[21:53][INFO]Vector store compacted: segments=3, freed=1.2GB
[21:53][WARN]CloudTrail gap detected (late delivery 45s)
[21:53][INFO]SQS redrive completed for dlq-processing-queue
[21:54][WARN]WAF challenge rate increased on /login (bot wave?)
[21:54][INFO]Glue job ETL-dedupe succeeded (dur=3m12s)
[21:54][CRIT]RCE signature triggered on api-gateway stage prod
[21:54][INFO]Threat intel feed synced (12 new IoCs, 2 expired)
[21:54][WARN]Unusual DNS request volume to rare domain *.cn
[21:54][INFO]Remediation: disabled key KMS/ci-old expired
[21:54][CRIT]Multiple failed root MFA attempts within 60s window
[21:54][WARN]Egress spike detected on subnet sn-08b3a1 (x3 stddev)
[21:54][INFO]IAM AccessAnalyzer flagged unused admin policy
[21:54][WARN]S3 PutObject errors > 2% in bucket sc-datalake-logs
[21:54][INFO]Shard rebalance complete: topic=telemetry, partitions=64
[21:54][CRIT]Privileged token used from anomalous ASN (AS4134)
[21:55][INFO]GuardDuty anomaly score returned to baseline
[21:55][WARN]High auth failure rate from IP 185.23.7.12 (geo: DE)
[21:55][INFO]Auto-scaler added 2 pods to ingestion-workers
[21:55][WARN]Elevated P95 latency on /ingest endpoint (312ms)
[21:55][CRIT]Suspicious lateral movement detected in VPC-east-1a
[21:55][INFO]Vector store compacted: segments=3, freed=1.2GB
[21:55][WARN]CloudTrail gap detected (late delivery 45s)
[21:55][INFO]SQS redrive completed for dlq-processing-queue
[21:55][WARN]WAF challenge rate increased on /login (bot wave?)