Hi,
I just set this up and it looks like I am having a similar issues to #26 except there are no errors being thrown that indicate that the service is not working.
I uploaded 3 test files which i downloaded from Objective-see at Dec 18, 2018 8:27:30 AM GMT-0800
BackTrack.zip
Adwind.zip
Clapzok.zip
I checked my CloudWatch metrics for my SQS queues, and it looks like there were two messages sent at 8:25 and 8:45, which doesn't really match up with my upload time. The metrics for my SNS topics indicate that no messages or alerts were sent in that time period.
var/log/messages:
se status OK.
08:02:35
Dec 18 16:02:35 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 112500ms.
08:04:27
Dec 18 16:04:27 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 117630ms.
08:06:25
Dec 18 16:06:25 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 123180ms.
08:08:28
Dec 18 16:08:28 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 123880ms.
08:10:32
Dec 18 16:10:32 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 125500ms.
08:11:58
Dec 18 16:11:58 ip-10-0-5-254 clamd[3050]: SelfCheck: Database status OK.
08:12:38
Dec 18 16:12:38 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 123670ms.
08:14:42
Dec 18 16:14:42 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 113160ms.
08:16:35
Dec 18 16:16:35 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 116520ms.
08:18:31
Dec 18 16:18:31 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 125380ms.
08:20:37
Dec 18 16:20:37 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 124380ms.
08:21:58
Dec 18 16:21:58 ip-10-0-5-254 clamd[3050]: SelfCheck: Database status OK.
08:22:41
Dec 18 16:22:41 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 115660ms.
08:23:07
Dec 18 16:23:07 ip-10-0-5-254 dhclient[2100]: DHCPREQUEST on eth0 to 10.0.0.1 port 67 (xid=0xfd9dc05)
Dec 18 16:23:07 ip-10-0-5-254 dhclient[2100]: DHCPREQUEST on eth0 to 10.0.0.1 port 67 (xid=0xfd9dc05)
08:23:07
Dec 18 16:23:07 ip-10-0-5-254 dhclient[2100]: DHCPACK from 10.0.0.1 (xid=0xfd9dc05)
08:23:07
Dec 18 16:23:07 ip-10-0-5-254 dhclient[2100]: bound to 10.0.5.254 -- renewal in 1787 seconds.
08:23:07
Dec 18 16:23:07 ip-10-0-5-254 ec2net: [get_meta] Trying to get http://169.254.169.254/latest/meta-data/network/interfaces/macs/02:22:0b:f4:e3:2e/local-ipv4s
08:23:07
Dec 18 16:23:07 ip-10-0-5-254 ec2net: [rewrite_aliases] Rewriting aliases of eth0
08:24:37
Dec 18 16:24:37 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 108870ms.
08:26:26
Dec 18 16:26:26 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 122480ms.
08:28:29
Dec 18 16:28:29 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 116510ms.
08:30:25
Dec 18 16:30:25 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 115960ms.
08:32:21
Dec 18 16:32:21 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 111920ms.
08:34:13
Dec 18 16:34:13 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 117450ms.
08:36:11
Dec 18 16:36:11 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 113310ms.
08:38:04
Dec 18 16:38:04 ip-10-0-5-254 dhclient[2213]: XMT: Solicit on eth0, interval 117040ms.
var/log/awslogs.log
:25:16,823 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150310000, 'start_position': 7715255L, 'end_position': 7715808L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150310000,
2018-12-18 16:25:16,823 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150310000, 'start_position': 7715255L, 'end_position': 7715808L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150310000, 'start_position': 7715255L, 'end_position': 7715808L}, 'source_id': 'fa61cbbd4f10193883ae90b9d76577fb', 'num_of_events': 1, 'batch_size_in_bytes': 578}
08:25:22
2018-12-18 16:25:22,874 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150316000, 'start_position': 7715808L, 'end_position': 7716360L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150316000,
08:25:28
2018-12-18 16:25:28,923 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150322000, 'start_position': 7716360L, 'end_position': 7716912L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150322000,
08:25:35
2018-12-18 16:25:35,422 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150328000, 'start_position': 7716912L, 'end_position': 7717464L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150328000,
08:25:41
2018-12-18 16:25:41,463 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150335000, 'start_position': 7717464L, 'end_position': 7718016L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150335000,
08:25:47
2018-12-18 16:25:47,504 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150341000, 'start_position': 7718016L, 'end_position': 7718568L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150341000,
08:25:53
2018-12-18 16:25:53,560 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150347000, 'start_position': 7718568L, 'end_position': 7719120L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150347000,
08:25:59
2018-12-18 16:25:59,891 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150353000, 'start_position': 7719120L, 'end_position': 7719672L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150353000,
08:26:05
2018-12-18 16:26:05,930 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150359000, 'start_position': 7719672L, 'end_position': 7720224L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150359000,
08:26:07
2018-12-18 16:26:07,603 - cwlogs.push.publisher - INFO - 2882 - Thread-9 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cron, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150361000, 'start_position': 115254L, 'end_position': 115352L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150361000, 'start_po
08:26:11
2018-12-18 16:26:11,973 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150365000, 'start_position': 7720224L, 'end_position': 7720776L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150367000,
08:26:18
2018-12-18 16:26:18,035 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150371000, 'start_position': 7721317L, 'end_position': 7721870L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150371000,
08:26:24
2018-12-18 16:26:24,079 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150378000, 'start_position': 7721870L, 'end_position': 7722422L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150378000,
08:26:30
2018-12-18 16:26:30,125 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150384000, 'start_position': 7722422L, 'end_position': 7722974L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150384000,
08:26:32
2018-12-18 16:26:32,567 - cwlogs.push.publisher - INFO - 2882 - Thread-5 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/messages, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150386000, 'start_position': 127817L, 'end_position': 127904L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150386000, 'star
08:26:36
2018-12-18 16:26:36,169 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150390000, 'start_position': 7722974L, 'end_position': 7723526L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150392000,
08:26:42
2018-12-18 16:26:42,231 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150396000, 'start_position': 7724071L, 'end_position': 7724624L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150396000,
08:26:48
2018-12-18 16:26:48,295 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150402000, 'start_position': 7724624L, 'end_position': 7725176L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150402000,
08:26:54
2018-12-18 16:26:54,344 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150408000, 'start_position': 7725176L, 'end_position': 7725728L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150408000,
08:27:00
2018-12-18 16:27:00,179 - cwlogs.push.publisher - INFO - 2882 - Thread-21 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cfn-hup.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150413000, 'start_position': 13429L, 'end_position': 13489L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150413000, 'st
08:27:00
2018-12-18 16:27:00,382 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150414000, 'start_position': 7725728L, 'end_position': 7726280L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150414000,
08:27:06
2018-12-18 16:27:06,439 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150420000, 'start_position': 7726280L, 'end_position': 7726824L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150420000,
08:27:07
2018-12-18 16:27:07,660 - cwlogs.push.publisher - INFO - 2882 - Thread-9 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cron, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150421000, 'start_position': 115352L, 'end_position': 115450L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150421000, 'start_po
08:27:12
2018-12-18 16:27:12,473 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150426000, 'start_position': 7727376L, 'end_position': 7727929L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150427000,
08:27:18
2018-12-18 16:27:18,519 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150432000, 'start_position': 7728470L, 'end_position': 7729023L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150432000,
08:27:24
2018-12-18 16:27:24,566 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150438000, 'start_position': 7729023L, 'end_position': 7729575L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150438000,
08:27:30
2018-12-18 16:27:30,608 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150444000, 'start_position': 7729575L, 'end_position': 7730127L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150444000,
08:27:36
2018-12-18 16:27:36,644 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150450000, 'start_position': 7730127L, 'end_position': 7730679L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150450000,
08:27:42
2018-12-18 16:27:42,685 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150456000, 'start_position': 7730679L, 'end_position': 7731231L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150456000,
08:27:44
2018-12-18 16:27:44,279 - cwlogs.push.publisher - INFO - 2882 - Thread-7 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/secure, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150458000, 'start_position': 1049450L, 'end_position': 1049560L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150458000, 'star
08:27:48
2018-12-18 16:27:48,724 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150462000, 'start_position': 7731231L, 'end_position': 7731783L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150464000,
08:27:54
2018-12-18 16:27:54,764 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150468000, 'start_position': 7732330L, 'end_position': 7732883L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150468000,
08:28:00
2018-12-18 16:28:00,820 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150474000, 'start_position': 7732883L, 'end_position': 7733435L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150474000,
08:28:06
2018-12-18 16:28:06,885 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150480000, 'start_position': 7733435L, 'end_position': 7733987L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150480000,
08:28:07
2018-12-18 16:28:07,710 - cwlogs.push.publisher - INFO - 2882 - Thread-9 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cron, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150481000, 'start_position': 115450L, 'end_position': 115548L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150481000, 'start_po
08:28:12
2018-12-18 16:28:12,931 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150486000, 'start_position': 7733987L, 'end_position': 7734539L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150487000,
08:28:18
2018-12-18 16:28:18,992 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150492000, 'start_position': 7735080L, 'end_position': 7735633L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150492000,
08:28:25
2018-12-18 16:28:25,032 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150498000, 'start_position': 7735633L, 'end_position': 7736185L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150498000,
08:28:31
2018-12-18 16:28:31,072 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150505000, 'start_position': 7736185L, 'end_position': 7736737L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150505000,
08:28:35
2018-12-18 16:28:35,640 - cwlogs.push.publisher - INFO - 2882 - Thread-5 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/messages, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150509000, 'start_position': 127904L, 'end_position': 127991L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150509000, 'star
08:28:37
2018-12-18 16:28:37,110 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150511000, 'start_position': 7736737L, 'end_position': 7737289L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150511000,
08:28:42
2018-12-18 16:28:42,150 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150515000, 'start_position': 7737289L, 'end_position': 7737834L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150517000,
08:28:48
2018-12-18 16:28:48,216 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150522000, 'start_position': 7738386L, 'end_position': 7738939L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150522000,
08:28:54
2018-12-18 16:28:54,279 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150528000, 'start_position': 7738939L, 'end_position': 7739491L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150528000,
08:29:00
2018-12-18 16:29:00,326 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150534000, 'start_position': 7739491L, 'end_position': 7740043L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150534000,
08:29:06
2018-12-18 16:29:06,759 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150540000, 'start_position': 7740043L, 'end_position': 7740595L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150540000,
08:29:07
2018-12-18 16:29:07,761 - cwlogs.push.publisher - INFO - 2882 - Thread-9 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cron, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150541000, 'start_position': 115548L, 'end_position': 115646L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150541000, 'start_po
08:29:12
2018-12-18 16:29:12,806 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150546000, 'start_position': 7740595L, 'end_position': 7741147L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150547000,
08:29:18
2018-12-18 16:29:18,853 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150552000, 'start_position': 7741688L, 'end_position': 7742241L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150552000,
08:29:24
2018-12-18 16:29:24,907 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150558000, 'start_position': 7742241L, 'end_position': 7742793L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150558000,
08:29:30
2018-12-18 16:29:30,944 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150564000, 'start_position': 7742793L, 'end_position': 7743345L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150564000,
08:29:37
2018-12-18 16:29:37,009 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150570000, 'start_position': 7743345L, 'end_position': 7743897L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150570000,
08:29:43
2018-12-18 16:29:43,063 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150577000, 'start_position': 7743897L, 'end_position': 7744449L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150577000,
08:29:49
2018-12-18 16:29:49,245 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150583000, 'start_position': 7744449L, 'end_position': 7745001L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150583000,
08:29:55
2018-12-18 16:29:55,286 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150589000, 'start_position': 7745001L, 'end_position': 7745553L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150589000,
08:30:01
2018-12-18 16:30:01,353 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150595000, 'start_position': 7745553L, 'end_position': 7746105L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150595000,
08:30:07
2018-12-18 16:30:07,419 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150601000, 'start_position': 7746105L, 'end_position': 7746657L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150601000,
08:30:07
2018-12-18 16:30:07,820 - cwlogs.push.publisher - INFO - 2882 - Thread-9 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/cron, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150601000, 'start_position': 115646L, 'end_position': 115744L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150601000, 'start_po
08:30:13
2018-12-18 16:30:13,478 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150607000, 'start_position': 7746657L, 'end_position': 7747209L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150607000,
08:30:19
2018-12-18 16:30:19,542 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150613000, 'start_position': 7747750L, 'end_position': 7748303L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150613000,
08:30:25
2018-12-18 16:30:25,588 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150619000, 'start_position': 7748303L, 'end_position': 7748855L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150619000,
08:30:31
2018-12-18 16:30:31,644 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150625000, 'start_position': 7748855L, 'end_position': 7749407L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150625000,
08:30:31
2018-12-18 16:30:31,702 - cwlogs.push.publisher - INFO - 2882 - Thread-5 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/messages, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150625000, 'start_position': 127991L, 'end_position': 128078L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150625000, 'star
08:30:37
2018-12-18 16:30:37,685 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150631000, 'start_position': 7749407L, 'end_position': 7749959L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150631000,
08:30:43
2018-12-18 16:30:43,726 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150637000, 'start_position': 7750504L, 'end_position': 7751057L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150637000,
08:30:49
2018-12-18 16:30:49,800 - cwlogs.push.publisher - INFO - 2882 - Thread-2 - Log group: s3-virusscan-Logs-1156XNOE3R39Z, log stream: i-09870922583600324/var/log/awslogs.log, queue size: 0, Publish batch: {'skipped_events_count': 0, 'first_event': {'timestamp': 1545150643000, 'start_position': 7751057L, 'end_position': 7751609L}, 'fallback_events_count': 0, 'last_event': {'timestamp': 1545150643000,
08:30:55
2018-12-18 16
It does not appear that any files are being scanned