diff --git a/91.224.92.185.txt b/91.224.92.185.txt
new file mode 100644
index 0000000..aa6dfd2
--- /dev/null
+++ b/91.224.92.185.txt
@@ -0,0 +1,6235 @@
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.087324 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:02.087088896 +0100 CET raw_timestamp=1.772724602087089e+18 source=network
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.087402 [logcorrelator] DEBUG processing B event: key=91.224.92.185:53471 timestamp=2026-03-05 16:30:02.087088896 +0100 CET component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.087413 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:53471 component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.087420 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:53471 src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.087433 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=53471 buffer_size=152 component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.128144 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:02.127821056 +0100 CET raw_timestamp=1.772724602127821e+18 source=http
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.128209 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=1 timestamp=2026-03-05 16:30:02.127821056 +0100 CET component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.128239 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.127821056 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:02.128250 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:03.980995 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:03.97816704 +0100 CET raw_timestamp=1.772724603978167e+18 source=http
+Mar 05 16:30:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:03.981071 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=2 timestamp=2026-03-05 16:30:03.97816704 +0100 CET component=correlation
+Mar 05 16:30:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:03.981102 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:03.97816704 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:03.981110 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:05.958176 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:05.957921024 +0100 CET raw_timestamp=1.772724605957921e+18 source=http
+Mar 05 16:30:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:05.958247 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=3 timestamp=2026-03-05 16:30:05.957921024 +0100 CET component=correlation
+Mar 05 16:30:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:05.958278 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:05.957921024 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:05.958288 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:07.085042 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:07.084801024 +0100 CET raw_timestamp=1.772724607084801e+18 source=http
+Mar 05 16:30:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:07.085099 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=4 timestamp=2026-03-05 16:30:07.084801024 +0100 CET component=correlation
+Mar 05 16:30:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:07.085126 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:07.084801024 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:07.085135 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.150560 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:08.150287104 +0100 CET raw_timestamp=1.772724608150287e+18 source=http
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.150646 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=5 timestamp=2026-03-05 16:30:08.150287104 +0100 CET component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.150694 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:08.150287104 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.150716 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.920270 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:08.920020992 +0100 CET raw_timestamp=1.772724608920021e+18 source=http
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.920338 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=6 timestamp=2026-03-05 16:30:08.920020992 +0100 CET component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.920523 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:08.920020992 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:08.920543 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:09.103052 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:09.102761984 +0100 CET raw_timestamp=1.772724609102762e+18 source=http
+Mar 05 16:30:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:09.103157 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=7 timestamp=2026-03-05 16:30:09.102761984 +0100 CET component=correlation
+Mar 05 16:30:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:09.103195 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:09.102761984 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:09.103208 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:10.095079 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:10.094812928 +0100 CET raw_timestamp=1.772724610094813e+18 source=http
+Mar 05 16:30:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:10.095147 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=8 timestamp=2026-03-05 16:30:10.094812928 +0100 CET component=correlation
+Mar 05 16:30:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:10.095180 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:10.094812928 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:10.095189 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:11.114106 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:11.11380992 +0100 CET raw_timestamp=1.77272461111381e+18 source=http
+Mar 05 16:30:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:11.114189 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=9 timestamp=2026-03-05 16:30:11.11380992 +0100 CET component=correlation
+Mar 05 16:30:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:11.114228 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:11.11380992 +0100 CET) + B(src_ip=91.224.92.185 src_port=53471 ts=2026-03-05 16:30:02.087088896 +0100 CET) component=correlation
+Mar 05 16:30:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:11.114238 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53471 new_ttl=120 component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.215201 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:12.214948096 +0100 CET raw_timestamp=1.772724612214948e+18 source=http
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.215280 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=10 timestamp=2026-03-05 16:30:12.214948096 +0100 CET component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.215292 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=10.1278592s window=10s component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.215314 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:12.715308073 +0100 CET m=+1169.462862314 component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.215323 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.750888 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=10 delay_ms=500 component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.948530 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:12.948260096 +0100 CET raw_timestamp=1.77272461294826e+18 source=http
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.948590 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=11 timestamp=2026-03-05 16:30:12.948260096 +0100 CET component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.948610 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=10.8611712s window=10s component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.948620 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:13.448614471 +0100 CET m=+1170.196168712 component=correlation
+Mar 05 16:30:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:12.948627 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.083389 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:13.083134976 +0100 CET raw_timestamp=1.772724613083135e+18 source=http
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.083452 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=12 timestamp=2026-03-05 16:30:13.083134976 +0100 CET component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.083463 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=10.99604608s window=10s component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.083473 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:13.583467462 +0100 CET m=+1170.331021703 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.083479 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809152 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:13.808762112 +0100 CET raw_timestamp=1.772724613808762e+18 source=http
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809290 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=11 delay_ms=500 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809307 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=12 delay_ms=500 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809323 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=13 timestamp=2026-03-05 16:30:13.808762112 +0100 CET component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809343 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=11.721673216s window=10s component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809354 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:14.309348436 +0100 CET m=+1171.056902676 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.809364 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.966891 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:13.96660992 +0100 CET raw_timestamp=1.77272461396661e+18 source=http
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.966990 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=14 timestamp=2026-03-05 16:30:13.96660992 +0100 CET component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.967009 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=11.879521024s window=10s component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.967019 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:14.467013329 +0100 CET m=+1171.214567570 component=correlation
+Mar 05 16:30:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:13.967026 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708572 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:14.708289024 +0100 CET raw_timestamp=1.772724614708289e+18 source=http
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708733 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=13 delay_ms=500 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708750 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=14 delay_ms=500 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708764 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=15 timestamp=2026-03-05 16:30:14.708289024 +0100 CET component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708772 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=12.621200128s window=10s component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708783 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:15.208777327 +0100 CET m=+1171.956331569 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.708790 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.866031 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:14.865675008 +0100 CET raw_timestamp=1.772724614865675e+18 source=http
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.866158 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=16 timestamp=2026-03-05 16:30:14.865675008 +0100 CET component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.866173 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=12.778586112s window=10s component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.866190 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:15.366177696 +0100 CET m=+1172.113731997 component=correlation
+Mar 05 16:30:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:14.866205 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.216328 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=15 delay_ms=500 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.525422 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=16 delay_ms=500 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.680777 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:15.68052608 +0100 CET raw_timestamp=1.772724615680526e+18 source=http
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.680840 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=17 timestamp=2026-03-05 16:30:15.68052608 +0100 CET component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.680867 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=13.593437184s window=10s component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.680877 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:16.180871856 +0100 CET m=+1172.928426096 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.680883 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.832637 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:15.832336896 +0100 CET raw_timestamp=1.772724615832337e+18 source=http
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.832733 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=18 timestamp=2026-03-05 16:30:15.832336896 +0100 CET component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.832747 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=13.745248s window=10s component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.832760 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:16.332753061 +0100 CET m=+1173.080307306 component=correlation
+Mar 05 16:30:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:15.832769 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644699 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:16.64442112 +0100 CET raw_timestamp=1.772724616644421e+18 source=http
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644816 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=17 delay_ms=500 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644831 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=18 delay_ms=500 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644842 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=19 timestamp=2026-03-05 16:30:16.64442112 +0100 CET component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644862 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=14.557332224s window=10s component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644870 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:17.144866258 +0100 CET m=+1173.892420499 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.644876 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.816006 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:16.815780096 +0100 CET raw_timestamp=1.77272461681578e+18 source=http
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.816064 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=20 timestamp=2026-03-05 16:30:16.815780096 +0100 CET component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.816075 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=14.7286912s window=10s component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.816084 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:17.316079379 +0100 CET m=+1174.063633620 component=correlation
+Mar 05 16:30:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:16.816092 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.334388 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=19 delay_ms=500 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.334406 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.540156 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:17.539900928 +0100 CET raw_timestamp=1.772724617539901e+18 source=http
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.540218 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=21 timestamp=2026-03-05 16:30:17.539900928 +0100 CET component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.540230 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=15.452812032s window=10s component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.540240 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:18.040235006 +0100 CET m=+1174.787789249 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.540248 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.725793 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:17.725478912 +0100 CET raw_timestamp=1.772724617725479e+18 source=http
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.725881 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=22 timestamp=2026-03-05 16:30:17.725478912 +0100 CET component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.725893 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=15.638390016s window=10s component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.725906 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:18.225898241 +0100 CET m=+1174.973452481 component=correlation
+Mar 05 16:30:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:17.725915 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.045284 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.558800 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:18.558488064 +0100 CET raw_timestamp=1.772724618558488e+18 source=http
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.558900 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.559253 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=23 timestamp=2026-03-05 16:30:18.558488064 +0100 CET component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.559266 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=16.471399168s window=10s component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.559274 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:19.059269849 +0100 CET m=+1175.806824089 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.559281 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.748032 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:18.747789056 +0100 CET raw_timestamp=1.772724618747789e+18 source=http
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.748260 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=24 timestamp=2026-03-05 16:30:18.747789056 +0100 CET component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.748270 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=16.66070016s window=10s component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.748279 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:19.248274313 +0100 CET m=+1175.995828553 component=correlation
+Mar 05 16:30:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:18.748285 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.477933 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:19.477590016 +0100 CET raw_timestamp=1.77272461947759e+18 source=http
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478091 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478120 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478133 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=25 timestamp=2026-03-05 16:30:19.477590016 +0100 CET component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478143 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=17.39050112s window=10s component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478153 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:19.978147853 +0100 CET m=+1176.725702105 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.478164 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.668195 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:19.667983104 +0100 CET raw_timestamp=1.772724619667983e+18 source=http
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.668258 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=26 timestamp=2026-03-05 16:30:19.667983104 +0100 CET component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.668268 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=17.580894208s window=10s component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.668278 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:20.168272675 +0100 CET m=+1176.915826915 component=correlation
+Mar 05 16:30:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:19.668285 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390312 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:20.390019072 +0100 CET raw_timestamp=1.772724620390019e+18 source=http
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390409 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390427 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390439 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=27 timestamp=2026-03-05 16:30:20.390019072 +0100 CET component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390449 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=18.302930176s window=10s component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390471 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:20.890453585 +0100 CET m=+1177.638007827 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.390480 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.555135 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:20.554918912 +0100 CET raw_timestamp=1.772724620554919e+18 source=http
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.555195 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=28 timestamp=2026-03-05 16:30:20.554918912 +0100 CET component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.555206 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=18.467830016s window=10s component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.555217 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:21.055211308 +0100 CET m=+1177.802765549 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.555223 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:20.948532 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.264564 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.352344 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:21.352124928 +0100 CET raw_timestamp=1.772724621352125e+18 source=http
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.352408 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=29 timestamp=2026-03-05 16:30:21.352124928 +0100 CET component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.352421 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=19.265036032s window=10s component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.352432 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:21.852426612 +0100 CET m=+1178.599980853 component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.352440 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.551407 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:21.551110912 +0100 CET raw_timestamp=1.772724621551111e+18 source=http
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.551504 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=30 timestamp=2026-03-05 16:30:21.551110912 +0100 CET component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.551518 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=19.464022016s window=10s component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.551529 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:22.051523407 +0100 CET m=+1178.799077648 component=correlation
+Mar 05 16:30:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:21.551538 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.087538 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.087550 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.289377 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:22.289121024 +0100 CET raw_timestamp=1.772724622289121e+18 source=http
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.289462 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=31 timestamp=2026-03-05 16:30:22.289121024 +0100 CET component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.289474 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=20.202032128s window=10s component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.289485 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:22.789478648 +0100 CET m=+1179.537032888 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.289493 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.471260 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:22.471012096 +0100 CET raw_timestamp=1.772724622471012e+18 source=http
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.471326 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=32 timestamp=2026-03-05 16:30:22.471012096 +0100 CET component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.471338 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=20.3839232s window=10s component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.471349 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:22.971343165 +0100 CET m=+1179.718897406 component=correlation
+Mar 05 16:30:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:22.471357 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153513 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:23.15323904 +0100 CET raw_timestamp=1.772724623153239e+18 source=http
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153610 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153623 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153635 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=33 timestamp=2026-03-05 16:30:23.15323904 +0100 CET component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153643 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=21.066150144s window=10s component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153653 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:23.653647628 +0100 CET m=+1180.401201868 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.153659 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.338668 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:23.338416896 +0100 CET raw_timestamp=1.772724623338417e+18 source=http
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.338747 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=34 timestamp=2026-03-05 16:30:23.338416896 +0100 CET component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.338760 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=21.251328s window=10s component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.338770 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:23.83876514 +0100 CET m=+1180.586319381 component=correlation
+Mar 05 16:30:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:23.338778 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.138938 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:24.13861504 +0100 CET raw_timestamp=1.772724624138615e+18 source=http
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139019 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139038 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139050 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=35 timestamp=2026-03-05 16:30:24.13861504 +0100 CET component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=22.051526144s window=10s component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139070 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:24.639065675 +0100 CET m=+1181.386619915 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.139077 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.319410 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:24.319116032 +0100 CET raw_timestamp=1.772724624319116e+18 source=http
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.319513 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=36 timestamp=2026-03-05 16:30:24.319116032 +0100 CET component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.319530 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=22.232027136s window=10s component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.319545 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:24.819537694 +0100 CET m=+1181.567091935 component=correlation
+Mar 05 16:30:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:24.319558 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.051895 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:25.05138688 +0100 CET raw_timestamp=1.772724625051387e+18 source=http
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052004 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052021 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052045 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=37 timestamp=2026-03-05 16:30:25.05138688 +0100 CET component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=22.964297984s window=10s component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052072 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:25.552066475 +0100 CET m=+1182.299620721 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.052080 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.235811 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:25.235544064 +0100 CET raw_timestamp=1.772724625235544e+18 source=http
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.235898 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=38 timestamp=2026-03-05 16:30:25.235544064 +0100 CET component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.235911 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=23.148455168s window=10s component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.235921 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:25.735915368 +0100 CET m=+1182.483469609 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.235929 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958447 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:25.958180096 +0100 CET raw_timestamp=1.77272462595818e+18 source=http
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958564 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958579 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958590 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=39 timestamp=2026-03-05 16:30:25.958180096 +0100 CET component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958600 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=23.8710912s window=10s component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958610 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:26.458604664 +0100 CET m=+1183.206158906 component=correlation
+Mar 05 16:30:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:25.958618 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.131575 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:26.131329024 +0100 CET raw_timestamp=1.772724626131329e+18 source=http
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.131638 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=40 timestamp=2026-03-05 16:30:26.131329024 +0100 CET component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.131650 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=24.044240128s window=10s component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.131661 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:26.631655266 +0100 CET m=+1183.379209506 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.131668 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.546776 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906156 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:26.905840128 +0100 CET raw_timestamp=1.77272462690584e+18 source=http
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906321 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906333 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=41 timestamp=2026-03-05 16:30:26.905840128 +0100 CET component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906343 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=24.818751232s window=10s component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906352 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:27.406346923 +0100 CET m=+1184.153901164 component=correlation
+Mar 05 16:30:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:26.906359 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.089436 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:27.089200896 +0100 CET raw_timestamp=1.772724627089201e+18 source=http
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.089501 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=42 timestamp=2026-03-05 16:30:27.089200896 +0100 CET component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.089518 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=25.002112s window=10s component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.089528 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:27.589522866 +0100 CET m=+1184.337077106 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.089535 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.777377 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.777391 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.785328 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:27.78514304 +0100 CET raw_timestamp=1.772724627785143e+18 source=http
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.812081 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=43 timestamp=2026-03-05 16:30:27.78514304 +0100 CET component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.812112 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=25.698054144s window=10s component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.812138 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:28.312116971 +0100 CET m=+1185.059671211 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.812147 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.958683 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:27.958372096 +0100 CET raw_timestamp=1.772724627958372e+18 source=http
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.958769 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=44 timestamp=2026-03-05 16:30:27.958372096 +0100 CET component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.958781 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=25.8712832s window=10s component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.958791 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:28.458785346 +0100 CET m=+1185.206339587 component=correlation
+Mar 05 16:30:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:27.958797 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.520480 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.520502 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.862923 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:28.86267008 +0100 CET raw_timestamp=1.77272462886267e+18 source=http
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.862986 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=45 timestamp=2026-03-05 16:30:28.86267008 +0100 CET component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.862998 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=26.775581184s window=10s component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.863010 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:29.363003086 +0100 CET m=+1186.110557329 component=correlation
+Mar 05 16:30:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:28.863019 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.628725 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.725611 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:29.725362944 +0100 CET raw_timestamp=1.772724629725363e+18 source=http
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.725703 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=46 timestamp=2026-03-05 16:30:29.725362944 +0100 CET component=correlation
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.725718 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=27.638274048s window=10s component=correlation
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.725728 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:30.225722687 +0100 CET m=+1186.973276928 component=correlation
+Mar 05 16:30:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:29.725738 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621528 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:30.621266944 +0100 CET raw_timestamp=1.772724630621267e+18 source=http
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621594 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621612 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=47 timestamp=2026-03-05 16:30:30.621266944 +0100 CET component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621623 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=28.534178048s window=10s component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621633 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:31.121627891 +0100 CET m=+1187.869182131 component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.621639 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.799320 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:30.798951936 +0100 CET raw_timestamp=1.772724630798952e+18 source=http
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.799436 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=48 timestamp=2026-03-05 16:30:30.798951936 +0100 CET component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.799451 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=28.71186304s window=10s component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.799462 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:31.299455993 +0100 CET m=+1188.047010234 component=correlation
+Mar 05 16:30:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:30.799471 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.563937 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:31.563599104 +0100 CET raw_timestamp=1.772724631563599e+18 source=http
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564013 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564029 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564041 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=49 timestamp=2026-03-05 16:30:31.563599104 +0100 CET component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564053 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=29.476510208s window=10s component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564065 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:32.064057247 +0100 CET m=+1188.811611487 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.564072 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.752445 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:31.752150016 +0100 CET raw_timestamp=1.77272463175215e+18 source=http
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.752515 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=50 timestamp=2026-03-05 16:30:31.752150016 +0100 CET component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.752529 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=29.66506112s window=10s component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.752540 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:32.252533959 +0100 CET m=+1189.000088206 component=correlation
+Mar 05 16:30:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:31.752550 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578725 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:32.578458112 +0100 CET raw_timestamp=1.772724632578458e+18 source=http
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578876 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578889 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578900 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=51 timestamp=2026-03-05 16:30:32.578458112 +0100 CET component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578909 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=30.491369216s window=10s component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578917 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:33.078913106 +0100 CET m=+1189.826467347 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.578924 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.785431 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:32.785225984 +0100 CET raw_timestamp=1.772724632785226e+18 source=http
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.785493 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=52 timestamp=2026-03-05 16:30:32.785225984 +0100 CET component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.785504 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=30.698137088s window=10s component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.785519 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:33.285508577 +0100 CET m=+1190.033062818 component=correlation
+Mar 05 16:30:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:32.785527 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.127111 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651678 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:33.651407104 +0100 CET raw_timestamp=1.772724633651407e+18 source=http
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651761 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651774 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=53 timestamp=2026-03-05 16:30:33.651407104 +0100 CET component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651784 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=31.564318208s window=10s component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651794 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:34.151788841 +0100 CET m=+1190.899343082 component=correlation
+Mar 05 16:30:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:33.651800 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821525 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:34.820399104 +0100 CET raw_timestamp=1.772724634820399e+18 source=http
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821615 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821632 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=54 timestamp=2026-03-05 16:30:34.820399104 +0100 CET component=correlation
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821643 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=32.733310208s window=10s component=correlation
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821653 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:35.321648035 +0100 CET m=+1192.069202276 component=correlation
+Mar 05 16:30:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:34.821659 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565669 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:35.565394944 +0100 CET raw_timestamp=1.772724635565395e+18 source=http
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565773 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565791 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=55 timestamp=2026-03-05 16:30:35.565394944 +0100 CET component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565803 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=33.478306048s window=10s component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565813 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:36.065807959 +0100 CET m=+1192.813362200 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.565820 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.731397 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:35.731140096 +0100 CET raw_timestamp=1.77272463573114e+18 source=http
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.731508 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=56 timestamp=2026-03-05 16:30:35.731140096 +0100 CET component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.731521 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=33.6440512s window=10s component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.731532 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:36.231525377 +0100 CET m=+1192.979079618 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.731540 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.931344 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:35.931027968 +0100 CET raw_timestamp=1.772724635931028e+18 source=http
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.931427 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=57 timestamp=2026-03-05 16:30:35.931027968 +0100 CET component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.931440 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=33.843939072s window=10s component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.931449 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:36.431444009 +0100 CET m=+1193.178998249 component=correlation
+Mar 05 16:30:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:35.931459 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684764 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:36.684452096 +0100 CET raw_timestamp=1.772724636684452e+18 source=http
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684869 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684888 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684901 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684917 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=58 timestamp=2026-03-05 16:30:36.684452096 +0100 CET component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684929 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=34.5973632s window=10s component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684938 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:37.184933137 +0100 CET m=+1193.932487378 component=correlation
+Mar 05 16:30:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:36.684945 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.212489 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.937097 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:37.93681408 +0100 CET raw_timestamp=1.772724637936814e+18 source=http
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.937162 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=59 timestamp=2026-03-05 16:30:37.93681408 +0100 CET component=correlation
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.937174 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=35.849725184s window=10s component=correlation
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.937184 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:38.437177935 +0100 CET m=+1195.184732205 component=correlation
+Mar 05 16:30:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:37.937190 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633088 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:38.632802048 +0100 CET raw_timestamp=1.772724638632802e+18 source=http
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633222 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633232 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=60 timestamp=2026-03-05 16:30:38.632802048 +0100 CET component=correlation
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633240 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=36.545713152s window=10s component=correlation
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633249 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:39.133244241 +0100 CET m=+1195.880798481 component=correlation
+Mar 05 16:30:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:38.633255 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.457926 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:39.45757312 +0100 CET raw_timestamp=1.772724639457573e+18 source=http
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.458040 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.458071 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=61 timestamp=2026-03-05 16:30:39.45757312 +0100 CET component=correlation
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.458091 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=37.370484224s window=10s component=correlation
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.458103 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:39.958097274 +0100 CET m=+1196.705651515 component=correlation
+Mar 05 16:30:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:39.458112 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.000520 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.223316 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:40.22030208 +0100 CET raw_timestamp=1.772724640220302e+18 source=http
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.223375 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=62 timestamp=2026-03-05 16:30:40.22030208 +0100 CET component=correlation
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.223386 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=38.133213184s window=10s component=correlation
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.223395 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:40.723389846 +0100 CET m=+1197.470944086 component=correlation
+Mar 05 16:30:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:40.223402 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476220 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:41.475948032 +0100 CET raw_timestamp=1.772724641475948e+18 source=http
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476355 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476374 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=63 timestamp=2026-03-05 16:30:41.475948032 +0100 CET component=correlation
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476393 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=39.388859136s window=10s component=correlation
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476404 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:41.976398283 +0100 CET m=+1198.723952525 component=correlation
+Mar 05 16:30:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:41.476412 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.181094 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.335561 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:42.332651008 +0100 CET raw_timestamp=1.772724642332651e+18 source=http
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.335619 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=64 timestamp=2026-03-05 16:30:42.332651008 +0100 CET component=correlation
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.335629 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=40.245562112s window=10s component=correlation
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.335638 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:42.835633546 +0100 CET m=+1199.583187787 component=correlation
+Mar 05 16:30:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:42.335646 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.086423 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.106518 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:43.10351104 +0100 CET raw_timestamp=1.772724643103511e+18 source=http
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.106571 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=65 timestamp=2026-03-05 16:30:43.10351104 +0100 CET component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.106581 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=41.016422144s window=10s component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.106591 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:43.60658556 +0100 CET m=+1200.354139810 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.106597 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.858949 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.888939 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:43.886038016 +0100 CET raw_timestamp=1.772724643886038e+18 source=http
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.889070 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=66 timestamp=2026-03-05 16:30:43.886038016 +0100 CET component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.889084 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=41.79894912s window=10s component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.889095 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:44.389088403 +0100 CET m=+1201.136642644 component=correlation
+Mar 05 16:30:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:43.889103 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989570 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:44.989242112 +0100 CET raw_timestamp=1.772724644989242e+18 source=http
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989742 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989753 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=67 timestamp=2026-03-05 16:30:44.989242112 +0100 CET component=correlation
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989762 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=42.902153216s window=10s component=correlation
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989772 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:45.489766652 +0100 CET m=+1202.237320893 component=correlation
+Mar 05 16:30:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:44.989779 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.699879 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.831349 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:45.831049984 +0100 CET raw_timestamp=1.77272464583105e+18 source=http
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.831442 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=68 timestamp=2026-03-05 16:30:45.831049984 +0100 CET component=correlation
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.831459 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=43.743961088s window=10s component=correlation
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.831478 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:46.331464427 +0100 CET m=+1203.079018863 component=correlation
+Mar 05 16:30:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:45.831487 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.514754 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.566616 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:46.566309888 +0100 CET raw_timestamp=1.77272464656631e+18 source=http
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.566720 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=69 timestamp=2026-03-05 16:30:46.566309888 +0100 CET component=correlation
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.566736 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=44.479220992s window=10s component=correlation
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.566755 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:47.066741225 +0100 CET m=+1203.814295489 component=correlation
+Mar 05 16:30:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:46.566770 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323644 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:47.32334208 +0100 CET raw_timestamp=1.772724647323342e+18 source=http
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323759 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323778 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=70 timestamp=2026-03-05 16:30:47.32334208 +0100 CET component=correlation
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323791 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=45.236253184s window=10s component=correlation
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323801 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:47.823796106 +0100 CET m=+1204.571350346 component=correlation
+Mar 05 16:30:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:47.323807 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.013931 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.740005 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:48.739760128 +0100 CET raw_timestamp=1.77272464873976e+18 source=http
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.740094 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=71 timestamp=2026-03-05 16:30:48.739760128 +0100 CET component=correlation
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.740102 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=46.652671232s window=10s component=correlation
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.740112 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:49.240106475 +0100 CET m=+1205.987660715 component=correlation
+Mar 05 16:30:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:48.740118 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.419992 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.680902 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:49.680598016 +0100 CET raw_timestamp=1.772724649680598e+18 source=http
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.680969 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=72 timestamp=2026-03-05 16:30:49.680598016 +0100 CET component=correlation
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.680980 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=47.59350912s window=10s component=correlation
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.680990 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:50.18098461 +0100 CET m=+1206.928538851 component=correlation
+Mar 05 16:30:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:49.680997 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386297 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:50.386028032 +0100 CET raw_timestamp=1.772724650386028e+18 source=http
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386366 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386379 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=73 timestamp=2026-03-05 16:30:50.386028032 +0100 CET component=correlation
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386390 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=48.298939136s window=10s component=correlation
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386399 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:50.886394637 +0100 CET m=+1207.633948877 component=correlation
+Mar 05 16:30:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:50.386405 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258569 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:51.258270976 +0100 CET raw_timestamp=1.772724651258271e+18 source=http
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258641 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258654 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=74 timestamp=2026-03-05 16:30:51.258270976 +0100 CET component=correlation
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258664 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=49.17118208s window=10s component=correlation
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258673 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:51.758668741 +0100 CET m=+1208.506222982 component=correlation
+Mar 05 16:30:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:51.258679 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266530 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:52.266252032 +0100 CET raw_timestamp=1.772724652266252e+18 source=http
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266592 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266608 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=75 timestamp=2026-03-05 16:30:52.266252032 +0100 CET component=correlation
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266618 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=50.179163136s window=10s component=correlation
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266628 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:52.766622946 +0100 CET m=+1209.514177187 component=correlation
+Mar 05 16:30:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:52.266635 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048645 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:53.04837504 +0100 CET raw_timestamp=1.772724653048375e+18 source=http
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048762 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048772 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=76 timestamp=2026-03-05 16:30:53.04837504 +0100 CET component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048780 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=50.961286144s window=10s component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048789 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:53.548784348 +0100 CET m=+1210.296338589 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.048795 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.709327 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.859229 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:53.858945024 +0100 CET raw_timestamp=1.772724653858945e+18 source=http
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.859301 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=77 timestamp=2026-03-05 16:30:53.858945024 +0100 CET component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.859315 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=51.771856128s window=10s component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.859328 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:54.35932033 +0100 CET m=+1211.106874572 component=correlation
+Mar 05 16:30:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:53.859336 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588508 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:54.588218112 +0100 CET raw_timestamp=1.772724654588218e+18 source=http
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588596 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588613 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=78 timestamp=2026-03-05 16:30:54.588218112 +0100 CET component=correlation
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588622 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=52.501129216s window=10s component=correlation
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588631 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:55.088626598 +0100 CET m=+1211.836180839 component=correlation
+Mar 05 16:30:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:54.588637 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.409564 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.623133 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:55.62276992 +0100 CET raw_timestamp=1.77272465562277e+18 source=http
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.623209 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=79 timestamp=2026-03-05 16:30:55.62276992 +0100 CET component=correlation
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.623223 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=53.535681024s window=10s component=correlation
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.623238 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:56.12322789 +0100 CET m=+1212.870782130 component=correlation
+Mar 05 16:30:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:55.623247 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.356980 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:56.356623872 +0100 CET raw_timestamp=1.772724656356624e+18 source=http
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.357055 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.357069 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=80 timestamp=2026-03-05 16:30:56.356623872 +0100 CET component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.357082 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=54.269534976s window=10s component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.357092 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:56.857087112 +0100 CET m=+1213.604641353 component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.357098 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:56.977489 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.156561 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:57.156327936 +0100 CET raw_timestamp=1.772724657156328e+18 source=http
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.156619 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=81 timestamp=2026-03-05 16:30:57.156327936 +0100 CET component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.156631 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=55.06923904s window=10s component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.156640 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:57.656635495 +0100 CET m=+1214.404189735 component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.156648 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887452 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:57.887152896 +0100 CET raw_timestamp=1.772724657887153e+18 source=http
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887585 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887597 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=82 timestamp=2026-03-05 16:30:57.887152896 +0100 CET component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887605 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=55.800064s window=10s component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887616 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:58.387610224 +0100 CET m=+1215.135164465 component=correlation
+Mar 05 16:30:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:57.887623 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.772471 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.927985 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:58.92768512 +0100 CET raw_timestamp=1.772724658927685e+18 source=http
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.928048 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=83 timestamp=2026-03-05 16:30:58.92768512 +0100 CET component=correlation
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.928061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=56.840596224s window=10s component=correlation
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.928072 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:30:59.428065902 +0100 CET m=+1216.175620143 component=correlation
+Mar 05 16:30:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:58.928079 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758710 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:30:59.758445056 +0100 CET raw_timestamp=1.772724659758445e+18 source=http
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758862 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758876 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=84 timestamp=2026-03-05 16:30:59.758445056 +0100 CET component=correlation
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758885 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=57.67135616s window=10s component=correlation
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758893 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:00.258888924 +0100 CET m=+1217.006443164 component=correlation
+Mar 05 16:30:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:30:59.758900 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.488363 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.597521 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:00.59725696 +0100 CET raw_timestamp=1.772724660597257e+18 source=http
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.597599 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=85 timestamp=2026-03-05 16:31:00.59725696 +0100 CET component=correlation
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.597615 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=58.510168064s window=10s component=correlation
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.597628 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:01.097621721 +0100 CET m=+1217.845175971 component=correlation
+Mar 05 16:31:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:00.597638 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.164201 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.552430 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:01.549565952 +0100 CET raw_timestamp=1.772724661549566e+18 source=http
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.552505 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=86 timestamp=2026-03-05 16:31:01.549565952 +0100 CET component=correlation
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.552518 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=59.462477056s window=10s component=correlation
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.552532 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:02.052523566 +0100 CET m=+1218.800077812 component=correlation
+Mar 05 16:31:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:01.552541 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:02.089182 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.135494 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:03.135106048 +0100 CET raw_timestamp=1.772724663135106e+18 source=http
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.135595 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=87 timestamp=2026-03-05 16:31:03.135106048 +0100 CET component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.135613 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m1.048017152s window=10s component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.135634 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:03.635618937 +0100 CET m=+1220.383173179 component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.135648 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.772406 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.993649 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:03.993341952 +0100 CET raw_timestamp=1.772724663993342e+18 source=http
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.993746 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=88 timestamp=2026-03-05 16:31:03.993341952 +0100 CET component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.993763 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m1.906253056s window=10s component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.993776 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:04.493768169 +0100 CET m=+1221.241322410 component=correlation
+Mar 05 16:31:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:03.993784 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.526432 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.727737 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:04.727471104 +0100 CET raw_timestamp=1.772724664727471e+18 source=http
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.727874 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=89 timestamp=2026-03-05 16:31:04.727471104 +0100 CET component=correlation
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.727892 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m2.640382208s window=10s component=correlation
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.727904 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:05.227896575 +0100 CET m=+1221.975450823 component=correlation
+Mar 05 16:31:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:04.727912 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476311 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:05.476035072 +0100 CET raw_timestamp=1.772724665476035e+18 source=http
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476383 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476397 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=90 timestamp=2026-03-05 16:31:05.476035072 +0100 CET component=correlation
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476408 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m3.388946176s window=10s component=correlation
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476417 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:05.976412441 +0100 CET m=+1222.723966682 component=correlation
+Mar 05 16:31:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:05.476424 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.257961 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:06.257604096 +0100 CET raw_timestamp=1.772724666257604e+18 source=http
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.258034 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.258050 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=91 timestamp=2026-03-05 16:31:06.257604096 +0100 CET component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.258061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m4.1705152s window=10s component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.258069 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:06.758065377 +0100 CET m=+1223.505619621 component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.258077 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:06.830272 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.075497 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:07.075232 +0100 CET raw_timestamp=1.772724667075232e+18 source=http
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.075561 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=92 timestamp=2026-03-05 16:31:07.075232 +0100 CET component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.075574 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m4.988143104s window=10s component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.075584 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:07.575578331 +0100 CET m=+1224.323132572 component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.075591 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.791423 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.810941 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:07.81067008 +0100 CET raw_timestamp=1.77272466781067e+18 source=http
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.811004 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=93 timestamp=2026-03-05 16:31:07.81067008 +0100 CET component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.811015 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m5.723581184s window=10s component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.811025 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:08.311019447 +0100 CET m=+1225.058573687 component=correlation
+Mar 05 16:31:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:07.811032 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557537 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:08.557292032 +0100 CET raw_timestamp=1.772724668557292e+18 source=http
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557604 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557616 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=94 timestamp=2026-03-05 16:31:08.557292032 +0100 CET component=correlation
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557628 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m6.470203136s window=10s component=correlation
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557637 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:09.057632268 +0100 CET m=+1225.805186509 component=correlation
+Mar 05 16:31:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:08.557644 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323692 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:09.323428096 +0100 CET raw_timestamp=1.772724669323428e+18 source=http
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323787 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323798 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=95 timestamp=2026-03-05 16:31:09.323428096 +0100 CET component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323806 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m7.2363392s window=10s component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323815 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:09.823810359 +0100 CET m=+1226.571364600 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.323821 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.597053 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:09.596775936 +0100 CET raw_timestamp=1.772724669596776e+18 source=http
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.597117 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=96 timestamp=2026-03-05 16:31:09.596775936 +0100 CET component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.597128 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m7.50968704s window=10s component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.597138 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:10.097132687 +0100 CET m=+1226.844686928 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.597145 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.819401 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:09.819145984 +0100 CET raw_timestamp=1.772724669819146e+18 source=http
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.819474 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=97 timestamp=2026-03-05 16:31:09.819145984 +0100 CET component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.819488 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m7.732057088s window=10s component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.819498 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:10.319492491 +0100 CET m=+1227.067046732 component=correlation
+Mar 05 16:31:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:09.819505 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058342 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:10.058036992 +0100 CET raw_timestamp=1.772724670058037e+18 source=http
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058444 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058466 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=98 timestamp=2026-03-05 16:31:10.058036992 +0100 CET component=correlation
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058483 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m7.970948096s window=10s component=correlation
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058498 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:10.558490488 +0100 CET m=+1227.306044729 component=correlation
+Mar 05 16:31:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:10.058511 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051231 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:11.050974976 +0100 CET raw_timestamp=1.772724671050975e+18 source=http
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051299 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051314 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051325 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051339 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=99 timestamp=2026-03-05 16:31:11.050974976 +0100 CET component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051351 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m8.96388608s window=10s component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051361 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:11.551355801 +0100 CET m=+1228.298910042 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.051367 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718134 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:11.717863936 +0100 CET raw_timestamp=1.772724671717864e+18 source=http
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718224 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718241 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=100 timestamp=2026-03-05 16:31:11.717863936 +0100 CET component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718253 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m9.63077504s window=10s component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718264 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:12.218257979 +0100 CET m=+1228.965812221 component=correlation
+Mar 05 16:31:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:11.718271 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.441967 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53471 timestamp=2026-03-05 16:31:12.441657088 +0100 CET raw_timestamp=1.772724672441657e+18 source=http
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.442070 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.442090 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53471 keepalive_seq=101 timestamp=2026-03-05 16:31:12.441657088 +0100 CET component=correlation
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.442103 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53471 time_diff=1m10.354568192s window=10s component=correlation
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.442114 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53471 emit_after=2026-03-05 16:31:12.942108411 +0100 CET m=+1229.689662653 component=correlation
+Mar 05 16:31:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:12.442122 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53471 component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381391 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:13.381138432 +0100 CET raw_timestamp=1.7727246733811384e+18 source=network
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381493 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53471 key=91.224.92.185:53471 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381503 [logcorrelator] DEBUG processing B event: key=91.224.92.185:61197 timestamp=2026-03-05 16:31:13.381138432 +0100 CET component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381510 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:61197 component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381516 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:61197 src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.381526 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=61197 buffer_size=144 component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.443512 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:13.443184128 +0100 CET raw_timestamp=1.772724673443184e+18 source=http
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.443592 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=1 timestamp=2026-03-05 16:31:13.443184128 +0100 CET component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.443631 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.443184128 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:13.443642 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:14.562082 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:14.561784064 +0100 CET raw_timestamp=1.772724674561784e+18 source=http
+Mar 05 16:31:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:14.562197 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=2 timestamp=2026-03-05 16:31:14.561784064 +0100 CET component=correlation
+Mar 05 16:31:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:14.562228 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:14.561784064 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:14.562237 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:15.328224 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:15.327942912 +0100 CET raw_timestamp=1.772724675327943e+18 source=http
+Mar 05 16:31:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:15.328347 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=3 timestamp=2026-03-05 16:31:15.327942912 +0100 CET component=correlation
+Mar 05 16:31:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:15.328380 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:15.327942912 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:15.328393 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.094372 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:16.094128128 +0100 CET raw_timestamp=1.772724676094128e+18 source=http
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.094461 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=4 timestamp=2026-03-05 16:31:16.094128128 +0100 CET component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.094491 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:16.094128128 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.094502 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.333021 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:16.332699904 +0100 CET raw_timestamp=1.7727246763327e+18 source=http
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.333098 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=5 timestamp=2026-03-05 16:31:16.332699904 +0100 CET component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.333139 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:16.332699904 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.333148 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.572921 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:16.572615936 +0100 CET raw_timestamp=1.772724676572616e+18 source=http
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.572998 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=6 timestamp=2026-03-05 16:31:16.572615936 +0100 CET component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.573035 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:16.572615936 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.573045 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.809517 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:16.809253888 +0100 CET raw_timestamp=1.772724676809254e+18 source=http
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.809585 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=7 timestamp=2026-03-05 16:31:16.809253888 +0100 CET component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.809615 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:16.809253888 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:16.809625 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.049118 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:17.048812032 +0100 CET raw_timestamp=1.772724677048812e+18 source=http
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.049183 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=8 timestamp=2026-03-05 16:31:17.048812032 +0100 CET component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.049214 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:17.048812032 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.049223 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.291298 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:17.291005952 +0100 CET raw_timestamp=1.772724677291006e+18 source=http
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.291393 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=9 timestamp=2026-03-05 16:31:17.291005952 +0100 CET component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.291440 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:17.291005952 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.291451 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.513925 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:17.513676032 +0100 CET raw_timestamp=1.772724677513676e+18 source=http
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.513985 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=10 timestamp=2026-03-05 16:31:17.513676032 +0100 CET component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.514014 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:17.513676032 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.514023 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.748743 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:17.745662976 +0100 CET raw_timestamp=1.772724677745663e+18 source=http
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.748818 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=11 timestamp=2026-03-05 16:31:17.745662976 +0100 CET component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.748860 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:17.745662976 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.748870 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.993830 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:17.990621952 +0100 CET raw_timestamp=1.772724677990622e+18 source=http
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.993885 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=12 timestamp=2026-03-05 16:31:17.990621952 +0100 CET component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.993912 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:17.990621952 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:17.993921 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:18.232391 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:18.232126976 +0100 CET raw_timestamp=1.772724678232127e+18 source=http
+Mar 05 16:31:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:18.232453 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=13 timestamp=2026-03-05 16:31:18.232126976 +0100 CET component=correlation
+Mar 05 16:31:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:18.232483 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:18.232126976 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:18.232492 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:19.336842 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:19.336555008 +0100 CET raw_timestamp=1.772724679336555e+18 source=http
+Mar 05 16:31:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:19.336930 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=14 timestamp=2026-03-05 16:31:19.336555008 +0100 CET component=correlation
+Mar 05 16:31:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:19.336958 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:19.336555008 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:19.336968 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.097566 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:20.097286912 +0100 CET raw_timestamp=1.772724680097287e+18 source=http
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.097630 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=15 timestamp=2026-03-05 16:31:20.097286912 +0100 CET component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.097660 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:20.097286912 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.097671 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.801190 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:20.800581888 +0100 CET raw_timestamp=1.772724680800582e+18 source=http
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.801252 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=16 timestamp=2026-03-05 16:31:20.800581888 +0100 CET component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.801281 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:20.800581888 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:20.801291 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:21.524126 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:21.523842048 +0100 CET raw_timestamp=1.772724681523842e+18 source=http
+Mar 05 16:31:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:21.524188 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=17 timestamp=2026-03-05 16:31:21.523842048 +0100 CET component=correlation
+Mar 05 16:31:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:21.524220 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:21.523842048 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:21.524230 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:22.561290 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:22.561008896 +0100 CET raw_timestamp=1.772724682561009e+18 source=http
+Mar 05 16:31:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:22.561355 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=18 timestamp=2026-03-05 16:31:22.561008896 +0100 CET component=correlation
+Mar 05 16:31:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:22.561383 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:22.561008896 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:22.561393 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.248355 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:23.24808192 +0100 CET raw_timestamp=1.772724683248082e+18 source=http
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.248453 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=19 timestamp=2026-03-05 16:31:23.24808192 +0100 CET component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.248484 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:23.24808192 +0100 CET) + B(src_ip=91.224.92.185 src_port=61197 ts=2026-03-05 16:31:13.381138432 +0100 CET) component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.248497 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:61197 new_ttl=120 component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.968818 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:23.968532992 +0100 CET raw_timestamp=1.772724683968533e+18 source=http
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.968923 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=20 timestamp=2026-03-05 16:31:23.968532992 +0100 CET component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.968938 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=10.58739456s window=10s component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.968949 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:24.468942664 +0100 CET m=+1241.216496909 component=correlation
+Mar 05 16:31:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:23.968957 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.597375 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.687208 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:24.686956032 +0100 CET raw_timestamp=1.772724684686956e+18 source=http
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.687275 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=21 timestamp=2026-03-05 16:31:24.686956032 +0100 CET component=correlation
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.687287 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=11.3058176s window=10s component=correlation
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.687297 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:25.18729204 +0100 CET m=+1241.934846292 component=correlation
+Mar 05 16:31:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:24.687305 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768670 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:25.768368896 +0100 CET raw_timestamp=1.772724685768369e+18 source=http
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768779 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768796 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=22 timestamp=2026-03-05 16:31:25.768368896 +0100 CET component=correlation
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768807 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=12.387230464s window=10s component=correlation
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768818 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:26.268812341 +0100 CET m=+1243.016366581 component=correlation
+Mar 05 16:31:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:25.768828 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.511901 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:26.511631872 +0100 CET raw_timestamp=1.772724686511632e+18 source=http
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.511966 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.511979 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=23 timestamp=2026-03-05 16:31:26.511631872 +0100 CET component=correlation
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.511989 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=13.13049344s window=10s component=correlation
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.511999 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:27.011994019 +0100 CET m=+1243.759548260 component=correlation
+Mar 05 16:31:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:26.512005 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.217842 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:27.217586944 +0100 CET raw_timestamp=1.772724687217587e+18 source=http
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.217959 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.217978 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=24 timestamp=2026-03-05 16:31:27.217586944 +0100 CET component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.217991 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=13.836448512s window=10s component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.218004 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:27.717996494 +0100 CET m=+1244.465550736 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.218015 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.486476 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:27.486217984 +0100 CET raw_timestamp=1.772724687486218e+18 source=http
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.486542 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=25 timestamp=2026-03-05 16:31:27.486217984 +0100 CET component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.486553 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=14.105079552s window=10s component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.486563 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:27.986557543 +0100 CET m=+1244.734111784 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.486570 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.700710 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:27.700450048 +0100 CET raw_timestamp=1.77272468770045e+18 source=http
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.700794 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=26 timestamp=2026-03-05 16:31:27.700450048 +0100 CET component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.700805 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=14.319311616s window=10s component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.700814 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:28.200809987 +0100 CET m=+1244.948364228 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.700821 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920427 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:27.920143872 +0100 CET raw_timestamp=1.772724687920144e+18 source=http
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920516 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920535 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=27 timestamp=2026-03-05 16:31:27.920143872 +0100 CET component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920547 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=14.53900544s window=10s component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920559 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:28.420553571 +0100 CET m=+1245.168107813 component=correlation
+Mar 05 16:31:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:27.920568 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.021016 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.172411 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:28.172144896 +0100 CET raw_timestamp=1.772724688172145e+18 source=http
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.172481 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=28 timestamp=2026-03-05 16:31:28.172144896 +0100 CET component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.172494 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=14.791006464s window=10s component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.172505 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:28.672498878 +0100 CET m=+1245.420053119 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.172512 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.383680 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.423653 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.892682 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.931309 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:28.931033088 +0100 CET raw_timestamp=1.772724688931033e+18 source=http
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.931388 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=29 timestamp=2026-03-05 16:31:28.931033088 +0100 CET component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.931403 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=15.549894656s window=10s component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.931422 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:29.431408767 +0100 CET m=+1246.178963008 component=correlation
+Mar 05 16:31:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:28.931433 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:29.581891 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.064525 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:30.06432 +0100 CET raw_timestamp=1.77272469006432e+18 source=http
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.070644 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=30 timestamp=2026-03-05 16:31:30.06432 +0100 CET component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.070675 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=16.683181568s window=10s component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.070693 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:30.570680387 +0100 CET m=+1247.318234627 component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.070702 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.709098 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.859205 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:30.858917888 +0100 CET raw_timestamp=1.772724690858918e+18 source=http
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.859279 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=31 timestamp=2026-03-05 16:31:30.858917888 +0100 CET component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.859293 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=17.477779456s window=10s component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.859304 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:31.359298145 +0100 CET m=+1248.106852392 component=correlation
+Mar 05 16:31:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:30.859313 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575328 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:31.575094016 +0100 CET raw_timestamp=1.772724691575094e+18 source=http
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575438 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575450 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=32 timestamp=2026-03-05 16:31:31.575094016 +0100 CET component=correlation
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575459 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=18.193955584s window=10s component=correlation
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575468 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:32.075463085 +0100 CET m=+1248.823017326 component=correlation
+Mar 05 16:31:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:31.575475 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287737 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:32.287428096 +0100 CET raw_timestamp=1.772724692287428e+18 source=http
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287808 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287822 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=33 timestamp=2026-03-05 16:31:32.287428096 +0100 CET component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287833 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=18.906289664s window=10s component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287842 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:32.787837087 +0100 CET m=+1249.535391327 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.287878 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.533592 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:32.533316096 +0100 CET raw_timestamp=1.772724692533316e+18 source=http
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.533668 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=34 timestamp=2026-03-05 16:31:32.533316096 +0100 CET component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.533681 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=19.152177664s window=10s component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.533694 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:33.033686921 +0100 CET m=+1249.781241162 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.533702 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.748919 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:32.74864896 +0100 CET raw_timestamp=1.772724692748649e+18 source=http
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.748980 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=35 timestamp=2026-03-05 16:31:32.74864896 +0100 CET component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.748992 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=19.367510528s window=10s component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.749001 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:33.248996163 +0100 CET m=+1249.996550421 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.749008 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965269 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:32.965024 +0100 CET raw_timestamp=1.772724692965024e+18 source=http
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965336 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965349 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=36 timestamp=2026-03-05 16:31:32.965024 +0100 CET component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=19.583885568s window=10s component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965369 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:33.465364621 +0100 CET m=+1250.212918861 component=correlation
+Mar 05 16:31:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:32.965375 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733012 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:33.73270912 +0100 CET raw_timestamp=1.772724693732709e+18 source=http
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733132 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733146 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733159 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733169 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=37 timestamp=2026-03-05 16:31:33.73270912 +0100 CET component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733177 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=20.351570688s window=10s component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733186 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:34.233181725 +0100 CET m=+1250.980735966 component=correlation
+Mar 05 16:31:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:33.733193 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569798 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:34.569477888 +0100 CET raw_timestamp=1.772724694569478e+18 source=http
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569937 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569949 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=38 timestamp=2026-03-05 16:31:34.569477888 +0100 CET component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569958 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=21.188339456s window=10s component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569968 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:35.069963348 +0100 CET m=+1251.817517589 component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.569981 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.781971 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:34.781665024 +0100 CET raw_timestamp=1.772724694781665e+18 source=http
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.782042 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=39 timestamp=2026-03-05 16:31:34.781665024 +0100 CET component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.782060 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=21.400526592s window=10s component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.782075 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:35.282069087 +0100 CET m=+1252.029623328 component=correlation
+Mar 05 16:31:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:34.782085 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.004880 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:35.004572928 +0100 CET raw_timestamp=1.772724695004573e+18 source=http
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.005007 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=40 timestamp=2026-03-05 16:31:35.004572928 +0100 CET component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.005016 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=21.623434496s window=10s component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.005026 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:35.50502103 +0100 CET m=+1252.252575270 component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.005050 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222143 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:35.221843968 +0100 CET raw_timestamp=1.772724695221844e+18 source=http
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222211 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222226 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=41 timestamp=2026-03-05 16:31:35.221843968 +0100 CET component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222236 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=21.840705536s window=10s component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222245 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:35.722240855 +0100 CET m=+1252.469795095 component=correlation
+Mar 05 16:31:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:35.222252 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.226960 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:36.226662912 +0100 CET raw_timestamp=1.772724696226663e+18 source=http
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227031 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227046 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227059 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227076 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=42 timestamp=2026-03-05 16:31:36.226662912 +0100 CET component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227086 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=22.84552448s window=10s component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227095 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:36.727090608 +0100 CET m=+1253.474644849 component=correlation
+Mar 05 16:31:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:36.227101 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023191 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:37.022947072 +0100 CET raw_timestamp=1.772724697022947e+18 source=http
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023281 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023291 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=43 timestamp=2026-03-05 16:31:37.022947072 +0100 CET component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023299 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=23.64180864s window=10s component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023308 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:37.523303289 +0100 CET m=+1254.270857529 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.023314 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759188 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:37.758938112 +0100 CET raw_timestamp=1.772724697758938e+18 source=http
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759255 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759268 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=44 timestamp=2026-03-05 16:31:37.758938112 +0100 CET component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759278 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=24.37779968s window=10s component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759287 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:38.259282654 +0100 CET m=+1255.006836898 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.759295 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.967683 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:37.967420928 +0100 CET raw_timestamp=1.772724697967421e+18 source=http
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.967750 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=45 timestamp=2026-03-05 16:31:37.967420928 +0100 CET component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.967762 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=24.586282496s window=10s component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.967771 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:38.467766611 +0100 CET m=+1255.215320852 component=correlation
+Mar 05 16:31:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:37.967778 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924096 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:38.923753984 +0100 CET raw_timestamp=1.772724698923754e+18 source=http
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924183 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924199 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924217 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=46 timestamp=2026-03-05 16:31:38.923753984 +0100 CET component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924234 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=25.542615552s window=10s component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924246 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:39.424241178 +0100 CET m=+1256.171795419 component=correlation
+Mar 05 16:31:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:38.924254 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706325 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:39.706075904 +0100 CET raw_timestamp=1.772724699706076e+18 source=http
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706391 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706405 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=47 timestamp=2026-03-05 16:31:39.706075904 +0100 CET component=correlation
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706415 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=26.324937472s window=10s component=correlation
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706426 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:40.206420199 +0100 CET m=+1256.953974440 component=correlation
+Mar 05 16:31:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:39.706442 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.401455 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.486399 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:40.486128128 +0100 CET raw_timestamp=1.772724700486128e+18 source=http
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.486490 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=48 timestamp=2026-03-05 16:31:40.486128128 +0100 CET component=correlation
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.486499 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=27.104989696s window=10s component=correlation
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.486509 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:40.986503412 +0100 CET m=+1257.734057652 component=correlation
+Mar 05 16:31:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:40.486515 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203225 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:41.202870016 +0100 CET raw_timestamp=1.77272470120287e+18 source=http
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203341 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203355 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=49 timestamp=2026-03-05 16:31:41.202870016 +0100 CET component=correlation
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203365 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=27.821731584s window=10s component=correlation
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203375 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:41.703369371 +0100 CET m=+1258.450923614 component=correlation
+Mar 05 16:31:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:41.203383 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263407 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:42.263177984 +0100 CET raw_timestamp=1.772724702263178e+18 source=http
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263513 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263525 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=50 timestamp=2026-03-05 16:31:42.263177984 +0100 CET component=correlation
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263533 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=28.882039552s window=10s component=correlation
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263544 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:42.763538361 +0100 CET m=+1259.511092604 component=correlation
+Mar 05 16:31:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:42.263551 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035391 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:43.035110912 +0100 CET raw_timestamp=1.772724703035111e+18 source=http
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035492 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035502 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=51 timestamp=2026-03-05 16:31:43.035110912 +0100 CET component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035510 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=29.65397248s window=10s component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035518 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:43.535514018 +0100 CET m=+1260.283068259 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.035524 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764103 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:43.763798016 +0100 CET raw_timestamp=1.772724703763798e+18 source=http
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764222 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764232 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=52 timestamp=2026-03-05 16:31:43.763798016 +0100 CET component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764241 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=30.382659584s window=10s component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764249 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:44.264244998 +0100 CET m=+1261.011799238 component=correlation
+Mar 05 16:31:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:43.764255 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.490873 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:44.490522112 +0100 CET raw_timestamp=1.772724704490522e+18 source=http
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.490962 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.490982 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=53 timestamp=2026-03-05 16:31:44.490522112 +0100 CET component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.490994 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=31.10938368s window=10s component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.491005 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:44.990999634 +0100 CET m=+1261.738553878 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.491012 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.717738 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:44.71745792 +0100 CET raw_timestamp=1.772724704717458e+18 source=http
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.717811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=54 timestamp=2026-03-05 16:31:44.71745792 +0100 CET component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.717823 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=31.336319488s window=10s component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.717834 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:45.217827713 +0100 CET m=+1261.965381953 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.717869 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.930195 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:44.929956096 +0100 CET raw_timestamp=1.772724704929956e+18 source=http
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.930252 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=55 timestamp=2026-03-05 16:31:44.929956096 +0100 CET component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.930263 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=31.548817664s window=10s component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.930272 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:45.430267578 +0100 CET m=+1262.177821819 component=correlation
+Mar 05 16:31:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:44.930279 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175254 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:45.174979072 +0100 CET raw_timestamp=1.772724705174979e+18 source=http
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175383 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175396 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=56 timestamp=2026-03-05 16:31:45.174979072 +0100 CET component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175405 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=31.79384064s window=10s component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175413 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:45.675408784 +0100 CET m=+1262.422963025 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.175419 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.460978 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:45.46069888 +0100 CET raw_timestamp=1.772724705460699e+18 source=http
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461048 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461061 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461073 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=57 timestamp=2026-03-05 16:31:45.46069888 +0100 CET component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461084 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=32.079560448s window=10s component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461094 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:45.961089088 +0100 CET m=+1262.708643329 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.461100 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693305 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:45.693037056 +0100 CET raw_timestamp=1.772724705693037e+18 source=http
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693374 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693387 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=58 timestamp=2026-03-05 16:31:45.693037056 +0100 CET component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693398 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=32.311898624s window=10s component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693407 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:46.193402517 +0100 CET m=+1262.940956759 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.693414 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.931127 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:45.93087488 +0100 CET raw_timestamp=1.772724705930875e+18 source=http
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.931202 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=59 timestamp=2026-03-05 16:31:45.93087488 +0100 CET component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.931217 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=32.549736448s window=10s component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.931228 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:46.43122164 +0100 CET m=+1263.178775895 component=correlation
+Mar 05 16:31:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:45.931235 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.094401 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.145163 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:46.144911104 +0100 CET raw_timestamp=1.772724706144911e+18 source=http
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.145245 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=60 timestamp=2026-03-05 16:31:46.144911104 +0100 CET component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.145259 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=32.763772672s window=10s component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.145272 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:46.645264797 +0100 CET m=+1263.392819049 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.145278 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.210555 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.370113 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:46.369868032 +0100 CET raw_timestamp=1.772724706369868e+18 source=http
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.370186 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=61 timestamp=2026-03-05 16:31:46.369868032 +0100 CET component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.370199 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=32.9887296s window=10s component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.370209 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:46.870203525 +0100 CET m=+1263.617757766 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.370215 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.581958 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:46.581602048 +0100 CET raw_timestamp=1.772724706581602e+18 source=http
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.582025 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.582038 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=62 timestamp=2026-03-05 16:31:46.581602048 +0100 CET component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.582048 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=33.200463616s window=10s component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.582057 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:47.082052404 +0100 CET m=+1263.829606645 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.582064 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796277 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:46.796016896 +0100 CET raw_timestamp=1.772724706796017e+18 source=http
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796343 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796356 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=63 timestamp=2026-03-05 16:31:46.796016896 +0100 CET component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796367 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=33.414878464s window=10s component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796377 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:47.296372001 +0100 CET m=+1264.043926242 component=correlation
+Mar 05 16:31:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:46.796383 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021394 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:47.021107968 +0100 CET raw_timestamp=1.772724707021108e+18 source=http
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021463 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021477 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=64 timestamp=2026-03-05 16:31:47.021107968 +0100 CET component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021487 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=33.639969536s window=10s component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021496 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:47.521491834 +0100 CET m=+1264.269046074 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.021503 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247442 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:47.24716288 +0100 CET raw_timestamp=1.772724707247163e+18 source=http
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247507 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247521 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=65 timestamp=2026-03-05 16:31:47.24716288 +0100 CET component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247532 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=33.866024448s window=10s component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247541 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:47.747536352 +0100 CET m=+1264.495090592 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.247547 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.752518 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.752530 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:31:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:47.752542 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.060936 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:48.060656896 +0100 CET raw_timestamp=1.772724708060657e+18 source=http
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.060999 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=66 timestamp=2026-03-05 16:31:48.060656896 +0100 CET component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.061011 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=34.679518464s window=10s component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.061021 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:48.56101533 +0100 CET m=+1265.308569584 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.061027 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.321670 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:48.321411072 +0100 CET raw_timestamp=1.772724708321411e+18 source=http
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.321757 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=67 timestamp=2026-03-05 16:31:48.321411072 +0100 CET component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.321771 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=34.94027264s window=10s component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.321783 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:48.821777346 +0100 CET m=+1265.569331588 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.321790 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.550492 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:48.55023488 +0100 CET raw_timestamp=1.772724708550235e+18 source=http
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.550554 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=68 timestamp=2026-03-05 16:31:48.55023488 +0100 CET component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.550565 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=35.169096448s window=10s component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.550574 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:49.050569359 +0100 CET m=+1265.798123599 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.550581 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771188 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:48.770939904 +0100 CET raw_timestamp=1.77272470877094e+18 source=http
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771278 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771296 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=69 timestamp=2026-03-05 16:31:48.770939904 +0100 CET component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771311 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=35.389801472s window=10s component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771322 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:49.271316456 +0100 CET m=+1266.018870699 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.771329 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991681 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:48.991449088 +0100 CET raw_timestamp=1.772724708991449e+18 source=http
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991754 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991767 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=70 timestamp=2026-03-05 16:31:48.991449088 +0100 CET component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991777 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=35.610310656s window=10s component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991786 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:49.491781197 +0100 CET m=+1266.239335438 component=correlation
+Mar 05 16:31:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:48.991793 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227798 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:49.227544064 +0100 CET raw_timestamp=1.772724709227544e+18 source=http
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227876 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227890 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=71 timestamp=2026-03-05 16:31:49.227544064 +0100 CET component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227900 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=35.846405632s window=10s component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227909 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:49.727904708 +0100 CET m=+1266.475458948 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.227915 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455355 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:49.455098112 +0100 CET raw_timestamp=1.772724709455098e+18 source=http
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455424 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455438 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=72 timestamp=2026-03-05 16:31:49.455098112 +0100 CET component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455448 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=36.07395968s window=10s component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455457 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:49.955452297 +0100 CET m=+1266.703006538 component=correlation
+Mar 05 16:31:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:49.455464 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183568 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:50.183282944 +0100 CET raw_timestamp=1.772724710183283e+18 source=http
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183637 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183652 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183663 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183678 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=73 timestamp=2026-03-05 16:31:50.183282944 +0100 CET component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=36.802144512s window=10s component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183702 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:50.683696592 +0100 CET m=+1267.431250835 component=correlation
+Mar 05 16:31:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:50.183709 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.520969 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:51.520676096 +0100 CET raw_timestamp=1.772724711520676e+18 source=http
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.521037 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.521049 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=74 timestamp=2026-03-05 16:31:51.520676096 +0100 CET component=correlation
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.521059 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=38.139537664s window=10s component=correlation
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.521069 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:52.02106403 +0100 CET m=+1268.768618271 component=correlation
+Mar 05 16:31:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:51.521075 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.180455 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.276873 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:52.27653504 +0100 CET raw_timestamp=1.772724712276535e+18 source=http
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.276960 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=75 timestamp=2026-03-05 16:31:52.27653504 +0100 CET component=correlation
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.276972 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=38.895396608s window=10s component=correlation
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.276984 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:52.77697679 +0100 CET m=+1269.524531030 component=correlation
+Mar 05 16:31:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:52.276993 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013142 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:53.01287296 +0100 CET raw_timestamp=1.772724713012873e+18 source=http
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013269 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013281 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=76 timestamp=2026-03-05 16:31:53.01287296 +0100 CET component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013290 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=39.631734528s window=10s component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013300 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:53.513294707 +0100 CET m=+1270.260848950 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.013307 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776317 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:53.77604992 +0100 CET raw_timestamp=1.77272471377605e+18 source=http
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776439 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776452 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=77 timestamp=2026-03-05 16:31:53.77604992 +0100 CET component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776462 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=40.394911488s window=10s component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776472 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:54.276467374 +0100 CET m=+1271.024021616 component=correlation
+Mar 05 16:31:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:53.776478 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.007464 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:54.007193088 +0100 CET raw_timestamp=1.772724714007193e+18 source=http
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.007560 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=78 timestamp=2026-03-05 16:31:54.007193088 +0100 CET component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.007569 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=40.626054656s window=10s component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.007578 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:54.507573521 +0100 CET m=+1271.255127761 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.007584 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284491 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:54.284184064 +0100 CET raw_timestamp=1.772724714284184e+18 source=http
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284578 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284599 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=79 timestamp=2026-03-05 16:31:54.284184064 +0100 CET component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284615 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=40.903045632s window=10s component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284628 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:54.784623015 +0100 CET m=+1271.532177255 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.284635 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.501237 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:54.500964096 +0100 CET raw_timestamp=1.772724714500964e+18 source=http
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.501348 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=80 timestamp=2026-03-05 16:31:54.500964096 +0100 CET component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.501357 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=41.119825664s window=10s component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.501367 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:55.001361962 +0100 CET m=+1271.748916211 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.501375 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716766 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:54.716441088 +0100 CET raw_timestamp=1.772724714716441e+18 source=http
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716885 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716906 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=81 timestamp=2026-03-05 16:31:54.716441088 +0100 CET component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716922 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=41.335302656s window=10s component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716936 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:55.216929773 +0100 CET m=+1271.964484017 component=correlation
+Mar 05 16:31:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:54.716946 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778503 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:55.77822208 +0100 CET raw_timestamp=1.772724715778222e+18 source=http
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778633 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778645 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778656 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778678 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=82 timestamp=2026-03-05 16:31:55.77822208 +0100 CET component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778686 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=42.397083648s window=10s component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778695 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:56.278690285 +0100 CET m=+1273.026244525 component=correlation
+Mar 05 16:31:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:55.778701 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512211 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:56.511936 +0100 CET raw_timestamp=1.772724716511936e+18 source=http
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512393 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512406 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=83 timestamp=2026-03-05 16:31:56.511936 +0100 CET component=correlation
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512416 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=43.130797568s window=10s component=correlation
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512426 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:57.012420968 +0100 CET m=+1273.759975213 component=correlation
+Mar 05 16:31:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:56.512434 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283110 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:57.282820096 +0100 CET raw_timestamp=1.77272471728282e+18 source=http
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283215 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283227 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=84 timestamp=2026-03-05 16:31:57.282820096 +0100 CET component=correlation
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283235 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=43.901681664s window=10s component=correlation
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283245 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:57.783239976 +0100 CET m=+1274.530794220 component=correlation
+Mar 05 16:31:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:57.283252 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.079442 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.084733 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:58.084495872 +0100 CET raw_timestamp=1.772724718084496e+18 source=http
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.087839 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=85 timestamp=2026-03-05 16:31:58.084495872 +0100 CET component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.087887 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=44.70335744s window=10s component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.087907 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:58.587892983 +0100 CET m=+1275.335447231 component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.087920 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:58.895423 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.100086 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:59.099810048 +0100 CET raw_timestamp=1.77272471909981e+18 source=http
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.100182 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=86 timestamp=2026-03-05 16:31:59.099810048 +0100 CET component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.100191 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=45.718671616s window=10s component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.100202 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:31:59.600196416 +0100 CET m=+1276.347750658 component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.100209 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.760347 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.897074 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:31:59.894050048 +0100 CET raw_timestamp=1.77272471989405e+18 source=http
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.897127 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=87 timestamp=2026-03-05 16:31:59.894050048 +0100 CET component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.897137 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=46.512911616s window=10s component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.897146 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:00.397141579 +0100 CET m=+1277.144695820 component=correlation
+Mar 05 16:31:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:31:59.897153 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746202 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:00.745954048 +0100 CET raw_timestamp=1.772724720745954e+18 source=http
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746304 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746318 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=88 timestamp=2026-03-05 16:32:00.745954048 +0100 CET component=correlation
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746328 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=47.364815616s window=10s component=correlation
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746341 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:01.246335312 +0100 CET m=+1277.993889553 component=correlation
+Mar 05 16:32:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:00.746351 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.003042 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:01.002736896 +0100 CET raw_timestamp=1.772724721002737e+18 source=http
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.003136 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=89 timestamp=2026-03-05 16:32:01.002736896 +0100 CET component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.003145 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=47.621598464s window=10s component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.003157 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:01.503150994 +0100 CET m=+1278.250705237 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.003165 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.237392 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:01.237104128 +0100 CET raw_timestamp=1.772724721237104e+18 source=http
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.237483 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=90 timestamp=2026-03-05 16:32:01.237104128 +0100 CET component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.237491 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=47.855965696s window=10s component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.237500 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:01.737495815 +0100 CET m=+1278.485050055 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.237507 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.409456 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.469812 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:01.469506048 +0100 CET raw_timestamp=1.772724721469506e+18 source=http
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.469896 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=91 timestamp=2026-03-05 16:32:01.469506048 +0100 CET component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.469908 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=48.088367616s window=10s component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.469928 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:01.96991212 +0100 CET m=+1278.717466360 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.469936 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723128 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:01.722828032 +0100 CET raw_timestamp=1.772724721722828e+18 source=http
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723210 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723226 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=92 timestamp=2026-03-05 16:32:01.722828032 +0100 CET component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723240 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=48.3416896s window=10s component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723252 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:02.223246132 +0100 CET m=+1278.970800375 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.723260 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.751559 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.973979 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:01.971339008 +0100 CET raw_timestamp=1.772724721971339e+18 source=http
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.974078 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.974097 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=93 timestamp=2026-03-05 16:32:01.971339008 +0100 CET component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.974109 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=48.590200576s window=10s component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.974120 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:02.474114178 +0100 CET m=+1279.221668420 component=correlation
+Mar 05 16:32:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:01.974128 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.239545 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.473535 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:02.473316096 +0100 CET raw_timestamp=1.772724722473316e+18 source=http
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.473630 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=94 timestamp=2026-03-05 16:32:02.473316096 +0100 CET component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.473638 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=49.092177664s window=10s component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.473647 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:02.973642897 +0100 CET m=+1279.721197137 component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.473654 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.564291 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:32:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:02.986986 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:32:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:04.677533 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:04.674681088 +0100 CET raw_timestamp=1.772724724674681e+18 source=http
+Mar 05 16:32:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:04.677648 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=95 timestamp=2026-03-05 16:32:04.674681088 +0100 CET component=correlation
+Mar 05 16:32:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:04.677661 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=51.293542656s window=10s component=correlation
+Mar 05 16:32:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:04.677675 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:05.177666687 +0100 CET m=+1281.925220930 component=correlation
+Mar 05 16:32:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:04.677690 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.325340 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.887118 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:05.884243968 +0100 CET raw_timestamp=1.772724725884244e+18 source=http
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.887194 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=96 timestamp=2026-03-05 16:32:05.884243968 +0100 CET component=correlation
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.887226 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=52.503105536s window=10s component=correlation
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.887239 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:06.387232026 +0100 CET m=+1283.134786269 component=correlation
+Mar 05 16:32:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:05.887246 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:06.411096 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:32:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:07.956623 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:07.95635712 +0100 CET raw_timestamp=1.772724727956357e+18 source=http
+Mar 05 16:32:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:07.956685 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=97 timestamp=2026-03-05 16:32:07.95635712 +0100 CET component=correlation
+Mar 05 16:32:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:07.956696 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=54.575218688s window=10s component=correlation
+Mar 05 16:32:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:07.956705 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:08.456700497 +0100 CET m=+1285.204254738 component=correlation
+Mar 05 16:32:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:07.956712 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:08.894863 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.040945 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:09.040707072 +0100 CET raw_timestamp=1.772724729040707e+18 source=http
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.042147 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=98 timestamp=2026-03-05 16:32:09.040707072 +0100 CET component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.042173 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=55.65956864s window=10s component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.042189 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:09.542178741 +0100 CET m=+1286.289732987 component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.042198 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.707120 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.789899 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:09.789606912 +0100 CET raw_timestamp=1.772724729789607e+18 source=http
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.789978 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=99 timestamp=2026-03-05 16:32:09.789606912 +0100 CET component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.789993 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=56.40846848s window=10s component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.790012 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:10.289998832 +0100 CET m=+1287.037553076 component=correlation
+Mar 05 16:32:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:09.790025 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.298228 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.552950 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:10.552670976 +0100 CET raw_timestamp=1.772724730552671e+18 source=http
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.553032 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=100 timestamp=2026-03-05 16:32:10.552670976 +0100 CET component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.553041 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=57.171532544s window=10s component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.553050 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:11.05304534 +0100 CET m=+1287.800599581 component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.553058 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.828928 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=61197 timestamp=2026-03-05 16:32:10.828627968 +0100 CET raw_timestamp=1.772724730828628e+18 source=http
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.828992 [logcorrelator] DEBUG processing A event: key=91.224.92.185:61197 keepalive_seq=101 timestamp=2026-03-05 16:32:10.828627968 +0100 CET component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.829003 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:61197 time_diff=57.447489536s window=10s component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.829013 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=61197 emit_after=2026-03-05 16:32:11.329007888 +0100 CET m=+1288.076562128 component=correlation
+Mar 05 16:32:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:10.829019 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=61197 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155328 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:11.155095808 +0100 CET raw_timestamp=1.7727247311550958e+18 source=network
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155389 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:53471 src_ip=91.224.92.185 src_port=53471 ttl=120 age=2m9.068284519s component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155415 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155427 [logcorrelator] DEBUG processing B event: key=91.224.92.185:55998 timestamp=2026-03-05 16:32:11.155095808 +0100 CET component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155434 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:55998 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155440 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:55998 src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.155450 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=55998 buffer_size=110 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.196710 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:11.196436992 +0100 CET raw_timestamp=1.772724731196437e+18 source=http
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.196790 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=1 timestamp=2026-03-05 16:32:11.196436992 +0100 CET component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.196819 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.196436992 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.196833 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.425652 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:11.425349888 +0100 CET raw_timestamp=1.77272473142535e+18 source=http
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.425748 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=61197 key=91.224.92.185:61197 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.425763 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=2 timestamp=2026-03-05 16:32:11.425349888 +0100 CET component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.425792 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.425349888 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.425803 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.672571 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:11.672316928 +0100 CET raw_timestamp=1.772724731672317e+18 source=http
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.672633 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=3 timestamp=2026-03-05 16:32:11.672316928 +0100 CET component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.672661 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.672316928 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:11.672670 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.434406 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:12.43415296 +0100 CET raw_timestamp=1.772724732434153e+18 source=http
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.434501 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=4 timestamp=2026-03-05 16:32:12.43415296 +0100 CET component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.434528 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:12.43415296 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.434537 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.668572 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:12.668322048 +0100 CET raw_timestamp=1.772724732668322e+18 source=http
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.668641 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=5 timestamp=2026-03-05 16:32:12.668322048 +0100 CET component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.668673 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:12.668322048 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.668684 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.904909 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:12.904641024 +0100 CET raw_timestamp=1.772724732904641e+18 source=http
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.905016 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=6 timestamp=2026-03-05 16:32:12.904641024 +0100 CET component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.905043 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:12.904641024 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:12.905052 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.128855 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:13.128609024 +0100 CET raw_timestamp=1.772724733128609e+18 source=http
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.128914 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=7 timestamp=2026-03-05 16:32:13.128609024 +0100 CET component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.128942 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:13.128609024 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.128951 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.427782 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:13.427430912 +0100 CET raw_timestamp=1.772724733427431e+18 source=http
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.427919 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=8 timestamp=2026-03-05 16:32:13.427430912 +0100 CET component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.427960 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:13.427430912 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.427975 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.668268 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:13.668022016 +0100 CET raw_timestamp=1.772724733668022e+18 source=http
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.668326 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=9 timestamp=2026-03-05 16:32:13.668022016 +0100 CET component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.668357 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:13.668022016 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.668366 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.914213 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:13.913952 +0100 CET raw_timestamp=1.772724733913952e+18 source=http
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.914284 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=10 timestamp=2026-03-05 16:32:13.913952 +0100 CET component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.914324 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:13.913952 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:13.914334 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.156430 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:14.15619712 +0100 CET raw_timestamp=1.772724734156197e+18 source=http
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.156488 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=11 timestamp=2026-03-05 16:32:14.15619712 +0100 CET component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.156516 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:14.15619712 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.156525 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.959797 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:14.959494912 +0100 CET raw_timestamp=1.772724734959495e+18 source=http
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.959890 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=12 timestamp=2026-03-05 16:32:14.959494912 +0100 CET component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.959928 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:14.959494912 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:14.959938 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.744262 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:15.74398592 +0100 CET raw_timestamp=1.772724735743986e+18 source=http
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.744355 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=13 timestamp=2026-03-05 16:32:15.74398592 +0100 CET component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.744385 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:15.74398592 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.744394 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.957804 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:15.957530112 +0100 CET raw_timestamp=1.77272473595753e+18 source=http
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.957914 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=14 timestamp=2026-03-05 16:32:15.957530112 +0100 CET component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.957941 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:15.957530112 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:15.957950 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.208145 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:16.207869952 +0100 CET raw_timestamp=1.77272473620787e+18 source=http
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.208231 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=15 timestamp=2026-03-05 16:32:16.207869952 +0100 CET component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.208258 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:16.207869952 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.208268 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.480313 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:16.48004096 +0100 CET raw_timestamp=1.772724736480041e+18 source=http
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.480378 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=16 timestamp=2026-03-05 16:32:16.48004096 +0100 CET component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.480412 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:16.48004096 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:16.480422 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:17.487339 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:17.487087104 +0100 CET raw_timestamp=1.772724737487087e+18 source=http
+Mar 05 16:32:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:17.487412 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=17 timestamp=2026-03-05 16:32:17.487087104 +0100 CET component=correlation
+Mar 05 16:32:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:17.487442 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:17.487087104 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:17.487451 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:18.278524 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:18.27825408 +0100 CET raw_timestamp=1.772724738278254e+18 source=http
+Mar 05 16:32:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:18.278622 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=18 timestamp=2026-03-05 16:32:18.27825408 +0100 CET component=correlation
+Mar 05 16:32:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:18.278654 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:18.27825408 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:18.278664 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.011281 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:19.011037952 +0100 CET raw_timestamp=1.772724739011038e+18 source=http
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.011377 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=19 timestamp=2026-03-05 16:32:19.011037952 +0100 CET component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.011415 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:19.011037952 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.011424 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.346238 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:19.345923072 +0100 CET raw_timestamp=1.772724739345923e+18 source=http
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.346299 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=20 timestamp=2026-03-05 16:32:19.345923072 +0100 CET component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.346333 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:19.345923072 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.346344 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.618818 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:19.618562048 +0100 CET raw_timestamp=1.772724739618562e+18 source=http
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.618902 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=21 timestamp=2026-03-05 16:32:19.618562048 +0100 CET component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.618933 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:19.618562048 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.618943 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.851387 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:19.851133952 +0100 CET raw_timestamp=1.772724739851134e+18 source=http
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.851468 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=22 timestamp=2026-03-05 16:32:19.851133952 +0100 CET component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.851505 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:19.851133952 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:19.851515 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.076038 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:20.075792896 +0100 CET raw_timestamp=1.772724740075793e+18 source=http
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.076100 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=23 timestamp=2026-03-05 16:32:20.075792896 +0100 CET component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.076129 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:20.075792896 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.076138 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.304981 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:20.30466688 +0100 CET raw_timestamp=1.772724740304667e+18 source=http
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.305044 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=24 timestamp=2026-03-05 16:32:20.30466688 +0100 CET component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.305073 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:20.30466688 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.305082 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.538229 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:20.537901056 +0100 CET raw_timestamp=1.772724740537901e+18 source=http
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.538335 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=25 timestamp=2026-03-05 16:32:20.537901056 +0100 CET component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.538370 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:20.537901056 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.538383 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.762782 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:20.762470912 +0100 CET raw_timestamp=1.772724740762471e+18 source=http
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.762895 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=26 timestamp=2026-03-05 16:32:20.762470912 +0100 CET component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.762932 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:20.762470912 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:20.762944 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.007433 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:21.007161088 +0100 CET raw_timestamp=1.772724741007161e+18 source=http
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.007502 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=27 timestamp=2026-03-05 16:32:21.007161088 +0100 CET component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.007534 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:21.007161088 +0100 CET) + B(src_ip=91.224.92.185 src_port=55998 ts=2026-03-05 16:32:11.155095808 +0100 CET) component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.007544 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:55998 new_ttl=120 component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.764655 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:21.764372992 +0100 CET raw_timestamp=1.772724741764373e+18 source=http
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.764768 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=28 timestamp=2026-03-05 16:32:21.764372992 +0100 CET component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.764778 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=10.609277184s window=10s component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.764789 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:22.264782791 +0100 CET m=+1299.012337034 component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.764803 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.989230 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:21.988952064 +0100 CET raw_timestamp=1.772724741988952e+18 source=http
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.989300 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=29 timestamp=2026-03-05 16:32:21.988952064 +0100 CET component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.989313 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=10.833856256s window=10s component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.989322 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:22.489317402 +0100 CET m=+1299.236871642 component=correlation
+Mar 05 16:32:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:21.989329 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.232503 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:22.23227392 +0100 CET raw_timestamp=1.772724742232274e+18 source=http
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.232581 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=30 timestamp=2026-03-05 16:32:22.23227392 +0100 CET component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.232589 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=11.077178112s window=10s component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.232599 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:22.732594429 +0100 CET m=+1299.480148670 component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.232606 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484557 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:22.48431488 +0100 CET raw_timestamp=1.772724742484315e+18 source=http
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484624 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484638 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=31 timestamp=2026-03-05 16:32:22.48431488 +0100 CET component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484648 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=11.329219072s window=10s component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484657 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:22.984652689 +0100 CET m=+1299.732206929 component=correlation
+Mar 05 16:32:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:22.484664 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.028366 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.028378 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.028391 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.235987 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:23.235707904 +0100 CET raw_timestamp=1.772724743235708e+18 source=http
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.236053 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=32 timestamp=2026-03-05 16:32:23.235707904 +0100 CET component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.236067 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=12.080612096s window=10s component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.236077 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:23.73607161 +0100 CET m=+1300.483625851 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.236085 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.474320 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:23.474046976 +0100 CET raw_timestamp=1.772724743474047e+18 source=http
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.474396 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=33 timestamp=2026-03-05 16:32:23.474046976 +0100 CET component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.474411 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=12.318951168s window=10s component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.474423 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:23.974416298 +0100 CET m=+1300.721970726 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.474433 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.706618 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:23.706309888 +0100 CET raw_timestamp=1.77272474370631e+18 source=http
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.706696 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=34 timestamp=2026-03-05 16:32:23.706309888 +0100 CET component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.706711 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=12.55121408s window=10s component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.706737 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:24.206729383 +0100 CET m=+1300.954283630 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.706747 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942526 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:23.942278912 +0100 CET raw_timestamp=1.772724743942279e+18 source=http
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942606 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942622 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=35 timestamp=2026-03-05 16:32:23.942278912 +0100 CET component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942635 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=12.787183104s window=10s component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942647 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:24.442640412 +0100 CET m=+1301.190194657 component=correlation
+Mar 05 16:32:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:23.942655 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162395 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:24.162112 +0100 CET raw_timestamp=1.772724744162112e+18 source=http
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162487 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162502 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=36 timestamp=2026-03-05 16:32:24.162112 +0100 CET component=correlation
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162513 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=13.007016192s window=10s component=correlation
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162522 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:24.662517162 +0100 CET m=+1301.410071403 component=correlation
+Mar 05 16:32:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:24.162528 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222289 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:25.22203008 +0100 CET raw_timestamp=1.77272474522203e+18 source=http
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222384 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222400 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222411 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222423 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=37 timestamp=2026-03-05 16:32:25.22203008 +0100 CET component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222431 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=14.066934272s window=10s component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222439 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:25.722435126 +0100 CET m=+1302.469989367 component=correlation
+Mar 05 16:32:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:25.222445 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012443 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:26.01211008 +0100 CET raw_timestamp=1.77272474601211e+18 source=http
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012524 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012564 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=38 timestamp=2026-03-05 16:32:26.01211008 +0100 CET component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012576 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=14.857014272s window=10s component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012593 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:26.512585201 +0100 CET m=+1303.260139442 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.012601 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819564 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:26.819296 +0100 CET raw_timestamp=1.772724746819296e+18 source=http
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819645 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819661 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=39 timestamp=2026-03-05 16:32:26.819296 +0100 CET component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819674 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=15.664200192s window=10s component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819685 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:27.31967881 +0100 CET m=+1304.067233051 component=correlation
+Mar 05 16:32:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:26.819696 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.047888 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:27.047540992 +0100 CET raw_timestamp=1.772724747047541e+18 source=http
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.047970 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=40 timestamp=2026-03-05 16:32:27.047540992 +0100 CET component=correlation
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.047986 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=15.892445184s window=10s component=correlation
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.047997 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:27.547990803 +0100 CET m=+1304.295545043 component=correlation
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.048005 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:27.425822 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047641 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:28.047365888 +0100 CET raw_timestamp=1.772724748047366e+18 source=http
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047754 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047768 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=41 timestamp=2026-03-05 16:32:28.047365888 +0100 CET component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047779 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=16.89227008s window=10s component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047789 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:28.547784067 +0100 CET m=+1305.295338308 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.047796 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851368 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:28.851102976 +0100 CET raw_timestamp=1.772724748851103e+18 source=http
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851437 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851450 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=42 timestamp=2026-03-05 16:32:28.851102976 +0100 CET component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851461 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=17.696007168s window=10s component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851470 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:29.351465088 +0100 CET m=+1306.099019329 component=correlation
+Mar 05 16:32:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:28.851477 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.564814 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:29.564528896 +0100 CET raw_timestamp=1.772724749564529e+18 source=http
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.564975 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.564987 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=43 timestamp=2026-03-05 16:32:29.564528896 +0100 CET component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.564998 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=18.409433088s window=10s component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.565008 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:30.06500255 +0100 CET m=+1306.812556794 component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.565016 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.798929 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:29.798614016 +0100 CET raw_timestamp=1.772724749798614e+18 source=http
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.798990 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=44 timestamp=2026-03-05 16:32:29.798614016 +0100 CET component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.799002 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=18.643518208s window=10s component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.799010 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:30.299005703 +0100 CET m=+1307.046559944 component=correlation
+Mar 05 16:32:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:29.799018 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747700 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:30.747459072 +0100 CET raw_timestamp=1.772724750747459e+18 source=http
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747803 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747814 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747825 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=45 timestamp=2026-03-05 16:32:30.747459072 +0100 CET component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747834 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=19.592363264s window=10s component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747842 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:31.247837561 +0100 CET m=+1307.995391802 component=correlation
+Mar 05 16:32:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:30.747871 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498390 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:31.498117888 +0100 CET raw_timestamp=1.772724751498118e+18 source=http
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498466 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498480 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=46 timestamp=2026-03-05 16:32:31.498117888 +0100 CET component=correlation
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498491 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=20.34302208s window=10s component=correlation
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498501 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:31.998496183 +0100 CET m=+1308.746050424 component=correlation
+Mar 05 16:32:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:31.498509 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269160 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:32.268932096 +0100 CET raw_timestamp=1.772724752268932e+18 source=http
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269225 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269239 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=47 timestamp=2026-03-05 16:32:32.268932096 +0100 CET component=correlation
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269249 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=21.113836288s window=10s component=correlation
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269258 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:32.7692538 +0100 CET m=+1309.516808040 component=correlation
+Mar 05 16:32:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:32.269265 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019353 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:33.019073024 +0100 CET raw_timestamp=1.772724753019073e+18 source=http
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019446 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019460 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=48 timestamp=2026-03-05 16:32:33.019073024 +0100 CET component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019472 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=21.863977216s window=10s component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019481 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:33.519476392 +0100 CET m=+1310.267030632 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.019487 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.239808 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:33.239497984 +0100 CET raw_timestamp=1.772724753239498e+18 source=http
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.239939 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=49 timestamp=2026-03-05 16:32:33.239497984 +0100 CET component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.239949 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=22.084402176s window=10s component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.239960 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:33.73995382 +0100 CET m=+1310.487508061 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.239972 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.465960 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:33.465690112 +0100 CET raw_timestamp=1.77272475346569e+18 source=http
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.466017 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=50 timestamp=2026-03-05 16:32:33.465690112 +0100 CET component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.466028 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=22.310594304s window=10s component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.466037 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:33.966032857 +0100 CET m=+1310.713587097 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.466045 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.564621 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.719261 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:33.719030016 +0100 CET raw_timestamp=1.77272475371903e+18 source=http
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.719327 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=51 timestamp=2026-03-05 16:32:33.719030016 +0100 CET component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.719342 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=22.563934208s window=10s component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.719351 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:34.219346373 +0100 CET m=+1310.966900614 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.719358 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.931976 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:33.931712 +0100 CET raw_timestamp=1.772724753931712e+18 source=http
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.932038 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.932051 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=52 timestamp=2026-03-05 16:32:33.931712 +0100 CET component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.932062 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=22.776616192s window=10s component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.932072 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:34.432066994 +0100 CET m=+1311.179621235 component=correlation
+Mar 05 16:32:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:33.932078 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029706 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:35.029424896 +0100 CET raw_timestamp=1.772724755029425e+18 source=http
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029786 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029799 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029811 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029827 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=53 timestamp=2026-03-05 16:32:35.029424896 +0100 CET component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029838 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=23.874329088s window=10s component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029866 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:35.529861521 +0100 CET m=+1312.277415762 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.029875 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.664361 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.823299 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:35.823024896 +0100 CET raw_timestamp=1.772724755823025e+18 source=http
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.823360 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=54 timestamp=2026-03-05 16:32:35.823024896 +0100 CET component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.823372 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=24.667929088s window=10s component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.823382 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:36.323376628 +0100 CET m=+1313.070930868 component=correlation
+Mar 05 16:32:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:35.823388 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561634 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:36.561394944 +0100 CET raw_timestamp=1.772724756561395e+18 source=http
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561694 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561706 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=55 timestamp=2026-03-05 16:32:36.561394944 +0100 CET component=correlation
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561728 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=25.406299136s window=10s component=correlation
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561737 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:37.061733188 +0100 CET m=+1313.809287429 component=correlation
+Mar 05 16:32:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:36.561744 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344420 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:37.344162048 +0100 CET raw_timestamp=1.772724757344162e+18 source=http
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344523 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344532 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=56 timestamp=2026-03-05 16:32:37.344162048 +0100 CET component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344541 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=26.18906624s window=10s component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344549 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:37.844545028 +0100 CET m=+1314.592099268 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.344556 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.568468 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:37.568211968 +0100 CET raw_timestamp=1.772724757568212e+18 source=http
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.568541 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=57 timestamp=2026-03-05 16:32:37.568211968 +0100 CET component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.568553 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=26.41311616s window=10s component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.568562 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:38.068557392 +0100 CET m=+1314.816111637 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.568569 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.778600 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:37.778341888 +0100 CET raw_timestamp=1.772724757778342e+18 source=http
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.778677 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=58 timestamp=2026-03-05 16:32:37.778341888 +0100 CET component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.778692 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=26.62324608s window=10s component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.778702 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:38.278697024 +0100 CET m=+1315.026251265 component=correlation
+Mar 05 16:32:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:37.778708 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001450 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:38.001157888 +0100 CET raw_timestamp=1.772724758001158e+18 source=http
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001525 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001540 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=59 timestamp=2026-03-05 16:32:38.001157888 +0100 CET component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001551 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=26.84606208s window=10s component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001563 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:38.50155537 +0100 CET m=+1315.249109611 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.001569 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256072 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:38.255838976 +0100 CET raw_timestamp=1.772724758255839e+18 source=http
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256130 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256144 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=60 timestamp=2026-03-05 16:32:38.255838976 +0100 CET component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256155 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=27.100743168s window=10s component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256164 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:38.756159538 +0100 CET m=+1315.503713779 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.256171 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.358343 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.490329 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:38.490046976 +0100 CET raw_timestamp=1.772724758490047e+18 source=http
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.490451 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=61 timestamp=2026-03-05 16:32:38.490046976 +0100 CET component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.490467 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=27.334951168s window=10s component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.490480 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:38.990472065 +0100 CET m=+1315.738026360 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.490489 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.597687 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.734499 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:38.734206976 +0100 CET raw_timestamp=1.772724758734207e+18 source=http
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.734590 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=62 timestamp=2026-03-05 16:32:38.734206976 +0100 CET component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.734604 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=27.579111168s window=10s component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.734617 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:39.234610095 +0100 CET m=+1315.982164341 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.734632 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994084 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:38.993803008 +0100 CET raw_timestamp=1.772724758993803e+18 source=http
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994150 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994165 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994177 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=63 timestamp=2026-03-05 16:32:38.993803008 +0100 CET component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994188 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=27.8387072s window=10s component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994196 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:39.494192106 +0100 CET m=+1316.241746347 component=correlation
+Mar 05 16:32:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:38.994203 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.287473 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.545534 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.807194 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:39.806971904 +0100 CET raw_timestamp=1.772724759806972e+18 source=http
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.807249 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=64 timestamp=2026-03-05 16:32:39.806971904 +0100 CET component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.807259 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=28.651876096s window=10s component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.807268 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:40.307262916 +0100 CET m=+1317.054817157 component=correlation
+Mar 05 16:32:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:39.807275 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.151960 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:40.151687936 +0100 CET raw_timestamp=1.772724760151688e+18 source=http
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.152013 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=65 timestamp=2026-03-05 16:32:40.151687936 +0100 CET component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.152024 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=28.996592128s window=10s component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.152033 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:40.652028472 +0100 CET m=+1317.399582712 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.152040 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469282 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:40.469030912 +0100 CET raw_timestamp=1.772724760469031e+18 source=http
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469356 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469371 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=66 timestamp=2026-03-05 16:32:40.469030912 +0100 CET component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469383 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=29.313935104s window=10s component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469395 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:40.969388656 +0100 CET m=+1317.716942899 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.469403 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735188 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:40.732315904 +0100 CET raw_timestamp=1.772724760732316e+18 source=http
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735230 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735241 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=67 timestamp=2026-03-05 16:32:40.732315904 +0100 CET component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735252 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=29.577220096s window=10s component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735261 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:41.235255739 +0100 CET m=+1317.982809980 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.735266 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976613 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:40.976368896 +0100 CET raw_timestamp=1.772724760976369e+18 source=http
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976675 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976694 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=68 timestamp=2026-03-05 16:32:40.976368896 +0100 CET component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976707 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=29.821273088s window=10s component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976727 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:41.476712305 +0100 CET m=+1318.224266545 component=correlation
+Mar 05 16:32:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:40.976734 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.226506 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:41.22625792 +0100 CET raw_timestamp=1.772724761226258e+18 source=http
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.226571 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=69 timestamp=2026-03-05 16:32:41.22625792 +0100 CET component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.226583 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=30.071162112s window=10s component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.226592 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:41.726586821 +0100 CET m=+1318.474141061 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.226598 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.410629 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538158 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:41.537936896 +0100 CET raw_timestamp=1.772724761537937e+18 source=http
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538216 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538228 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=70 timestamp=2026-03-05 16:32:41.537936896 +0100 CET component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538238 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=30.382841088s window=10s component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538247 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:42.038242537 +0100 CET m=+1318.785796777 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.538254 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775249 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:41.775026944 +0100 CET raw_timestamp=1.772724761775027e+18 source=http
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775316 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775329 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=71 timestamp=2026-03-05 16:32:41.775026944 +0100 CET component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775340 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=30.619931136s window=10s component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775350 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:42.275344569 +0100 CET m=+1319.022898812 component=correlation
+Mar 05 16:32:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:41.775356 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:42.023436 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:42.023190016 +0100 CET raw_timestamp=1.77272476202319e+18 source=http
+Mar 05 16:32:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:42.023492 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=72 timestamp=2026-03-05 16:32:42.023190016 +0100 CET component=correlation
+Mar 05 16:32:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:42.023503 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=30.868094208s window=10s component=correlation
+Mar 05 16:32:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:42.023517 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:42.523507891 +0100 CET m=+1319.271062132 component=correlation
+Mar 05 16:32:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:42.023524 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124017 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:43.12375296 +0100 CET raw_timestamp=1.772724763123753e+18 source=http
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124099 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124110 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124124 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124135 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=73 timestamp=2026-03-05 16:32:43.12375296 +0100 CET component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124143 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=31.968657152s window=10s component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124151 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:43.624147293 +0100 CET m=+1320.371701533 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.124157 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927240 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:43.92695296 +0100 CET raw_timestamp=1.772724763926953e+18 source=http
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927342 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927352 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=74 timestamp=2026-03-05 16:32:43.92695296 +0100 CET component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=32.771857152s window=10s component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927368 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:44.427364235 +0100 CET m=+1321.174918476 component=correlation
+Mar 05 16:32:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:43.927382 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671424 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:44.671174912 +0100 CET raw_timestamp=1.772724764671175e+18 source=http
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671514 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671528 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=75 timestamp=2026-03-05 16:32:44.671174912 +0100 CET component=correlation
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671539 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=33.516079104s window=10s component=correlation
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671549 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:45.171543678 +0100 CET m=+1321.919097918 component=correlation
+Mar 05 16:32:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:44.671555 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510019 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:45.509748992 +0100 CET raw_timestamp=1.772724765509749e+18 source=http
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510119 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510130 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=76 timestamp=2026-03-05 16:32:45.509748992 +0100 CET component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510138 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=34.354653184s window=10s component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510146 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:46.01014206 +0100 CET m=+1322.757696300 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.510153 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.745760 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:45.745509888 +0100 CET raw_timestamp=1.77272476574551e+18 source=http
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.745822 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=77 timestamp=2026-03-05 16:32:45.745509888 +0100 CET component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.745834 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=34.59041408s window=10s component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.745872 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:46.245838803 +0100 CET m=+1322.993393043 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.745881 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.976188 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:45.975900928 +0100 CET raw_timestamp=1.772724765975901e+18 source=http
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.976251 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=78 timestamp=2026-03-05 16:32:45.975900928 +0100 CET component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.976263 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=34.82080512s window=10s component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.976272 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:46.476266989 +0100 CET m=+1323.223821229 component=correlation
+Mar 05 16:32:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:45.976279 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207107 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:46.20683008 +0100 CET raw_timestamp=1.77272476620683e+18 source=http
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207186 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207201 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=79 timestamp=2026-03-05 16:32:46.20683008 +0100 CET component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207212 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=35.051734272s window=10s component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207222 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:46.70721724 +0100 CET m=+1323.454771481 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.207229 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435823 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:46.435568128 +0100 CET raw_timestamp=1.772724766435568e+18 source=http
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435900 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435913 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=80 timestamp=2026-03-05 16:32:46.435568128 +0100 CET component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435924 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=35.28047232s window=10s component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435933 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:46.935928195 +0100 CET m=+1323.683482436 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.435939 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645439 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:46.645185024 +0100 CET raw_timestamp=1.772724766645185e+18 source=http
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645527 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645544 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=81 timestamp=2026-03-05 16:32:46.645185024 +0100 CET component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645553 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=35.490089216s window=10s component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645561 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:47.145557257 +0100 CET m=+1323.893111515 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.645568 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894311 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:46.89407488 +0100 CET raw_timestamp=1.772724766894075e+18 source=http
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894374 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894387 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=82 timestamp=2026-03-05 16:32:46.89407488 +0100 CET component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894397 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=35.738979072s window=10s component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894406 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:47.394401271 +0100 CET m=+1324.141955512 component=correlation
+Mar 05 16:32:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:46.894413 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130064 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:47.129826048 +0100 CET raw_timestamp=1.772724767129826e+18 source=http
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130127 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130140 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=83 timestamp=2026-03-05 16:32:47.129826048 +0100 CET component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130150 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=35.97473024s window=10s component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130159 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:47.630154588 +0100 CET m=+1324.377708828 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.130166 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921451 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:47.921186048 +0100 CET raw_timestamp=1.772724767921186e+18 source=http
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921523 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921537 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921551 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921565 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=84 timestamp=2026-03-05 16:32:47.921186048 +0100 CET component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921575 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=36.76609024s window=10s component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921584 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:48.421579109 +0100 CET m=+1325.169133350 component=correlation
+Mar 05 16:32:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:47.921590 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.145460 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:48.145219072 +0100 CET raw_timestamp=1.772724768145219e+18 source=http
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.145586 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=85 timestamp=2026-03-05 16:32:48.145219072 +0100 CET component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.145593 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=36.990123264s window=10s component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.145601 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:48.645597237 +0100 CET m=+1325.393151477 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.145608 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.379616 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:48.379346944 +0100 CET raw_timestamp=1.772724768379347e+18 source=http
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.379741 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=86 timestamp=2026-03-05 16:32:48.379346944 +0100 CET component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.379764 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=37.224251136s window=10s component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.379775 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:48.879768857 +0100 CET m=+1325.627323097 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.379782 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613448 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:48.613178112 +0100 CET raw_timestamp=1.772724768613178e+18 source=http
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613557 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613571 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=87 timestamp=2026-03-05 16:32:48.613178112 +0100 CET component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613580 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=37.458082304s window=10s component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613590 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:49.113584697 +0100 CET m=+1325.861138938 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.613597 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.847907 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:48.847591936 +0100 CET raw_timestamp=1.772724768847592e+18 source=http
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.848027 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.848041 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=88 timestamp=2026-03-05 16:32:48.847591936 +0100 CET component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.848051 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=37.692496128s window=10s component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.848060 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:49.348055412 +0100 CET m=+1326.095609652 component=correlation
+Mar 05 16:32:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:48.848068 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068174 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:49.067874048 +0100 CET raw_timestamp=1.772724769067874e+18 source=http
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068263 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068278 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=89 timestamp=2026-03-05 16:32:49.067874048 +0100 CET component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068292 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=37.91277824s window=10s component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068303 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:49.56829736 +0100 CET m=+1326.315851600 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.068311 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309267 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:49.309008896 +0100 CET raw_timestamp=1.772724769309009e+18 source=http
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309336 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309348 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=90 timestamp=2026-03-05 16:32:49.309008896 +0100 CET component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=38.153913088s window=10s component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309368 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:49.809364064 +0100 CET m=+1326.556918304 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.309375 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.542900 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:49.54262912 +0100 CET raw_timestamp=1.772724769542629e+18 source=http
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.542996 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.543007 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=91 timestamp=2026-03-05 16:32:49.54262912 +0100 CET component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.543016 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=38.387533312s window=10s component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.543024 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:50.04301963 +0100 CET m=+1326.790573871 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.543030 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758702 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:49.758437888 +0100 CET raw_timestamp=1.772724769758438e+18 source=http
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758780 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758796 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=92 timestamp=2026-03-05 16:32:49.758437888 +0100 CET component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758807 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=38.60334208s window=10s component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758815 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:50.258811125 +0100 CET m=+1327.006365365 component=correlation
+Mar 05 16:32:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:49.758822 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702663 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:50.702383104 +0100 CET raw_timestamp=1.772724770702383e+18 source=http
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702740 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702755 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702768 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702783 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=93 timestamp=2026-03-05 16:32:50.702383104 +0100 CET component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702794 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=39.547287296s window=10s component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702803 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:51.202798405 +0100 CET m=+1327.950352646 component=correlation
+Mar 05 16:32:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:50.702808 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.211410 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.565132 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:51.56490496 +0100 CET raw_timestamp=1.772724771564905e+18 source=http
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.565192 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=94 timestamp=2026-03-05 16:32:51.56490496 +0100 CET component=correlation
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.565203 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=40.409809152s window=10s component=correlation
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.565213 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:52.065207866 +0100 CET m=+1328.812762107 component=correlation
+Mar 05 16:32:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:51.565220 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:52.209088 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:32:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:53.496625 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:53.493744896 +0100 CET raw_timestamp=1.772724773493745e+18 source=http
+Mar 05 16:32:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:53.496681 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=95 timestamp=2026-03-05 16:32:53.493744896 +0100 CET component=correlation
+Mar 05 16:32:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:53.496691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=42.338649088s window=10s component=correlation
+Mar 05 16:32:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:53.496700 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:53.996694753 +0100 CET m=+1330.744248993 component=correlation
+Mar 05 16:32:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:53.496707 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317137 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:54.31684096 +0100 CET raw_timestamp=1.772724774316841e+18 source=http
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317239 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317249 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=96 timestamp=2026-03-05 16:32:54.31684096 +0100 CET component=correlation
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317257 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=43.161745152s window=10s component=correlation
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317265 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:54.817260996 +0100 CET m=+1331.564815237 component=correlation
+Mar 05 16:32:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:54.317272 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392166 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:55.391899904 +0100 CET raw_timestamp=1.7727247753919e+18 source=http
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392234 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392246 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=97 timestamp=2026-03-05 16:32:55.391899904 +0100 CET component=correlation
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392258 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=44.236804096s window=10s component=correlation
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392267 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:55.892262282 +0100 CET m=+1332.639816523 component=correlation
+Mar 05 16:32:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:55.392274 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.116940 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:56.116658944 +0100 CET raw_timestamp=1.772724776116659e+18 source=http
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.117033 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.117043 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=98 timestamp=2026-03-05 16:32:56.116658944 +0100 CET component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.117051 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=44.961563136s window=10s component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.117059 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:56.617054929 +0100 CET m=+1333.364609169 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.117067 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904168 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:56.90388992 +0100 CET raw_timestamp=1.77272477690389e+18 source=http
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904227 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904240 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=99 timestamp=2026-03-05 16:32:56.90388992 +0100 CET component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904251 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=45.748794112s window=10s component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904260 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:57.404255225 +0100 CET m=+1334.151809466 component=correlation
+Mar 05 16:32:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:56.904266 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.118562 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:57.118294016 +0100 CET raw_timestamp=1.772724777118294e+18 source=http
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.118668 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=100 timestamp=2026-03-05 16:32:57.118294016 +0100 CET component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.118679 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=45.963198208s window=10s component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.118690 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:57.618683655 +0100 CET m=+1334.366237896 component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.118698 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.675509 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:32:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:57.675523 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.167652 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=55998 timestamp=2026-03-05 16:32:58.164705024 +0100 CET raw_timestamp=1.772724778164705e+18 source=http
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.167707 [logcorrelator] DEBUG processing A event: key=91.224.92.185:55998 keepalive_seq=101 timestamp=2026-03-05 16:32:58.164705024 +0100 CET component=correlation
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.167726 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:55998 time_diff=47.009609216s window=10s component=correlation
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.167737 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=55998 emit_after=2026-03-05 16:32:58.667731267 +0100 CET m=+1335.415285507 component=correlation
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.167743 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=55998 component=correlation
+Mar 05 16:32:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:32:58.725297 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=55998 key=91.224.92.185:55998 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.009369 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:00.009137408 +0100 CET raw_timestamp=1.7727247800091374e+18 source=network
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.009438 [logcorrelator] DEBUG processing B event: key=91.224.92.185:57189 timestamp=2026-03-05 16:33:00.009137408 +0100 CET component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.009449 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:57189 component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.009456 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:57189 src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.009469 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=57189 buffer_size=114 component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.056566 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:00.050540032 +0100 CET raw_timestamp=1.77272478005054e+18 source=http
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.056779 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=1 timestamp=2026-03-05 16:33:00.050540032 +0100 CET component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.056834 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.050540032 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.056866 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.973169 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:00.97293696 +0100 CET raw_timestamp=1.772724780972937e+18 source=http
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.973231 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=2 timestamp=2026-03-05 16:33:00.97293696 +0100 CET component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.973258 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.97293696 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:00.973268 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:01.210083 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:01.209799936 +0100 CET raw_timestamp=1.7727247812098e+18 source=http
+Mar 05 16:33:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:01.210228 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=3 timestamp=2026-03-05 16:33:01.209799936 +0100 CET component=correlation
+Mar 05 16:33:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:01.210258 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:01.209799936 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:01.210268 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:02.413231 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:02.412989952 +0100 CET raw_timestamp=1.77272478241299e+18 source=http
+Mar 05 16:33:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:02.413296 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=4 timestamp=2026-03-05 16:33:02.412989952 +0100 CET component=correlation
+Mar 05 16:33:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:02.413322 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:02.412989952 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:02.413330 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:03.216497 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:03.213449984 +0100 CET raw_timestamp=1.77272478321345e+18 source=http
+Mar 05 16:33:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:03.216576 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=5 timestamp=2026-03-05 16:33:03.213449984 +0100 CET component=correlation
+Mar 05 16:33:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:03.216603 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:03.213449984 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:03.216611 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.039426 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:04.039173888 +0100 CET raw_timestamp=1.772724784039174e+18 source=http
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.039503 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=6 timestamp=2026-03-05 16:33:04.039173888 +0100 CET component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.039535 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:04.039173888 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.039545 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.306694 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:04.306374912 +0100 CET raw_timestamp=1.772724784306375e+18 source=http
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.306811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=7 timestamp=2026-03-05 16:33:04.306374912 +0100 CET component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.306841 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:04.306374912 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:04.306882 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:05.270347 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:05.270095104 +0100 CET raw_timestamp=1.772724785270095e+18 source=http
+Mar 05 16:33:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:05.270433 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=8 timestamp=2026-03-05 16:33:05.270095104 +0100 CET component=correlation
+Mar 05 16:33:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:05.270519 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:05.270095104 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:05.270529 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:06.010128 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:06.007106048 +0100 CET raw_timestamp=1.772724786007106e+18 source=http
+Mar 05 16:33:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:06.010206 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=9 timestamp=2026-03-05 16:33:06.007106048 +0100 CET component=correlation
+Mar 05 16:33:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:06.010240 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:06.007106048 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:06.010250 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.066196 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:07.06600704 +0100 CET raw_timestamp=1.772724787066007e+18 source=http
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.066245 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=10 timestamp=2026-03-05 16:33:07.06600704 +0100 CET component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.066274 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:07.06600704 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.066282 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.909331 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:07.909093888 +0100 CET raw_timestamp=1.772724787909094e+18 source=http
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.909414 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=11 timestamp=2026-03-05 16:33:07.909093888 +0100 CET component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.909444 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:07.909093888 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:07.909454 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.148035 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:08.147737088 +0100 CET raw_timestamp=1.772724788147737e+18 source=http
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.148154 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=12 timestamp=2026-03-05 16:33:08.147737088 +0100 CET component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.148184 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:08.147737088 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.148196 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.379032 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:08.378747904 +0100 CET raw_timestamp=1.772724788378748e+18 source=http
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.379092 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=13 timestamp=2026-03-05 16:33:08.378747904 +0100 CET component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.379118 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:08.378747904 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.379127 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.621830 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:08.62158592 +0100 CET raw_timestamp=1.772724788621586e+18 source=http
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.621901 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=14 timestamp=2026-03-05 16:33:08.62158592 +0100 CET component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.621926 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:08.62158592 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:08.621935 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:09.388452 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:09.388172032 +0100 CET raw_timestamp=1.772724789388172e+18 source=http
+Mar 05 16:33:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:09.388522 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=15 timestamp=2026-03-05 16:33:09.388172032 +0100 CET component=correlation
+Mar 05 16:33:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:09.388556 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:09.388172032 +0100 CET) + B(src_ip=91.224.92.185 src_port=57189 ts=2026-03-05 16:33:00.009137408 +0100 CET) component=correlation
+Mar 05 16:33:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:09.388564 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:57189 new_ttl=120 component=correlation
+Mar 05 16:33:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:10.789842 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:10.786874112 +0100 CET raw_timestamp=1.772724790786874e+18 source=http
+Mar 05 16:33:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:10.789912 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=16 timestamp=2026-03-05 16:33:10.786874112 +0100 CET component=correlation
+Mar 05 16:33:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:10.789923 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=10.777736704s window=10s component=correlation
+Mar 05 16:33:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:10.789933 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:11.289927438 +0100 CET m=+1348.037481678 component=correlation
+Mar 05 16:33:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:10.789940 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.440048 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=16 delay_ms=500 component=correlation
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.811923 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:11.811634944 +0100 CET raw_timestamp=1.772724791811635e+18 source=http
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.811990 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=17 timestamp=2026-03-05 16:33:11.811634944 +0100 CET component=correlation
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.812002 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=11.802497536s window=10s component=correlation
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.812011 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:12.312005955 +0100 CET m=+1349.059560196 component=correlation
+Mar 05 16:33:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:11.812019 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.576939 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:12.576636928 +0100 CET raw_timestamp=1.772724792576637e+18 source=http
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.577006 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=17 delay_ms=500 component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.577020 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=18 timestamp=2026-03-05 16:33:12.576636928 +0100 CET component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.577032 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=12.56749952s window=10s component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.577041 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:13.077036031 +0100 CET m=+1349.824590271 component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.577047 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.845010 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:12.844739072 +0100 CET raw_timestamp=1.772724792844739e+18 source=http
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.845094 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=19 timestamp=2026-03-05 16:33:12.844739072 +0100 CET component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.845107 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=12.835601664s window=10s component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.845119 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:13.345112154 +0100 CET m=+1350.092666395 component=correlation
+Mar 05 16:33:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:12.845125 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.061422 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:13.061133056 +0100 CET raw_timestamp=1.772724793061133e+18 source=http
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.061489 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=20 timestamp=2026-03-05 16:33:13.061133056 +0100 CET component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.061501 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=13.051995648s window=10s component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.061512 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:13.561505196 +0100 CET m=+1350.309059437 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.061520 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287795 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:13.287536896 +0100 CET raw_timestamp=1.772724793287537e+18 source=http
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287884 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=18 delay_ms=500 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287898 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=21 timestamp=2026-03-05 16:33:13.287536896 +0100 CET component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287909 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=13.278399488s window=10s component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287918 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:13.787913311 +0100 CET m=+1350.535467552 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.287924 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518582 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:13.518345984 +0100 CET raw_timestamp=1.772724793518346e+18 source=http
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518649 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=19 delay_ms=500 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518662 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=22 timestamp=2026-03-05 16:33:13.518345984 +0100 CET component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518673 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=13.509208576s window=10s component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518682 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:14.018677407 +0100 CET m=+1350.766231663 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.518688 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.658371 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:33:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:13.949812 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.283948 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:14.283622912 +0100 CET raw_timestamp=1.772724794283623e+18 source=http
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.284030 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.284048 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=23 timestamp=2026-03-05 16:33:14.283622912 +0100 CET component=correlation
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.284061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=14.274485504s window=10s component=correlation
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.284074 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:14.78406767 +0100 CET m=+1351.531621913 component=correlation
+Mar 05 16:33:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:14.284083 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032335 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:15.032073984 +0100 CET raw_timestamp=1.772724795032074e+18 source=http
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032419 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032435 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=24 timestamp=2026-03-05 16:33:15.032073984 +0100 CET component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032447 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=15.022936576s window=10s component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032456 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:15.532451115 +0100 CET m=+1352.280005356 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.032463 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.290990 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:15.290659072 +0100 CET raw_timestamp=1.772724795290659e+18 source=http
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.291057 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=25 timestamp=2026-03-05 16:33:15.290659072 +0100 CET component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.291068 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=15.281521664s window=10s component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.291077 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:15.791072367 +0100 CET m=+1352.538626607 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.291083 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.516830 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:15.516541952 +0100 CET raw_timestamp=1.772724795516542e+18 source=http
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.516916 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=26 timestamp=2026-03-05 16:33:15.516541952 +0100 CET component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.516929 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=15.507404544s window=10s component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.516939 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:16.016933798 +0100 CET m=+1352.764488043 component=correlation
+Mar 05 16:33:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:15.516945 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250569 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:16.250315008 +0100 CET raw_timestamp=1.772724796250315e+18 source=http
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250637 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250652 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250666 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250680 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=27 timestamp=2026-03-05 16:33:16.250315008 +0100 CET component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=16.2411776s window=10s component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250699 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:16.750694967 +0100 CET m=+1353.498249208 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.250705 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.467433 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:16.467119104 +0100 CET raw_timestamp=1.772724796467119e+18 source=http
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.467504 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=28 timestamp=2026-03-05 16:33:16.467119104 +0100 CET component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.467516 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=16.457981696s window=10s component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.467525 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:16.967520083 +0100 CET m=+1353.715074329 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.467532 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.684182 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:16.68395392 +0100 CET raw_timestamp=1.772724796683954e+18 source=http
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.684283 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=29 timestamp=2026-03-05 16:33:16.68395392 +0100 CET component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.684298 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=16.674816512s window=10s component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.684307 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:17.184302337 +0100 CET m=+1353.931856577 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.684314 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893553 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:16.89330688 +0100 CET raw_timestamp=1.772724796893307e+18 source=http
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893621 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893636 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=30 timestamp=2026-03-05 16:33:16.89330688 +0100 CET component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893647 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=16.884169472s window=10s component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893659 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:17.393652923 +0100 CET m=+1354.141207166 component=correlation
+Mar 05 16:33:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:16.893668 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112182 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:17.111932928 +0100 CET raw_timestamp=1.772724797111933e+18 source=http
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112252 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112265 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=31 timestamp=2026-03-05 16:33:17.111932928 +0100 CET component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112275 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=17.10279552s window=10s component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112284 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:17.612279561 +0100 CET m=+1354.359833801 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.112290 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322114 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:17.321890048 +0100 CET raw_timestamp=1.77272479732189e+18 source=http
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322172 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322184 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=32 timestamp=2026-03-05 16:33:17.321890048 +0100 CET component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322195 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=17.31275264s window=10s component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322205 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:17.822200126 +0100 CET m=+1354.569754367 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.322211 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.465390 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.545106 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:17.544829952 +0100 CET raw_timestamp=1.77272479754483e+18 source=http
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.545168 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=33 timestamp=2026-03-05 16:33:17.544829952 +0100 CET component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.545180 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=17.535692544s window=10s component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.545190 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:18.045184717 +0100 CET m=+1354.792738975 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.545197 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.631777 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.773754 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:17.773519104 +0100 CET raw_timestamp=1.772724797773519e+18 source=http
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.773837 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=34 timestamp=2026-03-05 16:33:17.773519104 +0100 CET component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.773863 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=17.764381696s window=10s component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.773873 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:18.273868557 +0100 CET m=+1355.021422797 component=correlation
+Mar 05 16:33:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:17.773880 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484660 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:18.483948032 +0100 CET raw_timestamp=1.772724798483948e+18 source=http
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484758 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484781 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484800 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484827 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=35 timestamp=2026-03-05 16:33:18.483948032 +0100 CET component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484837 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=18.474810624s window=10s component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484861 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:18.984842348 +0100 CET m=+1355.732396588 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.484874 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.746948 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:18.746631936 +0100 CET raw_timestamp=1.772724798746632e+18 source=http
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.747012 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=36 timestamp=2026-03-05 16:33:18.746631936 +0100 CET component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.747025 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=18.737494528s window=10s component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.747035 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:19.247028962 +0100 CET m=+1355.994583202 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.747042 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.960867 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:18.960582912 +0100 CET raw_timestamp=1.772724798960583e+18 source=http
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.960954 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=37 timestamp=2026-03-05 16:33:18.960582912 +0100 CET component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.960963 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=18.951445504s window=10s component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.960972 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:19.460967678 +0100 CET m=+1356.208521918 component=correlation
+Mar 05 16:33:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:18.960978 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.040512 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.205956 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:19.205624064 +0100 CET raw_timestamp=1.772724799205624e+18 source=http
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.206023 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=38 timestamp=2026-03-05 16:33:19.205624064 +0100 CET component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.206035 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=19.196486656s window=10s component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.206044 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:19.706039352 +0100 CET m=+1356.453593593 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.206051 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.353379 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.428367 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:19.428111104 +0100 CET raw_timestamp=1.772724799428111e+18 source=http
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.428433 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=39 timestamp=2026-03-05 16:33:19.428111104 +0100 CET component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.428446 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=19.418973696s window=10s component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.428456 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:19.928450512 +0100 CET m=+1356.676004752 component=correlation
+Mar 05 16:33:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:19.428466 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.150327 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.150340 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.150358 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.224245 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:20.223984128 +0100 CET raw_timestamp=1.772724800223984e+18 source=http
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.224320 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=40 timestamp=2026-03-05 16:33:20.223984128 +0100 CET component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.224339 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=20.21484672s window=10s component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.224349 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:20.724344186 +0100 CET m=+1357.471898426 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.224356 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.450181 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:20.449904896 +0100 CET raw_timestamp=1.772724800449905e+18 source=http
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.450244 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=41 timestamp=2026-03-05 16:33:20.449904896 +0100 CET component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.450256 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=20.440767488s window=10s component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.450265 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:20.950259929 +0100 CET m=+1357.697814172 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.450272 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.682313 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:20.682059008 +0100 CET raw_timestamp=1.772724800682059e+18 source=http
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.682379 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=42 timestamp=2026-03-05 16:33:20.682059008 +0100 CET component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.682391 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=20.6729216s window=10s component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.682400 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:21.182395724 +0100 CET m=+1357.929949965 component=correlation
+Mar 05 16:33:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:20.682407 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.346399 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.346422 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.346448 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.427944 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:21.427620096 +0100 CET raw_timestamp=1.77272480142762e+18 source=http
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.428021 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=43 timestamp=2026-03-05 16:33:21.427620096 +0100 CET component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.428036 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=21.418482688s window=10s component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.428052 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:21.928041185 +0100 CET m=+1358.675595426 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.428060 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.751037 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:21.750767104 +0100 CET raw_timestamp=1.772724801750767e+18 source=http
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.751099 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=44 timestamp=2026-03-05 16:33:21.750767104 +0100 CET component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.751111 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=21.741629696s window=10s component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.751121 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:22.251115135 +0100 CET m=+1358.998669376 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.751128 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.985986 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:21.98570112 +0100 CET raw_timestamp=1.772724801985701e+18 source=http
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.986048 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.986060 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=45 timestamp=2026-03-05 16:33:21.98570112 +0100 CET component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.986071 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=21.976563712s window=10s component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.986081 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:22.486075929 +0100 CET m=+1359.233630182 component=correlation
+Mar 05 16:33:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:21.986087 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.210770 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:22.210509056 +0100 CET raw_timestamp=1.772724802210509e+18 source=http
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.210901 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=46 timestamp=2026-03-05 16:33:22.210509056 +0100 CET component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.210910 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=22.201371648s window=10s component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.210919 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:22.710914404 +0100 CET m=+1359.458468645 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.210925 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.374366 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.451249 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:22.45101312 +0100 CET raw_timestamp=1.772724802451013e+18 source=http
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.451330 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=47 timestamp=2026-03-05 16:33:22.45101312 +0100 CET component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.451355 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=22.441875712s window=10s component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.451371 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:22.951359195 +0100 CET m=+1359.698913435 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.451381 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685164 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:22.684893952 +0100 CET raw_timestamp=1.772724802684894e+18 source=http
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685254 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685272 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=48 timestamp=2026-03-05 16:33:22.684893952 +0100 CET component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685284 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=22.675756544s window=10s component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685296 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:23.185289829 +0100 CET m=+1359.932844072 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.685302 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.886457 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.896085 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:22.895821056 +0100 CET raw_timestamp=1.772724802895821e+18 source=http
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.896154 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=49 timestamp=2026-03-05 16:33:22.895821056 +0100 CET component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.896166 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=22.886683648s window=10s component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.896175 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:23.396170507 +0100 CET m=+1360.143724747 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.896183 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:22.988678 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.109472 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:23.109234944 +0100 CET raw_timestamp=1.772724803109235e+18 source=http
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.109559 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=50 timestamp=2026-03-05 16:33:23.109234944 +0100 CET component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.109572 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=23.100097536s window=10s component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.109581 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:23.609576173 +0100 CET m=+1360.357130413 component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.109591 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339796 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:23.339533056 +0100 CET raw_timestamp=1.772724803339533e+18 source=http
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339873 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:61197 src_ip=91.224.92.185 src_port=61197 ttl=120 age=2m9.958703022s component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339902 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339912 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=51 timestamp=2026-03-05 16:33:23.339533056 +0100 CET component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339920 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=23.330395648s window=10s component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339928 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:23.839923994 +0100 CET m=+1360.587478235 component=correlation
+Mar 05 16:33:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:23.339935 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634774 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:24.63448704 +0100 CET raw_timestamp=1.772724804634487e+18 source=http
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634871 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634886 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634899 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634913 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=52 timestamp=2026-03-05 16:33:24.63448704 +0100 CET component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634925 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=24.625349632s window=10s component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634937 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:25.134932163 +0100 CET m=+1361.882486406 component=correlation
+Mar 05 16:33:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:24.634946 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429834 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:25.429513984 +0100 CET raw_timestamp=1.772724805429514e+18 source=http
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429957 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429968 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=53 timestamp=2026-03-05 16:33:25.429513984 +0100 CET component=correlation
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429975 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=25.420376576s window=10s component=correlation
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429984 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:25.929979621 +0100 CET m=+1362.677533868 component=correlation
+Mar 05 16:33:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:25.429991 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.171884 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:26.17160192 +0100 CET raw_timestamp=1.772724806171602e+18 source=http
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.171959 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.171979 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=54 timestamp=2026-03-05 16:33:26.17160192 +0100 CET component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.171994 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=26.162464512s window=10s component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.172005 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:26.671999534 +0100 CET m=+1363.419553777 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.172013 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.393532 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:26.39327104 +0100 CET raw_timestamp=1.772724806393271e+18 source=http
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.393605 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=55 timestamp=2026-03-05 16:33:26.39327104 +0100 CET component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.393618 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=26.384133632s window=10s component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.393628 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:26.893622414 +0100 CET m=+1363.641176655 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.393634 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.628073 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:26.627796992 +0100 CET raw_timestamp=1.772724806627797e+18 source=http
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.628137 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=56 timestamp=2026-03-05 16:33:26.627796992 +0100 CET component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.628149 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=26.618659584s window=10s component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.628164 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:27.128152885 +0100 CET m=+1363.875707126 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.628172 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888761 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:26.888483072 +0100 CET raw_timestamp=1.772724806888483e+18 source=http
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888841 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888878 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=57 timestamp=2026-03-05 16:33:26.888483072 +0100 CET component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888891 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=26.879345664s window=10s component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888902 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:27.388896797 +0100 CET m=+1364.136451040 component=correlation
+Mar 05 16:33:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:26.888909 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116181 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:27.115936 +0100 CET raw_timestamp=1.772724807115936e+18 source=http
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116265 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116280 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=58 timestamp=2026-03-05 16:33:27.115936 +0100 CET component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116293 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=27.106798592s window=10s component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116305 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:27.616298676 +0100 CET m=+1364.363852925 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.116312 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925585 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:27.925316096 +0100 CET raw_timestamp=1.772724807925316e+18 source=http
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925678 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925691 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925704 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925725 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=59 timestamp=2026-03-05 16:33:27.925316096 +0100 CET component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925734 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=27.916178688s window=10s component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925744 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:28.425739572 +0100 CET m=+1365.173293812 component=correlation
+Mar 05 16:33:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:27.925751 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.712919 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:28.712583936 +0100 CET raw_timestamp=1.772724808712584e+18 source=http
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.713035 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.713049 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=60 timestamp=2026-03-05 16:33:28.712583936 +0100 CET component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.713059 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=28.703446528s window=10s component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.713070 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:29.213064225 +0100 CET m=+1365.960618467 component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.713077 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.948811 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:28.948546048 +0100 CET raw_timestamp=1.772724808948546e+18 source=http
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.948890 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=61 timestamp=2026-03-05 16:33:28.948546048 +0100 CET component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.948901 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=28.93940864s window=10s component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.948910 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:29.448905539 +0100 CET m=+1366.196459776 component=correlation
+Mar 05 16:33:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:28.948917 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.172892 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:29.172621056 +0100 CET raw_timestamp=1.772724809172621e+18 source=http
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.172954 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=62 timestamp=2026-03-05 16:33:29.172621056 +0100 CET component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.172967 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=29.163483648s window=10s component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.172976 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:29.672971077 +0100 CET m=+1366.420525318 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.172983 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926209 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:29.92598912 +0100 CET raw_timestamp=1.772724809925989e+18 source=http
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926273 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926286 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926298 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926312 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=63 timestamp=2026-03-05 16:33:29.92598912 +0100 CET component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926322 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=29.916851712s window=10s component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926331 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:30.426326628 +0100 CET m=+1367.173880869 component=correlation
+Mar 05 16:33:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:29.926337 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.162385 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:30.162099968 +0100 CET raw_timestamp=1.7727248101621e+18 source=http
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.162455 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=64 timestamp=2026-03-05 16:33:30.162099968 +0100 CET component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.162467 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=30.15296256s window=10s component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.162478 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:30.662472738 +0100 CET m=+1367.410026979 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.162485 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.417061 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:30.416758016 +0100 CET raw_timestamp=1.772724810416758e+18 source=http
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.417130 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=65 timestamp=2026-03-05 16:33:30.416758016 +0100 CET component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.417144 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=30.407620608s window=10s component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.417153 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:30.917148773 +0100 CET m=+1367.664703014 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.417160 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632019 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:30.631750912 +0100 CET raw_timestamp=1.772724810631751e+18 source=http
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632088 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632103 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=66 timestamp=2026-03-05 16:33:30.631750912 +0100 CET component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632115 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=30.622613504s window=10s component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632125 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:31.132120559 +0100 CET m=+1367.879674799 component=correlation
+Mar 05 16:33:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:30.632132 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410363 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:31.410104064 +0100 CET raw_timestamp=1.772724811410104e+18 source=http
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410452 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410466 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410478 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410490 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=67 timestamp=2026-03-05 16:33:31.410104064 +0100 CET component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410504 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=31.400966656s window=10s component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410518 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:31.910511369 +0100 CET m=+1368.658065611 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.410526 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.617652 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:31.617387008 +0100 CET raw_timestamp=1.772724811617387e+18 source=http
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.617735 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=68 timestamp=2026-03-05 16:33:31.617387008 +0100 CET component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.617748 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=31.6082496s window=10s component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.617757 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:32.117752187 +0100 CET m=+1368.865306428 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.617764 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.865531 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:31.865275904 +0100 CET raw_timestamp=1.772724811865276e+18 source=http
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.865603 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=69 timestamp=2026-03-05 16:33:31.865275904 +0100 CET component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.865616 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=31.856138496s window=10s component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.865626 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:32.365620375 +0100 CET m=+1369.113174616 component=correlation
+Mar 05 16:33:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:31.865633 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076445 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:32.076220928 +0100 CET raw_timestamp=1.772724812076221e+18 source=http
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076507 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076522 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=70 timestamp=2026-03-05 16:33:32.076220928 +0100 CET component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076534 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=32.06708352s window=10s component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076546 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:32.576539196 +0100 CET m=+1369.324093436 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.076553 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278701 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:32.278468096 +0100 CET raw_timestamp=1.772724812278468e+18 source=http
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278781 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278794 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=71 timestamp=2026-03-05 16:33:32.278468096 +0100 CET component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278805 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=32.269330688s window=10s component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278826 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:32.778810152 +0100 CET m=+1369.526364393 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.278833 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:32.466364 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248593 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:33.248335104 +0100 CET raw_timestamp=1.772724813248335e+18 source=http
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248673 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248688 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248701 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=72 timestamp=2026-03-05 16:33:33.248335104 +0100 CET component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248712 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=33.239197696s window=10s component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248736 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:33.748730195 +0100 CET m=+1370.496284428 component=correlation
+Mar 05 16:33:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:33.248747 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025410 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:34.025167104 +0100 CET raw_timestamp=1.772724814025167e+18 source=http
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025479 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025492 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=73 timestamp=2026-03-05 16:33:34.025167104 +0100 CET component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025503 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=34.016029696s window=10s component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025513 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:34.525507953 +0100 CET m=+1371.273062194 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.025519 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758451 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:34.758180096 +0100 CET raw_timestamp=1.77272481475818e+18 source=http
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758559 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758573 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=74 timestamp=2026-03-05 16:33:34.758180096 +0100 CET component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758583 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=34.749042688s window=10s component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758592 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:35.258587194 +0100 CET m=+1372.006141453 component=correlation
+Mar 05 16:33:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:34.758599 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544129 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:35.543792128 +0100 CET raw_timestamp=1.772724815543792e+18 source=http
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544201 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544213 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=75 timestamp=2026-03-05 16:33:35.543792128 +0100 CET component=correlation
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544224 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=35.53465472s window=10s component=correlation
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544233 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:36.044228785 +0100 CET m=+1372.791783025 component=correlation
+Mar 05 16:33:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:35.544240 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569413 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:36.569123072 +0100 CET raw_timestamp=1.772724816569123e+18 source=http
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569483 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569495 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=76 timestamp=2026-03-05 16:33:36.569123072 +0100 CET component=correlation
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569505 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=36.559985664s window=10s component=correlation
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569515 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:37.069510106 +0100 CET m=+1373.817064346 component=correlation
+Mar 05 16:33:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:36.569522 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390459 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:37.390139904 +0100 CET raw_timestamp=1.77272481739014e+18 source=http
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390561 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390579 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=77 timestamp=2026-03-05 16:33:37.390139904 +0100 CET component=correlation
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390592 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=37.381002496s window=10s component=correlation
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390604 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:37.890597656 +0100 CET m=+1374.638151896 component=correlation
+Mar 05 16:33:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:37.390611 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.051338 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.114553 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:38.114308096 +0100 CET raw_timestamp=1.772724818114308e+18 source=http
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.114616 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=78 timestamp=2026-03-05 16:33:38.114308096 +0100 CET component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.114627 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=38.105170688s window=10s component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.114637 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:38.61463146 +0100 CET m=+1375.362185701 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.114644 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.349385 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:38.349080064 +0100 CET raw_timestamp=1.77272481834908e+18 source=http
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.349472 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=79 timestamp=2026-03-05 16:33:38.349080064 +0100 CET component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.349486 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=38.339942656s window=10s component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.349497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:38.849491134 +0100 CET m=+1375.597045374 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.349505 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.571699 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:38.571426048 +0100 CET raw_timestamp=1.772724818571426e+18 source=http
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.571786 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=80 timestamp=2026-03-05 16:33:38.571426048 +0100 CET component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.571815 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=38.56228864s window=10s component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.571825 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:39.071819751 +0100 CET m=+1375.819373992 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.571832 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.623335 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.786524 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:38.78629504 +0100 CET raw_timestamp=1.772724818786295e+18 source=http
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.786578 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=81 timestamp=2026-03-05 16:33:38.78629504 +0100 CET component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.786589 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=38.777157632s window=10s component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.786597 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:39.286592799 +0100 CET m=+1376.034147039 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.786604 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:38.912307 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.019387 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:39.019143936 +0100 CET raw_timestamp=1.772724819019144e+18 source=http
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.019461 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=82 timestamp=2026-03-05 16:33:39.019143936 +0100 CET component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.019473 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=39.010006528s window=10s component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.019483 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:39.519477798 +0100 CET m=+1376.267032038 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.019494 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293041 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:39.292754944 +0100 CET raw_timestamp=1.772724819292755e+18 source=http
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293118 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293140 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293154 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=83 timestamp=2026-03-05 16:33:39.292754944 +0100 CET component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293166 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=39.283617536s window=10s component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293176 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:39.793171295 +0100 CET m=+1376.540725536 component=correlation
+Mar 05 16:33:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:39.293183 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442122 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:40.441869056 +0100 CET raw_timestamp=1.772724820441869e+18 source=http
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442199 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442213 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442224 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=84 timestamp=2026-03-05 16:33:40.441869056 +0100 CET component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442235 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=40.432731648s window=10s component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442244 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:40.942240055 +0100 CET m=+1377.689794296 component=correlation
+Mar 05 16:33:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:40.442251 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145832 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:41.145570048 +0100 CET raw_timestamp=1.77272482114557e+18 source=http
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145945 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145956 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=85 timestamp=2026-03-05 16:33:41.145570048 +0100 CET component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145964 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=41.13643264s window=10s component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145972 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:41.645967923 +0100 CET m=+1378.393522163 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.145978 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.905924 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:41.905602048 +0100 CET raw_timestamp=1.772724821905602e+18 source=http
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.906045 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.906063 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=86 timestamp=2026-03-05 16:33:41.905602048 +0100 CET component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.906075 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=41.89646464s window=10s component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.906086 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:42.406080107 +0100 CET m=+1379.153634348 component=correlation
+Mar 05 16:33:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:41.906095 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653553 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:42.653277952 +0100 CET raw_timestamp=1.772724822653278e+18 source=http
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653630 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653650 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=87 timestamp=2026-03-05 16:33:42.653277952 +0100 CET component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653661 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=42.644140544s window=10s component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653676 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:43.153666026 +0100 CET m=+1379.901220267 component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.653695 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.921780 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:42.921515008 +0100 CET raw_timestamp=1.772724822921515e+18 source=http
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.921869 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=88 timestamp=2026-03-05 16:33:42.921515008 +0100 CET component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.921882 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=42.9123776s window=10s component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.921892 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:43.421886923 +0100 CET m=+1380.169441164 component=correlation
+Mar 05 16:33:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:42.921899 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.149167 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:43.14893696 +0100 CET raw_timestamp=1.772724823148937e+18 source=http
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.149239 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=89 timestamp=2026-03-05 16:33:43.14893696 +0100 CET component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.149251 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=43.139799552s window=10s component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.149260 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:43.64925511 +0100 CET m=+1380.396809351 component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.149267 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390172 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:43.389916928 +0100 CET raw_timestamp=1.772724823389917e+18 source=http
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390245 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390260 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=90 timestamp=2026-03-05 16:33:43.389916928 +0100 CET component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390272 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=43.38077952s window=10s component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390281 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:43.89027661 +0100 CET m=+1380.637830850 component=correlation
+Mar 05 16:33:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:43.390287 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150313 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:44.150021888 +0100 CET raw_timestamp=1.772724824150022e+18 source=http
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150400 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150418 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150441 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150458 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=91 timestamp=2026-03-05 16:33:44.150021888 +0100 CET component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150471 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=44.14088448s window=10s component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150482 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:44.650476292 +0100 CET m=+1381.398030533 component=correlation
+Mar 05 16:33:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:44.150490 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414870 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:45.41455488 +0100 CET raw_timestamp=1.772724825414555e+18 source=http
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414934 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414946 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=92 timestamp=2026-03-05 16:33:45.41455488 +0100 CET component=correlation
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414958 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=45.405417472s window=10s component=correlation
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414968 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:45.914962374 +0100 CET m=+1382.662516615 component=correlation
+Mar 05 16:33:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:45.414974 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192256 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:46.191986944 +0100 CET raw_timestamp=1.772724826191987e+18 source=http
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192340 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192355 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=93 timestamp=2026-03-05 16:33:46.191986944 +0100 CET component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192367 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=46.182849536s window=10s component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192378 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:46.692372331 +0100 CET m=+1383.439926752 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.192387 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968332 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:46.968096 +0100 CET raw_timestamp=1.772724826968096e+18 source=http
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968396 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968407 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=94 timestamp=2026-03-05 16:33:46.968096 +0100 CET component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968419 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=46.958958592s window=10s component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968428 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:47.468423202 +0100 CET m=+1384.215977443 component=correlation
+Mar 05 16:33:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:46.968434 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:47.186726 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:47.186475008 +0100 CET raw_timestamp=1.772724827186475e+18 source=http
+Mar 05 16:33:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:47.186789 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=95 timestamp=2026-03-05 16:33:47.186475008 +0100 CET component=correlation
+Mar 05 16:33:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:47.186801 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=47.1773376s window=10s component=correlation
+Mar 05 16:33:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:47.186812 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:47.686806084 +0100 CET m=+1384.434360325 component=correlation
+Mar 05 16:33:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:47.186818 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267580 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:48.267323904 +0100 CET raw_timestamp=1.772724828267324e+18 source=http
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267703 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267732 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267743 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=96 timestamp=2026-03-05 16:33:48.267323904 +0100 CET component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267751 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=48.258186496s window=10s component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267759 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:48.767755149 +0100 CET m=+1385.515309390 component=correlation
+Mar 05 16:33:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:48.267766 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003451 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:49.003211008 +0100 CET raw_timestamp=1.772724829003211e+18 source=http
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003535 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003544 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=97 timestamp=2026-03-05 16:33:49.003211008 +0100 CET component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003552 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=48.9940736s window=10s component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003561 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:49.503556476 +0100 CET m=+1386.251110719 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.003568 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.762983 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:49.762643968 +0100 CET raw_timestamp=1.772724829762644e+18 source=http
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.763064 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.763081 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=98 timestamp=2026-03-05 16:33:49.762643968 +0100 CET component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.763094 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=49.75350656s window=10s component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.763105 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:50.263099223 +0100 CET m=+1387.010653471 component=correlation
+Mar 05 16:33:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:49.763114 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.496930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:50.496601088 +0100 CET raw_timestamp=1.772724830496601e+18 source=http
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.497008 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.497021 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=99 timestamp=2026-03-05 16:33:50.496601088 +0100 CET component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.497033 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=50.48746368s window=10s component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.497043 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:50.997037944 +0100 CET m=+1387.744592185 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.497049 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.709279 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:50.70901504 +0100 CET raw_timestamp=1.772724830709015e+18 source=http
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.709381 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=100 timestamp=2026-03-05 16:33:50.70901504 +0100 CET component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.709393 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=50.699877632s window=10s component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.709404 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:51.209397248 +0100 CET m=+1387.956951488 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.709413 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.920376 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=57189 timestamp=2026-03-05 16:33:50.920118016 +0100 CET raw_timestamp=1.772724830920118e+18 source=http
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.920446 [logcorrelator] DEBUG processing A event: key=91.224.92.185:57189 keepalive_seq=101 timestamp=2026-03-05 16:33:50.920118016 +0100 CET component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.920458 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:57189 time_diff=50.910980608s window=10s component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.920469 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=57189 emit_after=2026-03-05 16:33:51.420462919 +0100 CET m=+1388.168017159 component=correlation
+Mar 05 16:33:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:50.920476 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=57189 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224422 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:51.224143872 +0100 CET raw_timestamp=1.772724831224144e+18 source=network
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224525 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224543 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224556 [logcorrelator] DEBUG processing B event: key=91.224.92.185:63906 timestamp=2026-03-05 16:33:51.224143872 +0100 CET component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224566 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:63906 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224572 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:63906 src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.224584 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=63906 buffer_size=125 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.255557 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:51.255252992 +0100 CET raw_timestamp=1.772724831255253e+18 source=http
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.255661 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=1 timestamp=2026-03-05 16:33:51.255252992 +0100 CET component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.255725 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.255252992 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.255743 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.511361 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:51.511085056 +0100 CET raw_timestamp=1.772724831511085e+18 source=http
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.511435 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=57189 key=91.224.92.185:57189 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.511450 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=2 timestamp=2026-03-05 16:33:51.511085056 +0100 CET component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.511479 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.511085056 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:51.511488 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:52.526229 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:52.525958912 +0100 CET raw_timestamp=1.772724832525959e+18 source=http
+Mar 05 16:33:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:52.526318 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=3 timestamp=2026-03-05 16:33:52.525958912 +0100 CET component=correlation
+Mar 05 16:33:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:52.526344 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:52.525958912 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:52.526354 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.282423 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:53.282155008 +0100 CET raw_timestamp=1.772724833282155e+18 source=http
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.282489 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=4 timestamp=2026-03-05 16:33:53.282155008 +0100 CET component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.282523 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:53.282155008 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.282534 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.981608 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:53.98135808 +0100 CET raw_timestamp=1.772724833981358e+18 source=http
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.981672 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=5 timestamp=2026-03-05 16:33:53.98135808 +0100 CET component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.981698 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:53.98135808 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:53.981708 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:54.738527 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:54.738274048 +0100 CET raw_timestamp=1.772724834738274e+18 source=http
+Mar 05 16:33:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:54.738589 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=6 timestamp=2026-03-05 16:33:54.738274048 +0100 CET component=correlation
+Mar 05 16:33:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:54.738621 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:54.738274048 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:54.738630 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.000806 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:55.000563968 +0100 CET raw_timestamp=1.772724835000564e+18 source=http
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.000876 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=7 timestamp=2026-03-05 16:33:55.000563968 +0100 CET component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.000904 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:55.000563968 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.000913 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.219004 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:55.215998976 +0100 CET raw_timestamp=1.772724835215999e+18 source=http
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.219062 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=8 timestamp=2026-03-05 16:33:55.215998976 +0100 CET component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.219092 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:55.215998976 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.219100 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.466816 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:55.466620928 +0100 CET raw_timestamp=1.772724835466621e+18 source=http
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.466891 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=9 timestamp=2026-03-05 16:33:55.466620928 +0100 CET component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.466918 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:55.466620928 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:55.466927 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:56.418232 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:56.415225088 +0100 CET raw_timestamp=1.772724836415225e+18 source=http
+Mar 05 16:33:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:56.418300 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=10 timestamp=2026-03-05 16:33:56.415225088 +0100 CET component=correlation
+Mar 05 16:33:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:56.418331 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:56.415225088 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:56.418339 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:57.383589 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:57.383329024 +0100 CET raw_timestamp=1.772724837383329e+18 source=http
+Mar 05 16:33:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:57.383679 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=11 timestamp=2026-03-05 16:33:57.383329024 +0100 CET component=correlation
+Mar 05 16:33:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:57.383751 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:57.383329024 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:57.383763 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.135339 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:58.135088896 +0100 CET raw_timestamp=1.772724838135089e+18 source=http
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.135422 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=12 timestamp=2026-03-05 16:33:58.135088896 +0100 CET component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.135446 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:58.135088896 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.135454 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.890817 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:58.890535936 +0100 CET raw_timestamp=1.772724838890536e+18 source=http
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.890923 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=13 timestamp=2026-03-05 16:33:58.890535936 +0100 CET component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.890961 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:58.890535936 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:58.890974 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.637650 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:59.637360896 +0100 CET raw_timestamp=1.772724839637361e+18 source=http
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.637764 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=14 timestamp=2026-03-05 16:33:59.637360896 +0100 CET component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.637797 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:59.637360896 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.637805 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.867937 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:33:59.867597056 +0100 CET raw_timestamp=1.772724839867597e+18 source=http
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.868008 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=15 timestamp=2026-03-05 16:33:59.867597056 +0100 CET component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.868037 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:59.867597056 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:33:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:33:59.868045 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.228230 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:00.227968 +0100 CET raw_timestamp=1.772724840227968e+18 source=http
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.228309 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=16 timestamp=2026-03-05 16:34:00.227968 +0100 CET component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.228347 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:34:00.227968 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.228358 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.645712 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:00.645453056 +0100 CET raw_timestamp=1.772724840645453e+18 source=http
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.645806 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=17 timestamp=2026-03-05 16:34:00.645453056 +0100 CET component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.645836 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:34:00.645453056 +0100 CET) + B(src_ip=91.224.92.185 src_port=63906 ts=2026-03-05 16:33:51.224143872 +0100 CET) component=correlation
+Mar 05 16:34:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:00.645857 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63906 new_ttl=120 component=correlation
+Mar 05 16:34:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:01.502742 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:01.502450944 +0100 CET raw_timestamp=1.772724841502451e+18 source=http
+Mar 05 16:34:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:01.502811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=18 timestamp=2026-03-05 16:34:01.502450944 +0100 CET component=correlation
+Mar 05 16:34:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:01.502824 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=10.278307072s window=10s component=correlation
+Mar 05 16:34:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:01.502835 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:02.002828075 +0100 CET m=+1398.750382315 component=correlation
+Mar 05 16:34:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:01.502842 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:02.272008 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=18 delay_ms=500 component=correlation
+Mar 05 16:34:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:04.894729 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:04.891766016 +0100 CET raw_timestamp=1.772724844891766e+18 source=http
+Mar 05 16:34:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:04.894868 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=19 timestamp=2026-03-05 16:34:04.891766016 +0100 CET component=correlation
+Mar 05 16:34:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:04.894877 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=13.667622144s window=10s component=correlation
+Mar 05 16:34:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:04.894886 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:05.394881493 +0100 CET m=+1402.142435733 component=correlation
+Mar 05 16:34:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:04.894893 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786579 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:05.786331904 +0100 CET raw_timestamp=1.772724845786332e+18 source=http
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786667 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=19 delay_ms=500 component=correlation
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786677 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=20 timestamp=2026-03-05 16:34:05.786331904 +0100 CET component=correlation
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786685 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=14.562188032s window=10s component=correlation
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786693 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:06.286689083 +0100 CET m=+1403.034243329 component=correlation
+Mar 05 16:34:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:05.786699 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.443603 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.495374 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:06.495122944 +0100 CET raw_timestamp=1.772724846495123e+18 source=http
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.495435 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=21 timestamp=2026-03-05 16:34:06.495122944 +0100 CET component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.495448 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=15.270979072s window=10s component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.495458 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:06.995452724 +0100 CET m=+1403.743006964 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.495464 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.711462 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:06.711160064 +0100 CET raw_timestamp=1.77272484671116e+18 source=http
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.711545 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=22 timestamp=2026-03-05 16:34:06.711160064 +0100 CET component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.711561 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=15.487016192s window=10s component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.711572 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:07.211565844 +0100 CET m=+1403.959120085 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.711581 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.937708 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:06.937392128 +0100 CET raw_timestamp=1.772724846937392e+18 source=http
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.937801 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=23 timestamp=2026-03-05 16:34:06.937392128 +0100 CET component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.937816 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=15.713248256s window=10s component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.937826 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:07.437820129 +0100 CET m=+1404.185374370 component=correlation
+Mar 05 16:34:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:06.937834 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187257 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:07.186963968 +0100 CET raw_timestamp=1.772724847186964e+18 source=http
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187400 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187424 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=24 timestamp=2026-03-05 16:34:07.186963968 +0100 CET component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187437 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=15.962820096s window=10s component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187450 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:07.687442468 +0100 CET m=+1404.434996710 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.187459 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.413495 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465751 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:07.465523968 +0100 CET raw_timestamp=1.772724847465524e+18 source=http
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465871 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465892 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=25 timestamp=2026-03-05 16:34:07.465523968 +0100 CET component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465902 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=16.241380096s window=10s component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465912 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:07.965906624 +0100 CET m=+1404.713460864 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.465921 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702267 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:07.70202112 +0100 CET raw_timestamp=1.772724847702021e+18 source=http
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702347 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702372 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=26 timestamp=2026-03-05 16:34:07.70202112 +0100 CET component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702382 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=16.477877248s window=10s component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702392 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:08.202387199 +0100 CET m=+1404.949941475 component=correlation
+Mar 05 16:34:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:07.702398 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671216 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:08.670957056 +0100 CET raw_timestamp=1.772724848670957e+18 source=http
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671281 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671293 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671307 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=27 timestamp=2026-03-05 16:34:08.670957056 +0100 CET component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671317 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=17.446813184s window=10s component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671327 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:09.171322143 +0100 CET m=+1405.918876384 component=correlation
+Mar 05 16:34:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:08.671333 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396553 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:09.396294912 +0100 CET raw_timestamp=1.772724849396295e+18 source=http
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396616 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396628 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=28 timestamp=2026-03-05 16:34:09.396294912 +0100 CET component=correlation
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396641 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=18.17215104s window=10s component=correlation
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396652 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:09.89664665 +0100 CET m=+1406.644200892 component=correlation
+Mar 05 16:34:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:09.396660 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145532 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:10.14520192 +0100 CET raw_timestamp=1.772724850145202e+18 source=http
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145649 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145662 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=29 timestamp=2026-03-05 16:34:10.14520192 +0100 CET component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145672 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=18.921058048s window=10s component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145683 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:10.645676664 +0100 CET m=+1407.393230905 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.145691 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.406586 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:10.406304 +0100 CET raw_timestamp=1.772724850406304e+18 source=http
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.406656 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=30 timestamp=2026-03-05 16:34:10.406304 +0100 CET component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.406669 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=19.182160128s window=10s component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.406680 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:10.906674206 +0100 CET m=+1407.654228447 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.406686 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.624427 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:10.624175104 +0100 CET raw_timestamp=1.772724850624175e+18 source=http
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.624489 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=31 timestamp=2026-03-05 16:34:10.624175104 +0100 CET component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.624500 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=19.400031232s window=10s component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.624510 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:11.124504331 +0100 CET m=+1407.872058571 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.624517 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860768 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:10.86046208 +0100 CET raw_timestamp=1.772724850860462e+18 source=http
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860877 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860898 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=32 timestamp=2026-03-05 16:34:10.86046208 +0100 CET component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860911 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=19.636318208s window=10s component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860920 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:11.360915361 +0100 CET m=+1408.108469601 component=correlation
+Mar 05 16:34:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:10.860927 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.070937 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:11.070695936 +0100 CET raw_timestamp=1.772724851070696e+18 source=http
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.070998 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.071012 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=33 timestamp=2026-03-05 16:34:11.070695936 +0100 CET component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.071023 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=19.846552064s window=10s component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.071033 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:11.571027985 +0100 CET m=+1408.318582226 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.071039 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.192825 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.322357 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:11.322091008 +0100 CET raw_timestamp=1.772724851322091e+18 source=http
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.322444 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=34 timestamp=2026-03-05 16:34:11.322091008 +0100 CET component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.322476 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=20.097947136s window=10s component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.322490 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:11.822483012 +0100 CET m=+1408.570037253 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.322498 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.549190 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.557591 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:11.557391872 +0100 CET raw_timestamp=1.772724851557392e+18 source=http
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.563714 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=35 timestamp=2026-03-05 16:34:11.557391872 +0100 CET component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.563750 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=20.333248s window=10s component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.563760 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:12.063754594 +0100 CET m=+1408.811308834 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.563767 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.826971 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:11.826703872 +0100 CET raw_timestamp=1.772724851826704e+18 source=http
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827034 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827047 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827059 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=36 timestamp=2026-03-05 16:34:11.826703872 +0100 CET component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827069 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=20.60256s window=10s component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827078 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:12.32707346 +0100 CET m=+1409.074627709 component=correlation
+Mar 05 16:34:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:11.827084 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.061384 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:12.061135872 +0100 CET raw_timestamp=1.772724852061136e+18 source=http
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.061453 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=37 timestamp=2026-03-05 16:34:12.061135872 +0100 CET component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.061465 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=20.836992s window=10s component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.061474 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:12.561469311 +0100 CET m=+1409.309023551 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.061481 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.338374 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.338387 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.659436 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.825262 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:12.824992 +0100 CET raw_timestamp=1.772724852824992e+18 source=http
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.825351 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=38 timestamp=2026-03-05 16:34:12.824992 +0100 CET component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.825363 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=21.600848128s window=10s component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.825376 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:13.325367841 +0100 CET m=+1410.072922082 component=correlation
+Mar 05 16:34:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:12.825385 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.063810 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:13.063524096 +0100 CET raw_timestamp=1.772724853063524e+18 source=http
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.063909 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=39 timestamp=2026-03-05 16:34:13.063524096 +0100 CET component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.063917 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=21.839380224s window=10s component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.063927 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:13.563921958 +0100 CET m=+1410.311476199 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.063934 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.316660 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:13.316390912 +0100 CET raw_timestamp=1.772724853316391e+18 source=http
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.316736 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=40 timestamp=2026-03-05 16:34:13.316390912 +0100 CET component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.316748 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=22.09224704s window=10s component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.316758 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:13.816752916 +0100 CET m=+1410.564307156 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.316765 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529103 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:13.52881408 +0100 CET raw_timestamp=1.772724853528814e+18 source=http
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529178 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529191 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=41 timestamp=2026-03-05 16:34:13.52881408 +0100 CET component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529202 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=22.304670208s window=10s component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529211 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:14.029206443 +0100 CET m=+1410.776760683 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.529217 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749763 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:13.749476096 +0100 CET raw_timestamp=1.772724853749476e+18 source=http
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749874 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749888 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=42 timestamp=2026-03-05 16:34:13.749476096 +0100 CET component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749896 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=22.525332224s window=10s component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749904 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:14.249900171 +0100 CET m=+1410.997454412 component=correlation
+Mar 05 16:34:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:13.749911 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.587459 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.587471 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.587484 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.811543 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:14.811266048 +0100 CET raw_timestamp=1.772724854811266e+18 source=http
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.811631 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=43 timestamp=2026-03-05 16:34:14.811266048 +0100 CET component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.811646 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=23.587122176s window=10s component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.811658 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:15.311651618 +0100 CET m=+1412.059205861 component=correlation
+Mar 05 16:34:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:14.811667 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551498 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:15.551215104 +0100 CET raw_timestamp=1.772724855551215e+18 source=http
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551565 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551578 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=44 timestamp=2026-03-05 16:34:15.551215104 +0100 CET component=correlation
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551589 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=24.327071232s window=10s component=correlation
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551601 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:16.051594968 +0100 CET m=+1412.799149209 component=correlation
+Mar 05 16:34:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:15.551609 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304212 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:16.303952896 +0100 CET raw_timestamp=1.772724856303953e+18 source=http
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304277 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304291 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=45 timestamp=2026-03-05 16:34:16.303952896 +0100 CET component=correlation
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304301 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=25.079809024s window=10s component=correlation
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304310 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:16.804305415 +0100 CET m=+1413.551859655 component=correlation
+Mar 05 16:34:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:16.304316 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078493 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:17.078200064 +0100 CET raw_timestamp=1.7727248570782e+18 source=http
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078565 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078594 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=46 timestamp=2026-03-05 16:34:17.078200064 +0100 CET component=correlation
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078605 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=25.854056192s window=10s component=correlation
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078615 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:17.578609971 +0100 CET m=+1414.326164211 component=correlation
+Mar 05 16:34:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:17.078622 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.064400 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.332285 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:18.332019968 +0100 CET raw_timestamp=1.77272485833202e+18 source=http
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.332345 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=47 timestamp=2026-03-05 16:34:18.332019968 +0100 CET component=correlation
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.332357 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=27.107876096s window=10s component=correlation
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.332366 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:18.832361204 +0100 CET m=+1415.579915445 component=correlation
+Mar 05 16:34:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:18.332373 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062310 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:19.062051072 +0100 CET raw_timestamp=1.772724859062051e+18 source=http
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062373 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062386 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=48 timestamp=2026-03-05 16:34:19.062051072 +0100 CET component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062395 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=27.8379072s window=10s component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062404 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:19.562399925 +0100 CET m=+1416.309954165 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.062412 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.825413 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.834335 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:19.834087936 +0100 CET raw_timestamp=1.772724859834088e+18 source=http
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.834398 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=49 timestamp=2026-03-05 16:34:19.834087936 +0100 CET component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.834409 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=28.609944064s window=10s component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.834419 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:20.33441381 +0100 CET m=+1417.081968050 component=correlation
+Mar 05 16:34:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:19.834426 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583101 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:20.582791936 +0100 CET raw_timestamp=1.772724860582792e+18 source=http
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583219 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583241 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=50 timestamp=2026-03-05 16:34:20.582791936 +0100 CET component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583255 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=29.358648064s window=10s component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583269 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:21.083261249 +0100 CET m=+1417.830815494 component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.583279 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.807892 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:20.807608064 +0100 CET raw_timestamp=1.772724860807608e+18 source=http
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.807958 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=51 timestamp=2026-03-05 16:34:20.807608064 +0100 CET component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.807969 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=29.583464192s window=10s component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.807979 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:21.307973197 +0100 CET m=+1418.055527438 component=correlation
+Mar 05 16:34:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:20.807987 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028022 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:21.02769792 +0100 CET raw_timestamp=1.772724861027698e+18 source=http
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028101 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:55998 src_ip=91.224.92.185 src_port=55998 ttl=120 age=2m9.872985285s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028125 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=52 timestamp=2026-03-05 16:34:21.02769792 +0100 CET component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028135 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=29.803554048s window=10s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028146 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:21.528140209 +0100 CET m=+1418.275694452 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.028152 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241582 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:21.241319936 +0100 CET raw_timestamp=1.77272486124132e+18 source=http
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241660 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241678 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=53 timestamp=2026-03-05 16:34:21.241319936 +0100 CET component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=30.017176064s window=10s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241702 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:21.741696097 +0100 CET m=+1418.489250341 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.241711 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.398406 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.465578 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:21.465388032 +0100 CET raw_timestamp=1.772724861465388e+18 source=http
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.465633 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=54 timestamp=2026-03-05 16:34:21.465388032 +0100 CET component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.465644 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=30.24124416s window=10s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.465652 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:21.965647976 +0100 CET m=+1418.713202217 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.465659 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672759 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:21.672482048 +0100 CET raw_timestamp=1.772724861672482e+18 source=http
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672837 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672876 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=55 timestamp=2026-03-05 16:34:21.672482048 +0100 CET component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672889 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=30.448338176s window=10s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672901 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:22.172894462 +0100 CET m=+1418.920448705 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.672909 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884367 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:21.884077056 +0100 CET raw_timestamp=1.772724861884077e+18 source=http
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884447 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884463 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=56 timestamp=2026-03-05 16:34:21.884077056 +0100 CET component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884475 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=30.659933184s window=10s component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884487 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:22.384480894 +0100 CET m=+1419.132035136 component=correlation
+Mar 05 16:34:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:21.884495 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092360 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:22.092122112 +0100 CET raw_timestamp=1.772724862092122e+18 source=http
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092426 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092440 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=57 timestamp=2026-03-05 16:34:22.092122112 +0100 CET component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092453 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=30.86797824s window=10s component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092464 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:22.592457821 +0100 CET m=+1419.340012064 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.092471 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.351892 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:22.351572992 +0100 CET raw_timestamp=1.772724862351573e+18 source=http
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.351970 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.351984 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=58 timestamp=2026-03-05 16:34:22.351572992 +0100 CET component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.351995 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=31.12742912s window=10s component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.352005 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:22.851999936 +0100 CET m=+1419.599554177 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.352012 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573309 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:22.57304192 +0100 CET raw_timestamp=1.772724862573042e+18 source=http
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573390 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573410 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=59 timestamp=2026-03-05 16:34:22.57304192 +0100 CET component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573423 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=31.348898048s window=10s component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573437 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:23.073429404 +0100 CET m=+1419.820983647 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.573447 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788486 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:22.788204032 +0100 CET raw_timestamp=1.772724862788204e+18 source=http
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788550 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788565 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=60 timestamp=2026-03-05 16:34:22.788204032 +0100 CET component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788576 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=31.56406016s window=10s component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788585 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:23.288580409 +0100 CET m=+1420.036134649 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.788591 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:22.977464 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.015396 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:23.015133952 +0100 CET raw_timestamp=1.772724863015134e+18 source=http
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.015464 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=61 timestamp=2026-03-05 16:34:23.015133952 +0100 CET component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.015476 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=31.79099008s window=10s component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.015486 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:23.515480715 +0100 CET m=+1420.263034955 component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.015493 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225865 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:23.225584896 +0100 CET raw_timestamp=1.772724863225585e+18 source=http
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225961 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225973 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=62 timestamp=2026-03-05 16:34:23.225584896 +0100 CET component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225981 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=32.001441024s window=10s component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225990 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:23.725985334 +0100 CET m=+1420.473539575 component=correlation
+Mar 05 16:34:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:23.225996 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296556 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:24.296278016 +0100 CET raw_timestamp=1.772724864296278e+18 source=http
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296627 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296644 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296658 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296675 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=63 timestamp=2026-03-05 16:34:24.296278016 +0100 CET component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296686 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=33.072134144s window=10s component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296695 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:24.796690313 +0100 CET m=+1421.544244554 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.296701 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975376 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:24.975110912 +0100 CET raw_timestamp=1.772724864975111e+18 source=http
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975453 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975469 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=64 timestamp=2026-03-05 16:34:24.975110912 +0100 CET component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975480 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=33.75096704s window=10s component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975490 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:25.475485226 +0100 CET m=+1422.223039467 component=correlation
+Mar 05 16:34:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:24.975497 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694564 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:25.694276096 +0100 CET raw_timestamp=1.772724865694276e+18 source=http
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694658 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694676 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=65 timestamp=2026-03-05 16:34:25.694276096 +0100 CET component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694690 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=34.470132224s window=10s component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694703 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:26.194695986 +0100 CET m=+1422.942250229 component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.694711 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.956345 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:25.956075008 +0100 CET raw_timestamp=1.772724865956075e+18 source=http
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.956410 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=66 timestamp=2026-03-05 16:34:25.956075008 +0100 CET component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.956420 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=34.731931136s window=10s component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.956430 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:26.456425536 +0100 CET m=+1423.203979776 component=correlation
+Mar 05 16:34:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:25.956440 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.557071 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.557093 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.904346 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:26.904051968 +0100 CET raw_timestamp=1.772724866904052e+18 source=http
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.904441 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=67 timestamp=2026-03-05 16:34:26.904051968 +0100 CET component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.904454 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=35.679908096s window=10s component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.904469 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:27.404458481 +0100 CET m=+1424.152012721 component=correlation
+Mar 05 16:34:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:26.904476 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654740 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:27.65445504 +0100 CET raw_timestamp=1.772724867654455e+18 source=http
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654828 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654840 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=68 timestamp=2026-03-05 16:34:27.65445504 +0100 CET component=correlation
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654866 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=36.430311168s window=10s component=correlation
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654875 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:28.154870617 +0100 CET m=+1424.902424858 component=correlation
+Mar 05 16:34:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:27.654881 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396571 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:28.396331008 +0100 CET raw_timestamp=1.772724868396331e+18 source=http
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396633 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396646 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=69 timestamp=2026-03-05 16:34:28.396331008 +0100 CET component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396655 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=37.172187136s window=10s component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396665 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:28.896659599 +0100 CET m=+1425.644213840 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.396671 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.695199 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:28.694955008 +0100 CET raw_timestamp=1.772724868694955e+18 source=http
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.695264 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=70 timestamp=2026-03-05 16:34:28.694955008 +0100 CET component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.695276 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=37.470811136s window=10s component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.695286 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:29.195280429 +0100 CET m=+1425.942834673 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.695293 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925084 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:28.924819968 +0100 CET raw_timestamp=1.77272486892482e+18 source=http
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925161 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925176 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=71 timestamp=2026-03-05 16:34:28.924819968 +0100 CET component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925187 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=37.700676096s window=10s component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925196 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:29.425191288 +0100 CET m=+1426.172745529 component=correlation
+Mar 05 16:34:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:28.925202 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.163759 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:29.16346112 +0100 CET raw_timestamp=1.772724869163461e+18 source=http
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.163837 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=72 timestamp=2026-03-05 16:34:29.16346112 +0100 CET component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.163872 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=37.939317248s window=10s component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.163883 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:29.663877247 +0100 CET m=+1426.411431487 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.163890 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373101 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:29.372839936 +0100 CET raw_timestamp=1.77272486937284e+18 source=http
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373167 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373181 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=73 timestamp=2026-03-05 16:34:29.372839936 +0100 CET component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373191 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=38.148696064s window=10s component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373200 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:29.873195391 +0100 CET m=+1426.620749632 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.373206 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.562434 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.611276 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:29.61100288 +0100 CET raw_timestamp=1.772724869611003e+18 source=http
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.611362 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=74 timestamp=2026-03-05 16:34:29.61100288 +0100 CET component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.611369 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=38.386859008s window=10s component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.611378 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:30.11137324 +0100 CET m=+1426.858927480 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.611385 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.827955 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:29.82759808 +0100 CET raw_timestamp=1.772724869827598e+18 source=http
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.828034 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.828051 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=75 timestamp=2026-03-05 16:34:29.82759808 +0100 CET component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.828064 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=38.603454208s window=10s component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.828076 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:30.328069664 +0100 CET m=+1427.075623907 component=correlation
+Mar 05 16:34:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:29.828085 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044594 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:30.044327936 +0100 CET raw_timestamp=1.772724870044328e+18 source=http
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044660 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044673 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=76 timestamp=2026-03-05 16:34:30.044327936 +0100 CET component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044683 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=38.820184064s window=10s component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044693 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:30.544688886 +0100 CET m=+1427.292243126 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.044700 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282466 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:30.28218496 +0100 CET raw_timestamp=1.772724870282185e+18 source=http
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282558 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282585 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=77 timestamp=2026-03-05 16:34:30.28218496 +0100 CET component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282598 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=39.058041088s window=10s component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282610 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:30.78260375 +0100 CET m=+1427.530157992 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.282618 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493730 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:30.493456896 +0100 CET raw_timestamp=1.772724870493457e+18 source=http
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493797 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=78 timestamp=2026-03-05 16:34:30.493456896 +0100 CET component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493822 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=39.269313024s window=10s component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493831 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:30.993826303 +0100 CET m=+1427.741380543 component=correlation
+Mar 05 16:34:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:30.493837 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778000 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:31.777648128 +0100 CET raw_timestamp=1.772724871777648e+18 source=http
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778073 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778090 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778103 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778118 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=79 timestamp=2026-03-05 16:34:31.777648128 +0100 CET component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778133 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=40.553504256s window=10s component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778149 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:32.278142411 +0100 CET m=+1429.025696657 component=correlation
+Mar 05 16:34:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:31.778158 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530725 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:32.530458112 +0100 CET raw_timestamp=1.772724872530458e+18 source=http
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530797 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=80 timestamp=2026-03-05 16:34:32.530458112 +0100 CET component=correlation
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530821 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=41.30631424s window=10s component=correlation
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530830 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:33.03082528 +0100 CET m=+1429.778379520 component=correlation
+Mar 05 16:34:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:32.530836 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251836 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:33.251595008 +0100 CET raw_timestamp=1.772724873251595e+18 source=http
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251916 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251929 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=81 timestamp=2026-03-05 16:34:33.251595008 +0100 CET component=correlation
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251940 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=42.027451136s window=10s component=correlation
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251951 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:33.751945873 +0100 CET m=+1430.499500114 component=correlation
+Mar 05 16:34:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:33.251957 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030283 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:34.030027008 +0100 CET raw_timestamp=1.772724874030027e+18 source=http
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030371 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030380 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=82 timestamp=2026-03-05 16:34:34.030027008 +0100 CET component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030388 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=42.805883136s window=10s component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030396 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:34.530392502 +0100 CET m=+1431.277946743 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.030402 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.288486 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:34.28822912 +0100 CET raw_timestamp=1.772724874288229e+18 source=http
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.288571 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=83 timestamp=2026-03-05 16:34:34.28822912 +0100 CET component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.288584 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=43.064085248s window=10s component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.288601 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:34.788590226 +0100 CET m=+1431.536144468 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.288614 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.496320 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:34.49604992 +0100 CET raw_timestamp=1.77272487449605e+18 source=http
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.496382 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=84 timestamp=2026-03-05 16:34:34.49604992 +0100 CET component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.496393 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=43.271906048s window=10s component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.496403 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:34.996397464 +0100 CET m=+1431.743951704 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.496410 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.561417 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.718211 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:34.717908992 +0100 CET raw_timestamp=1.772724874717909e+18 source=http
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.718288 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=85 timestamp=2026-03-05 16:34:34.717908992 +0100 CET component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.718302 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=43.49376512s window=10s component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.718313 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:35.218306819 +0100 CET m=+1431.965861061 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.718321 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:34.996140 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433281 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:35.433014016 +0100 CET raw_timestamp=1.772724875433014e+18 source=http
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433341 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433355 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433368 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=86 timestamp=2026-03-05 16:34:35.433014016 +0100 CET component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433379 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=44.208870144s window=10s component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433387 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:35.933382678 +0100 CET m=+1432.680936919 component=correlation
+Mar 05 16:34:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:35.433394 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.176406 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.442123 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:36.44188288 +0100 CET raw_timestamp=1.772724876441883e+18 source=http
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.442183 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=87 timestamp=2026-03-05 16:34:36.44188288 +0100 CET component=correlation
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.442193 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=45.217739008s window=10s component=correlation
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.442203 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:36.942197809 +0100 CET m=+1433.689752050 component=correlation
+Mar 05 16:34:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:36.442209 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237388 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:37.23710208 +0100 CET raw_timestamp=1.772724877237102e+18 source=http
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237467 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237482 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=88 timestamp=2026-03-05 16:34:37.23710208 +0100 CET component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237495 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=46.012958208s window=10s component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237507 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:37.737500666 +0100 CET m=+1434.485054907 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.237514 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988798 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:37.98856192 +0100 CET raw_timestamp=1.772724877988562e+18 source=http
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988905 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988915 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=89 timestamp=2026-03-05 16:34:37.98856192 +0100 CET component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988923 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=46.764418048s window=10s component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988931 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:38.488927698 +0100 CET m=+1435.236481938 component=correlation
+Mar 05 16:34:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:37.988938 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702130 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:38.701874944 +0100 CET raw_timestamp=1.772724878701875e+18 source=http
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702215 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702225 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=90 timestamp=2026-03-05 16:34:38.701874944 +0100 CET component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702233 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=47.477731072s window=10s component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702244 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:39.202238683 +0100 CET m=+1435.949792925 component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.702252 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.924253 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:38.923966976 +0100 CET raw_timestamp=1.772724878923967e+18 source=http
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.924347 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=91 timestamp=2026-03-05 16:34:38.923966976 +0100 CET component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.924360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=47.699823104s window=10s component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.924372 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:39.424364654 +0100 CET m=+1436.171918894 component=correlation
+Mar 05 16:34:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:38.924381 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.144569 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:39.144283904 +0100 CET raw_timestamp=1.772724879144284e+18 source=http
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.144637 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=92 timestamp=2026-03-05 16:34:39.144283904 +0100 CET component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.144649 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=47.920140032s window=10s component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.144659 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:39.644653509 +0100 CET m=+1436.392207750 component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.144666 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356503 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:39.356227072 +0100 CET raw_timestamp=1.772724879356227e+18 source=http
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356592 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356603 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=93 timestamp=2026-03-05 16:34:39.356227072 +0100 CET component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356611 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=48.1320832s window=10s component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356619 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:39.856615355 +0100 CET m=+1436.604169596 component=correlation
+Mar 05 16:34:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:39.356626 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159081 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:40.158790912 +0100 CET raw_timestamp=1.772724880158791e+18 source=http
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159255 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159271 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159288 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159305 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=94 timestamp=2026-03-05 16:34:40.158790912 +0100 CET component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159317 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=48.93464704s window=10s component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159331 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:40.659323808 +0100 CET m=+1437.406878049 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.159341 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:40.668106 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:34:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:41.371381 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:41.368445952 +0100 CET raw_timestamp=1.772724881368446e+18 source=http
+Mar 05 16:34:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:41.371458 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=95 timestamp=2026-03-05 16:34:41.368445952 +0100 CET component=correlation
+Mar 05 16:34:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:41.371470 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=50.14430208s window=10s component=correlation
+Mar 05 16:34:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:41.371481 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:41.871474619 +0100 CET m=+1438.619028860 component=correlation
+Mar 05 16:34:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:41.371487 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083321 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:42.083087872 +0100 CET raw_timestamp=1.772724882083088e+18 source=http
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083401 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083411 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=96 timestamp=2026-03-05 16:34:42.083087872 +0100 CET component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083421 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=50.858944s window=10s component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083431 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:42.58342482 +0100 CET m=+1439.330979060 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.083437 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864445 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:42.861465088 +0100 CET raw_timestamp=1.772724882861465e+18 source=http
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864506 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864519 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=97 timestamp=2026-03-05 16:34:42.861465088 +0100 CET component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864528 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=51.637321216s window=10s component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864537 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:43.3645327 +0100 CET m=+1440.112086940 component=correlation
+Mar 05 16:34:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:42.864544 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629270 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:43.629020928 +0100 CET raw_timestamp=1.772724883629021e+18 source=http
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629333 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629345 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=98 timestamp=2026-03-05 16:34:43.629020928 +0100 CET component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629355 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=52.404877056s window=10s component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629364 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:44.129359423 +0100 CET m=+1440.876913663 component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.629371 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.894661 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:43.894401024 +0100 CET raw_timestamp=1.772724883894401e+18 source=http
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.894741 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=99 timestamp=2026-03-05 16:34:43.894401024 +0100 CET component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.894753 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=52.670257152s window=10s component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.894762 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:44.394757516 +0100 CET m=+1441.142311774 component=correlation
+Mar 05 16:34:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:43.894769 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.108064 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:44.107806976 +0100 CET raw_timestamp=1.772724884107807e+18 source=http
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.108135 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=100 timestamp=2026-03-05 16:34:44.107806976 +0100 CET component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.108147 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=52.883663104s window=10s component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.108156 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:44.608151167 +0100 CET m=+1441.355705408 component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.108163 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323016 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63906 timestamp=2026-03-05 16:34:44.32273408 +0100 CET raw_timestamp=1.772724884322734e+18 source=http
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323103 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323122 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63906 keepalive_seq=101 timestamp=2026-03-05 16:34:44.32273408 +0100 CET component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323135 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63906 time_diff=53.098590208s window=10s component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323147 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63906 emit_after=2026-03-05 16:34:44.823141044 +0100 CET m=+1441.570695286 component=correlation
+Mar 05 16:34:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:44.323155 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63906 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171329 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:45.171096576 +0100 CET raw_timestamp=1.7727248851710966e+18 source=network
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171412 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171426 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171437 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63906 key=91.224.92.185:63906 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171451 [logcorrelator] DEBUG processing B event: key=91.224.92.185:53639 timestamp=2026-03-05 16:34:45.171096576 +0100 CET component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171459 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:53639 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171465 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:53639 src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.171474 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=53639 buffer_size=121 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.207095 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:45.20679808 +0100 CET raw_timestamp=1.772724885206798e+18 source=http
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.207164 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=1 timestamp=2026-03-05 16:34:45.20679808 +0100 CET component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.207208 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.20679808 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.207220 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.439737 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:45.439461888 +0100 CET raw_timestamp=1.772724885439462e+18 source=http
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.439802 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=2 timestamp=2026-03-05 16:34:45.439461888 +0100 CET component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.439835 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.439461888 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.439858 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.675346 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:45.675052032 +0100 CET raw_timestamp=1.772724885675052e+18 source=http
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.675435 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=3 timestamp=2026-03-05 16:34:45.675052032 +0100 CET component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.675468 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.675052032 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.675478 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.888166 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:45.887926016 +0100 CET raw_timestamp=1.772724885887926e+18 source=http
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.888239 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=4 timestamp=2026-03-05 16:34:45.887926016 +0100 CET component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.888267 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.887926016 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:45.888276 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.104441 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:46.104187904 +0100 CET raw_timestamp=1.772724886104188e+18 source=http
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.104507 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=5 timestamp=2026-03-05 16:34:46.104187904 +0100 CET component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.104534 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:46.104187904 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.104545 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.882788 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:46.88247296 +0100 CET raw_timestamp=1.772724886882473e+18 source=http
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.882882 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=6 timestamp=2026-03-05 16:34:46.88247296 +0100 CET component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.882916 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:46.88247296 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:46.882927 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:47.608363 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:47.608128 +0100 CET raw_timestamp=1.772724887608128e+18 source=http
+Mar 05 16:34:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:47.608426 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=7 timestamp=2026-03-05 16:34:47.608128 +0100 CET component=correlation
+Mar 05 16:34:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:47.608455 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:47.608128 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:47.608465 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.315420 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:48.315196928 +0100 CET raw_timestamp=1.772724888315197e+18 source=http
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.315483 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=8 timestamp=2026-03-05 16:34:48.315196928 +0100 CET component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.315510 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:48.315196928 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.315519 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.541008 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:48.540749056 +0100 CET raw_timestamp=1.772724888540749e+18 source=http
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.541077 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=9 timestamp=2026-03-05 16:34:48.540749056 +0100 CET component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.541105 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:48.540749056 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:48.541116 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:49.530936 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:49.530633984 +0100 CET raw_timestamp=1.772724889530634e+18 source=http
+Mar 05 16:34:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:49.531006 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=10 timestamp=2026-03-05 16:34:49.530633984 +0100 CET component=correlation
+Mar 05 16:34:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:49.531049 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:49.530633984 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:49.531059 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:50.373574 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:50.373283072 +0100 CET raw_timestamp=1.772724890373283e+18 source=http
+Mar 05 16:34:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:50.373654 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=11 timestamp=2026-03-05 16:34:50.373283072 +0100 CET component=correlation
+Mar 05 16:34:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:50.373692 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:50.373283072 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:50.373703 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.090591 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:51.090342912 +0100 CET raw_timestamp=1.772724891090343e+18 source=http
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.090660 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=12 timestamp=2026-03-05 16:34:51.090342912 +0100 CET component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.090695 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:51.090342912 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.090710 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.316020 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:51.315685888 +0100 CET raw_timestamp=1.772724891315686e+18 source=http
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.316144 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=13 timestamp=2026-03-05 16:34:51.315685888 +0100 CET component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.316172 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:51.315685888 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.316180 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.533510 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:51.53323392 +0100 CET raw_timestamp=1.772724891533234e+18 source=http
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.533639 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=14 timestamp=2026-03-05 16:34:51.53323392 +0100 CET component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.533685 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:51.53323392 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.533695 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.751592 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:51.751316992 +0100 CET raw_timestamp=1.772724891751317e+18 source=http
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.751701 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=15 timestamp=2026-03-05 16:34:51.751316992 +0100 CET component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.751743 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:51.751316992 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:51.751753 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.003653 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:52.003367936 +0100 CET raw_timestamp=1.772724892003368e+18 source=http
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.003770 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=16 timestamp=2026-03-05 16:34:52.003367936 +0100 CET component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.003796 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:52.003367936 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.003807 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.833912 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:52.833620992 +0100 CET raw_timestamp=1.772724892833621e+18 source=http
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.833974 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=17 timestamp=2026-03-05 16:34:52.833620992 +0100 CET component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.834006 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:52.833620992 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:52.834015 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:53.821221 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:53.820950016 +0100 CET raw_timestamp=1.77272489382095e+18 source=http
+Mar 05 16:34:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:53.821289 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=18 timestamp=2026-03-05 16:34:53.820950016 +0100 CET component=correlation
+Mar 05 16:34:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:53.821317 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:53.820950016 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:53.821326 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:54.513684 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:54.513395968 +0100 CET raw_timestamp=1.772724894513396e+18 source=http
+Mar 05 16:34:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:54.513768 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=19 timestamp=2026-03-05 16:34:54.513395968 +0100 CET component=correlation
+Mar 05 16:34:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:54.513803 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:54.513395968 +0100 CET) + B(src_ip=91.224.92.185 src_port=53639 ts=2026-03-05 16:34:45.171096576 +0100 CET) component=correlation
+Mar 05 16:34:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:54.513812 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:53639 new_ttl=120 component=correlation
+Mar 05 16:34:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:55.235652 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:55.235397888 +0100 CET raw_timestamp=1.772724895235398e+18 source=http
+Mar 05 16:34:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:55.235760 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=20 timestamp=2026-03-05 16:34:55.235397888 +0100 CET component=correlation
+Mar 05 16:34:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:55.235769 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=10.064301312s window=10s component=correlation
+Mar 05 16:34:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:55.235779 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:55.735774317 +0100 CET m=+1452.483328557 component=correlation
+Mar 05 16:34:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:55.235788 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054664 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:56.054330112 +0100 CET raw_timestamp=1.77272489605433e+18 source=http
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054761 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054778 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=21 timestamp=2026-03-05 16:34:56.054330112 +0100 CET component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054791 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=10.883233536s window=10s component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054803 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:56.554796877 +0100 CET m=+1453.302351122 component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.054810 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:56.642336 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.106563 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:57.106311936 +0100 CET raw_timestamp=1.772724897106312e+18 source=http
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.106618 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=22 timestamp=2026-03-05 16:34:57.106311936 +0100 CET component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.106631 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=11.93521536s window=10s component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.106645 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:57.606637238 +0100 CET m=+1454.354191480 component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.106653 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.876053 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.895998 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:57.895736064 +0100 CET raw_timestamp=1.772724897895736e+18 source=http
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.896061 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=23 timestamp=2026-03-05 16:34:57.895736064 +0100 CET component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.896073 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=12.724639488s window=10s component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.896084 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:58.396077639 +0100 CET m=+1455.143631880 component=correlation
+Mar 05 16:34:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:57.896092 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.469842 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.631178 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:58.630951936 +0100 CET raw_timestamp=1.772724898630952e+18 source=http
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.631273 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=24 timestamp=2026-03-05 16:34:58.630951936 +0100 CET component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.631282 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=13.45985536s window=10s component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.631291 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:59.131286089 +0100 CET m=+1455.878840329 component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.631297 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.898808 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:34:58.898499072 +0100 CET raw_timestamp=1.772724898898499e+18 source=http
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.898911 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=25 timestamp=2026-03-05 16:34:58.898499072 +0100 CET component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.898927 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=13.727402496s window=10s component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.898939 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:34:59.398932539 +0100 CET m=+1456.146486780 component=correlation
+Mar 05 16:34:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:58.898947 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:34:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:59.258147 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:34:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:34:59.561289 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.303083 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:00.302838016 +0100 CET raw_timestamp=1.772724900302838e+18 source=http
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.303159 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=26 timestamp=2026-03-05 16:35:00.302838016 +0100 CET component=correlation
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.303168 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=15.13174144s window=10s component=correlation
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.303178 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:00.803172679 +0100 CET m=+1457.550726920 component=correlation
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.303184 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:00.895394 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.113192 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:01.11294208 +0100 CET raw_timestamp=1.772724901112942e+18 source=http
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.117861 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=27 timestamp=2026-03-05 16:35:01.11294208 +0100 CET component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.117890 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=15.941845504s window=10s component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.117906 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:01.617895727 +0100 CET m=+1458.365449969 component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.117921 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992247 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:01.99204608 +0100 CET raw_timestamp=1.772724901992046e+18 source=http
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992363 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992373 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=28 timestamp=2026-03-05 16:35:01.99204608 +0100 CET component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992381 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=16.820949504s window=10s component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992389 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:02.492384944 +0100 CET m=+1459.239939206 component=correlation
+Mar 05 16:35:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:01.992395 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.556216 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.780167 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:02.779910912 +0100 CET raw_timestamp=1.772724902779911e+18 source=http
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.780228 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=29 timestamp=2026-03-05 16:35:02.779910912 +0100 CET component=correlation
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.780240 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=17.608814336s window=10s component=correlation
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.780252 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:03.280244948 +0100 CET m=+1460.027799196 component=correlation
+Mar 05 16:35:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:02.780259 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.287338 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.840067 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:03.83968512 +0100 CET raw_timestamp=1.772724903839685e+18 source=http
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.840153 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=30 timestamp=2026-03-05 16:35:03.83968512 +0100 CET component=correlation
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.840166 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=18.668588544s window=10s component=correlation
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.840177 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:04.340171055 +0100 CET m=+1461.087725296 component=correlation
+Mar 05 16:35:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:03.840188 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.485775 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.627026 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:04.626776064 +0100 CET raw_timestamp=1.772724904626776e+18 source=http
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.627094 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=31 timestamp=2026-03-05 16:35:04.626776064 +0100 CET component=correlation
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.627107 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=19.455679488s window=10s component=correlation
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.627116 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:05.127111529 +0100 CET m=+1461.874665769 component=correlation
+Mar 05 16:35:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:04.627123 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458097 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:05.457799936 +0100 CET raw_timestamp=1.7727249054578e+18 source=http
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458185 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458204 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=32 timestamp=2026-03-05 16:35:05.457799936 +0100 CET component=correlation
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458216 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=20.28670336s window=10s component=correlation
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458228 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:05.958222313 +0100 CET m=+1462.705776555 component=correlation
+Mar 05 16:35:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:05.458236 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171210 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:06.170919936 +0100 CET raw_timestamp=1.77272490617092e+18 source=http
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171341 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171352 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=33 timestamp=2026-03-05 16:35:06.170919936 +0100 CET component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=20.99982336s window=10s component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171369 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:06.671364892 +0100 CET m=+1463.418919133 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.171376 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.395930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:06.395589888 +0100 CET raw_timestamp=1.77272490639559e+18 source=http
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.396057 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=34 timestamp=2026-03-05 16:35:06.395589888 +0100 CET component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.396069 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=21.224493312s window=10s component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.396083 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:06.896076323 +0100 CET m=+1463.643630565 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.396093 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.612475 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:06.612221952 +0100 CET raw_timestamp=1.772724906612222e+18 source=http
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.612559 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=35 timestamp=2026-03-05 16:35:06.612221952 +0100 CET component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.612567 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=21.441125376s window=10s component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.612576 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:07.112571203 +0100 CET m=+1463.860125460 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.612582 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823064 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:06.82277888 +0100 CET raw_timestamp=1.772724906822779e+18 source=http
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823133 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823150 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=36 timestamp=2026-03-05 16:35:06.82277888 +0100 CET component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823164 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=21.651682304s window=10s component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823174 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:07.323169567 +0100 CET m=+1464.070723809 component=correlation
+Mar 05 16:35:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:06.823182 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036392 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:07.036133888 +0100 CET raw_timestamp=1.772724907036134e+18 source=http
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036473 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036485 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=37 timestamp=2026-03-05 16:35:07.036133888 +0100 CET component=correlation
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036494 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=21.865037312s window=10s component=correlation
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036502 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:07.536497979 +0100 CET m=+1464.284052222 component=correlation
+Mar 05 16:35:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:07.036508 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146427 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:08.146185984 +0100 CET raw_timestamp=1.772724908146186e+18 source=http
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146518 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146532 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146544 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146555 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=38 timestamp=2026-03-05 16:35:08.146185984 +0100 CET component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146563 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=22.975089408s window=10s component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146571 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:08.646566951 +0100 CET m=+1465.394121192 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.146577 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.747457 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.887946 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:08.88757504 +0100 CET raw_timestamp=1.772724908887575e+18 source=http
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.888029 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=39 timestamp=2026-03-05 16:35:08.88757504 +0100 CET component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.888045 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=23.716478464s window=10s component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.888057 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:09.388049857 +0100 CET m=+1466.135604097 component=correlation
+Mar 05 16:35:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:08.888065 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.442412 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:57189 src_ip=91.224.92.185 src_port=57189 ttl=120 age=2m9.433252845s component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.442442 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.620725 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:09.620473088 +0100 CET raw_timestamp=1.772724909620473e+18 source=http
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.620783 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=40 timestamp=2026-03-05 16:35:09.620473088 +0100 CET component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.620796 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=24.449376512s window=10s component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.620805 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:10.120800465 +0100 CET m=+1466.868354705 component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.620812 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.847266 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:09.84701696 +0100 CET raw_timestamp=1.772724909847017e+18 source=http
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.847326 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=41 timestamp=2026-03-05 16:35:09.84701696 +0100 CET component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.847338 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=24.675920384s window=10s component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.847348 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:10.347342844 +0100 CET m=+1467.094897084 component=correlation
+Mar 05 16:35:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:09.847355 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.080052 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:10.079785984 +0100 CET raw_timestamp=1.772724910079786e+18 source=http
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.080137 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=42 timestamp=2026-03-05 16:35:10.079785984 +0100 CET component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.080145 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=24.908689408s window=10s component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.080156 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:10.580150376 +0100 CET m=+1467.327704616 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.080162 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335364 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:10.33510912 +0100 CET raw_timestamp=1.772724910335109e+18 source=http
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335433 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335446 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=43 timestamp=2026-03-05 16:35:10.33510912 +0100 CET component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335456 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=25.164012544s window=10s component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335466 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:10.835460896 +0100 CET m=+1467.583015137 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.335472 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.550885 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:10.550586112 +0100 CET raw_timestamp=1.772724910550586e+18 source=http
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.550959 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.550977 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=44 timestamp=2026-03-05 16:35:10.550586112 +0100 CET component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.550990 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=25.379489536s window=10s component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.551002 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:11.050995769 +0100 CET m=+1467.798550010 component=correlation
+Mar 05 16:35:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:10.551010 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.337934 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:11.33761792 +0100 CET raw_timestamp=1.772724911337618e+18 source=http
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338080 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338094 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338108 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338128 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=45 timestamp=2026-03-05 16:35:11.33761792 +0100 CET component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338138 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=26.166521344s window=10s component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338148 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:11.838142497 +0100 CET m=+1468.585696740 component=correlation
+Mar 05 16:35:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:11.338156 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293195 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:12.29292288 +0100 CET raw_timestamp=1.772724912292923e+18 source=http
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293318 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293329 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=46 timestamp=2026-03-05 16:35:12.29292288 +0100 CET component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293338 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=27.121826304s window=10s component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293346 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:12.793341703 +0100 CET m=+1469.540895943 component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.293354 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:12.818200 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.035654 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:13.035398912 +0100 CET raw_timestamp=1.772724913035399e+18 source=http
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.035724 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=47 timestamp=2026-03-05 16:35:13.035398912 +0100 CET component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.035739 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=27.864302336s window=10s component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.035750 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:13.535743988 +0100 CET m=+1470.283298228 component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.035756 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.599126 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.863267 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:13.863069952 +0100 CET raw_timestamp=1.77272491386307e+18 source=http
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.863314 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=48 timestamp=2026-03-05 16:35:13.863069952 +0100 CET component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.863325 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=28.691973376s window=10s component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.863335 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:14.36332957 +0100 CET m=+1471.110883811 component=correlation
+Mar 05 16:35:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:13.863341 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.084604 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:14.084349952 +0100 CET raw_timestamp=1.77272491408435e+18 source=http
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.084661 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=49 timestamp=2026-03-05 16:35:14.084349952 +0100 CET component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.084671 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=28.913253376s window=10s component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.084680 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:14.584675178 +0100 CET m=+1471.332229419 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.084687 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.683533 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.683553 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.876210 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:14.875940096 +0100 CET raw_timestamp=1.77272491487594e+18 source=http
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.876277 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=50 timestamp=2026-03-05 16:35:14.875940096 +0100 CET component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.876288 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=29.70484352s window=10s component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.876312 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:15.376292438 +0100 CET m=+1472.123846682 component=correlation
+Mar 05 16:35:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:14.876319 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.130479 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:15.130163968 +0100 CET raw_timestamp=1.772724915130164e+18 source=http
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.130573 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=51 timestamp=2026-03-05 16:35:15.130163968 +0100 CET component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.130589 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=29.959067392s window=10s component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.130599 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:15.630593764 +0100 CET m=+1472.378148005 component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.130608 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377144 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:15.376903936 +0100 CET raw_timestamp=1.772724915376904e+18 source=http
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377206 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377220 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=52 timestamp=2026-03-05 16:35:15.376903936 +0100 CET component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377232 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=30.20580736s window=10s component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377241 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:15.877236322 +0100 CET m=+1472.624790562 component=correlation
+Mar 05 16:35:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:15.377247 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132647 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:16.132461056 +0100 CET raw_timestamp=1.772724916132461e+18 source=http
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132698 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132711 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132733 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=53 timestamp=2026-03-05 16:35:16.132461056 +0100 CET component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132744 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=30.96136448s window=10s component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132752 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:16.632747907 +0100 CET m=+1473.380302148 component=correlation
+Mar 05 16:35:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:16.132758 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.131458 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.247665 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:17.24739712 +0100 CET raw_timestamp=1.772724917247397e+18 source=http
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.247735 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=54 timestamp=2026-03-05 16:35:17.24739712 +0100 CET component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.247747 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=32.076300544s window=10s component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.247757 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:17.747751233 +0100 CET m=+1474.495305473 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.247764 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.918367 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.968409 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:17.968112128 +0100 CET raw_timestamp=1.772724917968112e+18 source=http
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.968473 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=55 timestamp=2026-03-05 16:35:17.968112128 +0100 CET component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.968485 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=32.797015552s window=10s component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.968497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:18.468489488 +0100 CET m=+1475.216043729 component=correlation
+Mar 05 16:35:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:17.968506 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691336 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:18.691041024 +0100 CET raw_timestamp=1.772724918691041e+18 source=http
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691413 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691428 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=56 timestamp=2026-03-05 16:35:18.691041024 +0100 CET component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691439 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=33.519944448s window=10s component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691448 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:19.191443723 +0100 CET m=+1475.938997963 component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.691456 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.909622 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:18.909350912 +0100 CET raw_timestamp=1.772724918909351e+18 source=http
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.909688 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=57 timestamp=2026-03-05 16:35:18.909350912 +0100 CET component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.909700 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=33.738254336s window=10s component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.909710 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:19.409704634 +0100 CET m=+1476.157258874 component=correlation
+Mar 05 16:35:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:18.909729 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.131607 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:19.131373056 +0100 CET raw_timestamp=1.772724919131373e+18 source=http
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.131669 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=58 timestamp=2026-03-05 16:35:19.131373056 +0100 CET component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.131680 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=33.96027648s window=10s component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.131689 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:19.6316848 +0100 CET m=+1476.379239040 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.131706 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393158 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:19.39291008 +0100 CET raw_timestamp=1.77272491939291e+18 source=http
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393249 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393260 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=59 timestamp=2026-03-05 16:35:19.39291008 +0100 CET component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393269 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=34.221813504s window=10s component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393278 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:19.893273538 +0100 CET m=+1476.640827778 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.393284 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614108 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:19.613805056 +0100 CET raw_timestamp=1.772724919613805e+18 source=http
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614179 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614194 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=60 timestamp=2026-03-05 16:35:19.613805056 +0100 CET component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614205 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=34.44270848s window=10s component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614215 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:20.114209551 +0100 CET m=+1476.861763792 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.614222 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831310 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:19.831070976 +0100 CET raw_timestamp=1.772724919831071e+18 source=http
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831377 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831392 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=61 timestamp=2026-03-05 16:35:19.831070976 +0100 CET component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831402 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=34.6599744s window=10s component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831412 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:20.331406963 +0100 CET m=+1477.078961227 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.831418 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:19.897405 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958399 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:20.958096896 +0100 CET raw_timestamp=1.772724920958097e+18 source=http
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958489 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958502 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958511 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=62 timestamp=2026-03-05 16:35:20.958096896 +0100 CET component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958520 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=35.78700032s window=10s component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958529 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:21.458524296 +0100 CET m=+1478.206078536 component=correlation
+Mar 05 16:35:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:20.958536 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677404 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:21.677148928 +0100 CET raw_timestamp=1.772724921677149e+18 source=http
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677503 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677513 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=63 timestamp=2026-03-05 16:35:21.677148928 +0100 CET component=correlation
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677520 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=36.506052352s window=10s component=correlation
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677529 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:22.177524617 +0100 CET m=+1478.925078858 component=correlation
+Mar 05 16:35:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:21.677535 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414411 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:22.414185984 +0100 CET raw_timestamp=1.772724922414186e+18 source=http
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414479 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414494 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=64 timestamp=2026-03-05 16:35:22.414185984 +0100 CET component=correlation
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414506 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=37.243089408s window=10s component=correlation
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414517 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:22.914511383 +0100 CET m=+1479.662065626 component=correlation
+Mar 05 16:35:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:22.414525 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.242914 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:23.242616064 +0100 CET raw_timestamp=1.772724923242616e+18 source=http
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.243019 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.243033 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=65 timestamp=2026-03-05 16:35:23.242616064 +0100 CET component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.243042 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=38.071519488s window=10s component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.243052 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:23.743047074 +0100 CET m=+1480.490601315 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.243060 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.467414 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:23.467091968 +0100 CET raw_timestamp=1.772724923467092e+18 source=http
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.467519 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=66 timestamp=2026-03-05 16:35:23.467091968 +0100 CET component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.467529 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=38.295995392s window=10s component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.467539 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:23.967533292 +0100 CET m=+1480.715087537 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.467546 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.729913 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:23.729605888 +0100 CET raw_timestamp=1.772724923729606e+18 source=http
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.730028 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=67 timestamp=2026-03-05 16:35:23.729605888 +0100 CET component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.730043 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=38.558509312s window=10s component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.730055 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:24.230048889 +0100 CET m=+1480.977603141 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.730064 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960379 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:23.960108032 +0100 CET raw_timestamp=1.772724923960108e+18 source=http
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960449 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960463 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=68 timestamp=2026-03-05 16:35:23.960108032 +0100 CET component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960475 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=38.789011456s window=10s component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960486 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:24.460481013 +0100 CET m=+1481.208035255 component=correlation
+Mar 05 16:35:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:23.960493 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726624 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:24.72634496 +0100 CET raw_timestamp=1.772724924726345e+18 source=http
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726734 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726754 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726771 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726790 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=69 timestamp=2026-03-05 16:35:24.72634496 +0100 CET component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726897 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=39.555248384s window=10s component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726922 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:25.226908297 +0100 CET m=+1481.974462538 component=correlation
+Mar 05 16:35:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:24.726931 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793132 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:25.792788992 +0100 CET raw_timestamp=1.772724925792789e+18 source=http
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793212 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793230 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=70 timestamp=2026-03-05 16:35:25.792788992 +0100 CET component=correlation
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793244 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=40.621692416s window=10s component=correlation
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793255 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:26.29325042 +0100 CET m=+1483.040804661 component=correlation
+Mar 05 16:35:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:25.793262 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.323339 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.661236 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:26.660973056 +0100 CET raw_timestamp=1.772724926660973e+18 source=http
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.661346 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=71 timestamp=2026-03-05 16:35:26.660973056 +0100 CET component=correlation
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.661362 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=41.48987648s window=10s component=correlation
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.661376 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:27.161367953 +0100 CET m=+1483.908922199 component=correlation
+Mar 05 16:35:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:26.661387 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423348 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:27.422979072 +0100 CET raw_timestamp=1.772724927422979e+18 source=http
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423440 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423460 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=72 timestamp=2026-03-05 16:35:27.422979072 +0100 CET component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423473 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=42.251882496s window=10s component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423484 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:27.923478917 +0100 CET m=+1484.671033157 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.423490 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.640467 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:27.640195072 +0100 CET raw_timestamp=1.772724927640195e+18 source=http
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.640549 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=73 timestamp=2026-03-05 16:35:27.640195072 +0100 CET component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.640566 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=42.469098496s window=10s component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.640577 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:28.140571024 +0100 CET m=+1484.888125264 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.640584 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.874294 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:27.87400192 +0100 CET raw_timestamp=1.772724927874002e+18 source=http
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.874374 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=74 timestamp=2026-03-05 16:35:27.87400192 +0100 CET component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.874388 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=42.702905344s window=10s component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.874400 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:28.374393668 +0100 CET m=+1485.121947913 component=correlation
+Mar 05 16:35:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:27.874408 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106574 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:28.106235904 +0100 CET raw_timestamp=1.772724928106236e+18 source=http
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106664 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106682 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=75 timestamp=2026-03-05 16:35:28.106235904 +0100 CET component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106696 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=42.935139328s window=10s component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106706 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:28.606700567 +0100 CET m=+1485.354254807 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.106723 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388767 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:28.388418048 +0100 CET raw_timestamp=1.772724928388418e+18 source=http
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388874 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388890 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388910 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=76 timestamp=2026-03-05 16:35:28.388418048 +0100 CET component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388924 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=43.217321472s window=10s component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388933 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:28.888928343 +0100 CET m=+1485.636482584 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.388942 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:28.729422 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157492 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:29.157231104 +0100 CET raw_timestamp=1.772724929157231e+18 source=http
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157553 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157566 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=77 timestamp=2026-03-05 16:35:29.157231104 +0100 CET component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157577 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=43.986134528s window=10s component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157598 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:29.657581669 +0100 CET m=+1486.405135909 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.157605 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.880935 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:29.880626944 +0100 CET raw_timestamp=1.772724929880627e+18 source=http
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.881014 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.881032 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=78 timestamp=2026-03-05 16:35:29.880626944 +0100 CET component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.881045 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=44.709530368s window=10s component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.881058 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:30.38105141 +0100 CET m=+1487.128605653 component=correlation
+Mar 05 16:35:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:29.881066 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596606 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:30.59632896 +0100 CET raw_timestamp=1.772724930596329e+18 source=http
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596673 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596696 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=79 timestamp=2026-03-05 16:35:30.59632896 +0100 CET component=correlation
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596708 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=45.425232384s window=10s component=correlation
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596727 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:31.096712285 +0100 CET m=+1487.844266525 component=correlation
+Mar 05 16:35:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:30.596736 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332003 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:31.331746048 +0100 CET raw_timestamp=1.772724931331746e+18 source=http
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332081 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332099 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=80 timestamp=2026-03-05 16:35:31.331746048 +0100 CET component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332112 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=46.160649472s window=10s component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332125 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:31.832117822 +0100 CET m=+1488.579672063 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.332132 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.607198 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:31.606953984 +0100 CET raw_timestamp=1.772724931606954e+18 source=http
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.607263 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=81 timestamp=2026-03-05 16:35:31.606953984 +0100 CET component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.607274 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=46.435857408s window=10s component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.607284 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:32.107279009 +0100 CET m=+1488.854833249 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.607290 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840399 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:31.840123904 +0100 CET raw_timestamp=1.772724931840124e+18 source=http
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840472 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840486 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=82 timestamp=2026-03-05 16:35:31.840123904 +0100 CET component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840496 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=46.669027328s window=10s component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840505 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:32.340501033 +0100 CET m=+1489.088055274 component=correlation
+Mar 05 16:35:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:31.840512 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.066641 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:32.066348032 +0100 CET raw_timestamp=1.772724932066348e+18 source=http
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.066709 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=83 timestamp=2026-03-05 16:35:32.066348032 +0100 CET component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.066738 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=46.895251456s window=10s component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.066749 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:32.566743348 +0100 CET m=+1489.314297588 component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.066755 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304634 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:32.304354048 +0100 CET raw_timestamp=1.772724932304354e+18 source=http
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304701 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304725 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=84 timestamp=2026-03-05 16:35:32.304354048 +0100 CET component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304737 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=47.133257472s window=10s component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304746 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:32.804741608 +0100 CET m=+1489.552295849 component=correlation
+Mar 05 16:35:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:32.304753 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124528 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:33.124161024 +0100 CET raw_timestamp=1.772724933124161e+18 source=http
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124677 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124696 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124710 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124739 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=85 timestamp=2026-03-05 16:35:33.124161024 +0100 CET component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124749 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=47.953064448s window=10s component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124758 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:33.624753592 +0100 CET m=+1490.372307834 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.124767 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857068 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:33.856688896 +0100 CET raw_timestamp=1.772724933856689e+18 source=http
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857132 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857148 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=86 timestamp=2026-03-05 16:35:33.856688896 +0100 CET component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857160 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=48.68559232s window=10s component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857170 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:34.357165098 +0100 CET m=+1491.104719339 component=correlation
+Mar 05 16:35:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:33.857178 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575179 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:34.574876928 +0100 CET raw_timestamp=1.772724934574877e+18 source=http
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575262 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575281 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=87 timestamp=2026-03-05 16:35:34.574876928 +0100 CET component=correlation
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575294 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=49.403780352s window=10s component=correlation
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575306 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:35.0752997 +0100 CET m=+1491.822853944 component=correlation
+Mar 05 16:35:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:34.575314 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.180567 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.365757 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:35.365538048 +0100 CET raw_timestamp=1.772724935365538e+18 source=http
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.365812 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=88 timestamp=2026-03-05 16:35:35.365538048 +0100 CET component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.365823 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=50.194441472s window=10s component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.365833 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:35.865827355 +0100 CET m=+1492.613381596 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.365839 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.614212 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:35.613968896 +0100 CET raw_timestamp=1.772724935613969e+18 source=http
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.614272 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=89 timestamp=2026-03-05 16:35:35.613968896 +0100 CET component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.614284 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=50.44287232s window=10s component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.614293 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:36.114288227 +0100 CET m=+1492.861842467 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.614300 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874793 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:35.874547968 +0100 CET raw_timestamp=1.772724935874548e+18 source=http
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874880 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874903 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=90 timestamp=2026-03-05 16:35:35.874547968 +0100 CET component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874917 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=50.703451392s window=10s component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874927 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:36.374921774 +0100 CET m=+1493.122476016 component=correlation
+Mar 05 16:35:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:35.874935 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.111982 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:36.111710976 +0100 CET raw_timestamp=1.772724936111711e+18 source=http
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.112043 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=91 timestamp=2026-03-05 16:35:36.111710976 +0100 CET component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.112056 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=50.9406144s window=10s component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.112068 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:36.612061397 +0100 CET m=+1493.359615651 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.112076 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329754 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:36.329430016 +0100 CET raw_timestamp=1.77272493632943e+18 source=http
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329833 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329862 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=92 timestamp=2026-03-05 16:35:36.329430016 +0100 CET component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329875 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=51.15833344s window=10s component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329887 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:36.829880741 +0100 CET m=+1493.577434982 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.329895 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.645550 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.645564 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:35:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:36.871418 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.086175 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:37.08593408 +0100 CET raw_timestamp=1.772724937085934e+18 source=http
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.086234 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=93 timestamp=2026-03-05 16:35:37.08593408 +0100 CET component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.086246 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=51.914837504s window=10s component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.086255 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:37.586250552 +0100 CET m=+1494.333804795 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.086263 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.340287 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:37.340050944 +0100 CET raw_timestamp=1.772724937340051e+18 source=http
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.340361 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=94 timestamp=2026-03-05 16:35:37.340050944 +0100 CET component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.340373 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=52.168954368s window=10s component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.340398 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:37.840392038 +0100 CET m=+1494.587946279 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.340406 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.561332 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:37.561103104 +0100 CET raw_timestamp=1.772724937561103e+18 source=http
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.561391 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=95 timestamp=2026-03-05 16:35:37.561103104 +0100 CET component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.561402 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=52.390006528s window=10s component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.561412 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:38.061406731 +0100 CET m=+1494.808960971 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.561418 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.733394 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.776575 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:37.776354048 +0100 CET raw_timestamp=1.772724937776354e+18 source=http
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.776633 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=96 timestamp=2026-03-05 16:35:37.776354048 +0100 CET component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.776645 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=52.605257472s window=10s component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.776653 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:38.276649254 +0100 CET m=+1495.024203494 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.776660 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995157 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:37.994872064 +0100 CET raw_timestamp=1.772724937994872e+18 source=http
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995232 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995249 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=97 timestamp=2026-03-05 16:35:37.994872064 +0100 CET component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995261 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=52.823775488s window=10s component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995272 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:38.495266225 +0100 CET m=+1495.242820466 component=correlation
+Mar 05 16:35:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:37.995280 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217373 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:38.217084928 +0100 CET raw_timestamp=1.772724938217085e+18 source=http
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217463 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217482 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=98 timestamp=2026-03-05 16:35:38.217084928 +0100 CET component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217494 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=53.045988352s window=10s component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217507 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:38.717500819 +0100 CET m=+1495.465055063 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.217516 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441038 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:38.440762112 +0100 CET raw_timestamp=1.772724938440762e+18 source=http
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441115 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441133 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=99 timestamp=2026-03-05 16:35:38.440762112 +0100 CET component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441144 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=53.269665536s window=10s component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441154 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:38.941148615 +0100 CET m=+1495.688702860 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.441161 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670010 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:38.669701888 +0100 CET raw_timestamp=1.772724938669702e+18 source=http
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670097 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670107 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=100 timestamp=2026-03-05 16:35:38.669701888 +0100 CET component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670116 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=53.498605312s window=10s component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670125 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:39.170120387 +0100 CET m=+1495.917674628 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.670131 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.791351 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.898205 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=53639 timestamp=2026-03-05 16:35:38.897913088 +0100 CET raw_timestamp=1.772724938897913e+18 source=http
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.898270 [logcorrelator] DEBUG processing A event: key=91.224.92.185:53639 keepalive_seq=101 timestamp=2026-03-05 16:35:38.897913088 +0100 CET component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.898282 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:53639 time_diff=53.726816512s window=10s component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.898292 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=53639 emit_after=2026-03-05 16:35:39.398286389 +0100 CET m=+1496.145840630 component=correlation
+Mar 05 16:35:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:38.898300 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=53639 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217630 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:39.21714432 +0100 CET raw_timestamp=1.7727249392171443e+18 source=network
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217773 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217792 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217808 [logcorrelator] DEBUG processing B event: key=91.224.92.185:62206 timestamp=2026-03-05 16:35:39.21714432 +0100 CET component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217818 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:62206 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217824 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:62206 src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.217834 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=62206 buffer_size=94 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.267200 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:39.266787072 +0100 CET raw_timestamp=1.772724939266787e+18 source=http
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.267254 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=1 timestamp=2026-03-05 16:35:39.266787072 +0100 CET component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.267283 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.266787072 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.267292 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.504556 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:39.504249088 +0100 CET raw_timestamp=1.772724939504249e+18 source=http
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.504650 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=53639 key=91.224.92.185:53639 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.504670 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=2 timestamp=2026-03-05 16:35:39.504249088 +0100 CET component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.504699 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.504249088 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.504709 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.727793 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:39.727535104 +0100 CET raw_timestamp=1.772724939727535e+18 source=http
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.727892 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=3 timestamp=2026-03-05 16:35:39.727535104 +0100 CET component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.727922 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.727535104 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.727933 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.969938 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:39.969658112 +0100 CET raw_timestamp=1.772724939969658e+18 source=http
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.970001 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=4 timestamp=2026-03-05 16:35:39.969658112 +0100 CET component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.970029 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.969658112 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:39.970037 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.184652 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:40.184396032 +0100 CET raw_timestamp=1.772724940184396e+18 source=http
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.184711 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=5 timestamp=2026-03-05 16:35:40.184396032 +0100 CET component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.184746 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:40.184396032 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.184761 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.446303 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:40.446045952 +0100 CET raw_timestamp=1.772724940446046e+18 source=http
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.446369 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=6 timestamp=2026-03-05 16:35:40.446045952 +0100 CET component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.446398 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:40.446045952 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.446408 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.672034 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:40.671707904 +0100 CET raw_timestamp=1.772724940671708e+18 source=http
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.672106 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=7 timestamp=2026-03-05 16:35:40.671707904 +0100 CET component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.672137 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:40.671707904 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.672146 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.898998 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:40.89872896 +0100 CET raw_timestamp=1.772724940898729e+18 source=http
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.899059 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=8 timestamp=2026-03-05 16:35:40.89872896 +0100 CET component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.899086 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:40.89872896 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:40.899095 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.148382 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:41.148059904 +0100 CET raw_timestamp=1.77272494114806e+18 source=http
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.148498 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=9 timestamp=2026-03-05 16:35:41.148059904 +0100 CET component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.148534 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:41.148059904 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.148544 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.368372 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:41.368124928 +0100 CET raw_timestamp=1.772724941368125e+18 source=http
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.368437 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=10 timestamp=2026-03-05 16:35:41.368124928 +0100 CET component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.368467 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:41.368124928 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.368476 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.601347 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:41.601083904 +0100 CET raw_timestamp=1.772724941601084e+18 source=http
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.601408 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=11 timestamp=2026-03-05 16:35:41.601083904 +0100 CET component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.601435 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:41.601083904 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.601444 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.840072 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:41.839745024 +0100 CET raw_timestamp=1.772724941839745e+18 source=http
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.840159 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=12 timestamp=2026-03-05 16:35:41.839745024 +0100 CET component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.840216 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:41.839745024 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:41.840231 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:42.532119 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:42.531814912 +0100 CET raw_timestamp=1.772724942531815e+18 source=http
+Mar 05 16:35:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:42.532200 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=13 timestamp=2026-03-05 16:35:42.531814912 +0100 CET component=correlation
+Mar 05 16:35:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:42.532239 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:42.531814912 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:42.532250 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:43.276554 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:43.276314112 +0100 CET raw_timestamp=1.772724943276314e+18 source=http
+Mar 05 16:35:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:43.276632 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=14 timestamp=2026-03-05 16:35:43.276314112 +0100 CET component=correlation
+Mar 05 16:35:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:43.276661 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:43.276314112 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:43.276670 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.078092 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:44.077818112 +0100 CET raw_timestamp=1.772724944077818e+18 source=http
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.078176 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=15 timestamp=2026-03-05 16:35:44.077818112 +0100 CET component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.078212 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:44.077818112 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.078223 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.822046 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:44.821762048 +0100 CET raw_timestamp=1.772724944821762e+18 source=http
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.822116 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=16 timestamp=2026-03-05 16:35:44.821762048 +0100 CET component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.822142 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:44.821762048 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:44.822151 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:45.585308 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:45.585044992 +0100 CET raw_timestamp=1.772724945585045e+18 source=http
+Mar 05 16:35:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:45.585381 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=17 timestamp=2026-03-05 16:35:45.585044992 +0100 CET component=correlation
+Mar 05 16:35:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:45.585413 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:45.585044992 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:45.585425 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:46.338105 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:46.337776896 +0100 CET raw_timestamp=1.772724946337777e+18 source=http
+Mar 05 16:35:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:46.338184 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=18 timestamp=2026-03-05 16:35:46.337776896 +0100 CET component=correlation
+Mar 05 16:35:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:46.338219 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:46.337776896 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:46.338230 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.147036 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:47.14675712 +0100 CET raw_timestamp=1.772724947146757e+18 source=http
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.147101 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=19 timestamp=2026-03-05 16:35:47.14675712 +0100 CET component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.147135 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:47.14675712 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.147144 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.367035 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:47.36679296 +0100 CET raw_timestamp=1.772724947366793e+18 source=http
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.367101 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=20 timestamp=2026-03-05 16:35:47.36679296 +0100 CET component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.367136 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:47.36679296 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:47.367146 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:48.346759 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:48.346482944 +0100 CET raw_timestamp=1.772724948346483e+18 source=http
+Mar 05 16:35:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:48.346860 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=21 timestamp=2026-03-05 16:35:48.346482944 +0100 CET component=correlation
+Mar 05 16:35:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:48.346888 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:48.346482944 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:48.346896 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.063071 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:49.062803968 +0100 CET raw_timestamp=1.772724949062804e+18 source=http
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.063131 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=22 timestamp=2026-03-05 16:35:49.062803968 +0100 CET component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.063167 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:49.062803968 +0100 CET) + B(src_ip=91.224.92.185 src_port=62206 ts=2026-03-05 16:35:39.21714432 +0100 CET) component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.063176 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:62206 new_ttl=120 component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.866725 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:49.86648192 +0100 CET raw_timestamp=1.772724949866482e+18 source=http
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.866827 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=23 timestamp=2026-03-05 16:35:49.86648192 +0100 CET component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.866841 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=10.6493376s window=10s component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.866873 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:50.36684504 +0100 CET m=+1507.114399280 component=correlation
+Mar 05 16:35:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:49.866881 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589509 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:50.589243904 +0100 CET raw_timestamp=1.772724950589244e+18 source=http
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589607 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589629 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=24 timestamp=2026-03-05 16:35:50.589243904 +0100 CET component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589638 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=11.372099584s window=10s component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589647 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:51.089642074 +0100 CET m=+1507.837196314 component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.589653 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.807346 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:50.807062016 +0100 CET raw_timestamp=1.772724950807062e+18 source=http
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.807417 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=25 timestamp=2026-03-05 16:35:50.807062016 +0100 CET component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.807429 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=11.589917696s window=10s component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.807440 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:51.307433697 +0100 CET m=+1508.054987937 component=correlation
+Mar 05 16:35:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:50.807448 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.032659 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:51.032390912 +0100 CET raw_timestamp=1.772724951032391e+18 source=http
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.032732 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=26 timestamp=2026-03-05 16:35:51.032390912 +0100 CET component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.032745 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=11.815246592s window=10s component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.032754 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:51.532749249 +0100 CET m=+1508.280303489 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.032761 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258251 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:51.258008064 +0100 CET raw_timestamp=1.772724951258008e+18 source=http
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258317 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258331 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=27 timestamp=2026-03-05 16:35:51.258008064 +0100 CET component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258341 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=12.040863744s window=10s component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258349 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:51.758345031 +0100 CET m=+1508.505899271 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.258356 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.483931 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:51.483646976 +0100 CET raw_timestamp=1.772724951483647e+18 source=http
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.483996 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.484009 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=28 timestamp=2026-03-05 16:35:51.483646976 +0100 CET component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.484019 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=12.266502656s window=10s component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.484028 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:51.984023399 +0100 CET m=+1508.731577640 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.484034 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:51.554564 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456030 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:52.455725056 +0100 CET raw_timestamp=1.772724952455725e+18 source=http
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456108 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456125 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456137 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=29 timestamp=2026-03-05 16:35:52.455725056 +0100 CET component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456148 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=13.238580736s window=10s component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456156 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:52.956151849 +0100 CET m=+1509.703706089 component=correlation
+Mar 05 16:35:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:52.456163 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288504 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:53.288231936 +0100 CET raw_timestamp=1.772724953288232e+18 source=http
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288570 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288583 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=30 timestamp=2026-03-05 16:35:53.288231936 +0100 CET component=correlation
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288593 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=14.071087616s window=10s component=correlation
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288603 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:53.78859826 +0100 CET m=+1510.536152501 component=correlation
+Mar 05 16:35:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:53.288609 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015512 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:54.015267072 +0100 CET raw_timestamp=1.772724954015267e+18 source=http
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015577 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015591 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=31 timestamp=2026-03-05 16:35:54.015267072 +0100 CET component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015601 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=14.798122752s window=10s component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015610 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:54.515605169 +0100 CET m=+1511.263159409 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.015617 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.236895 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:54.236600064 +0100 CET raw_timestamp=1.7727249542366e+18 source=http
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.236959 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=32 timestamp=2026-03-05 16:35:54.236600064 +0100 CET component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.236969 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=15.019455744s window=10s component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.236979 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:54.736973741 +0100 CET m=+1511.484527982 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.236986 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.466894 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:54.466553088 +0100 CET raw_timestamp=1.772724954466553e+18 source=http
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.466968 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=33 timestamp=2026-03-05 16:35:54.466553088 +0100 CET component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.466982 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=15.249408768s window=10s component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.466993 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:54.966987044 +0100 CET m=+1511.714541287 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.467001 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687584 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:54.68733696 +0100 CET raw_timestamp=1.772724954687337e+18 source=http
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687660 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687678 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=34 timestamp=2026-03-05 16:35:54.68733696 +0100 CET component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687689 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=15.47019264s window=10s component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687698 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:55.187693893 +0100 CET m=+1511.935248134 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.687706 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897496 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:54.897263104 +0100 CET raw_timestamp=1.772724954897263e+18 source=http
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897571 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897585 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=35 timestamp=2026-03-05 16:35:54.897263104 +0100 CET component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897596 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=15.680118784s window=10s component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897607 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:55.397600526 +0100 CET m=+1512.145154770 component=correlation
+Mar 05 16:35:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:54.897614 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109460 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:55.109218048 +0100 CET raw_timestamp=1.772724955109218e+18 source=http
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109554 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109565 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=36 timestamp=2026-03-05 16:35:55.109218048 +0100 CET component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109574 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=15.892073728s window=10s component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109583 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:55.609578497 +0100 CET m=+1512.357132738 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.109589 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.393906 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:55.39358208 +0100 CET raw_timestamp=1.772724955393582e+18 source=http
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.394055 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.394070 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=37 timestamp=2026-03-05 16:35:55.39358208 +0100 CET component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.394082 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=16.17643776s window=10s component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.394095 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:55.894087712 +0100 CET m=+1512.641641957 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.394103 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615425 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:55.615170048 +0100 CET raw_timestamp=1.77272495561517e+18 source=http
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615515 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615528 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615541 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=38 timestamp=2026-03-05 16:35:55.615170048 +0100 CET component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615550 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=16.398025728s window=10s component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615558 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:56.115553789 +0100 CET m=+1512.863108030 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.615565 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.836555 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:55.836345088 +0100 CET raw_timestamp=1.772724955836345e+18 source=http
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.836620 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=39 timestamp=2026-03-05 16:35:55.836345088 +0100 CET component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.836633 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=16.619200768s window=10s component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.836642 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:56.336637639 +0100 CET m=+1513.084191880 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.836650 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:55.996148 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.064986 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:56.06463488 +0100 CET raw_timestamp=1.772724956064635e+18 source=http
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.065044 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=40 timestamp=2026-03-05 16:35:56.06463488 +0100 CET component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.065055 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=16.84749056s window=10s component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.065064 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:56.565059617 +0100 CET m=+1513.312613858 component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.065072 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.428380 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.428394 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:35:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:56.672415 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.041941 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:57.041619968 +0100 CET raw_timestamp=1.77272495704162e+18 source=http
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.042050 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=41 timestamp=2026-03-05 16:35:57.041619968 +0100 CET component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.042057 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=17.824475648s window=10s component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.042068 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:57.542062329 +0100 CET m=+1514.289616577 component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.042079 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.630481 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.809016 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:57.80877312 +0100 CET raw_timestamp=1.772724957808773e+18 source=http
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.809069 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=42 timestamp=2026-03-05 16:35:57.80877312 +0100 CET component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.809079 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=18.5916288s window=10s component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.809089 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:58.309083746 +0100 CET m=+1515.056637986 component=correlation
+Mar 05 16:35:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:57.809096 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.328454 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.550563 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:58.55033088 +0100 CET raw_timestamp=1.772724958550331e+18 source=http
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.550628 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=43 timestamp=2026-03-05 16:35:58.55033088 +0100 CET component=correlation
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.550639 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=19.33318656s window=10s component=correlation
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.550649 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:59.050643318 +0100 CET m=+1515.798197558 component=correlation
+Mar 05 16:35:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:58.550657 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.300595 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.305807 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:59.305593088 +0100 CET raw_timestamp=1.772724959305593e+18 source=http
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.309476 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=44 timestamp=2026-03-05 16:35:59.305593088 +0100 CET component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.309500 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=20.088448768s window=10s component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.309512 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:35:59.809504946 +0100 CET m=+1516.557059186 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.309523 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.524455 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:59.524175872 +0100 CET raw_timestamp=1.772724959524176e+18 source=http
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.524536 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=45 timestamp=2026-03-05 16:35:59.524175872 +0100 CET component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.524552 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=20.307031552s window=10s component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.524564 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:00.02455635 +0100 CET m=+1516.772110591 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.524573 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.750333 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:59.750066944 +0100 CET raw_timestamp=1.772724959750067e+18 source=http
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.750402 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=46 timestamp=2026-03-05 16:35:59.750066944 +0100 CET component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.750415 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=20.532922624s window=10s component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.750425 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:00.250419512 +0100 CET m=+1516.997973753 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.750432 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.840571 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.979180 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:35:59.978924032 +0100 CET raw_timestamp=1.772724959978924e+18 source=http
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.979242 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=47 timestamp=2026-03-05 16:35:59.978924032 +0100 CET component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.979254 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=20.761779712s window=10s component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.979264 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:00.479258794 +0100 CET m=+1517.226813034 component=correlation
+Mar 05 16:35:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:35:59.979271 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.054095 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.630471 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.630482 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.733032 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:63906 src_ip=91.224.92.185 src_port=63906 ttl=120 age=2m9.508854741s component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.886744 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:00.88641408 +0100 CET raw_timestamp=1.772724960886414e+18 source=http
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.949065 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=48 timestamp=2026-03-05 16:36:00.88641408 +0100 CET component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.949079 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=21.66926976s window=10s component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.949094 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:01.449083571 +0100 CET m=+1518.196637811 component=correlation
+Mar 05 16:36:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:00.949102 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.134588 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:01.134301952 +0100 CET raw_timestamp=1.772724961134302e+18 source=http
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.134659 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=49 timestamp=2026-03-05 16:36:01.134301952 +0100 CET component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.134674 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=21.917157632s window=10s component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.134691 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:01.634681055 +0100 CET m=+1518.382235297 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.134702 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.399571 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:01.39931392 +0100 CET raw_timestamp=1.772724961399314e+18 source=http
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.399651 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=50 timestamp=2026-03-05 16:36:01.39931392 +0100 CET component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.399664 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=22.1821696s window=10s component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.399675 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:01.899669158 +0100 CET m=+1518.647223399 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.399685 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.560762 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638518 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:01.63825792 +0100 CET raw_timestamp=1.772724961638258e+18 source=http
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638617 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638630 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=51 timestamp=2026-03-05 16:36:01.63825792 +0100 CET component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638639 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=22.4211136s window=10s component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638648 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:02.138643072 +0100 CET m=+1518.886197313 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.638656 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.865268 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:01.865048064 +0100 CET raw_timestamp=1.772724961865048e+18 source=http
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.870600 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=52 timestamp=2026-03-05 16:36:01.865048064 +0100 CET component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.870632 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=22.647903744s window=10s component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.870649 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:02.370639189 +0100 CET m=+1519.118193433 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.870659 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:01.956559 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:36:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:02.141411 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:36:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:02.392484 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.441013 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:06.438073088 +0100 CET raw_timestamp=1.772724966438073e+18 source=http
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.441070 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=53 timestamp=2026-03-05 16:36:06.438073088 +0100 CET component=correlation
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.441080 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=27.220928768s window=10s component=correlation
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.441090 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:06.941084252 +0100 CET m=+1523.688638493 component=correlation
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.441097 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:06.957334 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:36:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:07.540254 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:07.540003072 +0100 CET raw_timestamp=1.772724967540003e+18 source=http
+Mar 05 16:36:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:07.540344 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=54 timestamp=2026-03-05 16:36:07.540003072 +0100 CET component=correlation
+Mar 05 16:36:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:07.540352 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=28.322858752s window=10s component=correlation
+Mar 05 16:36:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:07.540361 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:08.040356038 +0100 CET m=+1524.787910364 component=correlation
+Mar 05 16:36:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:07.540367 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.208263 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.257150 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:08.256841984 +0100 CET raw_timestamp=1.772724968256842e+18 source=http
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.257236 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=55 timestamp=2026-03-05 16:36:08.256841984 +0100 CET component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.257251 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=29.039697664s window=10s component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.257263 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:08.757257225 +0100 CET m=+1525.504811467 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.257271 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.480164 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:08.479908096 +0100 CET raw_timestamp=1.772724968479908e+18 source=http
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.480243 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=56 timestamp=2026-03-05 16:36:08.479908096 +0100 CET component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.480256 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=29.262763776s window=10s component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.480268 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:08.980261464 +0100 CET m=+1525.727815709 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.480277 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.704811 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:08.704496128 +0100 CET raw_timestamp=1.772724968704496e+18 source=http
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.704914 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=57 timestamp=2026-03-05 16:36:08.704496128 +0100 CET component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.704932 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=29.487351808s window=10s component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.704943 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:09.20493722 +0100 CET m=+1525.952491461 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.704949 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924193 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:08.923942912 +0100 CET raw_timestamp=1.772724968923943e+18 source=http
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924295 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924308 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=58 timestamp=2026-03-05 16:36:08.923942912 +0100 CET component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924318 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=29.706798592s window=10s component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924366 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:09.424323225 +0100 CET m=+1526.171877467 component=correlation
+Mar 05 16:36:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:08.924375 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.061073 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.150280 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:09.150048 +0100 CET raw_timestamp=1.772724969150048e+18 source=http
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.150348 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=59 timestamp=2026-03-05 16:36:09.150048 +0100 CET component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.150363 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=29.93290368s window=10s component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.150378 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:09.650369136 +0100 CET m=+1526.397923376 component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.150391 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.469903 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:36:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:09.469920 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009475 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:10.009158912 +0100 CET raw_timestamp=1.772724970009159e+18 source=http
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009599 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009612 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=60 timestamp=2026-03-05 16:36:10.009158912 +0100 CET component=correlation
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009620 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=30.792014592s window=10s component=correlation
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009629 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:10.509624529 +0100 CET m=+1527.257178769 component=correlation
+Mar 05 16:36:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:10.009636 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066042 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:11.065666048 +0100 CET raw_timestamp=1.772724971065666e+18 source=http
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066126 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066152 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=61 timestamp=2026-03-05 16:36:11.065666048 +0100 CET component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066165 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=31.848521728s window=10s component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066178 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:11.566171036 +0100 CET m=+1528.313725347 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.066188 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.754204 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.775226 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:11.774994944 +0100 CET raw_timestamp=1.772724971774995e+18 source=http
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.775294 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=62 timestamp=2026-03-05 16:36:11.774994944 +0100 CET component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.775306 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=32.557850624s window=10s component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.775316 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:12.275311078 +0100 CET m=+1529.022865319 component=correlation
+Mar 05 16:36:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:11.775323 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536592 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:12.536357888 +0100 CET raw_timestamp=1.772724972536358e+18 source=http
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536663 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536677 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=63 timestamp=2026-03-05 16:36:12.536357888 +0100 CET component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536688 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=33.319213568s window=10s component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536699 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:13.036693292 +0100 CET m=+1529.784247532 component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.536705 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.803546 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:12.803280896 +0100 CET raw_timestamp=1.772724972803281e+18 source=http
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.803657 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=64 timestamp=2026-03-05 16:36:12.803280896 +0100 CET component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.803666 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=33.586136576s window=10s component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.803677 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:13.303671693 +0100 CET m=+1530.051225935 component=correlation
+Mar 05 16:36:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:12.803685 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.125872 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.326186 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.888389 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:13.888116992 +0100 CET raw_timestamp=1.772724973888117e+18 source=http
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.888462 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=65 timestamp=2026-03-05 16:36:13.888116992 +0100 CET component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.888476 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=34.670972672s window=10s component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.888489 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:14.388481859 +0100 CET m=+1531.136036106 component=correlation
+Mar 05 16:36:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:13.888498 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.645987 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:14.64573312 +0100 CET raw_timestamp=1.772724974645733e+18 source=http
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.646052 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.646066 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=66 timestamp=2026-03-05 16:36:14.64573312 +0100 CET component=correlation
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.646076 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=35.4285888s window=10s component=correlation
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.646085 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:15.146080668 +0100 CET m=+1531.893634909 component=correlation
+Mar 05 16:36:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:14.646093 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395776 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:15.395469056 +0100 CET raw_timestamp=1.772724975395469e+18 source=http
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395904 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395915 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=67 timestamp=2026-03-05 16:36:15.395469056 +0100 CET component=correlation
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395923 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=36.178324736s window=10s component=correlation
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395932 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:15.895927613 +0100 CET m=+1532.643481853 component=correlation
+Mar 05 16:36:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:15.395939 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.058409 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.189425 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:16.18912896 +0100 CET raw_timestamp=1.772724976189129e+18 source=http
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.189495 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=68 timestamp=2026-03-05 16:36:16.18912896 +0100 CET component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.189508 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=36.97198464s window=10s component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.189519 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:16.689512759 +0100 CET m=+1533.437067000 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.189532 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.419357 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:16.419083008 +0100 CET raw_timestamp=1.772724976419083e+18 source=http
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.419430 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=69 timestamp=2026-03-05 16:36:16.419083008 +0100 CET component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.419442 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=37.201938688s window=10s component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.419452 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:16.919445984 +0100 CET m=+1533.667000225 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.419459 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.642306 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:16.642032128 +0100 CET raw_timestamp=1.772724976642032e+18 source=http
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.642394 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=70 timestamp=2026-03-05 16:36:16.642032128 +0100 CET component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.642411 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=37.424887808s window=10s component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.642425 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:17.142417468 +0100 CET m=+1533.889971711 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.642435 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.802434 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.864599 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:16.864354048 +0100 CET raw_timestamp=1.772724976864354e+18 source=http
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.864666 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=71 timestamp=2026-03-05 16:36:16.864354048 +0100 CET component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.864679 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=37.647209728s window=10s component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.864689 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:17.3646833 +0100 CET m=+1534.112237540 component=correlation
+Mar 05 16:36:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:16.864696 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089243 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:17.088967936 +0100 CET raw_timestamp=1.772724977088968e+18 source=http
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089310 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089324 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=72 timestamp=2026-03-05 16:36:17.088967936 +0100 CET component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089333 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=37.871823616s window=10s component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089343 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:17.589337749 +0100 CET m=+1534.336891989 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.089349 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.266468 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.307421 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:17.30717696 +0100 CET raw_timestamp=1.772724977307177e+18 source=http
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.307482 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=73 timestamp=2026-03-05 16:36:17.30717696 +0100 CET component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.307494 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=38.09003264s window=10s component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.307504 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:17.807498359 +0100 CET m=+1534.555052600 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.307511 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532381 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:17.532148992 +0100 CET raw_timestamp=1.772724977532149e+18 source=http
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532466 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532476 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=74 timestamp=2026-03-05 16:36:17.532148992 +0100 CET component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532484 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=38.315004672s window=10s component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532492 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:18.032488159 +0100 CET m=+1534.780042399 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.532499 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757689 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:17.757447936 +0100 CET raw_timestamp=1.772724977757448e+18 source=http
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757775 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757794 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=75 timestamp=2026-03-05 16:36:17.757447936 +0100 CET component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757807 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=38.540303616s window=10s component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757820 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:18.25781323 +0100 CET m=+1535.005367471 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.757829 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:17.888682 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.484960 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:18.484662016 +0100 CET raw_timestamp=1.772724978484662e+18 source=http
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485052 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485066 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485077 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=76 timestamp=2026-03-05 16:36:18.484662016 +0100 CET component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485085 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=39.267517696s window=10s component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485093 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:18.985089337 +0100 CET m=+1535.732643583 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.485100 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.769834 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:18.769549056 +0100 CET raw_timestamp=1.772724978769549e+18 source=http
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.769918 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=77 timestamp=2026-03-05 16:36:18.769549056 +0100 CET component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.769929 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=39.552404736s window=10s component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.769939 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:19.269933288 +0100 CET m=+1536.017487529 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.769946 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990075 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:18.989786112 +0100 CET raw_timestamp=1.772724978989786e+18 source=http
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990141 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990157 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=78 timestamp=2026-03-05 16:36:18.989786112 +0100 CET component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990170 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=39.772641792s window=10s component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990194 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:19.490175555 +0100 CET m=+1536.237729797 component=correlation
+Mar 05 16:36:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:18.990203 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.213658 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:19.213412096 +0100 CET raw_timestamp=1.772724979213412e+18 source=http
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.213738 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=79 timestamp=2026-03-05 16:36:19.213412096 +0100 CET component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.213750 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=39.996267776s window=10s component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.213759 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:19.713754359 +0100 CET m=+1536.461308599 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.213767 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.409773 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964632 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:19.964387072 +0100 CET raw_timestamp=1.772724979964387e+18 source=http
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964699 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964724 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964736 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=80 timestamp=2026-03-05 16:36:19.964387072 +0100 CET component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964748 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=40.747242752s window=10s component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964756 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:20.464751961 +0100 CET m=+1537.212306202 component=correlation
+Mar 05 16:36:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:19.964763 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927551 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:20.927239936 +0100 CET raw_timestamp=1.77272498092724e+18 source=http
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927670 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927681 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=81 timestamp=2026-03-05 16:36:20.927239936 +0100 CET component=correlation
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=41.710095616s window=10s component=correlation
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927700 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:21.42769494 +0100 CET m=+1538.175249181 component=correlation
+Mar 05 16:36:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:20.927708 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.645838 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:21.645555968 +0100 CET raw_timestamp=1.772724981645556e+18 source=http
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.645969 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.645980 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=82 timestamp=2026-03-05 16:36:21.645555968 +0100 CET component=correlation
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.645989 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=42.428411648s window=10s component=correlation
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.645997 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:22.145992879 +0100 CET m=+1538.893547119 component=correlation
+Mar 05 16:36:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:21.646004 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395504 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:22.39527296 +0100 CET raw_timestamp=1.772724982395273e+18 source=http
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395565 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395579 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=83 timestamp=2026-03-05 16:36:22.39527296 +0100 CET component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395589 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=43.17812864s window=10s component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395599 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:22.895593416 +0100 CET m=+1539.643147657 component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.395608 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.613219 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:22.612961024 +0100 CET raw_timestamp=1.772724982612961e+18 source=http
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.613282 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=84 timestamp=2026-03-05 16:36:22.612961024 +0100 CET component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.613294 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=43.395816704s window=10s component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.613303 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:23.113297899 +0100 CET m=+1539.860852139 component=correlation
+Mar 05 16:36:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:22.613311 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677304 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:23.676996096 +0100 CET raw_timestamp=1.772724983676996e+18 source=http
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677421 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677436 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677448 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=85 timestamp=2026-03-05 16:36:23.676996096 +0100 CET component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677457 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=44.459851776s window=10s component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677467 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:24.177462012 +0100 CET m=+1540.925016253 component=correlation
+Mar 05 16:36:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:23.677476 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.401914 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:24.401597952 +0100 CET raw_timestamp=1.772724984401598e+18 source=http
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.401991 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.402005 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=86 timestamp=2026-03-05 16:36:24.401597952 +0100 CET component=correlation
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.402016 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=45.184453632s window=10s component=correlation
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.402026 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:24.902021508 +0100 CET m=+1541.649575748 component=correlation
+Mar 05 16:36:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:24.402033 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153361 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:25.15306112 +0100 CET raw_timestamp=1.772724985153061e+18 source=http
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153429 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153442 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=87 timestamp=2026-03-05 16:36:25.15306112 +0100 CET component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153453 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=45.9359168s window=10s component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153462 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:25.65345711 +0100 CET m=+1542.401011351 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.153468 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915363 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:25.915102976 +0100 CET raw_timestamp=1.772724985915103e+18 source=http
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915438 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915477 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=88 timestamp=2026-03-05 16:36:25.915102976 +0100 CET component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915488 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=46.697958656s window=10s component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:26.415492172 +0100 CET m=+1543.163046482 component=correlation
+Mar 05 16:36:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:25.915505 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956504 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:26.956243968 +0100 CET raw_timestamp=1.772724986956244e+18 source=http
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956578 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956593 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=89 timestamp=2026-03-05 16:36:26.956243968 +0100 CET component=correlation
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956604 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=47.739099648s window=10s component=correlation
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956613 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:27.456608902 +0100 CET m=+1544.204163143 component=correlation
+Mar 05 16:36:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:26.956620 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.644943 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:27.644642048 +0100 CET raw_timestamp=1.772724987644642e+18 source=http
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.645007 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.645020 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=90 timestamp=2026-03-05 16:36:27.644642048 +0100 CET component=correlation
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.645031 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=48.427497728s window=10s component=correlation
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.645041 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:28.14503562 +0100 CET m=+1544.892589860 component=correlation
+Mar 05 16:36:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:27.645047 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402409 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:28.402087936 +0100 CET raw_timestamp=1.772724988402088e+18 source=http
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402501 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402514 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=91 timestamp=2026-03-05 16:36:28.402087936 +0100 CET component=correlation
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402522 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=49.184943616s window=10s component=correlation
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402531 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:28.902526948 +0100 CET m=+1545.650081189 component=correlation
+Mar 05 16:36:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:28.402538 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173347 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:29.17306496 +0100 CET raw_timestamp=1.772724989173065e+18 source=http
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173415 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173428 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=92 timestamp=2026-03-05 16:36:29.17306496 +0100 CET component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173437 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=49.95592064s window=10s component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173446 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:29.673442238 +0100 CET m=+1546.420996478 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.173453 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.404642 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:29.404358912 +0100 CET raw_timestamp=1.772724989404359e+18 source=http
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.404729 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=93 timestamp=2026-03-05 16:36:29.404358912 +0100 CET component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.404742 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=50.187214592s window=10s component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.404754 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:29.904747215 +0100 CET m=+1546.652301458 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.404763 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.622833 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:29.622561024 +0100 CET raw_timestamp=1.772724989622561e+18 source=http
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.622942 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=94 timestamp=2026-03-05 16:36:29.622561024 +0100 CET component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.622950 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=50.405416704s window=10s component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.622961 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:30.122955253 +0100 CET m=+1546.870509494 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.622970 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.834966 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:29.83472512 +0100 CET raw_timestamp=1.772724989834725e+18 source=http
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.835032 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.835046 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=95 timestamp=2026-03-05 16:36:29.83472512 +0100 CET component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.835056 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=50.6175808s window=10s component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.835065 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:30.335060593 +0100 CET m=+1547.082614833 component=correlation
+Mar 05 16:36:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:29.835072 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066221 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:30.065946112 +0100 CET raw_timestamp=1.772724990065946e+18 source=http
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066297 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066315 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=96 timestamp=2026-03-05 16:36:30.065946112 +0100 CET component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066329 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=50.848801792s window=10s component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066341 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:30.566334793 +0100 CET m=+1547.313889036 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.066350 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.185402 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.333948 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:30.333647872 +0100 CET raw_timestamp=1.772724990333648e+18 source=http
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.334014 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=97 timestamp=2026-03-05 16:36:30.333647872 +0100 CET component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.334026 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=51.116503552s window=10s component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.334046 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:30.834029974 +0100 CET m=+1547.581584214 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.334053 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547467 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:30.547206912 +0100 CET raw_timestamp=1.772724990547207e+18 source=http
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547548 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547565 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=98 timestamp=2026-03-05 16:36:30.547206912 +0100 CET component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547577 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=51.330062592s window=10s component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547588 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:31.047582816 +0100 CET m=+1547.795137056 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.547596 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755046 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:30.754787072 +0100 CET raw_timestamp=1.772724990754787e+18 source=http
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755120 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755134 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=99 timestamp=2026-03-05 16:36:30.754787072 +0100 CET component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755145 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=51.537642752s window=10s component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755154 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:31.255149279 +0100 CET m=+1548.002703519 component=correlation
+Mar 05 16:36:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:30.755162 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466823 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:31.466565888 +0100 CET raw_timestamp=1.772724991466566e+18 source=http
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466921 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466936 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466948 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466975 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=100 timestamp=2026-03-05 16:36:31.466565888 +0100 CET component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466986 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=52.249421568s window=10s component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.466996 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:31.966990598 +0100 CET m=+1548.714544839 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.467009 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.688483 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=62206 timestamp=2026-03-05 16:36:31.688194048 +0100 CET raw_timestamp=1.772724991688194e+18 source=http
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.688560 [logcorrelator] DEBUG processing A event: key=91.224.92.185:62206 keepalive_seq=101 timestamp=2026-03-05 16:36:31.688194048 +0100 CET component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.688575 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:62206 time_diff=52.471049728s window=10s component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.688587 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=62206 emit_after=2026-03-05 16:36:32.188580123 +0100 CET m=+1548.936134364 component=correlation
+Mar 05 16:36:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:31.688601 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=62206 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016409 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:32.01614976 +0100 CET raw_timestamp=1.7727249920161498e+18 source=network
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016498 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016511 [logcorrelator] DEBUG processing B event: key=91.224.92.185:63404 timestamp=2026-03-05 16:36:32.01614976 +0100 CET component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016519 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:63404 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016525 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:63404 src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.016534 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=63404 buffer_size=106 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.056195 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:32.055838976 +0100 CET raw_timestamp=1.772724992055839e+18 source=http
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.056298 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=1 timestamp=2026-03-05 16:36:32.055838976 +0100 CET component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.056343 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.055838976 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.056356 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.268429 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:32.268182016 +0100 CET raw_timestamp=1.772724992268182e+18 source=http
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.268495 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=62206 key=91.224.92.185:62206 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.268509 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=2 timestamp=2026-03-05 16:36:32.268182016 +0100 CET component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.268536 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.268182016 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:32.268545 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.031249 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:33.031003904 +0100 CET raw_timestamp=1.772724993031004e+18 source=http
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.031309 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=3 timestamp=2026-03-05 16:36:33.031003904 +0100 CET component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.031337 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:33.031003904 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.031346 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.999477 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:33.999212032 +0100 CET raw_timestamp=1.772724993999212e+18 source=http
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.999555 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=4 timestamp=2026-03-05 16:36:33.999212032 +0100 CET component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.999586 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:33.999212032 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:33.999595 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:34.722265 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:34.722004992 +0100 CET raw_timestamp=1.772724994722005e+18 source=http
+Mar 05 16:36:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:34.722331 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=5 timestamp=2026-03-05 16:36:34.722004992 +0100 CET component=correlation
+Mar 05 16:36:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:34.722357 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:34.722004992 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:34.722366 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:35.425408 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:35.42515712 +0100 CET raw_timestamp=1.772724995425157e+18 source=http
+Mar 05 16:36:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:35.425495 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=6 timestamp=2026-03-05 16:36:35.42515712 +0100 CET component=correlation
+Mar 05 16:36:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:35.425524 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:35.42515712 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:35.425532 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.184313 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:36.184030976 +0100 CET raw_timestamp=1.772724996184031e+18 source=http
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.184383 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=7 timestamp=2026-03-05 16:36:36.184030976 +0100 CET component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.184416 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:36.184030976 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.184425 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.436776 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:36.436491008 +0100 CET raw_timestamp=1.772724996436491e+18 source=http
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.436900 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=8 timestamp=2026-03-05 16:36:36.436491008 +0100 CET component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.436931 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:36.436491008 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.436945 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.640278 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:36.640015872 +0100 CET raw_timestamp=1.772724996640016e+18 source=http
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.640343 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=9 timestamp=2026-03-05 16:36:36.640015872 +0100 CET component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.640372 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:36.640015872 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.640383 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.862865 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:36.862612992 +0100 CET raw_timestamp=1.772724996862613e+18 source=http
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.862922 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=10 timestamp=2026-03-05 16:36:36.862612992 +0100 CET component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.862951 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:36.862612992 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:36.862963 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.071567 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:37.071302912 +0100 CET raw_timestamp=1.772724997071303e+18 source=http
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.071632 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=11 timestamp=2026-03-05 16:36:37.071302912 +0100 CET component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.071667 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:37.071302912 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.071676 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.295112 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:37.294877952 +0100 CET raw_timestamp=1.772724997294878e+18 source=http
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.295185 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=12 timestamp=2026-03-05 16:36:37.294877952 +0100 CET component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.295229 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:37.294877952 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.295238 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.524155 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:37.523813888 +0100 CET raw_timestamp=1.772724997523814e+18 source=http
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.524225 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=13 timestamp=2026-03-05 16:36:37.523813888 +0100 CET component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.524253 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:37.523813888 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.524266 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.743629 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:37.743373056 +0100 CET raw_timestamp=1.772724997743373e+18 source=http
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.743705 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=14 timestamp=2026-03-05 16:36:37.743373056 +0100 CET component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.743754 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:37.743373056 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.743766 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.976274 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:37.976016896 +0100 CET raw_timestamp=1.772724997976017e+18 source=http
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.976339 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=15 timestamp=2026-03-05 16:36:37.976016896 +0100 CET component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.976367 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:37.976016896 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:37.976376 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.191892 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:38.191629056 +0100 CET raw_timestamp=1.772724998191629e+18 source=http
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.191960 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=16 timestamp=2026-03-05 16:36:38.191629056 +0100 CET component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.191991 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:38.191629056 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.192000 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.423602 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:38.423329024 +0100 CET raw_timestamp=1.772724998423329e+18 source=http
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.423684 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=17 timestamp=2026-03-05 16:36:38.423329024 +0100 CET component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.423725 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:38.423329024 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.423735 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.642570 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:38.642326016 +0100 CET raw_timestamp=1.772724998642326e+18 source=http
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.642653 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=18 timestamp=2026-03-05 16:36:38.642326016 +0100 CET component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.642678 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:38.642326016 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:38.642691 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:39.455117 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:39.45424 +0100 CET raw_timestamp=1.77272499945424e+18 source=http
+Mar 05 16:36:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:39.455215 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=19 timestamp=2026-03-05 16:36:39.45424 +0100 CET component=correlation
+Mar 05 16:36:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:39.455256 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:39.45424 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:39.455273 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:40.515788 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:40.515518976 +0100 CET raw_timestamp=1.772725000515519e+18 source=http
+Mar 05 16:36:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:40.515868 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=20 timestamp=2026-03-05 16:36:40.515518976 +0100 CET component=correlation
+Mar 05 16:36:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:40.515899 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:40.515518976 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:40.515908 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:41.280663 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:41.280423936 +0100 CET raw_timestamp=1.772725001280424e+18 source=http
+Mar 05 16:36:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:41.280751 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=21 timestamp=2026-03-05 16:36:41.280423936 +0100 CET component=correlation
+Mar 05 16:36:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:41.280778 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:41.280423936 +0100 CET) + B(src_ip=91.224.92.185 src_port=63404 ts=2026-03-05 16:36:32.01614976 +0100 CET) component=correlation
+Mar 05 16:36:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:41.280787 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63404 new_ttl=120 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.044778 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:42.044549888 +0100 CET raw_timestamp=1.77272500204455e+18 source=http
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.044832 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=22 timestamp=2026-03-05 16:36:42.044549888 +0100 CET component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.044842 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=10.028400128s window=10s component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.044861 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:42.544856463 +0100 CET m=+1559.292410704 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.044869 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.302688 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:42.302471936 +0100 CET raw_timestamp=1.772725002302472e+18 source=http
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.302764 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=23 timestamp=2026-03-05 16:36:42.302471936 +0100 CET component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.302776 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=10.286322176s window=10s component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.302787 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:42.802781277 +0100 CET m=+1559.550335517 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.302796 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.527008 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:42.52411008 +0100 CET raw_timestamp=1.77272500252411e+18 source=http
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.527065 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=24 timestamp=2026-03-05 16:36:42.52411008 +0100 CET component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.527076 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=10.50796032s window=10s component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.527086 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:43.027081012 +0100 CET m=+1559.774635253 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.527094 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741383 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:42.741126912 +0100 CET raw_timestamp=1.772725002741127e+18 source=http
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741457 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741473 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=25 timestamp=2026-03-05 16:36:42.741126912 +0100 CET component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741486 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=10.724977152s window=10s component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741498 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:43.24149107 +0100 CET m=+1559.989045314 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.741506 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964507 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:42.961595904 +0100 CET raw_timestamp=1.772725002961596e+18 source=http
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964576 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964592 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=26 timestamp=2026-03-05 16:36:42.961595904 +0100 CET component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964606 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=10.945446144s window=10s component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964615 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:43.464610919 +0100 CET m=+1560.212165159 component=correlation
+Mar 05 16:36:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:42.964622 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.174935 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:43.174660096 +0100 CET raw_timestamp=1.77272500317466e+18 source=http
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.174997 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.175012 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=27 timestamp=2026-03-05 16:36:43.174660096 +0100 CET component=correlation
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.175022 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=11.158510336s window=10s component=correlation
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.175032 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:43.675026679 +0100 CET m=+1560.422580919 component=correlation
+Mar 05 16:36:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:43.175037 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203569 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:44.203331072 +0100 CET raw_timestamp=1.772725004203331e+18 source=http
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203628 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203641 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203657 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203671 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=28 timestamp=2026-03-05 16:36:44.203331072 +0100 CET component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203681 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=12.187181312s window=10s component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203690 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:44.703685225 +0100 CET m=+1561.451239466 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.203696 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956288 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:44.955995904 +0100 CET raw_timestamp=1.772725004955996e+18 source=http
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956367 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956382 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=29 timestamp=2026-03-05 16:36:44.955995904 +0100 CET component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956394 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=12.939846144s window=10s component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956408 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:45.456401008 +0100 CET m=+1562.203955250 component=correlation
+Mar 05 16:36:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:44.956415 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686325 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:45.68605312 +0100 CET raw_timestamp=1.772725005686053e+18 source=http
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686424 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686437 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=30 timestamp=2026-03-05 16:36:45.68605312 +0100 CET component=correlation
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686446 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=13.66990336s window=10s component=correlation
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686456 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:46.1864503 +0100 CET m=+1562.934004541 component=correlation
+Mar 05 16:36:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:45.686463 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.321384 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.460941 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:46.46066688 +0100 CET raw_timestamp=1.772725006460667e+18 source=http
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.461006 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=31 timestamp=2026-03-05 16:36:46.46066688 +0100 CET component=correlation
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.461017 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=14.44451712s window=10s component=correlation
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.461027 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:46.961021668 +0100 CET m=+1563.708575909 component=correlation
+Mar 05 16:36:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:46.461035 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420697 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:47.42041088 +0100 CET raw_timestamp=1.772725007420411e+18 source=http
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420806 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420823 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=32 timestamp=2026-03-05 16:36:47.42041088 +0100 CET component=correlation
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420834 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=15.40426112s window=10s component=correlation
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420864 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:47.920838513 +0100 CET m=+1564.668392754 component=correlation
+Mar 05 16:36:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:47.420872 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194129 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:48.19383296 +0100 CET raw_timestamp=1.772725008193833e+18 source=http
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194197 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194217 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=33 timestamp=2026-03-05 16:36:48.19383296 +0100 CET component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194228 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=16.1776832s window=10s component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194238 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:48.694232956 +0100 CET m=+1565.441787197 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.194246 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938268 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:48.93803392 +0100 CET raw_timestamp=1.772725008938034e+18 source=http
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938342 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938357 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=34 timestamp=2026-03-05 16:36:48.93803392 +0100 CET component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938368 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=16.92188416s window=10s component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938378 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:49.438372389 +0100 CET m=+1566.185926894 component=correlation
+Mar 05 16:36:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:48.938384 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648829 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:49.648589056 +0100 CET raw_timestamp=1.772725009648589e+18 source=http
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648906 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648919 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=35 timestamp=2026-03-05 16:36:49.648589056 +0100 CET component=correlation
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648928 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=17.632439296s window=10s component=correlation
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648937 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:50.14893316 +0100 CET m=+1566.896487400 component=correlation
+Mar 05 16:36:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:49.648943 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559339 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:50.559077888 +0100 CET raw_timestamp=1.772725010559078e+18 source=http
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559405 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559419 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=36 timestamp=2026-03-05 16:36:50.559077888 +0100 CET component=correlation
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559430 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=18.542928128s window=10s component=correlation
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559439 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:51.059434148 +0100 CET m=+1567.806988403 component=correlation
+Mar 05 16:36:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:50.559445 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.298930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:51.298586112 +0100 CET raw_timestamp=1.772725011298586e+18 source=http
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.299009 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.299027 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=37 timestamp=2026-03-05 16:36:51.298586112 +0100 CET component=correlation
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.299039 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=19.282436352s window=10s component=correlation
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.299050 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:51.799044193 +0100 CET m=+1568.546598439 component=correlation
+Mar 05 16:36:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:51.299057 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.046919 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:52.046644992 +0100 CET raw_timestamp=1.772725012046645e+18 source=http
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.046982 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.046996 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=38 timestamp=2026-03-05 16:36:52.046644992 +0100 CET component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.047006 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=20.030495232s window=10s component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.047016 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:52.547010735 +0100 CET m=+1569.294564975 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.047022 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785297 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:52.78509312 +0100 CET raw_timestamp=1.772725012785093e+18 source=http
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785352 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785361 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=39 timestamp=2026-03-05 16:36:52.78509312 +0100 CET component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785370 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=20.76894336s window=10s component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785378 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:53.28537389 +0100 CET m=+1570.032928130 component=correlation
+Mar 05 16:36:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:52.785384 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.007433 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:53.007177984 +0100 CET raw_timestamp=1.772725013007178e+18 source=http
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.007488 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=40 timestamp=2026-03-05 16:36:53.007177984 +0100 CET component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.007500 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=20.991028224s window=10s component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.007510 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:53.507504524 +0100 CET m=+1570.255058765 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.007516 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.226802 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:53.223872 +0100 CET raw_timestamp=1.772725013223872e+18 source=http
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.226871 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=41 timestamp=2026-03-05 16:36:53.223872 +0100 CET component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.226882 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=21.20772224s window=10s component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.226891 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:53.726886573 +0100 CET m=+1570.474440814 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.226898 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447339 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:53.44710912 +0100 CET raw_timestamp=1.772725013447109e+18 source=http
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447406 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447419 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=42 timestamp=2026-03-05 16:36:53.44710912 +0100 CET component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447430 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=21.43095936s window=10s component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447439 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:53.947434296 +0100 CET m=+1570.694988536 component=correlation
+Mar 05 16:36:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:53.447445 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.137976 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:54.137688064 +0100 CET raw_timestamp=1.772725014137688e+18 source=http
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138044 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138059 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138073 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138085 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=43 timestamp=2026-03-05 16:36:54.137688064 +0100 CET component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138096 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=22.121538304s window=10s component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138109 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:54.638100076 +0100 CET m=+1571.385654317 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.138116 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.398078 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:54.397764096 +0100 CET raw_timestamp=1.772725014397764e+18 source=http
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.398148 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=44 timestamp=2026-03-05 16:36:54.397764096 +0100 CET component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.398160 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=22.381614336s window=10s component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.398169 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:54.898164437 +0100 CET m=+1571.645718678 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.398177 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618625 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:54.618370048 +0100 CET raw_timestamp=1.77272501461837e+18 source=http
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618685 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:53639 src_ip=91.224.92.185 src_port=53639 ttl=120 age=2m9.447572128s component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618705 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=45 timestamp=2026-03-05 16:36:54.618370048 +0100 CET component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618726 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=22.602220288s window=10s component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618735 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:55.118730813 +0100 CET m=+1571.866285053 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.618742 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864700 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:54.864470016 +0100 CET raw_timestamp=1.77272501486447e+18 source=http
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864771 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864785 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=46 timestamp=2026-03-05 16:36:54.864470016 +0100 CET component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864796 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=22.848320256s window=10s component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864805 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:55.364800308 +0100 CET m=+1572.112354549 component=correlation
+Mar 05 16:36:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:54.864812 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072267 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:55.072027904 +0100 CET raw_timestamp=1.772725015072028e+18 source=http
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072326 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072339 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=47 timestamp=2026-03-05 16:36:55.072027904 +0100 CET component=correlation
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072349 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=23.055878144s window=10s component=correlation
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072358 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:55.572353436 +0100 CET m=+1572.319907677 component=correlation
+Mar 05 16:36:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:55.072364 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097842 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:56.097564928 +0100 CET raw_timestamp=1.772725016097565e+18 source=http
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097935 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097949 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097962 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097975 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=48 timestamp=2026-03-05 16:36:56.097564928 +0100 CET component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097985 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=24.081415168s window=10s component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.097995 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:56.597989642 +0100 CET m=+1573.345543882 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.098000 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.848977 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:56.848667904 +0100 CET raw_timestamp=1.772725016848668e+18 source=http
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.849116 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.849126 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=49 timestamp=2026-03-05 16:36:56.848667904 +0100 CET component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.849134 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=24.832518144s window=10s component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.849142 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:57.349137909 +0100 CET m=+1574.096692150 component=correlation
+Mar 05 16:36:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:56.849149 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574060 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:57.573762048 +0100 CET raw_timestamp=1.772725017573762e+18 source=http
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574201 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574215 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=50 timestamp=2026-03-05 16:36:57.573762048 +0100 CET component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574225 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=25.557612288s window=10s component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574235 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:58.074229537 +0100 CET m=+1574.821783778 component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.574243 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.830810 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:57.830555904 +0100 CET raw_timestamp=1.772725017830556e+18 source=http
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.830897 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=51 timestamp=2026-03-05 16:36:57.830555904 +0100 CET component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.830909 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=25.814406144s window=10s component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.830919 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:58.33091316 +0100 CET m=+1575.078467401 component=correlation
+Mar 05 16:36:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:57.830926 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.201692 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.788937 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:58.785948928 +0100 CET raw_timestamp=1.772725018785949e+18 source=http
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.789027 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.789037 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=52 timestamp=2026-03-05 16:36:58.785948928 +0100 CET component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.789044 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=26.769799168s window=10s component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.789053 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:36:59.289048604 +0100 CET m=+1576.036602844 component=correlation
+Mar 05 16:36:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:58.789059 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.508949 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:36:59.508613888 +0100 CET raw_timestamp=1.772725019508614e+18 source=http
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.509075 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.509088 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=53 timestamp=2026-03-05 16:36:59.508613888 +0100 CET component=correlation
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.509104 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=27.492464128s window=10s component=correlation
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.509116 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:00.009109819 +0100 CET m=+1576.756664061 component=correlation
+Mar 05 16:36:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:36:59.509125 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351573 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:00.351307008 +0100 CET raw_timestamp=1.772725020351307e+18 source=http
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351688 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351700 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=54 timestamp=2026-03-05 16:37:00.351307008 +0100 CET component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351722 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=28.335157248s window=10s component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351733 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:00.851727421 +0100 CET m=+1577.599281663 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.351741 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.624192 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:00.623924992 +0100 CET raw_timestamp=1.772725020623925e+18 source=http
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.624264 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=55 timestamp=2026-03-05 16:37:00.623924992 +0100 CET component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.624276 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=28.607775232s window=10s component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.624286 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:01.124280933 +0100 CET m=+1577.871835174 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.624294 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.837417 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:00.837132032 +0100 CET raw_timestamp=1.772725020837132e+18 source=http
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.837509 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=56 timestamp=2026-03-05 16:37:00.837132032 +0100 CET component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.837522 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=28.820982272s window=10s component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.837532 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:01.337526532 +0100 CET m=+1578.085080772 component=correlation
+Mar 05 16:37:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:00.837542 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058462 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:01.058191104 +0100 CET raw_timestamp=1.772725021058191e+18 source=http
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058542 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058560 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=57 timestamp=2026-03-05 16:37:01.058191104 +0100 CET component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058574 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=29.042041344s window=10s component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058587 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:01.558580247 +0100 CET m=+1578.306134493 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.058595 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290664 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:01.2904 +0100 CET raw_timestamp=1.7727250212904e+18 source=http
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290777 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290794 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=58 timestamp=2026-03-05 16:37:01.2904 +0100 CET component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290802 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=29.27425024s window=10s component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290811 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:01.790806217 +0100 CET m=+1578.538360458 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.290818 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.681426 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.681439 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:37:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:01.843468 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.061060 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:02.06080896 +0100 CET raw_timestamp=1.772725022060809e+18 source=http
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.061120 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=59 timestamp=2026-03-05 16:37:02.06080896 +0100 CET component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.061132 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=30.0446592s window=10s component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.061141 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:02.561136027 +0100 CET m=+1579.308690268 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.061147 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.303437 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:02.303206912 +0100 CET raw_timestamp=1.772725022303207e+18 source=http
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.303489 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=60 timestamp=2026-03-05 16:37:02.303206912 +0100 CET component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.303500 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=30.287057152s window=10s component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.303509 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:02.803504688 +0100 CET m=+1579.551058928 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.303515 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.524538 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:02.524271104 +0100 CET raw_timestamp=1.772725022524271e+18 source=http
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.524618 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=61 timestamp=2026-03-05 16:37:02.524271104 +0100 CET component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.524625 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=30.508121344s window=10s component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.524634 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:03.024629778 +0100 CET m=+1579.772184019 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.524640 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738262 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:02.738023936 +0100 CET raw_timestamp=1.772725022738024e+18 source=http
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738343 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738354 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=62 timestamp=2026-03-05 16:37:02.738023936 +0100 CET component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738368 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=30.721874176s window=10s component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738377 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:03.238372396 +0100 CET m=+1579.985926636 component=correlation
+Mar 05 16:37:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:02.738383 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.493352 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.493369 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.493383 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.547247 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:03.547024896 +0100 CET raw_timestamp=1.772725023547025e+18 source=http
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.547316 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=63 timestamp=2026-03-05 16:37:03.547024896 +0100 CET component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.547329 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=31.530875136s window=10s component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.547339 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:04.047333639 +0100 CET m=+1580.794887880 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.547347 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.815387 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:03.815122944 +0100 CET raw_timestamp=1.772725023815123e+18 source=http
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.815475 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=64 timestamp=2026-03-05 16:37:03.815122944 +0100 CET component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.815487 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=31.798973184s window=10s component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.815497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:04.315491301 +0100 CET m=+1581.063045541 component=correlation
+Mar 05 16:37:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:03.815506 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051041 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:04.050718976 +0100 CET raw_timestamp=1.772725024050719e+18 source=http
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051139 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051151 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=65 timestamp=2026-03-05 16:37:04.050718976 +0100 CET component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051160 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=32.034569216s window=10s component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051170 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:04.551165311 +0100 CET m=+1581.298719551 component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.051178 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.278132 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:04.277880064 +0100 CET raw_timestamp=1.77272502427788e+18 source=http
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.278194 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=66 timestamp=2026-03-05 16:37:04.277880064 +0100 CET component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.278205 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=32.261730304s window=10s component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.278215 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:04.77820973 +0100 CET m=+1581.525763990 component=correlation
+Mar 05 16:37:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:04.278222 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.001938 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:05.00165504 +0100 CET raw_timestamp=1.772725025001655e+18 source=http
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002037 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002051 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002064 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002074 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=67 timestamp=2026-03-05 16:37:05.00165504 +0100 CET component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002082 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=32.98550528s window=10s component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002091 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:05.502086588 +0100 CET m=+1582.249640829 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.002101 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.229412 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:05.22916608 +0100 CET raw_timestamp=1.772725025229166e+18 source=http
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.229477 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=68 timestamp=2026-03-05 16:37:05.22916608 +0100 CET component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.229488 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=33.21301632s window=10s component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.229497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:05.729492029 +0100 CET m=+1582.477046270 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.229504 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.450810 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:05.450524928 +0100 CET raw_timestamp=1.772725025450525e+18 source=http
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.450881 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=69 timestamp=2026-03-05 16:37:05.450524928 +0100 CET component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.450897 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=33.434375168s window=10s component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.450906 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:05.950901319 +0100 CET m=+1582.698455559 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.450913 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687567 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:05.68732288 +0100 CET raw_timestamp=1.772725025687323e+18 source=http
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687648 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687676 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=70 timestamp=2026-03-05 16:37:05.68732288 +0100 CET component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687687 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=33.67117312s window=10s component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687697 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:06.187691753 +0100 CET m=+1582.935245993 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.687703 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906760 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:05.906493952 +0100 CET raw_timestamp=1.772725025906494e+18 source=http
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906833 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906874 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=71 timestamp=2026-03-05 16:37:05.906493952 +0100 CET component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906886 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=33.890344192s window=10s component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906897 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:06.406890403 +0100 CET m=+1583.154444644 component=correlation
+Mar 05 16:37:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:05.906906 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118555 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:06.118291968 +0100 CET raw_timestamp=1.772725026118292e+18 source=http
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118629 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118646 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=72 timestamp=2026-03-05 16:37:06.118291968 +0100 CET component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118658 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=34.102142208s window=10s component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118668 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:06.618663152 +0100 CET m=+1583.366217392 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.118675 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390780 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:06.390530048 +0100 CET raw_timestamp=1.77272502639053e+18 source=http
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390885 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390898 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=73 timestamp=2026-03-05 16:37:06.390530048 +0100 CET component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390908 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=34.374380288s window=10s component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390918 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:06.890912786 +0100 CET m=+1583.638467026 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.390924 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616073 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:06.615782912 +0100 CET raw_timestamp=1.772725026615783e+18 source=http
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616141 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616155 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=74 timestamp=2026-03-05 16:37:06.615782912 +0100 CET component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616167 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=34.599633152s window=10s component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616176 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:07.116171683 +0100 CET m=+1583.863725923 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.616183 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.828465 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:37:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:06.916467 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.152372 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.370753 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:07.367823872 +0100 CET raw_timestamp=1.772725027367824e+18 source=http
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.370811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=75 timestamp=2026-03-05 16:37:07.367823872 +0100 CET component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.370821 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=35.351674112s window=10s component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.370832 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:07.870825595 +0100 CET m=+1584.618379838 component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.370839 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.781832 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:07.781583104 +0100 CET raw_timestamp=1.772725027781583e+18 source=http
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.781906 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=76 timestamp=2026-03-05 16:37:07.781583104 +0100 CET component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.781919 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=35.765433344s window=10s component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.781929 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:08.281923491 +0100 CET m=+1585.029477733 component=correlation
+Mar 05 16:37:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:07.781938 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137567 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:08.137283072 +0100 CET raw_timestamp=1.772725028137283e+18 source=http
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137647 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137666 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=77 timestamp=2026-03-05 16:37:08.137283072 +0100 CET component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137681 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=36.121133312s window=10s component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137697 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:08.637688105 +0100 CET m=+1585.385242346 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.137708 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.391452 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.544402 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:08.544157952 +0100 CET raw_timestamp=1.772725028544158e+18 source=http
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.544488 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=78 timestamp=2026-03-05 16:37:08.544157952 +0100 CET component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.544515 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=36.528008192s window=10s component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.544526 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:09.044520796 +0100 CET m=+1585.792075036 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.544535 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.728590 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.754651 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:08.754409984 +0100 CET raw_timestamp=1.77272502875441e+18 source=http
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.754726 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=79 timestamp=2026-03-05 16:37:08.754409984 +0100 CET component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.754739 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=36.738260224s window=10s component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.754748 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:09.254743059 +0100 CET m=+1586.002297300 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.754755 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.970930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:08.97066496 +0100 CET raw_timestamp=1.772725028970665e+18 source=http
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.971010 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=80 timestamp=2026-03-05 16:37:08.97066496 +0100 CET component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.971063 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=36.9545152s window=10s component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.971078 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:09.471070891 +0100 CET m=+1586.218625135 component=correlation
+Mar 05 16:37:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:08.971085 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191314 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:09.19106304 +0100 CET raw_timestamp=1.772725029191063e+18 source=http
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191383 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191405 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=81 timestamp=2026-03-05 16:37:09.19106304 +0100 CET component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191416 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=37.17491328s window=10s component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191426 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:09.691421052 +0100 CET m=+1586.438975292 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.191432 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454594 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:09.454281984 +0100 CET raw_timestamp=1.772725029454282e+18 source=http
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454677 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454698 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=82 timestamp=2026-03-05 16:37:09.454281984 +0100 CET component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454720 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=37.438132224s window=10s component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454742 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:09.954727216 +0100 CET m=+1586.702281465 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.454752 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.565456 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:37:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:09.852453 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.145419 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.231203 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:10.230936064 +0100 CET raw_timestamp=1.772725030230936e+18 source=http
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.231278 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=83 timestamp=2026-03-05 16:37:10.230936064 +0100 CET component=correlation
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.231290 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=38.214786304s window=10s component=correlation
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.231312 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:10.731294785 +0100 CET m=+1587.478849026 component=correlation
+Mar 05 16:37:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:10.231319 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268534 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:11.268210944 +0100 CET raw_timestamp=1.772725031268211e+18 source=http
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268621 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268635 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=84 timestamp=2026-03-05 16:37:11.268210944 +0100 CET component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268655 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=39.252061184s window=10s component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268664 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:11.768659369 +0100 CET m=+1588.516213609 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.268670 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984498 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:11.984211968 +0100 CET raw_timestamp=1.772725031984212e+18 source=http
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984568 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984591 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=85 timestamp=2026-03-05 16:37:11.984211968 +0100 CET component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984602 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=39.968062208s window=10s component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984611 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:12.48460681 +0100 CET m=+1589.232161051 component=correlation
+Mar 05 16:37:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:11.984623 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.484653 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.691292 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:12.69010304 +0100 CET raw_timestamp=1.772725032690103e+18 source=http
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.691372 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=86 timestamp=2026-03-05 16:37:12.69010304 +0100 CET component=correlation
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.691386 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=40.67395328s window=10s component=correlation
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.691398 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:13.19139145 +0100 CET m=+1589.938945691 component=correlation
+Mar 05 16:37:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:12.691415 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.276600 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.555416 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:13.555143936 +0100 CET raw_timestamp=1.772725033555144e+18 source=http
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.555478 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=87 timestamp=2026-03-05 16:37:13.555143936 +0100 CET component=correlation
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.555489 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=41.538994176s window=10s component=correlation
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.555499 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:14.055493721 +0100 CET m=+1590.803047962 component=correlation
+Mar 05 16:37:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:13.555506 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501216 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:14.500946944 +0100 CET raw_timestamp=1.772725034500947e+18 source=http
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501318 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501329 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=88 timestamp=2026-03-05 16:37:14.500946944 +0100 CET component=correlation
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501337 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=42.484797184s window=10s component=correlation
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501345 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:15.001340811 +0100 CET m=+1591.748895051 component=correlation
+Mar 05 16:37:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:14.501352 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.226885 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:15.226585088 +0100 CET raw_timestamp=1.772725035226585e+18 source=http
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.227011 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.227022 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=89 timestamp=2026-03-05 16:37:15.226585088 +0100 CET component=correlation
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.227054 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=43.210435328s window=10s component=correlation
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.227063 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:15.72705848 +0100 CET m=+1592.474612721 component=correlation
+Mar 05 16:37:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:15.227070 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035342 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:16.03508608 +0100 CET raw_timestamp=1.772725036035086e+18 source=http
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035444 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035456 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=90 timestamp=2026-03-05 16:37:16.03508608 +0100 CET component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035465 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=44.01893632s window=10s component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035475 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:16.53547019 +0100 CET m=+1593.283024432 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.035482 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.746028 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.771249 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:16.770960896 +0100 CET raw_timestamp=1.772725036770961e+18 source=http
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.771333 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=91 timestamp=2026-03-05 16:37:16.770960896 +0100 CET component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.771347 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=44.754811136s window=10s component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.771372 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:17.271365132 +0100 CET m=+1594.018919373 component=correlation
+Mar 05 16:37:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:16.771380 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.324159 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.890175 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:17.887211008 +0100 CET raw_timestamp=1.772725037887211e+18 source=http
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.890257 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=92 timestamp=2026-03-05 16:37:17.887211008 +0100 CET component=correlation
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.890268 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=45.871061248s window=10s component=correlation
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.890279 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:18.39027206 +0100 CET m=+1595.137826305 component=correlation
+Mar 05 16:37:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:17.890287 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.561237 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.867533 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:18.867261952 +0100 CET raw_timestamp=1.772725038867262e+18 source=http
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.867594 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=93 timestamp=2026-03-05 16:37:18.867261952 +0100 CET component=correlation
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.867606 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=46.851112192s window=10s component=correlation
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.867617 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:19.367610842 +0100 CET m=+1596.115165082 component=correlation
+Mar 05 16:37:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:18.867624 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.412370 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.673188 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:19.672972032 +0100 CET raw_timestamp=1.772725039672972e+18 source=http
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.673259 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=94 timestamp=2026-03-05 16:37:19.672972032 +0100 CET component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.673271 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=47.656822272s window=10s component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.673283 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:20.173276301 +0100 CET m=+1596.920830544 component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.673291 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.894703 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:19.894486016 +0100 CET raw_timestamp=1.772725039894486e+18 source=http
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.894769 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=95 timestamp=2026-03-05 16:37:19.894486016 +0100 CET component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.894782 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=47.878336256s window=10s component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.894791 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:20.394785949 +0100 CET m=+1597.142340189 component=correlation
+Mar 05 16:37:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:19.894798 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.110266 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:20.109984 +0100 CET raw_timestamp=1.772725040109984e+18 source=http
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.110350 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=96 timestamp=2026-03-05 16:37:20.109984 +0100 CET component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.110359 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=48.09383424s window=10s component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.110368 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:20.610362837 +0100 CET m=+1597.357917077 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.110374 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.294780 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.334007 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:20.333701888 +0100 CET raw_timestamp=1.772725040333702e+18 source=http
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.334083 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=97 timestamp=2026-03-05 16:37:20.333701888 +0100 CET component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.334095 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=48.317552128s window=10s component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.334121 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:20.834115122 +0100 CET m=+1597.581669363 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.334128 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.396397 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.560138 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:20.559873024 +0100 CET raw_timestamp=1.772725040559873e+18 source=http
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.560217 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=98 timestamp=2026-03-05 16:37:20.559873024 +0100 CET component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.560231 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=48.543723264s window=10s component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.560244 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:21.06023621 +0100 CET m=+1597.807790454 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.560253 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.993378 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:37:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:20.993393 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.190548 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.307076 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:21.30686208 +0100 CET raw_timestamp=1.772725041306862e+18 source=http
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.307136 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=99 timestamp=2026-03-05 16:37:21.30686208 +0100 CET component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.307147 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=49.29071232s window=10s component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.307157 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:21.807151969 +0100 CET m=+1598.554706210 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.307163 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.580166 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:21.579917056 +0100 CET raw_timestamp=1.772725041579917e+18 source=http
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.580231 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=100 timestamp=2026-03-05 16:37:21.579917056 +0100 CET component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.580242 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=49.563767296s window=10s component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.580254 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:22.080248923 +0100 CET m=+1598.827803240 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.580261 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.797526 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63404 timestamp=2026-03-05 16:37:21.797164032 +0100 CET raw_timestamp=1.772725041797164e+18 source=http
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.797602 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63404 keepalive_seq=101 timestamp=2026-03-05 16:37:21.797164032 +0100 CET component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.797617 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63404 time_diff=49.781014272s window=10s component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.797627 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63404 emit_after=2026-03-05 16:37:22.297622093 +0100 CET m=+1599.045176334 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.797634 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63404 component=correlation
+Mar 05 16:37:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:21.810692 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081335 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:22.081095424 +0100 CET raw_timestamp=1.7727250420810954e+18 source=network
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081429 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081442 [logcorrelator] DEBUG processing B event: key=91.224.92.185:59046 timestamp=2026-03-05 16:37:22.081095424 +0100 CET component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081450 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:59046 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081456 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:59046 src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.081467 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=59046 buffer_size=114 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.121664 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:22.121357056 +0100 CET raw_timestamp=1.772725042121357e+18 source=http
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.121789 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=1 timestamp=2026-03-05 16:37:22.121357056 +0100 CET component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.121825 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.121357056 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.121838 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.445128 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63404 key=91.224.92.185:63404 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.892961 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:22.89265792 +0100 CET raw_timestamp=1.772725042892658e+18 source=http
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.893022 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=2 timestamp=2026-03-05 16:37:22.89265792 +0100 CET component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.893052 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.89265792 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:22.893061 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:23.938657 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:23.938386944 +0100 CET raw_timestamp=1.772725043938387e+18 source=http
+Mar 05 16:37:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:23.938736 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=3 timestamp=2026-03-05 16:37:23.938386944 +0100 CET component=correlation
+Mar 05 16:37:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:23.938767 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:23.938386944 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:23.938775 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:24.660203 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:24.659904 +0100 CET raw_timestamp=1.772725044659904e+18 source=http
+Mar 05 16:37:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:24.660284 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=4 timestamp=2026-03-05 16:37:24.659904 +0100 CET component=correlation
+Mar 05 16:37:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:24.660332 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:24.659904 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:24.660345 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:25.407101 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:25.406668032 +0100 CET raw_timestamp=1.772725045406668e+18 source=http
+Mar 05 16:37:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:25.407214 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=5 timestamp=2026-03-05 16:37:25.406668032 +0100 CET component=correlation
+Mar 05 16:37:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:25.407258 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:25.406668032 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:25.407277 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.162410 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:26.162107904 +0100 CET raw_timestamp=1.772725046162108e+18 source=http
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.162533 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=6 timestamp=2026-03-05 16:37:26.162107904 +0100 CET component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.162566 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:26.162107904 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.162577 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.377295 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:26.37702912 +0100 CET raw_timestamp=1.772725046377029e+18 source=http
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.377385 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=7 timestamp=2026-03-05 16:37:26.37702912 +0100 CET component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.377423 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:26.37702912 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.377441 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.591764 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:26.591478016 +0100 CET raw_timestamp=1.772725046591478e+18 source=http
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.591832 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=8 timestamp=2026-03-05 16:37:26.591478016 +0100 CET component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.591888 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:26.591478016 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.591898 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.803600 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:26.803344896 +0100 CET raw_timestamp=1.772725046803345e+18 source=http
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.803659 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=9 timestamp=2026-03-05 16:37:26.803344896 +0100 CET component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.803688 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:26.803344896 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:26.803697 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.015475 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:27.015141888 +0100 CET raw_timestamp=1.772725047015142e+18 source=http
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.015547 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=10 timestamp=2026-03-05 16:37:27.015141888 +0100 CET component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.015581 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:27.015141888 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.015591 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.279585 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:27.279292928 +0100 CET raw_timestamp=1.772725047279293e+18 source=http
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.279650 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=11 timestamp=2026-03-05 16:37:27.279292928 +0100 CET component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.279678 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:27.279292928 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.279687 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.505748 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:27.505481984 +0100 CET raw_timestamp=1.772725047505482e+18 source=http
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.505819 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=12 timestamp=2026-03-05 16:37:27.505481984 +0100 CET component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.505883 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:27.505481984 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.505893 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.720643 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:27.720408064 +0100 CET raw_timestamp=1.772725047720408e+18 source=http
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.720702 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=13 timestamp=2026-03-05 16:37:27.720408064 +0100 CET component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.720747 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:27.720408064 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.720761 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.944087 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:27.943862016 +0100 CET raw_timestamp=1.772725047943862e+18 source=http
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.944143 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=14 timestamp=2026-03-05 16:37:27.943862016 +0100 CET component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.944171 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:27.943862016 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:27.944179 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:28.949700 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:28.949472 +0100 CET raw_timestamp=1.772725048949472e+18 source=http
+Mar 05 16:37:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:28.949808 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=15 timestamp=2026-03-05 16:37:28.949472 +0100 CET component=correlation
+Mar 05 16:37:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:28.949834 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:28.949472 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:28.949843 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:29.712829 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:29.712496896 +0100 CET raw_timestamp=1.772725049712497e+18 source=http
+Mar 05 16:37:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:29.712935 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=16 timestamp=2026-03-05 16:37:29.712496896 +0100 CET component=correlation
+Mar 05 16:37:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:29.712972 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:29.712496896 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:29.712985 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.442404 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:30.442113024 +0100 CET raw_timestamp=1.772725050442113e+18 source=http
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.442483 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=17 timestamp=2026-03-05 16:37:30.442113024 +0100 CET component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.442513 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:30.442113024 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.442522 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.694945 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:30.69460992 +0100 CET raw_timestamp=1.77272505069461e+18 source=http
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.695010 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=18 timestamp=2026-03-05 16:37:30.69460992 +0100 CET component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.695042 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:30.69460992 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:30.695053 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:31.964574 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:31.964272128 +0100 CET raw_timestamp=1.772725051964272e+18 source=http
+Mar 05 16:37:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:31.964672 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=19 timestamp=2026-03-05 16:37:31.964272128 +0100 CET component=correlation
+Mar 05 16:37:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:31.964753 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:31.964272128 +0100 CET) + B(src_ip=91.224.92.185 src_port=59046 ts=2026-03-05 16:37:22.081095424 +0100 CET) component=correlation
+Mar 05 16:37:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:31.964767 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:59046 new_ttl=120 component=correlation
+Mar 05 16:37:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:32.748209 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:32.74795008 +0100 CET raw_timestamp=1.77272505274795e+18 source=http
+Mar 05 16:37:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:32.748271 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=20 timestamp=2026-03-05 16:37:32.74795008 +0100 CET component=correlation
+Mar 05 16:37:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:32.748282 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=10.666854656s window=10s component=correlation
+Mar 05 16:37:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:32.748296 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:33.248286104 +0100 CET m=+1609.995840345 component=correlation
+Mar 05 16:37:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:32.748303 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.331799 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.474841 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:33.474565888 +0100 CET raw_timestamp=1.772725053474566e+18 source=http
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.474926 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=21 timestamp=2026-03-05 16:37:33.474565888 +0100 CET component=correlation
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.474937 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=11.393470464s window=10s component=correlation
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.474946 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:33.974941094 +0100 CET m=+1610.722495335 component=correlation
+Mar 05 16:37:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:33.474953 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246444 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:34.246179072 +0100 CET raw_timestamp=1.772725054246179e+18 source=http
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246533 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246545 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=22 timestamp=2026-03-05 16:37:34.246179072 +0100 CET component=correlation
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246553 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=12.165083648s window=10s component=correlation
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246562 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:34.746556713 +0100 CET m=+1611.494110953 component=correlation
+Mar 05 16:37:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:34.246568 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343693 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:35.34340992 +0100 CET raw_timestamp=1.77272505534341e+18 source=http
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343820 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343861 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=23 timestamp=2026-03-05 16:37:35.34340992 +0100 CET component=correlation
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343870 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=13.262314496s window=10s component=correlation
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343879 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:35.843874178 +0100 CET m=+1612.591428419 component=correlation
+Mar 05 16:37:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:35.343889 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076284 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:36.076005888 +0100 CET raw_timestamp=1.772725056076006e+18 source=http
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076353 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076368 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=24 timestamp=2026-03-05 16:37:36.076005888 +0100 CET component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076378 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=13.994910464s window=10s component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076387 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:36.576382663 +0100 CET m=+1613.323936918 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.076394 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877324 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:36.877071872 +0100 CET raw_timestamp=1.772725056877072e+18 source=http
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877421 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877430 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=25 timestamp=2026-03-05 16:37:36.877071872 +0100 CET component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877439 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=14.795976448s window=10s component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877447 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:37.377442893 +0100 CET m=+1614.124997133 component=correlation
+Mar 05 16:37:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:36.877454 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.090904 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:37.090614016 +0100 CET raw_timestamp=1.772725057090614e+18 source=http
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.090978 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=26 timestamp=2026-03-05 16:37:37.090614016 +0100 CET component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.090995 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=15.009518592s window=10s component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.091007 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:37.590999828 +0100 CET m=+1614.338554072 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.091016 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.310344 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:37.310067968 +0100 CET raw_timestamp=1.772725057310068e+18 source=http
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.310429 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=27 timestamp=2026-03-05 16:37:37.310067968 +0100 CET component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.310446 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=15.228972544s window=10s component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.310459 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:37.810451995 +0100 CET m=+1614.558006240 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.310468 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517564 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:37.517283072 +0100 CET raw_timestamp=1.772725057517283e+18 source=http
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517645 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517661 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=28 timestamp=2026-03-05 16:37:37.517283072 +0100 CET component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517673 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=15.436187648s window=10s component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517684 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:38.017677725 +0100 CET m=+1614.765231968 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.517693 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735200 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:37.734968064 +0100 CET raw_timestamp=1.772725057734968e+18 source=http
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735290 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735301 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=29 timestamp=2026-03-05 16:37:37.734968064 +0100 CET component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735309 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=15.65387264s window=10s component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735317 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:38.235312686 +0100 CET m=+1614.982866927 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.735325 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.957992 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:37.95762688 +0100 CET raw_timestamp=1.772725057957627e+18 source=http
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.958867 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.958899 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=30 timestamp=2026-03-05 16:37:37.95762688 +0100 CET component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.958913 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=15.876531456s window=10s component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.958925 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:38.458918933 +0100 CET m=+1615.206473209 component=correlation
+Mar 05 16:37:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:37.958933 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935094 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:38.934771968 +0100 CET raw_timestamp=1.772725058934772e+18 source=http
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935190 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935209 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935225 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935245 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=31 timestamp=2026-03-05 16:37:38.934771968 +0100 CET component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935255 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=16.853676544s window=10s component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935277 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:39.435260366 +0100 CET m=+1616.182814609 component=correlation
+Mar 05 16:37:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:38.935287 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680171 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:39.67987712 +0100 CET raw_timestamp=1.772725059679877e+18 source=http
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680296 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680315 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=32 timestamp=2026-03-05 16:37:39.67987712 +0100 CET component=correlation
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680325 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=17.598781696s window=10s component=correlation
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680334 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:40.180329238 +0100 CET m=+1616.927883482 component=correlation
+Mar 05 16:37:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:39.680341 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545032 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:40.544760064 +0100 CET raw_timestamp=1.77272506054476e+18 source=http
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545098 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545112 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=33 timestamp=2026-03-05 16:37:40.544760064 +0100 CET component=correlation
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545122 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=18.46366464s window=10s component=correlation
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545132 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:41.045126557 +0100 CET m=+1617.792680798 component=correlation
+Mar 05 16:37:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:40.545140 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318792 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:41.318492928 +0100 CET raw_timestamp=1.772725061318493e+18 source=http
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318900 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318911 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=34 timestamp=2026-03-05 16:37:41.318492928 +0100 CET component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318918 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=19.237397504s window=10s component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318926 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:41.818922503 +0100 CET m=+1618.566476743 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.318934 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.534695 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:41.534425088 +0100 CET raw_timestamp=1.772725061534425e+18 source=http
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.534794 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=35 timestamp=2026-03-05 16:37:41.534425088 +0100 CET component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.534806 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=19.453329664s window=10s component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.534824 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:42.034810224 +0100 CET m=+1618.782364465 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.534833 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.772169 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:41.771838976 +0100 CET raw_timestamp=1.772725061771839e+18 source=http
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.772261 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=36 timestamp=2026-03-05 16:37:41.771838976 +0100 CET component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.772277 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=19.690743552s window=10s component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.772287 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:42.27228178 +0100 CET m=+1619.019836021 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.772294 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:41.907529 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.002813 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:42.002563072 +0100 CET raw_timestamp=1.772725062002563e+18 source=http
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.002919 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=37 timestamp=2026-03-05 16:37:42.002563072 +0100 CET component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.002926 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=19.921467648s window=10s component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.002936 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:42.502930844 +0100 CET m=+1619.250485084 component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.002942 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260141 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:42.259892992 +0100 CET raw_timestamp=1.772725062259893e+18 source=http
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260213 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260229 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=38 timestamp=2026-03-05 16:37:42.259892992 +0100 CET component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260239 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=20.178797568s window=10s component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260248 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:42.760243526 +0100 CET m=+1619.507797766 component=correlation
+Mar 05 16:37:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:42.260254 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045307 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:43.04501504 +0100 CET raw_timestamp=1.772725063045015e+18 source=http
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045404 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045421 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045435 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045460 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=39 timestamp=2026-03-05 16:37:43.04501504 +0100 CET component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045473 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=20.963919616s window=10s component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045484 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:43.54547755 +0100 CET m=+1620.293031792 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.045493 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.260506 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:43.26026112 +0100 CET raw_timestamp=1.772725063260261e+18 source=http
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.260568 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=40 timestamp=2026-03-05 16:37:43.26026112 +0100 CET component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.260579 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=21.179165696s window=10s component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.260589 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:43.760583897 +0100 CET m=+1620.508138137 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.260596 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.480230 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:43.479969024 +0100 CET raw_timestamp=1.772725063479969e+18 source=http
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.480302 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=41 timestamp=2026-03-05 16:37:43.479969024 +0100 CET component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.480318 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=21.3988736s window=10s component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.480328 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:43.980323179 +0100 CET m=+1620.727877420 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.480335 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.828551 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:37:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:43.828566 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237513 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:44.237252096 +0100 CET raw_timestamp=1.772725064237252e+18 source=http
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237595 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237610 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=42 timestamp=2026-03-05 16:37:44.237252096 +0100 CET component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237620 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=22.156156672s window=10s component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237629 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:44.737624526 +0100 CET m=+1621.485178770 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.237636 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.468490 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:44.468253952 +0100 CET raw_timestamp=1.772725064468254e+18 source=http
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.468553 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=43 timestamp=2026-03-05 16:37:44.468253952 +0100 CET component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.468564 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=22.387158528s window=10s component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.468574 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:44.968568642 +0100 CET m=+1621.716122882 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.468581 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.686942 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:44.686672896 +0100 CET raw_timestamp=1.772725064686673e+18 source=http
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.687032 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=44 timestamp=2026-03-05 16:37:44.686672896 +0100 CET component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.687040 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=22.605577472s window=10s component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.687049 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:45.18704465 +0100 CET m=+1621.934598891 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.687056 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904617 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:44.904387072 +0100 CET raw_timestamp=1.772725064904387e+18 source=http
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904700 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904731 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=45 timestamp=2026-03-05 16:37:44.904387072 +0100 CET component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904750 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=22.823291648s window=10s component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904761 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:45.404755594 +0100 CET m=+1622.152309837 component=correlation
+Mar 05 16:37:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:44.904770 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.099431 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.129578 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:45.129299968 +0100 CET raw_timestamp=1.7727250651293e+18 source=http
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.129658 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=46 timestamp=2026-03-05 16:37:45.129299968 +0100 CET component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.129671 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=23.048204544s window=10s component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.129684 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:45.629675946 +0100 CET m=+1622.377230188 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.129698 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404696 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:45.40443904 +0100 CET raw_timestamp=1.772725065404439e+18 source=http
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404789 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404799 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404810 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=47 timestamp=2026-03-05 16:37:45.40443904 +0100 CET component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404819 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=23.323343616s window=10s component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404835 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:45.904826771 +0100 CET m=+1622.652381012 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.404869 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.619116 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:45.61888 +0100 CET raw_timestamp=1.77272506561888e+18 source=http
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.619173 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=48 timestamp=2026-03-05 16:37:45.61888 +0100 CET component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.619183 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=23.537784576s window=10s component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.619193 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:46.119187633 +0100 CET m=+1622.866741875 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.619199 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.842955 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:45.842629888 +0100 CET raw_timestamp=1.77272506584263e+18 source=http
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.843026 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.843040 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=49 timestamp=2026-03-05 16:37:45.842629888 +0100 CET component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.843050 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=23.761534464s window=10s component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.843059 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:46.343054179 +0100 CET m=+1623.090608419 component=correlation
+Mar 05 16:37:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:45.843066 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567010 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:46.56669312 +0100 CET raw_timestamp=1.772725066566693e+18 source=http
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567102 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567116 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567140 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567155 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=50 timestamp=2026-03-05 16:37:46.56669312 +0100 CET component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567165 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=24.485597696s window=10s component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567174 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:47.067169639 +0100 CET m=+1623.814723882 component=correlation
+Mar 05 16:37:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:46.567180 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393473 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:47.393168896 +0100 CET raw_timestamp=1.772725067393169e+18 source=http
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393553 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393568 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=51 timestamp=2026-03-05 16:37:47.393168896 +0100 CET component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393577 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=25.312073472s window=10s component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393587 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:47.893582043 +0100 CET m=+1624.641136284 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.393601 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.611381 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:47.611088896 +0100 CET raw_timestamp=1.772725067611089e+18 source=http
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.611481 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=52 timestamp=2026-03-05 16:37:47.611088896 +0100 CET component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.611496 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=25.529993472s window=10s component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.611518 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:48.111501298 +0100 CET m=+1624.859055539 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.611527 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.820450 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:47.820214016 +0100 CET raw_timestamp=1.772725067820214e+18 source=http
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.820507 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=53 timestamp=2026-03-05 16:37:47.820214016 +0100 CET component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.820519 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=25.739118592s window=10s component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.820528 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:48.32052301 +0100 CET m=+1625.068077251 component=correlation
+Mar 05 16:37:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:47.820535 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031138 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:48.030895104 +0100 CET raw_timestamp=1.772725068030895e+18 source=http
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031208 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031221 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=54 timestamp=2026-03-05 16:37:48.030895104 +0100 CET component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031232 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=25.94979968s window=10s component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031241 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:48.531236262 +0100 CET m=+1625.278790503 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.031247 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294371 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:48.293996032 +0100 CET raw_timestamp=1.772725068293996e+18 source=http
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294467 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294483 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=55 timestamp=2026-03-05 16:37:48.293996032 +0100 CET component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294495 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=26.212900608s window=10s component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294506 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:48.794500316 +0100 CET m=+1625.542054556 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.294513 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520532 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:48.520291072 +0100 CET raw_timestamp=1.772725068520291e+18 source=http
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520609 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520623 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=56 timestamp=2026-03-05 16:37:48.520291072 +0100 CET component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520634 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=26.439195648s window=10s component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520643 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:49.020638377 +0100 CET m=+1625.768192617 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.520650 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727787 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:48.727508992 +0100 CET raw_timestamp=1.772725068727509e+18 source=http
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727873 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727887 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=57 timestamp=2026-03-05 16:37:48.727508992 +0100 CET component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727899 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=26.646413568s window=10s component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727909 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:49.227903322 +0100 CET m=+1625.975457572 component=correlation
+Mar 05 16:37:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:48.727915 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.338349 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:62206 src_ip=91.224.92.185 src_port=62206 ttl=120 age=2m10.121193441s component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.338421 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.338435 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.338449 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.442737 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:49.442416896 +0100 CET raw_timestamp=1.772725069442417e+18 source=http
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.442824 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=58 timestamp=2026-03-05 16:37:49.442416896 +0100 CET component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.442838 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=27.361321472s window=10s component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.442872 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:49.942842107 +0100 CET m=+1626.690396348 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.442881 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.664019 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:49.66379008 +0100 CET raw_timestamp=1.77272506966379e+18 source=http
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.664075 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=59 timestamp=2026-03-05 16:37:49.66379008 +0100 CET component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.664088 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=27.582694656s window=10s component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.664101 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:50.164093531 +0100 CET m=+1626.911647773 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.664110 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.877930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:49.877641984 +0100 CET raw_timestamp=1.772725069877642e+18 source=http
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.877987 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=60 timestamp=2026-03-05 16:37:49.877641984 +0100 CET component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.878005 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=27.79654656s window=10s component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.878014 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:50.378009473 +0100 CET m=+1627.125563714 component=correlation
+Mar 05 16:37:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:49.878021 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.089978 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:50.089726976 +0100 CET raw_timestamp=1.772725070089727e+18 source=http
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.090036 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.090049 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=61 timestamp=2026-03-05 16:37:50.089726976 +0100 CET component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.090058 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=28.008631552s window=10s component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.090067 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:50.590062856 +0100 CET m=+1627.337617096 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.090073 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.347372 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.537768 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.651378 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.802113 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:50.801779968 +0100 CET raw_timestamp=1.77272507080178e+18 source=http
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.802187 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=62 timestamp=2026-03-05 16:37:50.801779968 +0100 CET component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.802201 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=28.720684544s window=10s component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.802212 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:51.302205736 +0100 CET m=+1628.049759980 component=correlation
+Mar 05 16:37:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:50.802220 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.014980 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:51.01467008 +0100 CET raw_timestamp=1.77272507101467e+18 source=http
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.015080 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=63 timestamp=2026-03-05 16:37:51.01467008 +0100 CET component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.015093 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=28.933574656s window=10s component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.015106 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:51.515097732 +0100 CET m=+1628.262651973 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.015115 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.293269 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:51.293011968 +0100 CET raw_timestamp=1.772725071293012e+18 source=http
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.293344 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=64 timestamp=2026-03-05 16:37:51.293011968 +0100 CET component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.293356 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=29.211916544s window=10s component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.293369 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:51.793361453 +0100 CET m=+1628.540915698 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.293377 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.467943 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.506837 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:51.506582016 +0100 CET raw_timestamp=1.772725071506582e+18 source=http
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.506915 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=65 timestamp=2026-03-05 16:37:51.506582016 +0100 CET component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.506926 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=29.425486592s window=10s component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.506937 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:52.006930299 +0100 CET m=+1628.754484539 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.506946 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.720978 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:51.720670976 +0100 CET raw_timestamp=1.772725071720671e+18 source=http
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.721092 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.721106 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=66 timestamp=2026-03-05 16:37:51.720670976 +0100 CET component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.721115 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=29.639575552s window=10s component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.721126 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:52.221120206 +0100 CET m=+1628.968674448 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.721133 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935117 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:51.934867968 +0100 CET raw_timestamp=1.772725071934868e+18 source=http
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935202 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935218 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=67 timestamp=2026-03-05 16:37:51.934867968 +0100 CET component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935230 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=29.853772544s window=10s component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935241 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:52.435235343 +0100 CET m=+1629.182789583 component=correlation
+Mar 05 16:37:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:51.935248 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153871 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:52.153584128 +0100 CET raw_timestamp=1.772725072153584e+18 source=http
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153943 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153960 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=68 timestamp=2026-03-05 16:37:52.153584128 +0100 CET component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153970 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=30.072488704s window=10s component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153979 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:52.653974468 +0100 CET m=+1629.401528709 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.153985 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385224 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:52.384971008 +0100 CET raw_timestamp=1.772725072384971e+18 source=http
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385291 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385305 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=69 timestamp=2026-03-05 16:37:52.384971008 +0100 CET component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385315 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=30.303875584s window=10s component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385324 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:52.885319007 +0100 CET m=+1629.632873247 component=correlation
+Mar 05 16:37:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:52.385330 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143740 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:53.14344704 +0100 CET raw_timestamp=1.772725073143447e+18 source=http
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143819 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143863 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143883 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143898 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=70 timestamp=2026-03-05 16:37:53.14344704 +0100 CET component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143911 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=31.062351616s window=10s component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143920 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:53.643915159 +0100 CET m=+1630.391469400 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.143926 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888572 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:53.888299008 +0100 CET raw_timestamp=1.772725073888299e+18 source=http
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888644 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888657 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=71 timestamp=2026-03-05 16:37:53.888299008 +0100 CET component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888667 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=31.807203584s window=10s component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888676 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:54.38867175 +0100 CET m=+1631.136225991 component=correlation
+Mar 05 16:37:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:53.888683 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.102213 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:54.101959936 +0100 CET raw_timestamp=1.77272507410196e+18 source=http
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.102277 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=72 timestamp=2026-03-05 16:37:54.101959936 +0100 CET component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.102288 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=32.020864512s window=10s component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.102298 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:54.602292613 +0100 CET m=+1631.349846853 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.102305 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.357372 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:54.357122048 +0100 CET raw_timestamp=1.772725074357122e+18 source=http
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.357434 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=73 timestamp=2026-03-05 16:37:54.357122048 +0100 CET component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.357446 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=32.276026624s window=10s component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.357455 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:54.857450391 +0100 CET m=+1631.605004631 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.357462 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588207 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:54.58792192 +0100 CET raw_timestamp=1.772725074587922e+18 source=http
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588280 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588294 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=74 timestamp=2026-03-05 16:37:54.58792192 +0100 CET component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588304 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=32.506826496s window=10s component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588313 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:55.088308458 +0100 CET m=+1631.835862698 component=correlation
+Mar 05 16:37:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:54.588320 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595117 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:55.594835968 +0100 CET raw_timestamp=1.772725075594836e+18 source=http
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595184 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595199 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595213 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595237 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=75 timestamp=2026-03-05 16:37:55.594835968 +0100 CET component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595247 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=33.513740544s window=10s component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595256 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:56.095251654 +0100 CET m=+1632.842805895 component=correlation
+Mar 05 16:37:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:55.595263 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370780 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:56.370508032 +0100 CET raw_timestamp=1.772725076370508e+18 source=http
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370895 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370918 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=76 timestamp=2026-03-05 16:37:56.370508032 +0100 CET component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370927 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=34.289412608s window=10s component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370935 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:56.870930748 +0100 CET m=+1633.618484989 component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.370941 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:56.947668 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.091285 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:57.091026944 +0100 CET raw_timestamp=1.772725077091027e+18 source=http
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.091363 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=77 timestamp=2026-03-05 16:37:57.091026944 +0100 CET component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.091377 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=35.00993152s window=10s component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.091389 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:57.591382802 +0100 CET m=+1634.338937047 component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.091398 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.371938 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:57.371552 +0100 CET raw_timestamp=1.772725077371552e+18 source=http
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.372039 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=78 timestamp=2026-03-05 16:37:57.371552 +0100 CET component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.372047 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=35.290456576s window=10s component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.372057 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:57.872052525 +0100 CET m=+1634.619606766 component=correlation
+Mar 05 16:37:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:57.372064 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425729 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:58.425459968 +0100 CET raw_timestamp=1.77272507842546e+18 source=http
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425883 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425897 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425908 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=79 timestamp=2026-03-05 16:37:58.425459968 +0100 CET component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425915 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=36.344364544s window=10s component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425924 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:58.925919535 +0100 CET m=+1635.673473776 component=correlation
+Mar 05 16:37:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:58.425931 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.178444 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.182337 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:59.182095104 +0100 CET raw_timestamp=1.772725079182095e+18 source=http
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.182419 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=80 timestamp=2026-03-05 16:37:59.182095104 +0100 CET component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.182444 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=37.10099968s window=10s component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.182458 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:37:59.682450322 +0100 CET m=+1636.430004568 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.182467 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905736 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:37:59.905478912 +0100 CET raw_timestamp=1.772725079905479e+18 source=http
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905835 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905861 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=81 timestamp=2026-03-05 16:37:59.905478912 +0100 CET component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905868 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=37.824383488s window=10s component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905877 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:00.4058728 +0100 CET m=+1637.153427041 component=correlation
+Mar 05 16:37:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:37:59.905883 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739177 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:00.73884288 +0100 CET raw_timestamp=1.772725080738843e+18 source=http
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739340 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739355 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=82 timestamp=2026-03-05 16:38:00.73884288 +0100 CET component=correlation
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739365 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=38.657747456s window=10s component=correlation
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739377 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:01.239370386 +0100 CET m=+1637.986924642 component=correlation
+Mar 05 16:38:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:00.739386 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.015014 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:01.014742016 +0100 CET raw_timestamp=1.772725081014742e+18 source=http
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.015083 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=83 timestamp=2026-03-05 16:38:01.014742016 +0100 CET component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.015095 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=38.933646592s window=10s component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.015104 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:01.515099099 +0100 CET m=+1638.262653339 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.015111 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259734 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:01.259426048 +0100 CET raw_timestamp=1.772725081259426e+18 source=http
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259900 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259914 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=84 timestamp=2026-03-05 16:38:01.259426048 +0100 CET component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259922 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=39.178330624s window=10s component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259932 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:01.759926883 +0100 CET m=+1638.507481124 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.259939 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.491937 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:01.491623936 +0100 CET raw_timestamp=1.772725081491624e+18 source=http
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.492019 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=85 timestamp=2026-03-05 16:38:01.491623936 +0100 CET component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.492038 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=39.410528512s window=10s component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.492052 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:01.992044988 +0100 CET m=+1638.739599233 component=correlation
+Mar 05 16:38:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:01.492060 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456600 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:02.453634048 +0100 CET raw_timestamp=1.772725082453634e+18 source=http
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456686 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456698 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456720 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456731 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=86 timestamp=2026-03-05 16:38:02.453634048 +0100 CET component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456739 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=40.372538624s window=10s component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456747 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:02.956743288 +0100 CET m=+1639.704297529 component=correlation
+Mar 05 16:38:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:02.456754 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045367 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:04.042441984 +0100 CET raw_timestamp=1.772725084042442e+18 source=http
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045522 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045531 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=87 timestamp=2026-03-05 16:38:04.042441984 +0100 CET component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045538 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=41.96134656s window=10s component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045546 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:04.545542243 +0100 CET m=+1641.293096483 component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.045553 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:04.668858 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.129349 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:05.12909312 +0100 CET raw_timestamp=1.772725085129093e+18 source=http
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.129415 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=88 timestamp=2026-03-05 16:38:05.12909312 +0100 CET component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.129427 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=43.047997696s window=10s component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.129437 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:05.629431236 +0100 CET m=+1642.376985477 component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.129444 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.689352 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.965285 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:05.965020928 +0100 CET raw_timestamp=1.772725085965021e+18 source=http
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.965349 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=89 timestamp=2026-03-05 16:38:05.965020928 +0100 CET component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.965360 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=43.883925504s window=10s component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.965370 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:06.465364501 +0100 CET m=+1643.212918741 component=correlation
+Mar 05 16:38:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:05.965377 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714385 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:06.714093056 +0100 CET raw_timestamp=1.772725086714093e+18 source=http
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714508 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714517 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=90 timestamp=2026-03-05 16:38:06.714093056 +0100 CET component=correlation
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714525 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=44.632997632s window=10s component=correlation
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714533 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:07.21452947 +0100 CET m=+1643.962083711 component=correlation
+Mar 05 16:38:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:06.714540 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674541 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:07.674294016 +0100 CET raw_timestamp=1.772725087674294e+18 source=http
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674627 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674637 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=91 timestamp=2026-03-05 16:38:07.674294016 +0100 CET component=correlation
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674645 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=45.593198592s window=10s component=correlation
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674653 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:08.174648701 +0100 CET m=+1644.922202941 component=correlation
+Mar 05 16:38:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:07.674659 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.487981 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:08.48765696 +0100 CET raw_timestamp=1.772725088487657e+18 source=http
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.488057 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.488071 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=92 timestamp=2026-03-05 16:38:08.48765696 +0100 CET component=correlation
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.488081 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=46.406561536s window=10s component=correlation
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.488090 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:08.988086029 +0100 CET m=+1645.735640269 component=correlation
+Mar 05 16:38:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:08.488102 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.239896 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:09.239588096 +0100 CET raw_timestamp=1.772725089239588e+18 source=http
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.240000 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.240011 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=93 timestamp=2026-03-05 16:38:09.239588096 +0100 CET component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.240019 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=47.158492672s window=10s component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.240026 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:09.740022597 +0100 CET m=+1646.487576837 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.240033 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.479720 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:09.479452928 +0100 CET raw_timestamp=1.772725089479453e+18 source=http
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.479811 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=94 timestamp=2026-03-05 16:38:09.479452928 +0100 CET component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.479819 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=47.398357504s window=10s component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.479828 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:09.979823816 +0100 CET m=+1646.727378057 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.479834 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:09.891426 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.068904 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.532612 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:10.532329984 +0100 CET raw_timestamp=1.77272509053233e+18 source=http
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.532737 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=95 timestamp=2026-03-05 16:38:10.532329984 +0100 CET component=correlation
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.532748 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=48.45123456s window=10s component=correlation
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.532763 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:11.032755662 +0100 CET m=+1647.780309904 component=correlation
+Mar 05 16:38:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:10.532772 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385643 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:11.385359872 +0100 CET raw_timestamp=1.77272509138536e+18 source=http
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385723 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385737 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=96 timestamp=2026-03-05 16:38:11.385359872 +0100 CET component=correlation
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385748 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=49.304264448s window=10s component=correlation
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385758 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:11.885753371 +0100 CET m=+1648.633307612 component=correlation
+Mar 05 16:38:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:11.385764 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.092884 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.108469 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:12.10544896 +0100 CET raw_timestamp=1.772725092105449e+18 source=http
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.108521 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=97 timestamp=2026-03-05 16:38:12.10544896 +0100 CET component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.108531 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=50.024353536s window=10s component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.108540 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:12.608535127 +0100 CET m=+1649.356089368 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.108547 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.837957 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:12.837652992 +0100 CET raw_timestamp=1.772725092837653e+18 source=http
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.838043 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.838052 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=98 timestamp=2026-03-05 16:38:12.837652992 +0100 CET component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.838060 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=50.756557568s window=10s component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.838068 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:13.338064141 +0100 CET m=+1650.085618382 component=correlation
+Mar 05 16:38:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:12.838074 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.064205 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:13.06395904 +0100 CET raw_timestamp=1.772725093063959e+18 source=http
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.064293 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=99 timestamp=2026-03-05 16:38:13.06395904 +0100 CET component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.064303 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=50.982863616s window=10s component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.064313 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:13.564307409 +0100 CET m=+1650.311861650 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.064319 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.325818 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:13.325534976 +0100 CET raw_timestamp=1.772725093325535e+18 source=http
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.325941 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=100 timestamp=2026-03-05 16:38:13.325534976 +0100 CET component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.325950 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=51.244439552s window=10s component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.325960 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:13.825954923 +0100 CET m=+1650.573509164 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.325966 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554737 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=59046 timestamp=2026-03-05 16:38:13.55449088 +0100 CET raw_timestamp=1.772725093554491e+18 source=http
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554800 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554813 [logcorrelator] DEBUG processing A event: key=91.224.92.185:59046 keepalive_seq=101 timestamp=2026-03-05 16:38:13.55449088 +0100 CET component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554822 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:59046 time_diff=51.473395456s window=10s component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554841 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=59046 emit_after=2026-03-05 16:38:14.054827109 +0100 CET m=+1650.802381349 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.554863 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=59046 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.779756 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879415 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:13.87918336 +0100 CET raw_timestamp=1.7727250938791834e+18 source=network
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879494 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879511 [logcorrelator] DEBUG processing B event: key=91.224.92.185:63510 timestamp=2026-03-05 16:38:13.87918336 +0100 CET component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879520 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:63510 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879527 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:63510 src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.879540 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=63510 buffer_size=91 component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.922669 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:13.922409984 +0100 CET raw_timestamp=1.77272509392241e+18 source=http
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.922768 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=1 timestamp=2026-03-05 16:38:13.922409984 +0100 CET component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.922805 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.922409984 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:13.922814 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.099613 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=59046 key=91.224.92.185:59046 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.142897 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:14.142627072 +0100 CET raw_timestamp=1.772725094142627e+18 source=http
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.142958 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=2 timestamp=2026-03-05 16:38:14.142627072 +0100 CET component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.142989 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:14.142627072 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.142998 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.389736 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:14.386297088 +0100 CET raw_timestamp=1.772725094386297e+18 source=http
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.389885 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=3 timestamp=2026-03-05 16:38:14.386297088 +0100 CET component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.389918 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:14.386297088 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.389930 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.620698 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:14.617729024 +0100 CET raw_timestamp=1.772725094617729e+18 source=http
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.620784 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=4 timestamp=2026-03-05 16:38:14.617729024 +0100 CET component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.620819 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:14.617729024 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.620829 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.892769 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:14.89246592 +0100 CET raw_timestamp=1.772725094892466e+18 source=http
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.892867 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=5 timestamp=2026-03-05 16:38:14.89246592 +0100 CET component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.892907 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:14.89246592 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:14.892921 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:15.987035 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:15.986764032 +0100 CET raw_timestamp=1.772725095986764e+18 source=http
+Mar 05 16:38:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:15.987098 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=6 timestamp=2026-03-05 16:38:15.986764032 +0100 CET component=correlation
+Mar 05 16:38:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:15.987125 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:15.986764032 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:15.987135 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:16.722725 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:16.722415104 +0100 CET raw_timestamp=1.772725096722415e+18 source=http
+Mar 05 16:38:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:16.722808 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=7 timestamp=2026-03-05 16:38:16.722415104 +0100 CET component=correlation
+Mar 05 16:38:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:16.722872 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:16.722415104 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:16.722885 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:17.538541 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:17.538290944 +0100 CET raw_timestamp=1.772725097538291e+18 source=http
+Mar 05 16:38:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:17.538613 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=8 timestamp=2026-03-05 16:38:17.538290944 +0100 CET component=correlation
+Mar 05 16:38:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:17.538657 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:17.538290944 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:17.538666 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:18.301120 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:18.30084096 +0100 CET raw_timestamp=1.772725098300841e+18 source=http
+Mar 05 16:38:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:18.301212 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=9 timestamp=2026-03-05 16:38:18.30084096 +0100 CET component=correlation
+Mar 05 16:38:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:18.301254 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:18.30084096 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:18.301263 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:19.336885 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:19.336608 +0100 CET raw_timestamp=1.772725099336608e+18 source=http
+Mar 05 16:38:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:19.336946 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=10 timestamp=2026-03-05 16:38:19.336608 +0100 CET component=correlation
+Mar 05 16:38:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:19.336978 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:19.336608 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:19.336988 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.152119 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:20.151824896 +0100 CET raw_timestamp=1.772725100151825e+18 source=http
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.152218 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=11 timestamp=2026-03-05 16:38:20.151824896 +0100 CET component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.152252 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:20.151824896 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.152261 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.884243 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:20.884 +0100 CET raw_timestamp=1.772725100884e+18 source=http
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.884303 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=12 timestamp=2026-03-05 16:38:20.884 +0100 CET component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.884331 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:20.884 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:20.884339 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:21.098920 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:21.098616064 +0100 CET raw_timestamp=1.772725101098616e+18 source=http
+Mar 05 16:38:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:21.098983 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=13 timestamp=2026-03-05 16:38:21.098616064 +0100 CET component=correlation
+Mar 05 16:38:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:21.099015 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:21.098616064 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:21.099025 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:22.169482 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:22.169238016 +0100 CET raw_timestamp=1.772725102169238e+18 source=http
+Mar 05 16:38:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:22.169543 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=14 timestamp=2026-03-05 16:38:22.169238016 +0100 CET component=correlation
+Mar 05 16:38:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:22.169571 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:22.169238016 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:22.169579 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.033317 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:23.033050112 +0100 CET raw_timestamp=1.77272510303305e+18 source=http
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.033371 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=15 timestamp=2026-03-05 16:38:23.033050112 +0100 CET component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.033400 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:23.033050112 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.033408 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.809829 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:23.80959104 +0100 CET raw_timestamp=1.772725103809591e+18 source=http
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.809907 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=16 timestamp=2026-03-05 16:38:23.80959104 +0100 CET component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.809935 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:23.80959104 +0100 CET) + B(src_ip=91.224.92.185 src_port=63510 ts=2026-03-05 16:38:13.87918336 +0100 CET) component=correlation
+Mar 05 16:38:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:23.809944 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:63510 new_ttl=120 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.028034 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:24.02778112 +0100 CET raw_timestamp=1.772725104027781e+18 source=http
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.034274 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=17 timestamp=2026-03-05 16:38:24.02778112 +0100 CET component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.034309 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=10.14859776s window=10s component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.034323 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:24.534315001 +0100 CET m=+1661.281869247 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.034333 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.273208 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:24.272987904 +0100 CET raw_timestamp=1.772725104272988e+18 source=http
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.276718 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=18 timestamp=2026-03-05 16:38:24.272987904 +0100 CET component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.276741 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=10.393804544s window=10s component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.276754 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:24.776746551 +0100 CET m=+1661.524300792 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.276762 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.495115 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:24.494896896 +0100 CET raw_timestamp=1.772725104494897e+18 source=http
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.495171 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=19 timestamp=2026-03-05 16:38:24.494896896 +0100 CET component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.495182 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=10.615713536s window=10s component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.495192 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:24.995186869 +0100 CET m=+1661.742741112 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.495198 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.681265 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=17 delay_ms=500 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.723934 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:24.723654912 +0100 CET raw_timestamp=1.772725104723655e+18 source=http
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.723994 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=20 timestamp=2026-03-05 16:38:24.723654912 +0100 CET component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.724006 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=10.844471552s window=10s component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.724017 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:25.224010279 +0100 CET m=+1661.971564524 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.724024 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:24.864217 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=18 delay_ms=500 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.036551 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=19 delay_ms=500 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.263547 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=20 delay_ms=500 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.447814 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:25.447556096 +0100 CET raw_timestamp=1.772725105447556e+18 source=http
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.447911 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=21 timestamp=2026-03-05 16:38:25.447556096 +0100 CET component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.447924 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=11.568372736s window=10s component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.447936 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:25.947929793 +0100 CET m=+1662.695484033 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.447945 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.704124 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:25.703837952 +0100 CET raw_timestamp=1.772725105703838e+18 source=http
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.704198 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=22 timestamp=2026-03-05 16:38:25.703837952 +0100 CET component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.704212 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=11.824654592s window=10s component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.704223 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:26.204217606 +0100 CET m=+1662.951771848 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.704234 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.922154 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:25.921884928 +0100 CET raw_timestamp=1.772725105921885e+18 source=http
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.922219 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=23 timestamp=2026-03-05 16:38:25.921884928 +0100 CET component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.922231 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=12.042701568s window=10s component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.922241 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:26.422235976 +0100 CET m=+1663.169790216 component=correlation
+Mar 05 16:38:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:25.922250 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143471 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:26.143233024 +0100 CET raw_timestamp=1.772725106143233e+18 source=http
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143538 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=21 delay_ms=500 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143551 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=24 timestamp=2026-03-05 16:38:26.143233024 +0100 CET component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143562 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=12.264049664s window=10s component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143571 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:26.643565985 +0100 CET m=+1663.391120225 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.143577 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354206 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:26.353954048 +0100 CET raw_timestamp=1.772725106353954e+18 source=http
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354276 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=22 delay_ms=500 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354294 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=25 timestamp=2026-03-05 16:38:26.353954048 +0100 CET component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354306 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=12.474770688s window=10s component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354320 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:26.854311032 +0100 CET m=+1663.601865278 component=correlation
+Mar 05 16:38:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:26.354328 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164444 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:27.164128 +0100 CET raw_timestamp=1.772725107164128e+18 source=http
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164528 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=23 delay_ms=500 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164544 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=24 delay_ms=500 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164560 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=25 delay_ms=500 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164575 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=26 timestamp=2026-03-05 16:38:27.164128 +0100 CET component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164587 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=13.28494464s window=10s component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164597 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:27.664592086 +0100 CET m=+1664.412146326 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.164604 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.373778 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:27.373491968 +0100 CET raw_timestamp=1.772725107373492e+18 source=http
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.373883 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=27 timestamp=2026-03-05 16:38:27.373491968 +0100 CET component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.373897 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=13.494308608s window=10s component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.373911 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:27.873902667 +0100 CET m=+1664.621456912 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.373920 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.599616 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:27.599372032 +0100 CET raw_timestamp=1.772725107599372e+18 source=http
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.599684 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=28 timestamp=2026-03-05 16:38:27.599372032 +0100 CET component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.599704 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=13.720188672s window=10s component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.599737 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:28.099730732 +0100 CET m=+1664.847284975 component=correlation
+Mar 05 16:38:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:27.599744 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321344 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:28.321081088 +0100 CET raw_timestamp=1.772725108321081e+18 source=http
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321415 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=26 delay_ms=500 component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321431 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=27 delay_ms=500 component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321445 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321461 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=29 timestamp=2026-03-05 16:38:28.321081088 +0100 CET component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321477 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=14.441897728s window=10s component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321490 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:28.821483976 +0100 CET m=+1665.569038217 component=correlation
+Mar 05 16:38:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:28.321499 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.137965 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:29.137662976 +0100 CET raw_timestamp=1.772725109137663e+18 source=http
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.138036 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.138052 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=30 timestamp=2026-03-05 16:38:29.137662976 +0100 CET component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.138063 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=15.258479616s window=10s component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.138074 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:29.638068424 +0100 CET m=+1666.385622669 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.138080 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.353975 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:29.35372288 +0100 CET raw_timestamp=1.772725109353723e+18 source=http
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.354045 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=31 timestamp=2026-03-05 16:38:29.35372288 +0100 CET component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.354061 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=15.47453952s window=10s component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.354071 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:29.854065781 +0100 CET m=+1666.601620022 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.354082 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.593234 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:29.592997888 +0100 CET raw_timestamp=1.772725109592998e+18 source=http
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.593297 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=32 timestamp=2026-03-05 16:38:29.592997888 +0100 CET component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.593309 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=15.713814528s window=10s component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.593318 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:30.09331302 +0100 CET m=+1666.840867260 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.593325 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:29.653761 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.217315 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.217344 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.345265 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:30.344986112 +0100 CET raw_timestamp=1.772725110344986e+18 source=http
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.345336 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=33 timestamp=2026-03-05 16:38:30.344986112 +0100 CET component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.345348 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=16.465802752s window=10s component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.345359 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:30.845353006 +0100 CET m=+1667.592907247 component=correlation
+Mar 05 16:38:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:30.345367 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.119909 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:31.119565056 +0100 CET raw_timestamp=1.772725111119565e+18 source=http
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.120044 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.120057 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=34 timestamp=2026-03-05 16:38:31.119565056 +0100 CET component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.120066 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=17.240381696s window=10s component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.120076 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:31.620071429 +0100 CET m=+1668.367625670 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.120083 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.377385 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:31.377100032 +0100 CET raw_timestamp=1.7727251113771e+18 source=http
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.377450 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=35 timestamp=2026-03-05 16:38:31.377100032 +0100 CET component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.377463 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=17.497916672s window=10s component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.377474 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:31.877467325 +0100 CET m=+1668.625021566 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.377482 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.595600 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:31.595296 +0100 CET raw_timestamp=1.772725111595296e+18 source=http
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.595679 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=36 timestamp=2026-03-05 16:38:31.595296 +0100 CET component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.595691 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=17.71611264s window=10s component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.595701 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:32.095695656 +0100 CET m=+1668.843249896 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.595720 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:31.773260 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301534 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:32.301286912 +0100 CET raw_timestamp=1.772725112301287e+18 source=http
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301615 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301632 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301647 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=37 timestamp=2026-03-05 16:38:32.301286912 +0100 CET component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301659 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=18.422103552s window=10s component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301671 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:32.801664432 +0100 CET m=+1669.549218676 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.301679 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.522091 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:32.521801984 +0100 CET raw_timestamp=1.772725112521802e+18 source=http
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.522157 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=38 timestamp=2026-03-05 16:38:32.521801984 +0100 CET component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.522173 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=18.642618624s window=10s component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.522184 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:33.022178599 +0100 CET m=+1669.769732839 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.522191 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.737224 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:32.73695104 +0100 CET raw_timestamp=1.772725112736951e+18 source=http
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.737289 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=39 timestamp=2026-03-05 16:38:32.73695104 +0100 CET component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.737300 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=18.85776768s window=10s component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.737310 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:33.237304597 +0100 CET m=+1669.984858859 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.737317 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956016 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:32.955757056 +0100 CET raw_timestamp=1.772725112955757e+18 source=http
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956080 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956095 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=40 timestamp=2026-03-05 16:38:32.955757056 +0100 CET component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956104 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=19.076573696s window=10s component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956114 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:33.456109198 +0100 CET m=+1670.203663438 component=correlation
+Mar 05 16:38:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:32.956120 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182888 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:33.18260608 +0100 CET raw_timestamp=1.772725113182606e+18 source=http
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182957 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182971 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=41 timestamp=2026-03-05 16:38:33.18260608 +0100 CET component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182981 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=19.30342272s window=10s component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182991 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:33.68298643 +0100 CET m=+1670.430540671 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.182998 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400603 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:33.400075008 +0100 CET raw_timestamp=1.772725113400075e+18 source=http
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400654 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400666 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=42 timestamp=2026-03-05 16:38:33.400075008 +0100 CET component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400675 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=19.520891648s window=10s component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400684 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:33.90067953 +0100 CET m=+1670.648233771 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.400690 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624052 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:33.623763968 +0100 CET raw_timestamp=1.772725113623764e+18 source=http
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624146 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624156 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=43 timestamp=2026-03-05 16:38:33.623763968 +0100 CET component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624170 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=19.744580608s window=10s component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624179 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:34.124174873 +0100 CET m=+1670.871729114 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.624186 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850466 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:33.850204928 +0100 CET raw_timestamp=1.772725113850205e+18 source=http
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850541 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850556 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=44 timestamp=2026-03-05 16:38:33.850204928 +0100 CET component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850575 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=19.971021568s window=10s component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850585 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:34.350579781 +0100 CET m=+1671.098134021 component=correlation
+Mar 05 16:38:33 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:33.850595 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087075 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:34.08681088 +0100 CET raw_timestamp=1.772725114086811e+18 source=http
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087138 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087154 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=45 timestamp=2026-03-05 16:38:34.08681088 +0100 CET component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087168 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=20.20762752s window=10s component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087178 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:34.587172722 +0100 CET m=+1671.334726962 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.087184 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966497 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:34.966226944 +0100 CET raw_timestamp=1.772725114966227e+18 source=http
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966588 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966603 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966619 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966630 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=46 timestamp=2026-03-05 16:38:34.966226944 +0100 CET component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966638 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=21.087043584s window=10s component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966647 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:35.466642476 +0100 CET m=+1672.214196716 component=correlation
+Mar 05 16:38:34 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:34.966654 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.183680 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:35.183426048 +0100 CET raw_timestamp=1.772725115183426e+18 source=http
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.183766 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=47 timestamp=2026-03-05 16:38:35.183426048 +0100 CET component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.183779 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=21.304242688s window=10s component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.183790 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:35.683784834 +0100 CET m=+1672.431339075 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.183798 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.404030 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:35.403757056 +0100 CET raw_timestamp=1.772725115403757e+18 source=http
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.404101 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=48 timestamp=2026-03-05 16:38:35.403757056 +0100 CET component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.404113 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=21.524573696s window=10s component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.404123 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:35.904117255 +0100 CET m=+1672.651671496 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.404129 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.607438 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.629677 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:35.629428992 +0100 CET raw_timestamp=1.772725115629429e+18 source=http
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.629760 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=49 timestamp=2026-03-05 16:38:35.629428992 +0100 CET component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.629772 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=21.750245632s window=10s component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.629782 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:36.12977592 +0100 CET m=+1672.877330161 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.629792 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:35 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:35.704800 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435546 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:36.435301888 +0100 CET raw_timestamp=1.772725116435302e+18 source=http
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435610 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435625 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435637 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=50 timestamp=2026-03-05 16:38:36.435301888 +0100 CET component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435647 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=22.556118528s window=10s component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435655 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:36.935651059 +0100 CET m=+1673.683205299 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.435661 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.658942 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:36.658633984 +0100 CET raw_timestamp=1.772725116658634e+18 source=http
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.659051 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=51 timestamp=2026-03-05 16:38:36.658633984 +0100 CET component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.659059 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=22.779450624s window=10s component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.659069 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:37.159063269 +0100 CET m=+1673.906617510 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.659076 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.874355 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:36.874076928 +0100 CET raw_timestamp=1.772725116874077e+18 source=http
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.874423 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=52 timestamp=2026-03-05 16:38:36.874076928 +0100 CET component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.874436 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=22.994893568s window=10s component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.874446 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:37.374440226 +0100 CET m=+1674.121994467 component=correlation
+Mar 05 16:38:36 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:36.874454 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599694 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:37.599411968 +0100 CET raw_timestamp=1.772725117599412e+18 source=http
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599794 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599812 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599826 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599860 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=53 timestamp=2026-03-05 16:38:37.599411968 +0100 CET component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599872 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=23.720228608s window=10s component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599882 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:38.09987714 +0100 CET m=+1674.847431381 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.599891 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.864051 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:37.863789056 +0100 CET raw_timestamp=1.772725117863789e+18 source=http
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.864116 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=54 timestamp=2026-03-05 16:38:37.863789056 +0100 CET component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.864128 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=23.984605696s window=10s component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.864138 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:38.364132659 +0100 CET m=+1675.111686899 component=correlation
+Mar 05 16:38:37 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:37.864145 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.087273 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:38.087013888 +0100 CET raw_timestamp=1.772725118087014e+18 source=http
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.087349 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=55 timestamp=2026-03-05 16:38:38.087013888 +0100 CET component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.087363 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=24.207830528s window=10s component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.087374 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:38.587367891 +0100 CET m=+1675.334922145 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.087382 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304881 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:38.304604928 +0100 CET raw_timestamp=1.772725118304605e+18 source=http
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304946 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304960 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=56 timestamp=2026-03-05 16:38:38.304604928 +0100 CET component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304971 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=24.425421568s window=10s component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304980 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:38.804975642 +0100 CET m=+1675.552529883 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.304987 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527066 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:38.526799872 +0100 CET raw_timestamp=1.7727251185268e+18 source=http
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527134 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527146 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=57 timestamp=2026-03-05 16:38:38.526799872 +0100 CET component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527156 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=24.647616512s window=10s component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527166 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:39.027161079 +0100 CET m=+1675.774715320 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.527172 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737146 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:38.736890112 +0100 CET raw_timestamp=1.77272511873689e+18 source=http
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737229 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737249 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=58 timestamp=2026-03-05 16:38:38.736890112 +0100 CET component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737262 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=24.857706752s window=10s component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737275 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:39.237268035 +0100 CET m=+1675.984822277 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.737284 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953146 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:38.952844032 +0100 CET raw_timestamp=1.772725118952844e+18 source=http
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953213 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953229 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=59 timestamp=2026-03-05 16:38:38.952844032 +0100 CET component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953240 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=25.073660672s window=10s component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953249 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:39.453244904 +0100 CET m=+1676.200799144 component=correlation
+Mar 05 16:38:38 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:38.953256 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192876 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:39.192608 +0100 CET raw_timestamp=1.772725119192608e+18 source=http
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192947 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192961 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=60 timestamp=2026-03-05 16:38:39.192608 +0100 CET component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192974 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=25.31342464s window=10s component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192986 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:39.692979649 +0100 CET m=+1676.440533894 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.192993 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.828214 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.828227 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.828239 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.975056 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:39.973405952 +0100 CET raw_timestamp=1.772725119973406e+18 source=http
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.975134 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=61 timestamp=2026-03-05 16:38:39.973405952 +0100 CET component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.975147 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=26.094222592s window=10s component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.975158 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:40.475151579 +0100 CET m=+1677.222705820 component=correlation
+Mar 05 16:38:39 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:39.975166 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.210794 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:40.210553088 +0100 CET raw_timestamp=1.772725120210553e+18 source=http
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.210864 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=62 timestamp=2026-03-05 16:38:40.210553088 +0100 CET component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.210875 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=26.331369728s window=10s component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.210884 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:40.710879546 +0100 CET m=+1677.458433787 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.210891 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488891 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:40.48594688 +0100 CET raw_timestamp=1.772725120485947e+18 source=http
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488948 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488960 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=63 timestamp=2026-03-05 16:38:40.48594688 +0100 CET component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488971 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=26.60676352s window=10s component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488980 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:40.988975485 +0100 CET m=+1677.736529726 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.488987 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723474 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:40.720534016 +0100 CET raw_timestamp=1.772725120720534e+18 source=http
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723555 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723572 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=64 timestamp=2026-03-05 16:38:40.720534016 +0100 CET component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723584 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=26.841350656s window=10s component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723596 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:41.223590267 +0100 CET m=+1677.971144511 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.723603 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.957967 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:40.957691904 +0100 CET raw_timestamp=1.772725120957692e+18 source=http
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.958027 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=65 timestamp=2026-03-05 16:38:40.957691904 +0100 CET component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.958041 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=27.078508544s window=10s component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.958051 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:41.458045642 +0100 CET m=+1678.205599883 component=correlation
+Mar 05 16:38:40 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:40.958057 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.209920 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:41.20948992 +0100 CET raw_timestamp=1.77272512120949e+18 source=http
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.209980 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.209992 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=66 timestamp=2026-03-05 16:38:41.20948992 +0100 CET component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.210002 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=27.33030656s window=10s component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.210011 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:41.710006718 +0100 CET m=+1678.457560959 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.210018 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442124 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:41.439211008 +0100 CET raw_timestamp=1.772725121439211e+18 source=http
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442193 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:63404 src_ip=91.224.92.185 src_port=63404 ttl=120 age=2m9.426030917s component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442238 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442267 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=67 timestamp=2026-03-05 16:38:41.439211008 +0100 CET component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442275 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=27.560027648s window=10s component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442283 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:41.942279455 +0100 CET m=+1678.689833695 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.442289 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679112 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:41.676220928 +0100 CET raw_timestamp=1.772725121676221e+18 source=http
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679172 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679184 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=68 timestamp=2026-03-05 16:38:41.676220928 +0100 CET component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679194 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=27.797037568s window=10s component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679203 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:42.179198502 +0100 CET m=+1678.926752742 component=correlation
+Mar 05 16:38:41 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:41.679210 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557557 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:42.557146112 +0100 CET raw_timestamp=1.772725122557146e+18 source=http
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557624 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557638 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557649 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557664 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=69 timestamp=2026-03-05 16:38:42.557146112 +0100 CET component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557674 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=28.677962752s window=10s component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557683 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:43.057678855 +0100 CET m=+1679.805233096 component=correlation
+Mar 05 16:38:42 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:42.557689 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413668 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:43.413413888 +0100 CET raw_timestamp=1.772725123413414e+18 source=http
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413740 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413753 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=70 timestamp=2026-03-05 16:38:43.413413888 +0100 CET component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413763 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=29.534230528s window=10s component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413781 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:43.913767953 +0100 CET m=+1680.661322193 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.413788 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.680800 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:43.680513024 +0100 CET raw_timestamp=1.772725123680513e+18 source=http
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.680902 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=71 timestamp=2026-03-05 16:38:43.680513024 +0100 CET component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.680915 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=29.801329664s window=10s component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.680926 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:44.180919159 +0100 CET m=+1680.928473399 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.680935 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.895563 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:43.895331072 +0100 CET raw_timestamp=1.772725123895331e+18 source=http
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.895631 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=72 timestamp=2026-03-05 16:38:43.895331072 +0100 CET component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.895643 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=30.016147712s window=10s component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.895654 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:44.395647001 +0100 CET m=+1681.143201241 component=correlation
+Mar 05 16:38:43 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:43.895661 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642452 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:44.642205952 +0100 CET raw_timestamp=1.772725124642206e+18 source=http
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642519 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642533 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642546 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642558 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=73 timestamp=2026-03-05 16:38:44.642205952 +0100 CET component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642568 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=30.763022592s window=10s component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642577 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:45.142572459 +0100 CET m=+1681.890126700 component=correlation
+Mar 05 16:38:44 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:44.642584 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425437 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:45.425101056 +0100 CET raw_timestamp=1.772725125425101e+18 source=http
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425524 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425543 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=74 timestamp=2026-03-05 16:38:45.425101056 +0100 CET component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425555 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=31.545917696s window=10s component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425567 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:45.925561079 +0100 CET m=+1682.673115329 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.425576 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.650611 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:45.65028608 +0100 CET raw_timestamp=1.772725125650286e+18 source=http
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.650702 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=75 timestamp=2026-03-05 16:38:45.65028608 +0100 CET component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.650727 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=31.77110272s window=10s component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.650740 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:46.150733609 +0100 CET m=+1682.898287849 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.650748 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.874628 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:45.874381056 +0100 CET raw_timestamp=1.772725125874381e+18 source=http
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.874725 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=76 timestamp=2026-03-05 16:38:45.874381056 +0100 CET component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.874733 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=31.995197696s window=10s component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.874742 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:46.374737343 +0100 CET m=+1683.122291584 component=correlation
+Mar 05 16:38:45 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:45.874749 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091122 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:46.090885888 +0100 CET raw_timestamp=1.772725126090886e+18 source=http
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091189 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091202 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=77 timestamp=2026-03-05 16:38:46.090885888 +0100 CET component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091212 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=32.211702528s window=10s component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091222 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:46.591216752 +0100 CET m=+1683.338770992 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.091229 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371455 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:46.371097088 +0100 CET raw_timestamp=1.772725126371097e+18 source=http
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371547 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371567 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=78 timestamp=2026-03-05 16:38:46.371097088 +0100 CET component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371580 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=32.491913728s window=10s component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371593 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:46.871587085 +0100 CET m=+1683.619141328 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.371603 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.571435 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619700 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:46.61944704 +0100 CET raw_timestamp=1.772725126619447e+18 source=http
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619774 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619787 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=79 timestamp=2026-03-05 16:38:46.61944704 +0100 CET component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619798 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=32.74026368s window=10s component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619807 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:47.119801871 +0100 CET m=+1683.867356111 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.619814 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.835914 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:46.835648 +0100 CET raw_timestamp=1.772725126835648e+18 source=http
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.835978 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=80 timestamp=2026-03-05 16:38:46.835648 +0100 CET component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.835990 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=32.95646464s window=10s component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.836000 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:47.335994423 +0100 CET m=+1684.083548664 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.836007 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:46 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:46.879656 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.070405 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:47.070200064 +0100 CET raw_timestamp=1.7727251270702e+18 source=http
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.070458 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=81 timestamp=2026-03-05 16:38:47.070200064 +0100 CET component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.070469 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=33.191016704s window=10s component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.070478 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:47.570472911 +0100 CET m=+1684.318027152 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.070484 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290547 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:47.290315008 +0100 CET raw_timestamp=1.772725127290315e+18 source=http
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290616 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290628 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=82 timestamp=2026-03-05 16:38:47.290315008 +0100 CET component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290637 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=33.411131648s window=10s component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290647 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:47.790642204 +0100 CET m=+1684.538196444 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.290653 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.516935 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:47.516643072 +0100 CET raw_timestamp=1.772725127516643e+18 source=http
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.517000 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.517012 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=83 timestamp=2026-03-05 16:38:47.516643072 +0100 CET component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.517023 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=33.637459712s window=10s component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.517033 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:48.017027867 +0100 CET m=+1684.764582107 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.517039 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748053 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:47.747812096 +0100 CET raw_timestamp=1.772725127747812e+18 source=http
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748133 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748164 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=84 timestamp=2026-03-05 16:38:47.747812096 +0100 CET component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748177 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=33.868628736s window=10s component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748189 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:48.248182692 +0100 CET m=+1684.995736936 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.748197 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957429 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:47.957179904 +0100 CET raw_timestamp=1.77272512795718e+18 source=http
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957494 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957507 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=85 timestamp=2026-03-05 16:38:47.957179904 +0100 CET component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957517 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=34.077996544s window=10s component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957526 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:48.457522149 +0100 CET m=+1685.205076390 component=correlation
+Mar 05 16:38:47 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:47.957534 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.109403 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.171895 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:48.171614976 +0100 CET raw_timestamp=1.772725128171615e+18 source=http
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.171986 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=86 timestamp=2026-03-05 16:38:48.171614976 +0100 CET component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.171997 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=34.292431616s window=10s component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.172006 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:48.67200166 +0100 CET m=+1685.419555900 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.172013 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.255403 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.383908 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:48.383628032 +0100 CET raw_timestamp=1.772725128383628e+18 source=http
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.383970 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=87 timestamp=2026-03-05 16:38:48.383628032 +0100 CET component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.383981 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=34.504444672s window=10s component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.383989 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:48.883984893 +0100 CET m=+1685.631539134 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.383996 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.563991 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.606330 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:48.606091008 +0100 CET raw_timestamp=1.772725128606091e+18 source=http
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.606389 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=88 timestamp=2026-03-05 16:38:48.606091008 +0100 CET component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.606400 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=34.726907648s window=10s component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.606409 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:49.106403961 +0100 CET m=+1685.853958202 component=correlation
+Mar 05 16:38:48 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:48.606416 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367647 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:49.367421952 +0100 CET raw_timestamp=1.772725129367422e+18 source=http
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367716 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367728 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367741 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367755 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=89 timestamp=2026-03-05 16:38:49.367421952 +0100 CET component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367765 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=35.488238592s window=10s component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367773 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:49.867769256 +0100 CET m=+1686.615323496 component=correlation
+Mar 05 16:38:49 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:49.367780 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152785 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:50.152508928 +0100 CET raw_timestamp=1.772725130152509e+18 source=http
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152891 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=89 delay_ms=500 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152912 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=90 timestamp=2026-03-05 16:38:50.152508928 +0100 CET component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152925 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=36.273325568s window=10s component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152935 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:50.652930242 +0100 CET m=+1687.400484483 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.152941 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.367936 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:50.367663104 +0100 CET raw_timestamp=1.772725130367663e+18 source=http
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.368010 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=91 timestamp=2026-03-05 16:38:50.367663104 +0100 CET component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.368021 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=36.488479744s window=10s component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.368046 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:50.868025811 +0100 CET m=+1687.615580051 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.368054 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.590787 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:50.59050496 +0100 CET raw_timestamp=1.772725130590505e+18 source=http
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.590887 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=92 timestamp=2026-03-05 16:38:50.59050496 +0100 CET component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.590901 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=36.7113216s window=10s component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.590913 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:51.090906428 +0100 CET m=+1687.838460673 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.590921 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.781316 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=90 delay_ms=500 component=correlation
+Mar 05 16:38:50 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:50.958076 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=91 delay_ms=500 component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320094 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:51.317103104 +0100 CET raw_timestamp=1.772725131317103e+18 source=http
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320152 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=92 delay_ms=500 component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320167 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=93 timestamp=2026-03-05 16:38:51.317103104 +0100 CET component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320180 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=37.437919744s window=10s component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320190 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:51.820185671 +0100 CET m=+1688.567739912 component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.320198 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:51 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:51.837255 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=93 delay_ms=500 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.195275 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:52.195023872 +0100 CET raw_timestamp=1.772725132195024e+18 source=http
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.195361 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=94 timestamp=2026-03-05 16:38:52.195023872 +0100 CET component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.195399 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=38.315840512s window=10s component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.195415 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:52.695404216 +0100 CET m=+1689.442958457 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.195424 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.483166 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:52.482937088 +0100 CET raw_timestamp=1.772725132482937e+18 source=http
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.513514 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=95 timestamp=2026-03-05 16:38:52.482937088 +0100 CET component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.513535 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=38.603753728s window=10s component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.513545 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:53.013539511 +0100 CET m=+1689.761093751 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.513552 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.691627 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:52.691399936 +0100 CET raw_timestamp=1.7727251326914e+18 source=http
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.691745 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=96 timestamp=2026-03-05 16:38:52.691399936 +0100 CET component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.691753 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=38.812216576s window=10s component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.691763 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:53.19175798 +0100 CET m=+1689.939312220 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.691770 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914539 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:52.914279936 +0100 CET raw_timestamp=1.77272513291428e+18 source=http
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914603 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=94 delay_ms=500 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914616 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=97 timestamp=2026-03-05 16:38:52.914279936 +0100 CET component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914626 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=39.035096576s window=10s component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914635 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:53.414631103 +0100 CET m=+1690.162185344 component=correlation
+Mar 05 16:38:52 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:52.914642 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.084459 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=95 delay_ms=500 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.475515 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=96 delay_ms=500 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.475529 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=97 delay_ms=500 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.711616 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:53.71136896 +0100 CET raw_timestamp=1.772725133711369e+18 source=http
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.711713 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=98 timestamp=2026-03-05 16:38:53.71136896 +0100 CET component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.711725 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=39.8321856s window=10s component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.711736 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:54.211730385 +0100 CET m=+1690.959284626 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.711746 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.932966 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:53.932717056 +0100 CET raw_timestamp=1.772725133932717e+18 source=http
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.933024 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=99 timestamp=2026-03-05 16:38:53.932717056 +0100 CET component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.933034 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=40.053533696s window=10s component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.933043 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:54.433038634 +0100 CET m=+1691.180592874 component=correlation
+Mar 05 16:38:53 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:53.933051 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.162030 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:54.161775104 +0100 CET raw_timestamp=1.772725134161775e+18 source=http
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.162093 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=100 timestamp=2026-03-05 16:38:54.161775104 +0100 CET component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.162104 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=40.282591744s window=10s component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.162113 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:54.662108573 +0100 CET m=+1691.409662813 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.162120 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391656 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=63510 timestamp=2026-03-05 16:38:54.391392 +0100 CET raw_timestamp=1.772725134391392e+18 source=http
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391760 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=98 delay_ms=500 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391775 [logcorrelator] DEBUG processing A event: key=91.224.92.185:63510 keepalive_seq=101 timestamp=2026-03-05 16:38:54.391392 +0100 CET component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391786 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:63510 time_diff=40.51220864s window=10s component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391796 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=63510 emit_after=2026-03-05 16:38:54.891790602 +0100 CET m=+1691.639344842 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.391804 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=63510 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681301 [logcorrelator] DEBUG event received: source=B src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:54.681069312 +0100 CET raw_timestamp=1.7727251346810693e+18 source=network
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681390 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=99 delay_ms=500 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681405 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=100 delay_ms=500 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681418 [logcorrelator] DEBUG processing B event: key=91.224.92.185:60728 timestamp=2026-03-05 16:38:54.681069312 +0100 CET component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681427 [logcorrelator] DEBUG B event has no matching A key in buffer: key=91.224.92.185:60728 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681433 [logcorrelator] DEBUG B event buffered (no match yet): key=91.224.92.185:60728 src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.681443 [logcorrelator] DEBUG event buffered: source=B src_ip=91.224.92.185 src_port=60728 buffer_size=112 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.729166 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:54.728882944 +0100 CET raw_timestamp=1.772725134728883e+18 source=http
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.729232 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=1 timestamp=2026-03-05 16:38:54.728882944 +0100 CET component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.729270 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.728882944 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.729280 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.947997 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:54.94773504 +0100 CET raw_timestamp=1.772725134947735e+18 source=http
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.948061 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=63510 key=91.224.92.185:63510 keepalive_seq=101 delay_ms=500 component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.948076 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=2 timestamp=2026-03-05 16:38:54.94773504 +0100 CET component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.948105 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.94773504 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:54 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:54.948113 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.169569 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:55.169316096 +0100 CET raw_timestamp=1.772725135169316e+18 source=http
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.169632 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=3 timestamp=2026-03-05 16:38:55.169316096 +0100 CET component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.169667 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:55.169316096 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.169678 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.451932 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:55.45162112 +0100 CET raw_timestamp=1.772725135451621e+18 source=http
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.451994 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=4 timestamp=2026-03-05 16:38:55.45162112 +0100 CET component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.452021 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:55.45162112 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.452030 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.672121 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:55.671868928 +0100 CET raw_timestamp=1.772725135671869e+18 source=http
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.672182 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=5 timestamp=2026-03-05 16:38:55.671868928 +0100 CET component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.672213 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:55.671868928 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.672223 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.894212 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:55.89397888 +0100 CET raw_timestamp=1.772725135893979e+18 source=http
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.894274 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=6 timestamp=2026-03-05 16:38:55.89397888 +0100 CET component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.894311 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:55.89397888 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:55 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:55.894319 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.128795 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:56.128598016 +0100 CET raw_timestamp=1.772725136128598e+18 source=http
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.132664 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=7 timestamp=2026-03-05 16:38:56.128598016 +0100 CET component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.132702 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:56.128598016 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.132720 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.905520 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:56.905307904 +0100 CET raw_timestamp=1.772725136905308e+18 source=http
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.905577 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=8 timestamp=2026-03-05 16:38:56.905307904 +0100 CET component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.905609 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:56.905307904 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:56 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:56.905618 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.702559 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:57.70229888 +0100 CET raw_timestamp=1.772725137702299e+18 source=http
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.702635 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=9 timestamp=2026-03-05 16:38:57.70229888 +0100 CET component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.702668 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:57.70229888 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.702678 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.919289 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:57.91903104 +0100 CET raw_timestamp=1.772725137919031e+18 source=http
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.919390 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=10 timestamp=2026-03-05 16:38:57.91903104 +0100 CET component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.919427 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:57.91903104 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:57 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:57.919438 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.148352 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:58.14811008 +0100 CET raw_timestamp=1.77272513814811e+18 source=http
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.148407 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=11 timestamp=2026-03-05 16:38:58.14811008 +0100 CET component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.148440 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:58.14811008 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.148451 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.929964 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:58.929668096 +0100 CET raw_timestamp=1.772725138929668e+18 source=http
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.930034 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=12 timestamp=2026-03-05 16:38:58.929668096 +0100 CET component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.930066 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:58.929668096 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:58 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:58.930076 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.711396 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:59.71107712 +0100 CET raw_timestamp=1.772725139711077e+18 source=http
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.711483 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=13 timestamp=2026-03-05 16:38:59.71107712 +0100 CET component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.711514 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:59.71107712 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.711525 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.939639 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:38:59.93938688 +0100 CET raw_timestamp=1.772725139939387e+18 source=http
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.939698 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=14 timestamp=2026-03-05 16:38:59.93938688 +0100 CET component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.939732 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:59.93938688 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:38:59 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:38:59.939741 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.275207 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:00.274942976 +0100 CET raw_timestamp=1.772725140274943e+18 source=http
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.275266 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=15 timestamp=2026-03-05 16:39:00.274942976 +0100 CET component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.275297 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:00.274942976 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.275306 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.542590 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:00.542306048 +0100 CET raw_timestamp=1.772725140542306e+18 source=http
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.542656 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=16 timestamp=2026-03-05 16:39:00.542306048 +0100 CET component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.542686 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:00.542306048 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:00 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:00.542698 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.394483 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:01.394221056 +0100 CET raw_timestamp=1.772725141394221e+18 source=http
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.394550 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=17 timestamp=2026-03-05 16:39:01.394221056 +0100 CET component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.394596 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:01.394221056 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.394605 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.695211 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:01.694941952 +0100 CET raw_timestamp=1.772725141694942e+18 source=http
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.695282 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=18 timestamp=2026-03-05 16:39:01.694941952 +0100 CET component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.695315 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:01.694941952 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.695324 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.939732 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:01.93942912 +0100 CET raw_timestamp=1.772725141939429e+18 source=http
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.939835 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=19 timestamp=2026-03-05 16:39:01.93942912 +0100 CET component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.940082 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:01.93942912 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:01 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:01.940102 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.173049 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:02.17264512 +0100 CET raw_timestamp=1.772725142172645e+18 source=http
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.173200 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=20 timestamp=2026-03-05 16:39:02.17264512 +0100 CET component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.173247 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:02.17264512 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.173261 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.991343 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:02.991053056 +0100 CET raw_timestamp=1.772725142991053e+18 source=http
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.991416 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=21 timestamp=2026-03-05 16:39:02.991053056 +0100 CET component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.991449 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:02.991053056 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:02 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:02.991459 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.214251 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:03.213974016 +0100 CET raw_timestamp=1.772725143213974e+18 source=http
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.214330 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=22 timestamp=2026-03-05 16:39:03.213974016 +0100 CET component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.214371 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:03.213974016 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.214382 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.448743 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:03.448487936 +0100 CET raw_timestamp=1.772725143448488e+18 source=http
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.448807 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=23 timestamp=2026-03-05 16:39:03.448487936 +0100 CET component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.448836 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:03.448487936 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.448872 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.717702 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:03.717522944 +0100 CET raw_timestamp=1.772725143717523e+18 source=http
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.717752 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=24 timestamp=2026-03-05 16:39:03.717522944 +0100 CET component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.717793 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:03.717522944 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.717802 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.932918 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:03.932560896 +0100 CET raw_timestamp=1.772725143932561e+18 source=http
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.933005 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=25 timestamp=2026-03-05 16:39:03.932560896 +0100 CET component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.933042 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:03.932560896 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:03 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:03.933054 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.181173 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:04.178377984 +0100 CET raw_timestamp=1.772725144178378e+18 source=http
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.181245 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=26 timestamp=2026-03-05 16:39:04.178377984 +0100 CET component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.181274 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:04.178377984 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.181284 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.512665 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:04.509804032 +0100 CET raw_timestamp=1.772725144509804e+18 source=http
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.512732 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=27 timestamp=2026-03-05 16:39:04.509804032 +0100 CET component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.512760 [logcorrelator] DEBUG correlation found: A(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:39:04.509804032 +0100 CET) + B(src_ip=91.224.92.185 src_port=60728 ts=2026-03-05 16:38:54.681069312 +0100 CET) component=correlation
+Mar 05 16:39:04 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:04.512769 [logcorrelator] DEBUG TTL reset for B event (Keep-Alive): key=91.224.92.185:60728 new_ttl=120 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.427873 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:05.427616 +0100 CET raw_timestamp=1.772725145427616e+18 source=http
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.427951 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=28 timestamp=2026-03-05 16:39:05.427616 +0100 CET component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.427963 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=10.746546688s window=10s component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.427977 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:05.927967925 +0100 CET m=+1702.675522175 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.427985 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.668101 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:05.664975104 +0100 CET raw_timestamp=1.772725145664975e+18 source=http
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.668148 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=29 timestamp=2026-03-05 16:39:05.664975104 +0100 CET component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.668159 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=10.983905792s window=10s component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.668168 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:06.168163253 +0100 CET m=+1702.915717494 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.668174 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.926187 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:05.925967104 +0100 CET raw_timestamp=1.772725145925967e+18 source=http
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.926248 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=30 timestamp=2026-03-05 16:39:05.925967104 +0100 CET component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.926259 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=11.244897792s window=10s component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.926270 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:06.426263492 +0100 CET m=+1703.173817732 component=correlation
+Mar 05 16:39:05 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:05.926278 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182571 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:06.18229504 +0100 CET raw_timestamp=1.772725146182295e+18 source=http
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182643 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=28 delay_ms=500 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182660 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=29 delay_ms=500 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182673 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=31 timestamp=2026-03-05 16:39:06.18229504 +0100 CET component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182683 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=11.501225728s window=10s component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182691 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:06.682686928 +0100 CET m=+1703.430241169 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.182698 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.423766 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:06.423512064 +0100 CET raw_timestamp=1.772725146423512e+18 source=http
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.423839 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=32 timestamp=2026-03-05 16:39:06.423512064 +0100 CET component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.423871 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=11.742442752s window=10s component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.423881 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:06.923876177 +0100 CET m=+1703.671430417 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.423887 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648811 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:06.648519936 +0100 CET raw_timestamp=1.77272514664852e+18 source=http
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648895 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=30 delay_ms=500 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648913 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=33 timestamp=2026-03-05 16:39:06.648519936 +0100 CET component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648928 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=11.967450624s window=10s component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648938 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:07.148933171 +0100 CET m=+1703.896487413 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.648945 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.876972 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:06.876632064 +0100 CET raw_timestamp=1.772725146876632e+18 source=http
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.877050 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=31 delay_ms=500 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.877070 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=34 timestamp=2026-03-05 16:39:06.876632064 +0100 CET component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.877083 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=12.195562752s window=10s component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.877095 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:07.377088494 +0100 CET m=+1704.124642735 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.877103 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:06 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:06.941412 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=32 delay_ms=500 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.110869 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:07.110567936 +0100 CET raw_timestamp=1.772725147110568e+18 source=http
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.110972 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=35 timestamp=2026-03-05 16:39:07.110567936 +0100 CET component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.110982 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=12.429498624s window=10s component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.110992 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:07.610987098 +0100 CET m=+1704.358541340 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.111001 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.210185 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=33 delay_ms=500 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386182 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:07.385945088 +0100 CET raw_timestamp=1.772725147385945e+18 source=http
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386295 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=34 delay_ms=500 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386305 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=36 timestamp=2026-03-05 16:39:07.385945088 +0100 CET component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386314 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=12.704875776s window=10s component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386322 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:07.886317821 +0100 CET m=+1704.633872061 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.386329 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.620899 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:07.620667904 +0100 CET raw_timestamp=1.772725147620668e+18 source=http
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.620951 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=35 delay_ms=500 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.620965 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=37 timestamp=2026-03-05 16:39:07.620667904 +0100 CET component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.620975 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=12.939598592s window=10s component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.620993 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:08.120979475 +0100 CET m=+1704.868533715 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.621002 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.849388 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:07.849157888 +0100 CET raw_timestamp=1.772725147849158e+18 source=http
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.849478 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=38 timestamp=2026-03-05 16:39:07.849157888 +0100 CET component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.849486 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=13.168088576s window=10s component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.849494 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:08.349489684 +0100 CET m=+1705.097043925 component=correlation
+Mar 05 16:39:07 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:07.849501 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.056917 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:08.056677888 +0100 CET raw_timestamp=1.772725148056678e+18 source=http
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.056974 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=36 delay_ms=500 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.056988 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=39 timestamp=2026-03-05 16:39:08.056677888 +0100 CET component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.056998 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=13.375608576s window=10s component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.057007 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:08.557002868 +0100 CET m=+1705.304557109 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.057014 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.141449 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=37 delay_ms=500 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.263319 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:08.263084032 +0100 CET raw_timestamp=1.772725148263084e+18 source=http
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.263375 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=40 timestamp=2026-03-05 16:39:08.263084032 +0100 CET component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.263387 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=13.58201472s window=10s component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.263396 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:08.763391028 +0100 CET m=+1705.510945269 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.263402 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.461753 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=38 delay_ms=500 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.487180 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:08.486870016 +0100 CET raw_timestamp=1.77272514848687e+18 source=http
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.487255 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=41 timestamp=2026-03-05 16:39:08.486870016 +0100 CET component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.487269 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=13.805800704s window=10s component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.487280 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:08.987274309 +0100 CET m=+1705.734828550 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.487289 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.622385 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=39 delay_ms=500 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.739570 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:08.739294976 +0100 CET raw_timestamp=1.772725148739295e+18 source=http
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.739674 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=42 timestamp=2026-03-05 16:39:08.739294976 +0100 CET component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.739683 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=14.058225664s window=10s component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.739697 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:09.239688149 +0100 CET m=+1705.987242474 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.739715 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:08 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:08.951542 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=40 delay_ms=500 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134644 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:09.134404096 +0100 CET raw_timestamp=1.772725149134404e+18 source=http
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134719 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=41 delay_ms=500 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134732 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=43 timestamp=2026-03-05 16:39:09.134404096 +0100 CET component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134743 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=14.453334784s window=10s component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134752 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:09.634746999 +0100 CET m=+1706.382301240 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.134761 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936309 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:09.936034048 +0100 CET raw_timestamp=1.772725149936034e+18 source=http
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936376 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=42 delay_ms=500 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936392 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=43 delay_ms=500 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936405 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=44 timestamp=2026-03-05 16:39:09.936034048 +0100 CET component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936416 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=15.254964736s window=10s component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936426 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:10.436420469 +0100 CET m=+1707.183974728 component=correlation
+Mar 05 16:39:09 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:09.936433 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.861448 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=44 delay_ms=500 component=correlation
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.958688 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:10.958419968 +0100 CET raw_timestamp=1.77272515095842e+18 source=http
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.958788 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=45 timestamp=2026-03-05 16:39:10.958419968 +0100 CET component=correlation
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.958801 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=16.277350656s window=10s component=correlation
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.958811 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:11.458805244 +0100 CET m=+1708.206359485 component=correlation
+Mar 05 16:39:10 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:10.958818 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741189 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:11.74094208 +0100 CET raw_timestamp=1.772725151740942e+18 source=http
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741259 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=45 delay_ms=500 component=correlation
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741271 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=46 timestamp=2026-03-05 16:39:11.74094208 +0100 CET component=correlation
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741282 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=17.059872768s window=10s component=correlation
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741291 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:12.241286382 +0100 CET m=+1708.988840623 component=correlation
+Mar 05 16:39:11 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:11.741297 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464694 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:12.464461056 +0100 CET raw_timestamp=1.772725152464461e+18 source=http
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464766 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=46 delay_ms=500 component=correlation
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464779 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=47 timestamp=2026-03-05 16:39:12.464461056 +0100 CET component=correlation
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464790 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=17.783391744s window=10s component=correlation
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464800 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:12.964795397 +0100 CET m=+1709.712349638 component=correlation
+Mar 05 16:39:12 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:12.464807 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253520 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:13.25323904 +0100 CET raw_timestamp=1.772725153253239e+18 source=http
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253629 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=47 delay_ms=500 component=correlation
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253639 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=48 timestamp=2026-03-05 16:39:13.25323904 +0100 CET component=correlation
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253646 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=18.572169728s window=10s component=correlation
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253655 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:13.75365082 +0100 CET m=+1710.501205060 component=correlation
+Mar 05 16:39:13 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:13.253662 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071778 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:14.071507968 +0100 CET raw_timestamp=1.772725154071508e+18 source=http
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071892 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=48 delay_ms=500 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071902 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=49 timestamp=2026-03-05 16:39:14.071507968 +0100 CET component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071909 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=19.390438656s window=10s component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071918 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:14.571913587 +0100 CET m=+1711.319467828 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.071928 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.314750 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:14.314451968 +0100 CET raw_timestamp=1.772725154314452e+18 source=http
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.314822 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=50 timestamp=2026-03-05 16:39:14.314451968 +0100 CET component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.314837 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=19.633382656s window=10s component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.314869 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:14.814841718 +0100 CET m=+1711.562395960 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.314880 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.529251 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:14.529017088 +0100 CET raw_timestamp=1.772725154529017e+18 source=http
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.529328 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=51 timestamp=2026-03-05 16:39:14.529017088 +0100 CET component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.529340 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=19.847947776s window=10s component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.529363 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:15.029357678 +0100 CET m=+1711.776911918 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.529370 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754220 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:14.753933056 +0100 CET raw_timestamp=1.772725154753933e+18 source=http
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754287 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=49 delay_ms=500 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754300 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=52 timestamp=2026-03-05 16:39:14.753933056 +0100 CET component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754311 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=20.072863744s window=10s component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754320 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:15.254315097 +0100 CET m=+1712.001869337 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.754328 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971418 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:14.97118208 +0100 CET raw_timestamp=1.772725154971182e+18 source=http
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971480 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=50 delay_ms=500 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971494 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=53 timestamp=2026-03-05 16:39:14.97118208 +0100 CET component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971504 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=20.290112768s window=10s component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971514 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:15.471509074 +0100 CET m=+1712.219063315 component=correlation
+Mar 05 16:39:14 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:14.971520 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.188880 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:15.188588032 +0100 CET raw_timestamp=1.772725155188588e+18 source=http
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.188952 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=51 delay_ms=500 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.188968 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=54 timestamp=2026-03-05 16:39:15.188588032 +0100 CET component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.188980 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=20.50751872s window=10s component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.188992 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:15.688986153 +0100 CET m=+1712.436540395 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.189002 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.424969 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:15.424684032 +0100 CET raw_timestamp=1.772725155424684e+18 source=http
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.425052 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=52 delay_ms=500 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.425078 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=55 timestamp=2026-03-05 16:39:15.424684032 +0100 CET component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.425089 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=20.74361472s window=10s component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.425098 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:15.925093625 +0100 CET m=+1712.672647866 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.425105 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.647412 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=53 delay_ms=500 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.651277 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:15.651066112 +0100 CET raw_timestamp=1.772725155651066e+18 source=http
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.651329 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=56 timestamp=2026-03-05 16:39:15.651066112 +0100 CET component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.651340 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=20.9699968s window=10s component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.651349 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:16.151344866 +0100 CET m=+1712.898899110 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.651355 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878328 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:15.878008064 +0100 CET raw_timestamp=1.772725155878008e+18 source=http
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878430 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=54 delay_ms=500 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878448 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=57 timestamp=2026-03-05 16:39:15.878008064 +0100 CET component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878459 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=21.196938752s window=10s component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878468 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:16.378463317 +0100 CET m=+1713.126017558 component=correlation
+Mar 05 16:39:15 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:15.878474 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090548 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:16.090284032 +0100 CET raw_timestamp=1.772725156090284e+18 source=http
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090617 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=55 delay_ms=500 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090629 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=58 timestamp=2026-03-05 16:39:16.090284032 +0100 CET component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090639 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=21.40921472s window=10s component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090649 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:16.59064436 +0100 CET m=+1713.338198601 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.090655 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353093 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:16.352816128 +0100 CET raw_timestamp=1.772725156352816e+18 source=http
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353170 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=56 delay_ms=500 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353186 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=59 timestamp=2026-03-05 16:39:16.352816128 +0100 CET component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353197 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=21.671746816s window=10s component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353212 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:16.853202369 +0100 CET m=+1713.600756612 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.353221 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.869549 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=57 delay_ms=500 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.869565 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=58 delay_ms=500 component=correlation
+Mar 05 16:39:16 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:16.869580 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=59 delay_ms=500 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.125179 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:17.124928 +0100 CET raw_timestamp=1.772725157124928e+18 source=http
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.125245 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=60 timestamp=2026-03-05 16:39:17.124928 +0100 CET component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.125259 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=22.443858688s window=10s component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.125273 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:17.62526346 +0100 CET m=+1714.372817701 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.125280 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.355034 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:17.354767104 +0100 CET raw_timestamp=1.772725157354767e+18 source=http
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.355144 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=61 timestamp=2026-03-05 16:39:17.354767104 +0100 CET component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.355154 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=22.673697792s window=10s component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.355165 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:17.855159015 +0100 CET m=+1714.602713258 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.355173 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.580954 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:17.58061312 +0100 CET raw_timestamp=1.772725157580613e+18 source=http
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.581085 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=62 timestamp=2026-03-05 16:39:17.58061312 +0100 CET component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.581094 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=22.899543808s window=10s component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.581105 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:18.081098691 +0100 CET m=+1714.828652931 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.581112 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.676543 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=60 delay_ms=500 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.833825 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:17.833552896 +0100 CET raw_timestamp=1.772725157833553e+18 source=http
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.833906 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=63 timestamp=2026-03-05 16:39:17.833552896 +0100 CET component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.833918 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=23.152483584s window=10s component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.833928 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:18.333922665 +0100 CET m=+1715.081476906 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.833934 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:17 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:17.976392 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=61 delay_ms=500 component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.217300 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=62 delay_ms=500 component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568455 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:18.568214016 +0100 CET raw_timestamp=1.772725158568214e+18 source=http
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568541 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=63 delay_ms=500 component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568551 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=64 timestamp=2026-03-05 16:39:18.568214016 +0100 CET component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568560 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=23.887144704s window=10s component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568569 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:19.068564498 +0100 CET m=+1715.816118809 component=correlation
+Mar 05 16:39:18 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:18.568579 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.163952 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=64 delay_ms=500 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.349880 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:19.349627904 +0100 CET raw_timestamp=1.772725159349628e+18 source=http
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.349970 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=65 timestamp=2026-03-05 16:39:19.349627904 +0100 CET component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.349978 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=24.668558592s window=10s component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.349995 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:19.849986258 +0100 CET m=+1716.597540504 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.350008 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.631256 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:19.63098112 +0100 CET raw_timestamp=1.772725159630981e+18 source=http
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.631335 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=66 timestamp=2026-03-05 16:39:19.63098112 +0100 CET component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.631343 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=24.949911808s window=10s component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.631352 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:20.131347548 +0100 CET m=+1716.878901788 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.631359 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.853867 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:19.853573888 +0100 CET raw_timestamp=1.772725159853574e+18 source=http
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.853952 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=65 delay_ms=500 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.853969 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=67 timestamp=2026-03-05 16:39:19.853573888 +0100 CET component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.853983 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=25.172504576s window=10s component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.853997 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:20.35398865 +0100 CET m=+1717.101542894 component=correlation
+Mar 05 16:39:19 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:19.854004 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620253 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:20.619993088 +0100 CET raw_timestamp=1.772725160619993e+18 source=http
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620367 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=66 delay_ms=500 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620382 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=67 delay_ms=500 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620391 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=68 timestamp=2026-03-05 16:39:20.619993088 +0100 CET component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620398 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=25.938923776s window=10s component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620407 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:21.120402995 +0100 CET m=+1717.867957236 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.620413 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.837204 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:20.836930048 +0100 CET raw_timestamp=1.77272516083693e+18 source=http
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.837297 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=69 timestamp=2026-03-05 16:39:20.836930048 +0100 CET component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.837311 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=26.155860736s window=10s component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.837325 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:21.337316149 +0100 CET m=+1718.084870390 component=correlation
+Mar 05 16:39:20 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:20.837332 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.064272 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:21.064048896 +0100 CET raw_timestamp=1.772725161064049e+18 source=http
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.064333 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=70 timestamp=2026-03-05 16:39:21.064048896 +0100 CET component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.064345 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=26.382979584s window=10s component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.064355 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:21.564349352 +0100 CET m=+1718.311903593 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.064362 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287439 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:21.287056896 +0100 CET raw_timestamp=1.772725161287057e+18 source=http
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287582 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=68 delay_ms=500 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287599 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=71 timestamp=2026-03-05 16:39:21.287056896 +0100 CET component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287610 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=26.605987584s window=10s component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287621 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:21.787615396 +0100 CET m=+1718.535169642 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.287631 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.534439 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=69 delay_ms=500 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.855175 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=70 delay_ms=500 component=correlation
+Mar 05 16:39:21 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:21.855195 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=71 delay_ms=500 component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.058397 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:22.058160896 +0100 CET raw_timestamp=1.772725162058161e+18 source=http
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.058471 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=72 timestamp=2026-03-05 16:39:22.058160896 +0100 CET component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.058478 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=27.377091584s window=10s component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.058488 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:22.55848296 +0100 CET m=+1719.306037201 component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.058494 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890687 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:22.89043712 +0100 CET raw_timestamp=1.772725162890437e+18 source=http
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890790 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=72 delay_ms=500 component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890799 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=73 timestamp=2026-03-05 16:39:22.89043712 +0100 CET component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890807 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=28.209367808s window=10s component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890815 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:23.390811588 +0100 CET m=+1720.138365828 component=correlation
+Mar 05 16:39:22 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:22.890822 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.096055 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:23.095806976 +0100 CET raw_timestamp=1.772725163095807e+18 source=http
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.096146 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=74 timestamp=2026-03-05 16:39:23.095806976 +0100 CET component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.096156 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=28.414737664s window=10s component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.096167 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:23.596161144 +0100 CET m=+1720.343715387 component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.096175 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.309892 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:23.309598976 +0100 CET raw_timestamp=1.772725163309599e+18 source=http
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.309976 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=75 timestamp=2026-03-05 16:39:23.309598976 +0100 CET component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.309986 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=28.628529664s window=10s component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.309997 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:23.809990803 +0100 CET m=+1720.557545044 component=correlation
+Mar 05 16:39:23 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:23.310004 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005358 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:24.005090048 +0100 CET raw_timestamp=1.77272516400509e+18 source=http
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005446 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=73 delay_ms=500 component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005457 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=74 delay_ms=500 component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005469 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=75 delay_ms=500 component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005480 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=76 timestamp=2026-03-05 16:39:24.005090048 +0100 CET component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005489 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=29.324020736s window=10s component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005497 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:24.505492919 +0100 CET m=+1721.253047159 component=correlation
+Mar 05 16:39:24 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:24.005504 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025014 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:25.024700928 +0100 CET raw_timestamp=1.772725165024701e+18 source=http
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025081 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=76 delay_ms=500 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025094 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=77 timestamp=2026-03-05 16:39:25.024700928 +0100 CET component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025105 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=30.343631616s window=10s component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025115 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:25.525109889 +0100 CET m=+1722.272664129 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.025121 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828274 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:25.828013056 +0100 CET raw_timestamp=1.772725165828013e+18 source=http
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828346 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=77 delay_ms=500 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828359 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=78 timestamp=2026-03-05 16:39:25.828013056 +0100 CET component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828378 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=31.146943744s window=10s component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828387 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:26.328383007 +0100 CET m=+1723.075937248 component=correlation
+Mar 05 16:39:25 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:25.828394 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551840 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:26.551590912 +0100 CET raw_timestamp=1.772725166551591e+18 source=http
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551955 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=78 delay_ms=500 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551970 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=79 timestamp=2026-03-05 16:39:26.551590912 +0100 CET component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551981 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=31.8705216s window=10s component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551989 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:27.051984934 +0100 CET m=+1723.799539174 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.551995 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.766096 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:26.76584192 +0100 CET raw_timestamp=1.772725166765842e+18 source=http
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.766151 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=80 timestamp=2026-03-05 16:39:26.76584192 +0100 CET component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.766164 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=32.084772608s window=10s component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.766173 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:27.266168067 +0100 CET m=+1724.013722307 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.766180 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.980976 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:26.980722944 +0100 CET raw_timestamp=1.772725166980723e+18 source=http
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.981032 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=81 timestamp=2026-03-05 16:39:26.980722944 +0100 CET component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.981044 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=32.299653632s window=10s component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.981053 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:27.481048017 +0100 CET m=+1724.228602257 component=correlation
+Mar 05 16:39:26 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:26.981060 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206650 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:27.206405888 +0100 CET raw_timestamp=1.772725167206406e+18 source=http
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206740 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=79 delay_ms=500 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206754 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=82 timestamp=2026-03-05 16:39:27.206405888 +0100 CET component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206765 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=32.525336576s window=10s component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206773 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:27.706769292 +0100 CET m=+1724.454323533 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.206780 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421001 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:27.420728064 +0100 CET raw_timestamp=1.772725167420728e+18 source=http
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421064 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=80 delay_ms=500 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421077 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=83 timestamp=2026-03-05 16:39:27.420728064 +0100 CET component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421088 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=32.739658752s window=10s component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421097 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:27.921092909 +0100 CET m=+1724.668647150 component=correlation
+Mar 05 16:39:27 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:27.421106 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.148930 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:28.148642048 +0100 CET raw_timestamp=1.772725168148642e+18 source=http
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.148994 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=81 delay_ms=500 component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149008 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=82 delay_ms=500 component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149019 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=83 delay_ms=500 component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149031 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=84 timestamp=2026-03-05 16:39:28.148642048 +0100 CET component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149042 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=33.467572736s window=10s component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149055 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:28.649046506 +0100 CET m=+1725.396600747 component=correlation
+Mar 05 16:39:28 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:28.149062 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188425 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:29.188084992 +0100 CET raw_timestamp=1.772725169188085e+18 source=http
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188506 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=84 delay_ms=500 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188520 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=85 timestamp=2026-03-05 16:39:29.188084992 +0100 CET component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188534 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=34.50701568s window=10s component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188545 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:29.688539218 +0100 CET m=+1726.436093458 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.188552 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.768321 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=85 delay_ms=500 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.970820 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:29.970572032 +0100 CET raw_timestamp=1.772725169970572e+18 source=http
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.970889 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=86 timestamp=2026-03-05 16:39:29.970572032 +0100 CET component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.970902 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=35.28950272s window=10s component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.970912 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:30.470906243 +0100 CET m=+1727.218460484 component=correlation
+Mar 05 16:39:29 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:29.970919 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736230 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:30.73591296 +0100 CET raw_timestamp=1.772725170735913e+18 source=http
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736305 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=86 delay_ms=500 component=correlation
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736321 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=87 timestamp=2026-03-05 16:39:30.73591296 +0100 CET component=correlation
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736334 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=36.054843648s window=10s component=correlation
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736345 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:31.236339102 +0100 CET m=+1727.983893344 component=correlation
+Mar 05 16:39:30 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:30.736353 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.496918 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:31.493808128 +0100 CET raw_timestamp=1.772725171493808e+18 source=http
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.496990 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=87 delay_ms=500 component=correlation
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.497005 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=88 timestamp=2026-03-05 16:39:31.493808128 +0100 CET component=correlation
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.497015 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=36.812738816s window=10s component=correlation
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.497024 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:31.997019051 +0100 CET m=+1728.744573305 component=correlation
+Mar 05 16:39:31 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:31.497030 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369781 [logcorrelator] DEBUG event received: source=A src_ip=91.224.92.185 src_port=60728 timestamp=2026-03-05 16:39:32.369523968 +0100 CET raw_timestamp=1.772725172369524e+18 source=http
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369842 [logcorrelator] DEBUG B event TTL expired: key=91.224.92.185:59046 src_ip=91.224.92.185 src_port=59046 ttl=120 age=2m10.288730284s component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369901 [logcorrelator] WARN orphan A event (emit delay expired): src_ip=91.224.92.185 src_port=60728 key=91.224.92.185:60728 keepalive_seq=88 delay_ms=500 component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369911 [logcorrelator] DEBUG processing A event: key=91.224.92.185:60728 keepalive_seq=89 timestamp=2026-03-05 16:39:32.369523968 +0100 CET component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369919 [logcorrelator] DEBUG A event has same key as B but outside time window: key=91.224.92.185:60728 time_diff=37.688454656s window=10s component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369927 [logcorrelator] DEBUG A event added to pending orphans: src_ip=91.224.92.185 src_port=60728 emit_after=2026-03-05 16:39:32.869923279 +0100 CET m=+1729.617477519 component=correlation
+Mar 05 16:39:32 sdv-wp-web.sdv.fr logcorrelator[2557201]: 2026/03/05 16:39:32.369933 [logcorrelator] DEBUG A event added to pending orphans (delay=500ms): src_ip=91.224.92.185 src_port=60728 component=correlation
diff --git a/Makefile b/Makefile
index b08a6ac..26e2d9a 100644
--- a/Makefile
+++ b/Makefile
@@ -20,7 +20,7 @@ BINARY_NAME=logcorrelator
 DIST_DIR=dist
 
 # Package version
-PKG_VERSION ?= 1.1.13
+PKG_VERSION ?= 1.1.14
 
 # Enable BuildKit for better performance
 export DOCKER_BUILDKIT=1
diff --git a/internal/app/orchestrator.go b/internal/app/orchestrator.go
index 938e3ba..f58d787 100644
--- a/internal/app/orchestrator.go
+++ b/internal/app/orchestrator.go
@@ -15,6 +15,10 @@ const (
 	DefaultEventChannelBufferSize = 1000
 	// ShutdownTimeout is the maximum time to wait for graceful shutdown
 	ShutdownTimeout = 30 * time.Second
+	// OrphanTickInterval is how often the orchestrator drains pending orphans.
+	// Set to half the default emit delay (500ms/2) so orphans are emitted promptly
+	// even when no new events arrive.
+	OrphanTickInterval = 250 * time.Millisecond
 )
 
 // OrchestratorConfig holds the orchestrator configuration.
@@ -77,6 +81,27 @@ func (o *Orchestrator) Start() error {
 		}(source, eventChan)
 	}
 
+	// Start a periodic ticker to drain pending orphan A events independently of the
+	// event flow. Without this, orphans are only emitted when a new event arrives,
+	// causing them to accumulate silently when the source goes quiet.
+	o.wg.Add(1)
+	go func() {
+		defer o.wg.Done()
+		ticker := time.NewTicker(OrphanTickInterval)
+		defer ticker.Stop()
+		for {
+			select {
+			case <-o.ctx.Done():
+				return
+			case <-ticker.C:
+				logs := o.correlationSvc.EmitPendingOrphans()
+				for _, log := range logs {
+					o.config.Sink.Write(o.ctx, log) //nolint:errcheck
+				}
+			}
+		}
+	}()
+
 	return nil
 }
 
diff --git a/internal/domain/correlation_service.go b/internal/domain/correlation_service.go
index 9802f58..92ded24 100644
--- a/internal/domain/correlation_service.go
+++ b/internal/domain/correlation_service.go
@@ -352,7 +352,13 @@ func (s *CorrelationService) processSourceA(event *NormalizedEvent) ([]Correlate
 	s.logger.Debugf("processing A event: key=%s keepalive_seq=%d timestamp=%v", key, event.KeepAliveSeq, event.Timestamp)
 
 	// Look for matching B events
+	// In one_to_many (Keep-Alive) mode use TTL-based matching: B is valid as long as
+	// its TTL has not expired (the timestamp is fixed at TCP connection time and grows
+	// beyond TimeWindow after ~10s, making timestamp comparison incorrect).
 	matches := s.findMatches(s.bufferB, s.pendingB, key, func(other *NormalizedEvent) bool {
+		if s.config.MatchingMode == MatchingModeOneToMany {
+			return s.bEventHasValidTTL(other)
+		}
 		return s.eventsMatch(event, other)
 	})
 
@@ -392,17 +398,22 @@ func (s *CorrelationService) processSourceA(event *NormalizedEvent) ([]Correlate
 		return results, false
 	}
 
-	// No match found - check if there are B events with same key but outside time window
+	// No match found - check if there are B events with same key but outside match criteria
 	if bElements, ok := s.pendingB[key]; ok && len(bElements) > 0 {
-		// Key exists but no time match - log the time difference for debugging
-		for _, bElem := range bElements {
-			bEvent := bElem.Value.(*NormalizedEvent)
-			timeDiff := event.Timestamp.Sub(bEvent.Timestamp)
-			if timeDiff < 0 {
-				timeDiff = -timeDiff
+		if s.config.MatchingMode == MatchingModeOneToMany {
+			// In Keep-Alive mode, B exists but TTL expired
+			s.logger.Debugf("A event has same key as B but B TTL expired: key=%s", key)
+		} else {
+			// In one-to-one mode, B exists but outside time window
+			for _, bElem := range bElements {
+				bEvent := bElem.Value.(*NormalizedEvent)
+				timeDiff := event.Timestamp.Sub(bEvent.Timestamp)
+				if timeDiff < 0 {
+					timeDiff = -timeDiff
+				}
+				s.logger.Debugf("A event has same key as B but outside time window: key=%s time_diff=%v window=%v",
+					key, timeDiff, s.config.TimeWindow)
 			}
-			s.logger.Debugf("A event has same key as B but outside time window: key=%s time_diff=%v window=%v",
-				key, timeDiff, s.config.TimeWindow)
 		}
 		s.metrics.RecordCorrelationFailed("time_window")
 	} else {
@@ -497,6 +508,23 @@ func (s *CorrelationService) eventsMatch(a, b *NormalizedEvent) bool {
 	return diff <= s.config.TimeWindow
 }
 
+// bEventHasValidTTL returns true if the B event is still alive (TTL not expired).
+// Used in one_to_many mode where the B timestamp is fixed at TCP connection time and
+// grows beyond TimeWindow — TTL validity is the correct liveness indicator.
+func (s *CorrelationService) bEventHasValidTTL(bEvent *NormalizedEvent) bool {
+	key := bEvent.CorrelationKey()
+	if elements, ok := s.pendingB[key]; ok {
+		for _, elem := range elements {
+			if elem.Value.(*NormalizedEvent) == bEvent {
+				if ttl, exists := s.networkTTLs[elem]; exists {
+					return !s.timeProvider.Now().After(ttl)
+				}
+			}
+		}
+	}
+	return false
+}
+
 func (s *CorrelationService) addEvent(event *NormalizedEvent) {
 	key := event.CorrelationKey()
 
@@ -605,6 +633,8 @@ func (s *CorrelationService) cleanBuffer(buffer *eventBuffer, pending map[string
 // cleanNetworkBufferByTTL removes expired B events based on their reset TTL.
 // For Keep-Alive support, we check the TTL map (which is reset on each correlation)
 // rather than the original event timestamp.
+// When a B event expires, any pending orphan A events for that key are immediately
+// emitted (they can no longer ever be correlated).
 func (s *CorrelationService) cleanNetworkBufferByTTL() {
 	now := s.timeProvider.Now()
 	var removed int
@@ -618,6 +648,20 @@ func (s *CorrelationService) cleanNetworkBufferByTTL() {
 				delete(s.pendingB, key)
 				// Connection fully gone: reset Keep-Alive counter for this key
 				delete(s.keepAliveSeqA, key)
+
+				// Purge any pending orphan A events for this key: they can no longer
+				// correlate with a B (the connection is closed), emit them immediately.
+				if s.config.ApacheAlwaysEmit {
+					if orphans, ok := s.pendingOrphans[key]; ok && len(orphans) > 0 {
+						s.logger.Debugf("B TTL expired, emitting %d pending orphan(s) for key=%s", len(orphans), key)
+						for _, o := range orphans {
+							s.logger.Warnf("orphan A event (B TTL expired): src_ip=%s src_port=%d key=%s keepalive_seq=%d",
+								o.event.SrcIP, o.event.SrcPort, key, o.event.KeepAliveSeq)
+							s.metrics.RecordOrphanEmitted("A")
+						}
+						delete(s.pendingOrphans, key)
+					}
+				}
 			}
 			delete(s.networkTTLs, elem)
 			removed++
@@ -778,7 +822,16 @@ func (s *CorrelationService) checkPendingOrphansForCorrelation(bEvent *Normalize
 	}
 	
 	for i, orphan := range orphans {
-		if s.eventsMatch(orphan.event, bEvent) {
+		// In one_to_many mode: same key = same Keep-Alive connection → always correlate.
+		// The incoming B event may have an old original timestamp (fixed at TCP connection
+		// time) so eventsMatch would fail for long-lived sessions. Use key identity instead.
+		var matched bool
+		if s.config.MatchingMode == MatchingModeOneToMany {
+			matched = true
+		} else {
+			matched = s.eventsMatch(orphan.event, bEvent)
+		}
+		if matched {
 			// Found a match! Remove from pending and return
 			aEvent := orphan.event
 			s.pendingOrphans[key] = append(orphans[:i], orphans[i+1:]...)
@@ -828,6 +881,15 @@ func (s *CorrelationService) emitPendingOrphans() []CorrelatedLog {
 	return results
 }
 
+// EmitPendingOrphans emits all pending orphans that have passed their emit delay.
+// This is the public, thread-safe version intended to be called by an external ticker
+// (e.g. the Orchestrator) so that orphans are emitted even when no new events arrive.
+func (s *CorrelationService) EmitPendingOrphans() []CorrelatedLog {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	return s.emitPendingOrphans()
+}
+
 func removeElementFromSlice(elements []*list.Element, target *list.Element) []*list.Element {
 	if len(elements) == 0 {
 		return elements
diff --git a/internal/domain/correlation_service_test.go b/internal/domain/correlation_service_test.go
index 520872c..a359a4b 100644
--- a/internal/domain/correlation_service_test.go
+++ b/internal/domain/correlation_service_test.go
@@ -1612,3 +1612,213 @@ if !correlated {
 t.Errorf("A2 Keep-Alive: expected correlated result, got %d results — B was not buffered after pending orphan match (bug)", len(results))
 }
 }
+
+// TestKeepAlive_BeyondTimeWindow_StillCorrelates verifies that in one_to_many mode,
+// A events are correlated with the buffered B event even when the time difference
+// between A.Timestamp and B.original Timestamp exceeds TimeWindow.
+// Regression test for Bug #1.
+func TestKeepAlive_BeyondTimeWindow_StillCorrelates(t *testing.T) {
+now := time.Date(2026, 3, 5, 16, 30, 0, 0, time.UTC)
+tp := &mockTimeProvider{now: now}
+
+config := CorrelationConfig{
+TimeWindow:           10 * time.Second,
+ApacheAlwaysEmit:     true,
+ApacheEmitDelayMs:    500,
+NetworkTTLS:          120,
+MatchingMode:         MatchingModeOneToMany,
+MaxHTTPBufferSize:    DefaultMaxHTTPBufferSize,
+MaxNetworkBufferSize: DefaultMaxNetworkBufferSize,
+}
+svc := NewCorrelationService(config, tp)
+
+// B arrives first (TCP connection established)
+b := &NormalizedEvent{
+Source:    SourceB,
+Timestamp: now,
+SrcIP:     "91.224.92.185",
+SrcPort:   53471,
+}
+if results := svc.ProcessEvent(b); len(results) != 0 {
+t.Fatalf("B buffered: expected 0 results, got %d", len(results))
+}
+
+// A seq=1 arrives within window -- correlates and resets TTL
+tp.now = now.Add(100 * time.Millisecond)
+a1 := &NormalizedEvent{
+Source:    SourceA,
+Timestamp: tp.now,
+SrcIP:     "91.224.92.185",
+SrcPort:   53471,
+}
+if results := svc.ProcessEvent(a1); len(results) != 1 || !results[0].Correlated {
+t.Fatalf("A seq=1: expected 1 correlated result, got %d", len(svc.ProcessEvent(a1)))
+}
+
+// A seq=10 arrives 11s after B (beyond TimeWindow) but B TTL is still valid (reset at seq=1)
+tp.now = now.Add(11 * time.Second)
+a10 := &NormalizedEvent{
+Source:    SourceA,
+Timestamp: tp.now,
+SrcIP:     "91.224.92.185",
+SrcPort:   53471,
+}
+results := svc.ProcessEvent(a10)
+
+correlated := false
+for _, r := range results {
+if r.Correlated {
+correlated = true
+}
+}
+if !correlated {
+t.Errorf("A seq=10 (diff>TimeWindow, TTL valid): expected Correlated=true, got %d results -- Bug #1 not fixed", len(results))
+}
+}
+
+// TestKeepAlive_PendingOrphan_MatchesBeyondTimeWindow verifies that a pending orphan A
+// is correctly matched by an incoming B when timestamps differ by more than TimeWindow.
+// Regression test for Bug #4.
+func TestKeepAlive_PendingOrphan_MatchesBeyondTimeWindow(t *testing.T) {
+now := time.Date(2026, 3, 5, 16, 30, 0, 0, time.UTC)
+tp := &mockTimeProvider{now: now}
+
+config := CorrelationConfig{
+TimeWindow:           10 * time.Second,
+ApacheAlwaysEmit:     true,
+ApacheEmitDelayMs:    500,
+NetworkTTLS:          120,
+MatchingMode:         MatchingModeOneToMany,
+MaxHTTPBufferSize:    DefaultMaxHTTPBufferSize,
+MaxNetworkBufferSize: DefaultMaxNetworkBufferSize,
+}
+svc := NewCorrelationService(config, tp)
+
+// A arrives first, no B in buffer -> pending orphan
+a := &NormalizedEvent{
+Source:    SourceA,
+Timestamp: now.Add(15 * time.Second),
+SrcIP:     "10.1.2.3",
+SrcPort:   9999,
+}
+if results := svc.ProcessEvent(a); len(results) != 0 {
+t.Fatalf("A with no B: expected 0 results (pending orphan), got %d", len(results))
+}
+if len(svc.pendingOrphans) != 1 {
+t.Fatalf("expected 1 pending orphan key, got %d", len(svc.pendingOrphans))
+}
+
+// B arrives with old timestamp (diff with A = 15s > TimeWindow)
+// In one_to_many: same key = same connection, must match pending orphan regardless of timestamps
+b := &NormalizedEvent{
+Source:    SourceB,
+Timestamp: now,
+SrcIP:     "10.1.2.3",
+SrcPort:   9999,
+}
+results := svc.ProcessEvent(b)
+
+correlated := false
+for _, r := range results {
+if r.Correlated {
+correlated = true
+}
+}
+if !correlated {
+t.Errorf("pending orphan + B (diff>TimeWindow): expected Correlated=true -- Bug #4 not fixed")
+}
+if len(svc.pendingOrphans) != 0 {
+t.Errorf("expected pendingOrphans empty after match, got %d keys", len(svc.pendingOrphans))
+}
+}
+
+// TestBTTLExpiry_PurgesPendingOrphans verifies that when a B event TTL expires,
+// pending orphan A events for that key are purged. Regression test for Bug #3.
+func TestBTTLExpiry_PurgesPendingOrphans(t *testing.T) {
+now := time.Date(2026, 3, 5, 16, 30, 0, 0, time.UTC)
+tp := &mockTimeProvider{now: now}
+
+// Use one_to_one + tight TimeWindow so A goes to pending orphans in old code path
+config := CorrelationConfig{
+TimeWindow:           2 * time.Second,
+ApacheAlwaysEmit:     true,
+ApacheEmitDelayMs:    500,
+NetworkTTLS:          5,
+MatchingMode:         MatchingModeOneToOne,
+MaxHTTPBufferSize:    DefaultMaxHTTPBufferSize,
+MaxNetworkBufferSize: DefaultMaxNetworkBufferSize,
+}
+svc := NewCorrelationService(config, tp)
+
+// B arrives
+svc.ProcessEvent(&NormalizedEvent{
+Source: SourceB, Timestamp: now, SrcIP: "10.9.9.9", SrcPort: 8888,
+})
+
+// A arrives 3s later -- beyond TimeWindow(2s), no match -> pending orphan
+tp.now = now.Add(3 * time.Second)
+svc.ProcessEvent(&NormalizedEvent{
+Source: SourceA, Timestamp: tp.now, SrcIP: "10.9.9.9", SrcPort: 8888,
+})
+
+if _, exists := svc.pendingOrphans["10.9.9.9:8888"]; !exists {
+t.Skip("A not in pendingOrphans (different code path) -- skipping")
+}
+
+// Advance past B TTL (5s from t=0, now at t=6s)
+tp.now = now.Add(6 * time.Second)
+// Trigger cleanExpired via ProcessEvent with a dummy event
+svc.ProcessEvent(&NormalizedEvent{
+Source: SourceB, Timestamp: tp.now, SrcIP: "99.99.99.1", SrcPort: 1,
+})
+
+if _, exists := svc.pendingOrphans["10.9.9.9:8888"]; exists {
+t.Errorf("Bug #3: pendingOrphans not purged after B TTL expired")
+}
+}
+
+// TestEmitPendingOrphans_PublicMethod verifies EmitPendingOrphans() emits orphans
+// after the delay expires and nothing before. Regression test for Bug #2.
+func TestEmitPendingOrphans_PublicMethod(t *testing.T) {
+now := time.Date(2026, 3, 5, 16, 30, 0, 0, time.UTC)
+tp := &mockTimeProvider{now: now}
+
+config := CorrelationConfig{
+TimeWindow:           10 * time.Second,
+ApacheAlwaysEmit:     true,
+ApacheEmitDelayMs:    500,
+NetworkTTLS:          120,
+MatchingMode:         MatchingModeOneToMany,
+MaxHTTPBufferSize:    DefaultMaxHTTPBufferSize,
+MaxNetworkBufferSize: DefaultMaxNetworkBufferSize,
+}
+svc := NewCorrelationService(config, tp)
+
+// A arrives with no B -> pending orphan
+if results := svc.ProcessEvent(&NormalizedEvent{
+Source: SourceA, Timestamp: now, SrcIP: "192.0.2.1", SrcPort: 4444,
+}); len(results) != 0 {
+t.Fatalf("expected 0 results (pending), got %d", len(results))
+}
+
+// Before delay: nothing emitted
+tp.now = now.Add(200 * time.Millisecond)
+if emitted := svc.EmitPendingOrphans(); len(emitted) != 0 {
+t.Errorf("before delay: expected 0 emitted orphans, got %d", len(emitted))
+}
+
+// After delay (>500ms): orphan emitted
+tp.now = now.Add(600 * time.Millisecond)
+emitted := svc.EmitPendingOrphans()
+if len(emitted) != 1 {
+t.Fatalf("after delay: expected 1 emitted orphan, got %d", len(emitted))
+}
+if emitted[0].Correlated {
+t.Errorf("expected orphan (Correlated=false), got Correlated=true")
+}
+
+// Second call: nothing (already emitted)
+if emitted2 := svc.EmitPendingOrphans(); len(emitted2) != 0 {
+t.Errorf("second call: expected 0 (already emitted), got %d", len(emitted2))
+}
+}
diff --git a/internal/ports/source.go b/internal/ports/source.go
index a3a7fec..a072673 100644
--- a/internal/ports/source.go
+++ b/internal/ports/source.go
@@ -47,6 +47,11 @@ type CorrelationProcessor interface {
 	// Flush forces emission of remaining buffered events.
 	Flush() []domain.CorrelatedLog
 
+	// EmitPendingOrphans emits orphan A events whose delay has expired.
+	// Called periodically by the Orchestrator ticker so orphans are not blocked
+	// waiting for the next incoming event.
+	EmitPendingOrphans() []domain.CorrelatedLog
+
 	// GetBufferSizes returns the current buffer sizes for monitoring.
 	GetBufferSizes() (int, int)
 }
diff --git a/packaging/rpm/logcorrelator.spec b/packaging/rpm/logcorrelator.spec
index 6d77081..4912ba8 100644
--- a/packaging/rpm/logcorrelator.spec
+++ b/packaging/rpm/logcorrelator.spec
@@ -145,6 +145,25 @@ exit 0
 %config(noreplace) /etc/logrotate.d/logcorrelator
 
 %changelog
+* Thu Mar 05 2026 logcorrelator <dev@example.com> - 1.1.14-1
+- Fix(correlation/bug1): Keep-Alive sessions au-dela de TimeWindow ne correlent plus en orphelins
+  Le matcher dans processSourceA utilisait eventsMatch (comparaison de timestamps) en mode
+  one_to_many. Apres ~10s, B.Timestamp_original depasse la TimeWindow et toutes les requetes
+  suivantes devenaient orphelines. Nouveau matcher bEventHasValidTTL : un B event est valide
+  tant que son TTL n'a pas expire (le TTL est reset a chaque correlation Keep-Alive).
+- Fix(correlation/bug4): checkPendingOrphansForCorrelation utilisait eventsMatch (meme bug)
+  En mode one_to_many, un B arrivant avec un vieux timestamp ne matchait plus les pending orphans
+  pour la meme cle. Remplace par une verification de cle uniquement (meme cle = meme connexion).
+- Fix(correlation/bug3): pendingOrphans non purges quand le B expire (cleanNetworkBufferByTTL)
+  Quand un B event expirait (TTL), les pending orphan A associes etaient bloques indefiniment.
+  Ils sont desormais emis immediatement lors de l'expiration du B correspondant.
+- Fix(correlation/bug2): orphans emis uniquement sur reception d'evenement (pas de timer dedie)
+  EmitPendingOrphans() est maintenant une methode publique thread-safe. L'Orchestrateur
+  demarre un goroutine ticker (250ms) qui appelle EmitPendingOrphans() independamment du flux,
+  garantissant l'emission meme en l'absence de nouveaux evenements.
+- Feat(ports): ajout de EmitPendingOrphans() dans l'interface CorrelationProcessor
+- Test: 4 nouveaux tests de non-regression (Bug #1, #2, #3, #4)
+
 * Thu Mar 05 2026 logcorrelator <dev@example.com> - 1.1.13-1
 - Fix: Unix sockets ne passent plus en root:root lors des restarts du service
 - Fix: Ajout de RuntimeDirectory=logcorrelator dans le service systemd (systemd gère /run/logcorrelator avec le bon propriétaire à chaque démarrage/restart)