CKS认证-Sysdig更新

15. Sysdig更新

注意： 这道题给大家也更新一下，首先想说“01:40:19.601363716,root,ihit”本题和考试时候题差不太多，但是千万注意字段的格式，我本题的解法应该是有问题的，因为我执行命令之后的结果和题目中给出来的示例不一样，在考试时，我新增了相关类型的字段还是无法做到和题目中给出来的格式一样。建议大家在考试前一定要多多尝试各种字段输出的格式。

问题：

您可以使用浏览器打开一个额外的标签页以访问 Sysdig 的文档 或 Falco 的文
Task
使用运行时检测工具检测在属于Pod tomcat 的单个容器中频繁产生和执行的异常进程。
cluster 的工作节点上已预装了两个工具:
**· sysdig
· **falco
使用您选择的工具(包括任何非预安装的 工具)，分析容器的行为至少 30 秒，使用过滤器检测新生成和执行的进程。
在 /opt/KSRS00101/events/details 中存储一个事件文件，其中包含检测到的事件，每行一个，格式如下:

timestamp,uid/username,processName

以下示例显示了格式正确的事件文件:

01:40:19.601363716,root,ihit
01:48:20.606013716,nobody,bash
01:40:21.137163716.1000,tar

:::info
保持工具原本的时间戳格式。
:::

确保将事件文件存储在 cluster 的工作节点上。

正确答案：

sysdig官网

注意：
考试环境中直接ssh到给出的节点即可, 模拟环境中先找到 pod tomcat被调度到了哪个节 点, 然后ssh过去

查找tomcat容器/镜像部署在哪个node节点上

#模拟环境 - 先找到tomcat被调度的节点
candidate@hk8s-master01:~$ kubectl get pod tomcat -owide
NAME READY STATUS RESTARTS AGE IP NODE 
NOMINATED NODE READINESS GATES
tomcat 1/1 Running 0 5m6s 172.16.182.76 hk8snode01 <none> <none>
# 可以看到tomcat是在node01节点上, 记住这个节点

如果输入tomcat镜像名字不管用的话，就查出来这个tomcat的容器id（知道就行，大概率用不到，知道有这么一个方法）。

#拿到tomcat的 container id ---模拟环境与考试环境⼀样操作
candidate@hk8s-master01:~$ kubectl get po tomcat -oyaml | grep
containerID
cni.projectcalico.org/containerID: 
14066bfafae1b599e37fcfbe67ef964f3bfbaceb2cc1988b974049734cb380bc
- containerID: 
containerd://fe64b356bbd34a0fa41abc460166c73331e31532b886f57fab17b7a0b
c7eb16a
candidate@hk8s-master01:~$ 
# fe64b356bbd34a0fa41abc460166c73331e31532b886f57fab17b7a0bc7eb16a
# 这个ID⼤概率⽤不到, 知道就⾏

检测tomcat的镜像

1 #ssh 前往被调度的节点
2 candidate@hk8s-master01:~$ ssh hk8s-node01
3 # 使⽤ sysdig 进⾏检测, 先测试下命令有没有输出结果
4 sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat 
#符合格式要求
5 #如果没有输出就把 container.name=tomcat 换成
container.id=fe64b356bbd34a0fa41abc460166c73331e31532b886f57fab17b7a0b
c7eb16a
6
7 # 最后将⽇志重定向到指定⽬录, 按照题⽬中要求的最少执⾏30s
8 sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat 
>/opt/KSRS00101/events/details
9 #参数记不住可以查看sysdig帮助⽂档, man sysdig

注意：这题做完后千万得检查，别文件没保存上了

root@hk8s-node02:~# sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat >  /opt/KSRS00101/events/details
root@hk8s-node02:/opt/KSRS00101/events# cat details 
17:10:05.544615359,0,python3
17:10:05.544713514,0,python3
17:10:05.544748390,0,python3
17:10:06.045410128,0,python3
17:10:06.045497482,0,python3
17:10:06.045548728,0,python3
17:10:06.546345803,0,python3
17:10:06.546470640,0,python3
17:10:06.546492547,0,python3
17:10:07.047250212,0,python3
17:10:07.047337602,0,python3
17:10:07.047424843,0,python3
17:10:07.047441279,0,python3
17:10:07.548125444,0,python3
17:10:07.548226651,0,python3
17:10:07.548243131,0,python3
17:10:08.050177392,0,python3
17:10:08.050346301,0,python3
17:10:08.050416951,0,python3
17:10:08.551228511,0,python3
17:10:08.551312004,0,python3
17:10:08.551330958,0,python3
17:10:09.054004917,0,python3
17:10:09.054300985,0,python3
17:10:09.054318029,0,python3
17:10:09.554598582,0,python3
17:10:09.554745110,0,python3
17:10:09.554768663,0,python3
17:10:10.055180839,0,python3
17:10:10.055267312,0,python3
17:10:10.055301444,0,python3
17:10:10.555741593,0,python3
17:10:10.555847085,0,python3
17:10:10.555938883,0,python3
17:10:10.555961666,0,python3
17:10:11.056557519,0,python3
17:10:11.056735147,0,python3
17:10:11.056752565,0,python3
17:10:11.557385300,0,python3
17:10:11.557466121,0,python3
17:10:11.557481292,0,python3
17:10:12.058042948,0,python3
17:10:12.058126480,0,python3
17:10:12.058139754,0,python3
17:10:12.558460274,0,python3
17:10:12.558655007,0,python3
17:10:12.558763170,0,python3
17:10:13.059423984,0,python3
17:10:13.059496387,0,python3
17:10:13.059509082,0,python3
17:10:13.560761244,0,python3
17:10:13.561003917,0,python3
17:10:13.561074212,0,python3
17:10:14.061827067,0,python3
17:10:14.061978013,0,python3
17:10:14.061995184,0,python3
17:10:14.562741229,0,python3
17:10:14.563063013,0,python3
17:10:14.563095587,0,python3
17:10:15.063682530,0,python3
17:10:15.063810184,0,python3
17:10:15.063832325,0,python3
17:10:15.564970209,0,python3
17:10:15.565041995,0,python3
17:10:15.565052067,0,python3
17:10:16.065622997,0,python3
17:10:16.065703975,0,python3
17:10:16.065716646,0,python3
17:10:16.576389649,0,python3
17:10:16.576485372,0,python3
17:10:16.576502579,0,python3
17:10:17.077083580,0,python3
17:10:17.077216198,0,python3
17:10:17.077229244,0,python3
17:10:17.577558868,0,python3
17:10:17.578433861,0,python3
17:10:17.578640238,0,python3
17:10:17.578660570,0,python3
17:10:18.079855288,0,python3
17:10:18.080087460,0,python3
17:10:18.080105978,0,python3
17:10:18.580552341,0,python3
17:10:18.580637371,0,python3
17:10:18.580654455,0,python3
17:10:19.081093526,0,python3
17:10:19.081211230,0,python3
17:10:19.081224266,0,python3
17:10:19.582080950,0,python3
17:10:19.582399384,0,python3
17:10:19.582451442,0,python3
17:10:20.083119765,0,python3
17:10:20.083257045,0,python3
17:10:20.083277197,0,python3
17:10:20.583979023,0,python3
17:10:20.584063000,0,python3
17:10:20.584104922,0,python3
17:10:21.084486538,0,python3
17:10:21.084585187,0,python3
17:10:21.084598431,0,python3
17:10:21.584849385,0,python3
17:10:21.585213840,0,python3
17:10:21.585418150,0,python3
17:10:22.085646777,0,python3
17:10:22.085826847,0,python3
17:10:22.085839447,0,python3
17:10:22.586423280,0,python3
17:10:22.586515777,0,python3
17:10:22.586530269,0,python3
17:10:23.087126755,0,python3
17:10:23.087332919,0,python3
17:10:23.087356519,0,python3
17:10:23.587904386,0,python3
17:10:23.588019490,0,python3
17:10:23.588032095,0,python3
17:10:24.088344749,0,python3
17:10:24.088421547,0,python3
17:10:24.088433251,0,python3
17:10:24.591713099,0,python3
17:10:24.591891484,0,python3
17:10:24.591972604,0,python3
17:10:25.092511591,0,python3
17:10:25.092814293,0,python3
17:10:25.092834050,0,python3
17:10:25.593403282,0,python3
17:10:25.593527742,0,python3
17:10:25.593589202,0,python3
17:10:26.094544114,0,python3
17:10:26.094631022,0,python3
17:10:26.094645650,0,python3
17:10:26.595361845,0,python3
17:10:26.595531014,0,python3
17:10:26.595570385,0,python3
17:10:27.096083491,0,python3
17:10:27.096174986,0,python3
17:10:27.096190139,0,python3
17:10:27.596648624,0,python3
17:10:27.596681893,0,python3
17:10:27.596884041,0,python3
17:10:27.596898583,0,python3
17:10:28.097927643,0,python3
17:10:28.098925591,0,python3
17:10:28.098989825,0,python3
17:10:28.599578409,0,python3
17:10:28.599602548,0,python3
17:10:28.599683334,0,python3
17:10:28.599715626,0,python3
17:10:28.599796888,0,python3
17:10:28.599851596,0,python3
17:10:28.599904779,0,python3
17:10:28.599917599,0,python3
17:10:29.100462817,0,python3
17:10:29.100550540,0,python3
17:10:29.100567959,0,python3
17:10:29.601962179,0,python3
17:10:29.602151299,0,python3
17:10:29.602170262,0,python3
17:10:30.104867499,0,python3
17:10:30.105374786,0,python3
17:10:30.105604881,0,python3
17:10:30.105653440,0,python3
17:10:30.606141594,0,python3
17:10:30.606230628,0,python3
17:10:30.606310066,0,python3
17:10:31.106883423,0,python3
17:10:31.106974796,0,python3
17:10:31.106990108,0,python3
17:10:31.609074546,0,python3
17:10:31.609180796,0,python3

root@hk8s-master01:/home/candidate/KSSH00401# kubectl get pods -o wide 
NAME           READY   STATUS    RESTARTS            AGE    IP               NODE          NOMINATED NODE   READINESS GATES
nginx-deploy   1/1     Running   0                   81s    172.16.182.115   hk8s-node01   <none>           <none>
tomcat         1/1     Running   1 (<invalid> ago)   428d   172.16.88.20     hk8s-node02   <none>           <none>
root@hk8s-master01:/home/candidate/KSSH00401# ssh hn02


 *%evt.num %evt.time %evt.cpu %proc.name (%thread.tid) %evt.dir %evt.type %evt.in‐
       fo

root@hk8s-node02:~# sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat > /opt/KSRS00101/events/details
root@hk8s-node02:~# cat /opt/KSRS00101/events/details
15:03:31.002247456,0,python3
15:03:31.002404511,0,python3
15:03:31.002457384,0,python3
15:03:31.502893564,0,python3
15:03:31.502983101,0,python3
15:03:31.502994730,0,python3
15:03:32.003693978,0,python3
15:03:32.003834096,0,python3
15:03:32.003854197,0,python3
15:03:32.504252093,0,python3
15:03:32.504342396,0,python3
15:03:32.504375031,0,python3
15:03:33.004957892,0,python3
15:03:33.005027459,0,python3
15:03:33.005039331,0,python3
15:03:33.523280645,0,python3
15:03:33.523453404,0,python3
15:03:33.523503309,0,python3
15:03:34.023596400,0,python3
15:03:34.023706313,0,python3
15:03:34.023724069,0,python3
15:03:34.524219550,0,python3
15:03:34.524349494,0,python3
15:03:34.524366604,0,python3
15:03:35.024763034,0,python3
15:03:35.024867618,0,python3
15:03:35.024880095,0,python3
15:03:35.525088888,0,python3
15:03:35.525158222,0,python3
15:03:35.525172050,0,python3
15:03:36.025820578,0,python3
15:03:36.025899869,0,python3
15:03:36.025913981,0,python3
15:03:36.526105655,0,python3
15:03:36.526187953,0,python3
15:03:36.526225010,0,python3
15:03:37.026851858,0,python3
15:03:37.026936160,0,python3
15:03:37.026947975,0,python3
15:03:37.527714793,0,python3
15:03:37.527810738,0,python3
15:03:37.527829302,0,python3
15:03:38.028433726,0,python3
15:03:38.028533484,0,python3
15:03:38.028554472,0,python3
15:03:38.529200056,0,python3
15:03:38.529283968,0,python3
15:03:38.529296805,0,python3
15:03:39.030013153,0,python3
15:03:39.030207482,0,python3
15:03:39.030221376,0,python3
15:03:39.530774131,0,python3
15:03:39.530861194,0,python3
15:03:39.530879595,0,python3
15:03:40.031649684,0,python3
15:03:40.031783301,0,python3
15:03:40.031805385,0,python3
15:03:40.532134625,0,python3
15:03:40.532247368,0,python3
15:03:40.532269255,0,python3
15:03:41.033023033,0,python3
15:03:41.033117755,0,python3
15:03:41.033128148,0,python3
15:03:41.533671462,0,python3
15:03:41.533758385,0,python3
15:03:41.533773264,0,python3
15:03:42.035595612,0,python3
15:03:42.035688595,0,python3
15:03:42.035823027,0,python3
15:03:42.536241754,0,python3
15:03:42.536334718,0,python3
15:03:42.536350341,0,python3
15:03:43.037275413,0,python3
15:03:43.037365244,0,python3
15:03:43.037382516,0,python3
15:03:43.538883785,0,python3
15:03:43.538971287,0,python3
15:03:43.538989009,0,python3
15:03:44.039073998,0,python3
15:03:44.039152224,0,python3
15:03:44.039166723,0,python3
15:03:44.539578267,0,python3
15:03:44.539756745,0,python3
15:03:44.539777928,0,python3
15:03:45.042714964,0,python3
15:03:45.042923983,0,python3
15:03:45.042980833,0,python3
15:03:45.543504001,0,python3
15:03:45.543588798,0,python3
15:03:45.543604902,0,python3
15:03:46.044043149,0,python3
15:03:46.044128008,0,python3
15:03:46.044143600,0,python3
15:03:46.544440018,0,python3
15:03:46.544547286,0,python3
15:03:46.544561384,0,python3
15:03:47.045279031,0,python3
15:03:47.045366537,0,python3
15:03:47.045379752,0,python3
15:03:47.545961756,0,python3
15:03:47.546183896,0,python3
15:03:47.546333201,0,python3
15:03:47.546357499,0,python3
15:03:48.046748712,0,python3
15:03:48.046831034,0,python3
15:03:48.046847546,0,python3
15:03:48.547075132,0,python3
15:03:48.547187184,0,python3
15:03:48.547205150,0,python3
15:03:49.048127656,0,python3
15:03:49.048217412,0,python3
15:03:49.048235157,0,python3
15:03:49.549069402,0,python3
15:03:49.549359951,0,python3
15:03:49.549378141,0,python3
15:03:50.050046507,0,python3
15:03:50.050316371,0,python3
15:03:50.050333162,0,python3
15:03:50.550984886,0,python3
15:03:50.551091174,0,python3
15:03:50.551118557,0,python3
15:03:51.051420521,0,python3
15:03:51.051597322,0,python3
15:03:51.051618669,0,python3
15:03:51.552215263,0,python3
15:03:51.552396709,0,python3
15:03:51.552416882,0,python3
15:03:52.053033600,0,python3
15:03:52.053237237,0,python3
15:03:52.053288623,0,python3
15:03:52.553719327,0,python3
15:03:52.553865483,0,python3
15:03:52.553883570,0,python3
15:03:53.054157028,0,python3
15:03:53.054240578,0,python3
15:03:53.054256009,0,python3
15:03:53.555719881,0,python3
15:03:53.555989044,0,python3
15:03:53.556123115,0,python3
15:03:53.556152748,0,python3
15:03:54.058291668,0,python3
15:03:54.058385365,0,python3
15:03:54.058399974,0,python3
15:03:54.558505423,0,python3
15:03:54.558595950,0,python3
15:03:54.558611607,0,python3
15:03:55.065225552,0,python3
15:03:55.065313083,0,python3
15:03:55.065365420,0,python3
15:03:55.565823936,0,python3
15:03:55.565903068,0,python3
15:03:55.565920060,0,python3
15:03:56.066226890,0,python3
15:03:56.066339889,0,python3
15:03:56.066358547,0,python3
15:03:56.566672211,0,python3
15:03:56.566742761,0,python3
15:03:56.566751642,0,python3
15:03:57.067392236,0,python3
15:03:57.067480662,0,python3
15:03:57.067497068,0,python3
15:03:57.568099429,0,python3
15:03:57.568235629,0,python3
15:03:57.568249289,0,python3
15:03:58.068728887,0,python3
15:03:58.068832920,0,python3
15:03:58.068850420,0,python3
15:03:58.569271494,0,python3
15:03:58.569415331,0,python3
15:03:58.569430761,0,python3
15:03:59.070213965,0,python3
15:03:59.070399306,0,python3
15:03:59.070419258,0,python3
15:03:59.571088412,0,python3
15:03:59.571284451,0,python3
15:03:59.571340076,0,python3
15:04:00.071860988,0,python3
15:04:00.072052736,0,python3
15:04:00.072069527,0,python3
15:04:00.572127287,0,python3
15:04:00.572215054,0,python3
15:04:00.572233171,0,python3

root@hk8s-node02:~# sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat > /opt/KSRS00101/events/details
root@hk8s-node02:~# cat /opt/KSRS00101/events/details
17:16:22.501591526,0,python3
17:16:22.501656964,0,python3
17:16:22.501676185,0,python3
17:16:23.002097414,0,python3
17:16:23.002164252,0,python3
17:16:23.002176389,0,python3
17:16:23.502812137,0,python3
17:16:23.502880198,0,python3
17:16:23.502896486,0,python3
17:16:24.003443585,0,python3
17:16:24.003503412,0,python3
17:16:24.003515032,0,python3
17:16:24.503832750,0,python3
17:16:24.503920849,0,python3
17:16:24.503938214,0,python3
17:16:25.004573142,0,python3
17:16:25.004627562,0,python3
17:16:25.004638240,0,python3
17:16:25.505252760,0,python3
17:16:25.505310518,0,python3
17:16:25.505321888,0,python3
17:16:26.005925997,0,python3
17:16:26.005992863,0,python3
17:16:26.006007182,0,python3
17:16:26.506567119,0,python3
17:16:26.506639782,0,python3
17:16:26.506653712,0,python3
17:16:27.007185349,0,python3
17:16:27.007251461,0,python3
17:16:27.007264842,0,python3
17:16:27.507904576,0,python3
17:16:27.508010972,0,python3
17:16:27.508021218,0,python3
17:16:28.008764393,0,python3
17:16:28.009300850,0,python3
17:16:28.009429745,0,python3
17:16:28.509895800,0,python3
17:16:28.509962164,0,python3
17:16:28.509986072,0,python3
17:16:29.010254400,0,python3
17:16:29.010458455,0,python3
17:16:29.010516274,0,python3
17:16:29.511863337,0,python3
17:16:29.511920822,0,python3
17:16:29.511933902,0,python3
17:16:30.011962817,0,python3
17:16:30.012036991,0,python3
17:16:30.012053420,0,python3
17:16:30.513074273,0,python3
17:16:30.513230305,0,python3
17:16:30.513279696,0,python3
17:16:31.013682844,0,python3
17:16:31.013751143,0,python3
17:16:31.013770114,0,python3
17:16:31.514341681,0,python3
17:16:31.514424463,0,python3
17:16:31.514452230,0,python3
17:16:32.014860931,0,python3
17:16:32.015169088,0,python3
17:16:32.015521639,0,python3
17:16:32.015570398,0,python3
17:16:32.516400059,0,python3
17:16:32.516550129,0,python3
17:16:32.516590448,0,python3
17:16:33.016931200,0,python3
17:16:33.016988368,0,python3
17:16:33.016997848,0,python3
17:16:33.518136373,0,python3
17:16:33.518208003,0,python3
17:16:33.518243653,0,python3
17:16:34.018607245,0,python3
17:16:34.019291414,0,python3
17:16:34.019356387,0,python3
17:16:34.520523811,0,python3
17:16:34.520598757,0,python3
17:16:34.520612461,0,python3
17:16:35.020657433,0,python3
17:16:35.020725019,0,python3
17:16:35.020740986,0,python3
17:16:35.521310641,0,python3
17:16:35.521386027,0,python3
17:16:35.521402860,0,python3
17:16:36.021967677,0,python3
17:16:36.022038046,0,python3
17:16:36.022050744,0,python3
17:16:36.522589129,0,python3
17:16:36.522662757,0,python3
17:16:36.522678664,0,python3
17:16:37.023354246,0,python3
17:16:37.023420516,0,python3
17:16:37.023438967,0,python3
17:16:37.524256519,0,python3
17:16:37.524381023,0,python3
17:16:37.524396416,0,python3
17:16:38.025060040,0,python3
17:16:38.025311655,0,python3
17:16:38.025365066,0,python3
17:16:38.525959388,0,python3
17:16:38.526119308,0,python3
17:16:38.526163535,0,python3
17:16:39.026773840,0,python3
17:16:39.027618072,0,python3
17:16:39.027683843,0,python3
17:16:39.528976049,0,python3
17:16:39.529131448,0,python3
17:16:39.529192601,0,python3
17:16:40.029644698,0,python3
17:16:40.029788289,0,python3
17:16:40.029836155,0,python3
17:16:40.533845367,0,python3
17:16:40.534008464,0,python3
17:16:40.534029089,0,python3
17:16:41.034412685,0,python3
17:16:41.034488784,0,python3
17:16:41.034502231,0,python3
17:16:41.535068707,0,python3
17:16:41.535140219,0,python3
17:16:41.535163373,0,python3
17:16:42.035757739,0,python3
17:16:42.035882315,0,python3
17:16:42.035897400,0,python3
17:16:42.539685519,0,python3
17:16:42.539740228,0,python3
17:16:42.539750254,0,python3
17:16:43.040603056,0,python3
17:16:43.040673948,0,python3
17:16:43.040691108,0,python3
17:16:43.541321192,0,python3
17:16:43.541388080,0,python3
17:16:43.541423725,0,python3
17:16:44.041571478,0,python3
17:16:44.041645477,0,python3
17:16:44.041663821,0,python3
17:16:44.542834221,0,python3
17:16:44.542900002,0,python3
17:16:44.542913245,0,python3
17:16:45.043634276,0,python3
17:16:45.043715224,0,python3
17:16:45.043730899,0,python3
17:16:45.544160389,0,python3
17:16:45.544276941,0,python3
17:16:45.544298974,0,python3
17:16:46.044536604,0,python3
17:16:46.044592036,0,python3
17:16:46.044602889,0,python3
17:16:46.545128358,0,python3
17:16:46.545198034,0,python3
17:16:46.545212515,0,python3
17:16:47.045747958,0,python3
17:16:47.045810250,0,python3
17:16:47.045820852,0,python3
17:16:47.547114210,0,python3
17:16:47.547306896,0,python3
17:16:47.547355485,0,python3
17:16:48.047923281,0,python3
17:16:48.048079886,0,python3
17:16:48.048132204,0,python3
17:16:48.548707118,0,python3
17:16:48.548761695,0,python3
17:16:48.548771544,0,python3
17:16:49.049416943,0,python3
17:16:49.049516815,0,python3
17:16:49.049529126,0,python3
17:16:49.550175371,0,python3
17:16:49.550250698,0,python3
17:16:49.550267642,0,python3
17:16:50.050812741,0,python3
17:16:50.050889895,0,python3
17:16:50.050908404,0,python3
17:16:50.551186298,0,python3
17:16:50.551257825,0,python3
17:16:50.551275175,0,python3
17:16:51.051507956,0,python3
17:16:51.051597689,0,python3
17:16:51.051645891,0,python3
17:16:51.051656566,0,python3
17:16:51.551797185,0,python3
17:16:51.552129939,0,python3
17:16:51.552223775,0,python3
17:16:52.052713138,0,python3
17:16:52.052773880,0,python3
17:16:52.052784494,0,python3

root@hk8s-master01:~# kubectl get pods -o wide 
NAME           READY   STATUS    RESTARTS        AGE    IP               NODE          NOMINATED NODE   READINESS GATES
nginx-deploy   1/1     Running   0               68s    172.16.182.115   hk8s-node01   <none>           <none>
tomcat         1/1     Running   1 (4h16m ago)   440d   172.16.88.22     hk8s-node02   <none>           <none>

root@hk8s-node02:~# sysdig -M 120 -p "%evt.time","%user.uid","%proc.name" container.name=tomcat > /opt/KSRS00101/events/details
root@hk8s-node02:~# cat /opt/KSRS00101/events/details
15:00:54.868214256,0,python3
15:00:54.868299966,0,python3
15:00:54.868322978,0,python3
15:00:55.368926178,0,python3
15:00:55.369008912,0,python3
15:00:55.369027459,0,python3
15:00:55.869574924,0,python3
15:00:55.869634262,0,python3
15:00:55.869643663,0,python3
15:00:56.369880034,0,python3
15:00:56.369959450,0,python3
15:00:56.369984985,0,python3
15:00:56.871164119,0,python3
15:00:56.871224539,0,python3
15:00:56.871235803,0,python3
15:00:57.372314200,0,python3
15:00:57.372580110,0,python3
15:00:57.372628352,0,python3
15:00:57.873278222,0,python3
15:00:57.873332786,0,python3
15:00:57.873340167,0,python3
15:00:58.383255910,0,python3
15:00:58.383322215,0,python3
15:00:58.383334195,0,python3
15:00:58.884110828,0,python3
15:00:58.884295071,0,python3
15:00:58.884413769,0,python3
15:00:59.384939688,0,python3
15:00:59.385008837,0,python3
15:00:59.385025436,0,python3
15:00:59.891193148,0,python3
15:00:59.891355054,0,python3
15:00:59.891407092,0,python3
15:01:00.392110757,0,python3
15:01:00.392273804,0,python3
15:01:00.392333291,0,python3
15:01:00.892671469,0,python3
15:01:00.892732780,0,python3
15:01:00.892745455,0,python3
15:01:01.395086859,0,python3
15:01:01.395162735,0,python3
15:01:01.395178772,0,python3
15:01:01.896989278,0,python3
15:01:01.897068177,0,python3
15:01:01.897084828,0,python3
15:01:02.397836924,0,python3
15:01:02.397895470,0,python3
15:01:02.397906954,0,python3
15:01:02.898375481,0,python3
15:01:02.898449752,0,python3
15:01:02.898468658,0,python3
15:01:03.399044152,0,python3
15:01:03.399101255,0,python3
15:01:03.399114103,0,python3
15:01:03.899708199,0,python3
15:01:03.899784622,0,python3
15:01:03.899803365,0,python3
15:01:04.400398632,0,python3
15:01:04.400459573,0,python3
15:01:04.400479055,0,python3
15:01:04.901560789,0,python3
15:01:04.901781083,0,python3
15:01:04.901843278,0,python3
15:01:05.405722847,0,python3
15:01:05.405823654,0,python3
15:01:05.406411319,0,python3
15:01:05.406427462,0,python3
15:01:05.907015470,0,python3
15:01:05.907083958,0,python3
15:01:05.907097946,0,python3
15:01:06.407918342,0,python3
15:01:06.407989194,0,python3
15:01:06.408043956,0,python3
15:01:06.908594032,0,python3
15:01:06.908663484,0,python3
15:01:06.908677251,0,python3
15:01:07.409463063,0,python3
15:01:07.409620293,0,python3
15:01:07.409674664,0,python3
15:01:07.910289559,0,python3
15:01:07.910359696,0,python3
15:01:07.910379533,0,python3
15:01:08.411086028,0,python3
15:01:08.411174851,0,python3
15:01:08.411194295,0,python3
15:01:08.911417354,0,python3
15:01:08.911593318,0,python3
15:01:08.911653742,0,python3
15:01:09.413294813,0,python3
15:01:09.413363628,0,python3
15:01:09.413378683,0,python3
15:01:09.913745200,0,python3
15:01:09.913824712,0,python3
15:01:09.913843320,0,python3
15:01:10.415552499,0,python3
15:01:10.415711674,0,python3
15:01:10.415778063,0,python3
15:01:10.916350115,0,python3
15:01:10.916429765,0,python3
15:01:10.916446440,0,python3
15:01:11.417020929,0,python3
15:01:11.417147739,0,python3
15:01:11.417166514,0,python3
15:01:11.917853585,0,python3
15:01:11.917919621,0,python3
15:01:11.917937473,0,python3
15:01:12.418564876,0,python3
15:01:12.418632906,0,python3
15:01:12.418652909,0,python3
15:01:12.919105730,0,python3
15:01:12.919246167,0,python3
15:01:12.919262852,0,python3
15:01:13.419871311,0,python3
15:01:13.419950958,0,python3
15:01:13.419972892,0,python3
15:01:13.920467906,0,python3
15:01:13.920566109,0,python3
15:01:13.920576510,0,python3
15:01:14.421154673,0,python3
15:01:14.421231462,0,python3
15:01:14.421249886,0,python3
15:01:14.922103265,0,python3
15:01:14.922274376,0,python3
15:01:14.922326455,0,python3
15:01:15.423498332,0,python3
15:01:15.427278489,0,python3
15:01:15.427314645,0,python3
15:01:15.430431373,0,python3
15:01:15.430454624,0,python3
15:01:15.930536508,0,python3
15:01:15.930608329,0,python3
15:01:15.930623621,0,python3
15:01:16.431221834,0,python3
15:01:16.431293738,0,python3
15:01:16.431312215,0,python3
15:01:16.934617565,0,python3
15:01:16.934681636,0,python3
15:01:16.934692725,0,python3
15:01:17.435801944,0,python3
15:01:17.435982383,0,python3
15:01:17.436014464,0,python3
15:01:17.936371767,0,python3
15:01:17.936557659,0,python3
15:01:17.936611684,0,python3
15:01:18.444463371,0,python3
15:01:18.444536249,0,python3
15:01:18.444560058,0,python3
15:01:18.945139582,0,python3
15:01:18.945209456,0,python3
15:01:18.945223202,0,python3
15:01:19.445837424,0,python3
15:01:19.445904956,0,python3
15:01:19.445918759,0,python3
15:01:19.947129824,0,python3
15:01:19.947285492,0,python3
15:01:19.947335951,0,python3
15:01:20.447507143,0,python3
15:01:20.447613419,0,python3
15:01:20.448460520,0,python3
15:01:20.448964901,0,python3
15:01:20.449023278,0,python3
15:01:20.949224329,0,python3
15:01:20.949336473,0,python3
15:01:20.949354749,0,python3
15:01:21.449941831,0,python3
15:01:21.449999154,0,python3
15:01:21.450018599,0,python3
15:01:21.952977400,0,python3
15:01:21.953032493,0,python3
15:01:21.953046873,0,python3
15:01:22.453200118,0,python3
15:01:22.453277948,0,python3
15:01:22.453294644,0,python3
15:01:22.954615685,0,python3
15:01:22.954791933,0,python3
15:01:22.954848365,0,python3
15:01:23.455612345,0,python3
15:01:23.455765904,0,python3
15:01:23.455814221,0,python3
15:01:23.956405009,0,python3
15:01:23.956614024,0,python3
15:01:23.956628419,0,python3
15:01:24.457244931,0,python3
15:01:24.457308767,0,python3
15:01:24.457324396,0,python3
15:01:24.958184207,0,python3
15:01:24.958349208,0,python3
15:01:24.958407956,0,python3
15:01:25.460743631,0,python3
15:01:25.460893129,0,python3
15:01:25.460943612,0,python3
15:01:25.961223084,0,python3
15:01:25.961305545,0,python3
15:01:25.961324280,0,python3
15:01:26.461820874,0,python3
15:01:26.462024154,0,python3
15:01:26.462078901,0,python3
15:01:26.962622575,0,python3
15:01:26.962699707,0,python3
15:01:26.962712442,0,python3
15:01:27.464504290,0,python3
15:01:27.464672579,0,python3
15:01:27.464732908,0,python3
15:01:27.965056352,0,python3
15:01:27.965235935,0,python3
15:01:27.965290016,0,python3
15:01:28.466044400,0,python3
15:01:28.466116147,0,python3
15:01:28.466134009,0,python3
15:01:28.966658307,0,python3
15:01:28.966724002,0,python3
15:01:28.966739144,0,python3
15:01:29.467878925,0,python3
15:01:29.467953638,0,python3
15:01:29.467969148,0,python3
15:01:29.968743227,0,python3
15:01:29.968817335,0,python3
15:01:29.968845830,0,python3
15:01:30.469615752,0,python3
15:01:30.469673546,0,python3
15:01:30.469685882,0,python3
15:01:30.970279701,0,python3
15:01:30.970346511,0,python3
15:01:30.970361316,0,python3
15:01:31.470825917,0,python3
15:01:31.470908729,0,python3
15:01:31.470931252,0,python3
15:01:31.971327705,0,python3
15:01:31.971386041,0,python3
15:01:31.971401976,0,python3
15:01:32.472077903,0,python3
15:01:32.472152326,0,python3
15:01:32.472168853,0,python3
15:01:32.972823634,0,python3
15:01:32.972969116,0,python3
15:01:32.972983890,0,python3
15:01:33.474333770,0,python3
15:01:33.474387488,0,python3
15:01:33.474395436,0,python3
15:01:33.975240886,0,python3
15:01:33.975296502,0,python3
15:01:33.975307331,0,python3
15:01:34.475583881,0,python3
15:01:34.475672555,0,python3
15:01:34.475687370,0,python3
15:01:34.976301725,0,python3
15:01:34.976371742,0,python3
15:01:34.976387058,0,python3
15:01:35.477940492,0,python3
15:01:35.478094844,0,python3
15:01:35.478146177,0,python3
15:01:35.978838180,0,python3
15:01:35.978910976,0,python3
15:01:35.978924322,0,python3
15:01:36.479151416,0,python3
15:01:36.479225234,0,python3
15:01:36.479240557,0,python3
15:01:36.980005082,0,python3
15:01:36.980088921,0,python3
15:01:36.980104557,0,python3
15:01:37.480739797,0,python3
15:01:37.480807020,0,python3
15:01:37.480819423,0,python3
15:01:37.981740777,0,python3
15:01:37.982133905,0,python3
15:01:37.982276250,0,python3
15:01:37.982297116,0,python3
15:01:38.482898407,0,python3
15:01:38.482969270,0,python3
15:01:38.483142301,0,python3
15:01:38.983845564,0,python3
15:01:38.984024109,0,python3
15:01:38.984050093,0,python3
15:01:39.484772250,0,python3
15:01:39.484848668,0,python3
15:01:39.484861595,0,python3
15:01:39.985463825,0,python3
15:01:39.985581739,0,python3
15:01:39.985651995,0,python3
15:01:40.486141100,0,python3
15:01:40.486227916,0,python3
15:01:40.486248286,0,python3
15:01:40.986907926,0,python3
15:01:40.987001679,0,python3
15:01:40.987053545,0,python3
15:01:41.489015716,0,python3
15:01:41.489094342,0,python3
15:01:41.489129937,0,python3
15:01:41.990382659,0,python3
15:01:41.990567547,0,python3
15:01:41.990628760,0,python3
15:01:42.491237505,0,python3
15:01:42.491310361,0,python3
15:01:42.491326762,0,python3
15:01:42.991789717,0,python3
15:01:42.991855611,0,python3
15:01:42.991866470,0,python3
15:01:43.494202361,0,python3
15:01:43.494354847,0,python3
15:01:43.494399966,0,python3
15:01:43.994732759,0,python3
15:01:43.994812724,0,python3
15:01:43.994833573,0,python3
15:01:44.495317815,0,python3
15:01:44.495395846,0,python3
15:01:44.495414303,0,python3
15:01:44.995990261,0,python3
15:01:44.996059694,0,python3
15:01:44.996088577,0,python3
15:01:45.496765980,0,python3
15:01:45.496845097,0,python3
15:01:45.496866388,0,python3
15:01:45.997737709,0,python3
15:01:45.997905974,0,python3
15:01:45.997961655,0,python3
15:01:46.498570158,0,python3
15:01:46.498672644,0,python3
15:01:46.498690876,0,python3
15:01:47.000349165,0,python3
15:01:47.000507216,0,python3
15:01:47.000556714,0,python3
15:01:47.505241961,0,python3
15:01:47.505331069,0,python3
15:01:47.505345838,0,python3
15:01:48.006071496,0,python3
15:01:48.006156938,0,python3
15:01:48.006171858,0,python3
15:01:48.506783963,0,python3
15:01:48.506861158,0,python3
15:01:48.506876254,0,python3
15:01:49.007289857,0,python3
15:01:49.007366775,0,python3
15:01:49.007386289,0,python3
15:01:49.507830292,0,python3
15:01:49.507903462,0,python3
15:01:49.507921018,0,python3
15:01:50.008391913,0,python3
15:01:50.008470305,0,python3
15:01:50.008488028,0,python3
15:01:50.509510536,0,python3
15:01:50.510100837,0,python3
15:01:50.510153371,0,python3
15:01:51.010714724,0,python3
15:01:51.010846928,0,python3
15:01:51.010860824,0,python3
15:01:51.511260090,0,python3
15:01:51.511335410,0,python3
15:01:51.511351157,0,python3
15:01:52.012220372,0,python3
15:01:52.012283466,0,python3
15:01:52.012295252,0,python3
15:01:52.512814918,0,python3
15:01:52.512881947,0,python3
15:01:52.512898188,0,python3
15:01:53.013465172,0,python3
15:01:53.013529636,0,python3
15:01:53.013542576,0,python3
15:01:53.514401626,0,python3
15:01:53.514614933,0,python3
15:01:53.514721408,0,python3
15:01:54.015223764,0,python3
15:01:54.015298759,0,python3
15:01:54.015314709,0,python3
15:01:54.515951966,0,python3
15:01:54.516009442,0,python3
15:01:54.516020181,0,python3
15:01:55.016693235,0,python3
15:01:55.016855459,0,python3
15:01:55.016912993,0,python3
15:01:55.519896174,0,python3
15:01:55.520068649,0,python3
15:01:55.520128316,0,python3
15:01:56.020733490,0,python3
15:01:56.020803272,0,python3
15:01:56.020816302,0,python3
15:01:56.521471870,0,python3
15:01:56.521542249,0,python3
15:01:56.521555435,0,python3
15:01:57.022154194,0,python3
15:01:57.022183091,0,python3
15:01:57.022253356,0,python3
15:01:57.022264085,0,python3
15:01:57.524717469,0,python3
15:01:57.524896026,0,python3
15:01:57.524916422,0,python3
15:01:58.025868061,0,python3
15:01:58.025940612,0,python3
15:01:58.025958570,0,python3
15:01:58.527608947,0,python3
15:01:58.527691364,0,python3
15:01:58.527712525,0,python3
15:01:59.028317710,0,python3
15:01:59.028391805,0,python3
15:01:59.028409515,0,python3
15:01:59.528828765,0,python3
15:01:59.528903256,0,python3
15:01:59.528919553,0,python3
15:02:00.029505750,0,python3
15:02:00.029591974,0,python3
15:02:00.029608712,0,python3
15:02:00.530224187,0,python3
15:02:00.530298165,0,python3
15:02:00.530314145,0,python3
15:02:01.031028651,0,python3
15:02:01.031163926,0,python3
15:02:01.031178020,0,python3
15:02:01.531456744,0,python3
15:02:01.531528872,0,python3
15:02:01.531544642,0,python3
15:02:02.032155404,0,python3
15:02:02.032232622,0,python3
15:02:02.032256765,0,python3
15:02:02.532741993,0,python3
15:02:02.532821076,0,python3
15:02:02.532836726,0,python3
15:02:03.033824529,0,python3
15:02:03.034007949,0,python3
15:02:03.034063218,0,python3
15:02:03.534592803,0,python3
15:02:03.534669038,0,python3
15:02:03.534680982,0,python3
15:02:04.035138416,0,python3
15:02:04.035197182,0,python3
15:02:04.035208627,0,python3
15:02:04.535864212,0,python3
15:02:04.535935840,0,python3
15:02:04.536004887,0,python3
15:02:05.036630890,0,python3
15:02:05.036782499,0,python3
15:02:05.036814420,0,python3
15:02:05.537092047,0,python3
15:02:05.537165134,0,python3
15:02:05.537180995,0,python3
15:02:06.037321580,0,python3
15:02:06.037399070,0,python3
15:02:06.037414859,0,python3
15:02:06.538137955,0,python3
15:02:06.538227556,0,python3
15:02:06.538244809,0,python3
15:02:07.038695215,0,python3
15:02:07.038888129,0,python3
15:02:07.038951550,0,python3
15:02:07.539513481,0,python3
15:02:07.539674861,0,python3
15:02:07.539728688,0,python3
15:02:08.040314329,0,python3
15:02:08.040414194,0,python3
15:02:08.040432202,0,python3
15:02:08.541074524,0,python3
15:02:08.542576800,0,python3
15:02:08.542616531,0,python3
15:02:09.043385415,0,python3
15:02:09.043774684,0,python3
15:02:09.043842007,0,python3
15:02:09.544464079,0,python3
15:02:09.544585863,0,python3
15:02:09.544612537,0,python3
15:02:10.045418332,0,python3
15:02:10.045584477,0,python3
15:02:10.045833335,0,python3
15:02:10.546422308,0,python3
15:02:10.546493488,0,python3
15:02:10.546512034,0,python3
15:02:11.047149671,0,python3
15:02:11.047231055,0,python3
15:02:11.047249416,0,python3
15:02:11.547594423,0,python3
15:02:11.547698215,0,python3
15:02:11.547715867,0,python3
15:02:12.047926544,0,python3
15:02:12.047986122,0,python3
15:02:12.047997959,0,python3
15:02:12.548881553,0,python3
15:02:12.549142470,0,python3
15:02:12.549168027,0,python3
15:02:13.049785961,0,python3
15:02:13.049854864,0,python3
15:02:13.049869132,0,python3
15:02:13.550351831,0,python3
15:02:13.550428943,0,python3
15:02:13.550444641,0,python3
15:02:14.051916786,0,python3
15:02:14.051990073,0,python3
15:02:14.052003150,0,python3
15:02:14.552344169,0,python3
15:02:14.552410783,0,python3
15:02:14.552424571,0,python3
15:02:15.053064081,0,python3
15:02:15.053134936,0,python3
15:02:15.053149295,0,python3
15:02:15.553708171,0,python3
15:02:15.553788602,0,python3
15:02:15.553805730,0,python3
15:02:16.054444729,0,python3
15:02:16.054536744,0,python3
15:02:16.054558933,0,python3
15:02:16.555181637,0,python3
15:02:16.555290240,0,python3
15:02:16.555309845,0,python3
15:02:17.055338363,0,python3
15:02:17.055418810,0,python3
15:02:17.055435555,0,python3
15:02:17.556101658,0,python3
15:02:17.556179266,0,python3
15:02:17.556197073,0,python3
15:02:18.057433396,0,python3
15:02:18.057510793,0,python3
15:02:18.057530427,0,python3
15:02:18.558096780,0,python3
15:02:18.558162926,0,python3
15:02:18.558177129,0,python3
15:02:19.058410405,0,python3
15:02:19.058489609,0,python3
15:02:19.058508781,0,python3
15:02:19.558984872,0,python3
15:02:19.559124206,0,python3
15:02:19.559163912,0,python3
15:02:19.559179028,0,python3
15:02:20.060771980,0,python3
15:02:20.060836498,0,python3
15:02:20.060850828,0,python3
15:02:20.560992778,0,python3
15:02:20.561048712,0,python3
15:02:20.561063899,0,python3
15:02:21.062222315,0,python3
15:02:21.062286158,0,python3
15:02:21.062301262,0,python3
15:02:21.564672243,0,python3
15:02:21.564838287,0,python3
15:02:21.564888032,0,python3
15:02:22.066754775,0,python3
15:02:22.066836856,0,python3
15:02:22.066852288,0,python3
15:02:22.567178977,0,python3
15:02:22.567259073,0,python3
15:02:22.567275399,0,python3
15:02:23.067875160,0,python3
15:02:23.068010008,0,python3
15:02:23.068027290,0,python3
15:02:23.568965670,0,python3
15:02:23.569171951,0,python3
15:02:23.569229999,0,python3
15:02:24.070334419,0,python3
15:02:24.070748680,0,python3
15:02:24.070814782,0,python3
15:02:24.571249057,0,python3
15:02:24.571311568,0,python3
15:02:24.571322954,0,python3
15:02:25.071863687,0,python3
15:02:25.072022081,0,python3
15:02:25.072079147,0,python3
15:02:25.574058938,0,python3
15:02:25.574210864,0,python3
15:02:25.574261455,0,python3
15:02:26.074809939,0,python3
15:02:26.074879769,0,python3
15:02:26.074893636,0,python3
15:02:26.575184356,0,python3
15:02:26.575306759,0,python3
15:02:26.575317672,0,python3
15:02:27.076370345,0,python3
15:02:27.076825237,0,python3
15:02:27.076883058,0,python3
15:02:27.577782911,0,python3
15:02:27.577874201,0,python3
15:02:27.577897940,0,python3
15:02:28.078311926,0,python3
15:02:28.078421056,0,python3
15:02:28.078437399,0,python3
15:02:28.579488324,0,python3
15:02:28.579554518,0,python3
15:02:28.579567853,0,python3
15:02:29.080157488,0,python3
15:02:29.080228255,0,python3
15:02:29.080251830,0,python3
15:02:29.581608674,0,python3
15:02:29.581801277,0,python3
15:02:29.582514238,0,python3
15:02:29.582734871,0,python3
15:02:29.582828547,0,python3
15:02:30.083309823,0,python3
15:02:30.083360466,0,python3
15:02:30.083368080,0,python3
15:02:30.586365436,0,python3
15:02:30.586436072,0,python3
15:02:30.586452219,0,python3
15:02:31.086995582,0,python3
15:02:31.087061668,0,python3
15:02:31.087076033,0,python3
15:02:31.587268481,0,python3
15:02:31.587444652,0,python3
15:02:31.587489679,0,python3
15:02:32.087996221,0,python3
15:02:32.088063827,0,python3
15:02:32.088079384,0,python3
15:02:32.588846682,0,python3
15:02:32.588928238,0,python3
15:02:32.588944419,0,python3
15:02:33.089518779,0,python3
15:02:33.089579262,0,python3
15:02:33.089592062,0,python3
15:02:33.590033616,0,python3
15:02:33.590102636,0,python3
15:02:33.590119652,0,python3
15:02:34.092804717,0,python3
15:02:34.093004437,0,python3
15:02:34.093056780,0,python3
15:02:34.593469586,0,python3
15:02:34.593592879,0,python3
15:02:34.593609514,0,python3
15:02:35.095486250,0,python3
15:02:35.095708488,0,python3
15:02:35.095783774,0,python3
15:02:35.599655933,0,python3
15:02:35.599720755,0,python3
15:02:35.599733048,0,python3
15:02:36.100480529,0,python3
15:02:36.100544981,0,python3
15:02:36.100565787,0,python3
15:02:36.601261480,0,python3
15:02:36.601419569,0,python3
15:02:36.601458117,0,python3
15:02:37.102025860,0,python3
15:02:37.102357327,0,python3
15:02:37.102417864,0,python3
15:02:37.602842001,0,python3
15:02:37.603024712,0,python3
15:02:37.603039662,0,python3
15:02:38.105793443,0,python3
15:02:38.106124144,0,python3
15:02:38.106178634,0,python3
15:02:38.606775971,0,python3
15:02:38.606845865,0,python3
15:02:38.606872884,0,python3
15:02:39.107322368,0,python3
15:02:39.107399674,0,python3
15:02:39.107416450,0,python3
15:02:39.608309023,0,python3
15:02:39.608503001,0,python3
15:02:39.608556678,0,python3
15:02:40.109246328,0,python3
15:02:40.109329084,0,python3
15:02:40.109348505,0,python3
15:02:40.610081235,0,python3
15:02:40.610134262,0,python3
15:02:40.610148294,0,python3
15:02:41.110271188,0,python3
15:02:41.110348622,0,python3
15:02:41.110364874,0,python3
15:02:41.611281860,0,python3
15:02:41.611368621,0,python3
15:02:41.611382233,0,python3
15:02:42.113807301,0,python3
15:02:42.113881790,0,python3
15:02:42.113899696,0,python3
15:02:42.614254038,0,python3
15:02:42.614311420,0,python3
15:02:42.614323028,0,python3
15:02:43.114809123,0,python3
15:02:43.114880344,0,python3
15:02:43.114896878,0,python3
15:02:43.615550534,0,python3
15:02:43.615663686,0,python3
15:02:43.615677468,0,python3
15:02:44.117427991,0,python3
15:02:44.117514222,0,python3
15:02:44.117534944,0,python3
15:02:44.617961574,0,python3
15:02:44.617998168,0,python3
15:02:44.618184693,0,python3
15:02:44.618203682,0,python3
15:02:45.118726471,0,python3
15:02:45.118792597,0,python3
15:02:45.118811153,0,python3
15:02:45.618962111,0,python3
15:02:45.619085981,0,python3
15:02:45.619100495,0,python3
15:02:46.120001762,0,python3
15:02:46.120186867,0,python3
15:02:46.120267177,0,python3
15:02:46.620787277,0,python3
15:02:46.620854128,0,python3
15:02:46.620867090,0,python3
15:02:47.121483533,0,python3
15:02:47.121545088,0,python3
15:02:47.121555574,0,python3
15:02:47.621741217,0,python3
15:02:47.621819013,0,python3
15:02:47.621833045,0,python3
15:02:48.122387355,0,python3
15:02:48.122442170,0,python3
15:02:48.122451722,0,python3
15:02:48.622932937,0,python3
15:02:48.623006546,0,python3
15:02:48.623158799,0,python3
15:02:49.123271627,0,python3
15:02:49.123349773,0,python3
15:02:49.123366094,0,python3
15:02:49.623925443,0,python3
15:02:49.623982299,0,python3
15:02:49.623991555,0,python3
15:02:50.124498737,0,python3
15:02:50.124569212,0,python3
15:02:50.124585401,0,python3
15:02:50.625141071,0,python3
15:02:50.625197948,0,python3
15:02:50.625208323,0,python3
15:02:51.127099964,0,python3
15:02:51.127168648,0,python3
15:02:51.127187448,0,python3
15:02:51.627446664,0,python3
15:02:51.627503112,0,python3
15:02:51.627515875,0,python3
15:02:52.127955138,0,python3
15:02:52.128011813,0,python3
15:02:52.128023559,0,python3
15:02:52.628114292,0,python3
15:02:52.628181546,0,python3
15:02:52.628195653,0,python3
15:02:53.128566501,0,python3
15:02:53.128638440,0,python3
15:02:53.128657458,0,python3
15:02:53.628801599,0,python3
15:02:53.628861576,0,python3
15:02:53.628873936,0,python3
15:02:54.129439239,0,python3
15:02:54.129650041,0,python3
15:02:54.129815993,0,python3
15:02:54.630339116,0,python3
15:02:54.630511919,0,python3
15:02:54.630552059,0,python3

root@hk8s-master01:/home/candidate/KSSH00401# kubectl get pods -o wide 
NAME           READY   STATUS    RESTARTS        AGE    IP               NODE          NOMINATED NODE   READINESS GATES
nginx-deploy   1/1     Running   0               43s    172.16.182.115   hk8s-node01   <none>           <none>
tomcat         1/1     Running   1 (4h58m ago)   441d   172.16.88.25     hk8s-node02   <none>  

root@hk8s-node02:~# sysdig -M 30 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat > /opt/KSRS00101/events/details
root@hk8s-node02:~# cat /opt/KSRS00101/events/details
15:39:39.951058521,0,python3
15:39:39.951124095,0,python3
15:39:39.951141209,0,python3
15:39:40.451745115,0,python3
15:39:40.451817595,0,python3
15:39:40.451893503,0,python3

root@hk8s-node02:~# sysdig -M 120 -p "%evt.time,%user.uid,%proc.name" container.name=tomcat > /opt/KSRS00101/events/details
root@hk8s-node02:~# cat /opt/KSRS00101/events/details
09:51:24.262456087,0,python3
09:51:24.262641356,0,python3
09:51:24.262696583,0,python3
09:51:24.763013674,0,python3
09:51:24.763244672,0,python3
09:51:24.763261663,0,python3