event":{"hash":"dc599a6536a250fd7252cac8dbe9bc28d0cfa45fca07d0b7423f59f789133783"},"ecs":{"version":"1.6.0"},"message":"1765337508.195307\tCle4xP2XUARTzZSGJ\t172.30.1.12\t33260\t8.8.8.8\t53\tudp\t55176\t0.026983\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t110.000000\tF","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:49.169Z","host":{"name":"f6b540842a86"},"log":{"offset":497175,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654089 Key: Timestamp: 2025-12-10 03:31:50.732 Headers: empty

{"@version":"1","event":{"hash":"83bb1704d6de0d70bb9f87ba5ef9d840639b77ce0c7a3ed60abd510ed6155768"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337497.815238\tCwOgit3yzAJ5TDuYcc\t172.30.1.12\t45487\t8.8.8.8\t53\tudp\tdns\t0.028135\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:49.628Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":495878},"tags":["beats_input_codec_plain_applied"]}

Offset: 654090 Key: Timestamp: 2025-12-10 03:31:50.732 Headers: empty

{"@version":"1","event":{"hash":"7991be0303e1bdee9f1aaeb9ce6ca6a47ff720eb2c0077561f579e331b26beb5"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337498.876004\tCXtLWL1MRCEGOCdezi\t172.30.1.12\t54800\t8.8.8.8\t53\tudp\tdns\t0.027857\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"name":"f6b540842a86","id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:50.628Z","host":{"name":"f6b540842a86"},"log":{"offset":496002,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654091 Key: Timestamp: 2025-12-10 03:31:50.732 Headers: empty

{"@version":"1","event":{"hash":"cbb222b3f2a041f7373e03d322342ef5fe50f1dcc9a3e2f495c4283c210b8fba"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337499.368817\tC1nY1H2vkiqlj3fyll\t172.30.1.132\t14633\t8.8.8.8\t53\tudp\tdns\t0.028640\t43\t43\tSF\tT\tF\t0\tDd\t1\t71\t1\t71\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:50.628Z","host":{"name":"f6b540842a86"},"log":{"offset":496126,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654092 Key: Timestamp: 2025-12-10 03:31:50.732 Headers: empty

{"@version":"1","event":{"hash":"186315ddd4c7c620d37468c7343fa70a40d0d7bd2beb0eb429bb30c22df545a9"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337498.845174\tCxDvW1iHKqNLHJIQ1\t172.30.1.12\t52842\t8.8.8.8\t53\tudp\tdns\t0.029184\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:31:50.628Z","host":{"name":"f6b540842a86"},"log":{"offset":496251,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654093 Key: Timestamp: 2025-12-10 03:37:59.987 Headers: empty

{"@version":"1","event":{"hash":"01cdeea3d6a227d7991bc590f1da403d0a96e55916260ae6707b0c7a6d30cb49"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337813.259830\tCC1n9Z1br5XiMDKr48\tfe80::68b5:14e3:6da1:5bd8\t143\tff02::16\t0\ticmp\t-\t4.002978\t80\t0\tOTH\tF\tF\t0\t-\t4\t304\t0\t0\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:58.884Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":587863},"tags":["beats_input_codec_plain_applied"]}

Offset: 654094 Key: Timestamp: 2025-12-10 03:37:59.987 Headers: empty

{"@version":"1","event":{"hash":"83deb7b5131e13983c02066adeca4c494eb2810c81238a5e8a58e5ab86a7227d"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337866.548808\tCk4666SFmhXEdeGc4\t172.30.1.35\t49716\t172.30.1.254\t53\tudp\tdns\t0.004381\t31\t129\tSF\tT\tT\t0\tDd\t1\t59\t1\t157\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:58.883Z","host":{"name":"f6b540842a86"},"log":{"offset":587733,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654095 Key: Timestamp: 2025-12-10 03:37:59.987 Headers: empty

{"@version":"1","event":{"hash":"3051ac30ccd3ddbecf460c8f6a2c00514879e6848bc099497268f4d39924346a"},"ecs":{"version":"1.6.0"},"message":"1765337878.238911\tC9KyN54dZKBd3lYU01\t172.30.1.12\t60703\t8.8.8.8\t53\tudp\t55539\t0.029662\ttr069ap.trueinternet.co.th\t1\tC_INTERNET\t1\tA\t0\tNOERROR\tF\tF\tT\tT\t0\t61.90.207.93\t40.000000\tF","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:59.420Z","host":{"name":"f6b540842a86"},"log":{"offset":589533,"file":{"path":"/usr/share/filebeat/logs/dns.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654096 Key: Timestamp: 2025-12-10 03:37:59.987 Headers: empty

{"@version":"1","event":{"hash":"0b145e115f5dacdfc563a6d2fe1f7f2c6ab404e179cd39c5be1484c49980465b"},"ecs":{"version":"1.6.0"},"message":"1765337874.870034\tFPNUfl2qji5973Xsec\t3\t5F6D99878D77957ACBF625C56A7BB19D\tCN=download.mcafee.com,O=McAfee\\\\, LLC,ST=California,C=US\tCN=McAfee RSA Organization Validation Secure Server CA 3,O=McAfee\\\\, Inc.,C=US\t1738627200.000000\t1770249599.000000\tid-ecPublicKey\tsha384WithRSAEncryption\tecdsa\t256\t-\tprime256v1\tdownload.mcafee.com,sadownload.mcafee.com\t-\t-\t-\tF\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:59.765Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/x509.log"},"offset":32636},"tags":["beats_input_codec_plain_applied"]}

Offset: 654097 Key: Timestamp: 2025-12-10 03:37:59.988 Headers: empty

{"@version":"1","event":{"hash":"79f940fc8f3102e561e83c32b7a53209a16950b1d7bc7c2f0b292c9fa24b91e7"},"ecs":{"version":"1.6.0"},"message":"1765337874.861664\tCbThui20T60sfqVA04\t172.30.1.35\t52185\t61.91.166.41\t443\tTLSv12\tTLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384\tsecp256r1\tsadownload.mcafee.com\tF\t-\t-\tT\tFPNUfl2qji5973Xsec,FQPjyk4tHDOjxvHS3a,FsuAtB3rOYMiCEL2sk,F0ywXh4967dhiOQsHa\t(empty)\tCN=download.mcafee.com,O=McAfee\\\\, LLC,ST=California,C=US\tCN=McAfee RSA Organization Validation Secure Server CA 3,O=McAfee\\\\, Inc.,C=US\t-\t-\tok\ta0e9f5d64349fb13191bc781f81f42e1\tb677083c9768d0548331fca998152a10","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:59.825Z","host":{"name":"f6b540842a86"},"log":{"offset":39070,"file":{"path":"/usr/share/filebeat/logs/ssl.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654098 Key: Timestamp: 2025-12-10 03:38:00.988 Headers: empty

{"@version":"1","event":{"hash":"21e31924cc7f3563de0ab7d9a5abd6801ccef0848a33c21f7e9607d4e055c725"},"ecs":{"version":"1.6.0"},"message":"worker-1-4\t1765337867.860416\tCO6UmW3BRbhTus2Tu5\t172.30.1.12\t42035\t8.8.8.8\t53\tudp\tdns\t0.026426\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:59.885Z","host":{"name":"f6b540842a86"},"log":{"offset":587997,"file":{"path":"/usr/share/filebeat/logs/conn.log"}},"tags":["beats_input_codec_plain_applied"]}

Offset: 654099 Key: Timestamp: 2025-12-10 03:38:00.988 Headers: empty

{"@version":"1","event":{"hash":"3ac83d7687384fc669299772c838f19fd79712d16a58a71b36c85490f1915d7e"},"ecs":{"version":"1.6.0"},"message":"worker-1-3\t1765337867.888427\tCgQLGJSSfdqjrfFub\t172.30.1.12\t53175\t8.8.8.8\t53\tudp\tdns\t0.026515\t44\t60\tSF\tT\tF\t0\tDd\t1\t72\t1\t88\t-","agent":{"id":"2dc44db8-0e86-4f9c-be47-40bc8f117d50","name":"f6b540842a86","ephemeral_id":"f9ba3ad4-d565-497c-ae69-be9c7212d3d7","hostname":"f6b540842a86","version":"7.10.2","type":"filebeat"},"input":{"type":"log"},"type":"network","@timestamp":"2025-12-10T03:37:59.885Z","host":{"name":"f6b540842a86"},"log":{"file":{"path":"/usr/share/filebeat/logs/conn.log"},"offset":588121},"tags":["beats_input_codec_plain_applied"]}

Kafdrop

Topic Messages: logstash-local-network