_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15284    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:0H-events_highpri]    <noArgs>
root    39    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u17:0-flush-254:0]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    75    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:1H-kblockd]    <noArgs>
root    235    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ata_sff]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_1]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20868    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
root    414    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:29    [kworker/0:3-mm_percpu_wq]    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12092    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    560    0.0    0.0    8388    6052    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [DHCP6_proxy]_fe80::cf65:7eaf:ee22:f5f7
dhcpcd    648    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7076    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2692    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9216    5584    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9964    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3916    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18464    8804    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    785    0.0    0.2    336460    19092    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    808    0.0    0.1    391064    12384    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    828    0.0    0.0    381356    7792    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.0    16356    2276    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.2    1904820    20384    ?    Ssl    Jan08    0:18    23:40:21    /laforge.bin    <noArgs>
xrdp    873    0.0    0.0    15652    2356    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp    <noArgs>
root    875    0.0    1.3    915128    105940    tty7    Ssl+    Jan08    0:02    23:40:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    878    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:40:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.1    169620    8320    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    907    0.0    0.1    22876    13064    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
lightdm    909    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4748    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101160    10824    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105308    ?    Ssl    Jan08    0:15    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479292    16120    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    943    0.0    0.0    84704    5212    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    944    0.0    0.1    98776    8256    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    945    0.0    0.0    21492    3172    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    971    0.0    0.0    381080    7152    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4472    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.0    312816    8036    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    998    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5704    ?    S    Jan08    0:00    23:40:19    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7088    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    377776    149476    ?    Sl    Jan08    3:18    23:40:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17916    ?    Ss    Jan08    0:04    23:40:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1900    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:39:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1901    0.1    10.2    1414160    835152    ?    Sl    Jan08    1:38    23:39:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    28274    0.0    0.0    0    0    ?    I    Jan08    0:00    20:54:04    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    104047    0.0    0.0    0    0    ?    I    Jan08    0:00    12:55:40    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    111102    0.0    0.0    0    0    ?    I    Jan08    0:01    12:11:54    [kworker/3:2-events]    <noArgs>
root    122953    0.0    0.0    0    0    ?    I    Jan08    0:00    10:58:14    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    127080    0.0    0.0    0    0    ?    I    Jan08    0:00    10:33:46    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    131006    0.0    0.0    0    0    ?    I    Jan08    0:00    10:09:23    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    160702    0.0    0.0    0    0    ?    I    02:44    0:00    07:01:06    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    184403    0.0    0.0    0    0    ?    I    05:10    0:00    04:34:46    [kworker/u18:2-flush-254:0]    <noArgs>
root    185384    0.0    0.0    0    0    ?    I    05:18    0:00    04:26:29    [kworker/u18:1-flush-254:0]    <noArgs>
root    193696    0.0    0.0    0    0    ?    I    06:09    0:00    03:35:47    [kworker/u20:1-flush-254:0]    <noArgs>
root    212520    0.0    0.0    0    0    ?    I    08:06    0:00    01:38:28    [kworker/u17:1-flush-254:0]    <noArgs>
root    220257    0.0    0.0    0    0    ?    I    08:56    0:00    48:34    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    226865    0.0    0.0    0    0    ?    I    09:37    0:00    07:37    [kworker/3:1-ata_sff]    <noArgs>
root    226911    0.0    0.0    0    0    ?    I    09:38    0:00    07:05    [kworker/0:1-ata_sff]    <noArgs>
root    226957    0.0    0.0    0    0    ?    I    09:38    0:00    06:35    [kworker/2:1-ata_sff]    <noArgs>
root    227006    0.0    0.0    0    0    ?    I    09:39    0:00    06:11    [kworker/1:2-ata_sff]    <noArgs>
root    227598    0.0    0.0    0    0    ?    I    09:42    0:00    02:23    [kworker/3:0-ata_sff]    <noArgs>
root    227704    0.0    0.0    0    0    ?    I    09:44    0:00    01:14    [kworker/0:0-ata_sff]    <noArgs>
root    227720    0.0    0.0    0    0    ?    I    09:44    0:00    01:06    [kworker/2:0-ata_sff]    <noArgs>
root    227736    0.0    0.0    0    0    ?    I    09:44    0:00    00:54    [kworker/1:0-ata_sff]    <noArgs>
root    227940    0.0    0.0    2688    1804    ?    S    09:45    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227941    0.0    0.0    2688    1820    ?    S    09:45    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227962    0.0    0.0    9372    4192    ?    R    09:45    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227963    0.0    0.0    5592    1908    ?    S    09:45    0:00    00:00    tee    /dev/null
root    227964    0.0    0.0    9472    4076    ?    S    09:45    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15120    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    54    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u17:1-writeback]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    173    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/2:2-events_freezable_pwr_efficient]    <noArgs>
root    241    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:32    [kworker/0:2-events]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    379    0.0    0.2    41988    20604    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7464    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37452    12236    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    425    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    552    0.0    0.0    8388    6380    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    603    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    604    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    605    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2144    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10540    2220    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    626    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::ee37:fe60:99d6:8a36
dhcpcd    645    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    738    0.0    0.0    309036    7140    ?    Ssl    Jan08    0:00    23:40:23    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2684    ?    Ss    Jan08    0:00    23:40:23    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9072    5508    ?    Ss    Jan08    0:00    23:40:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9732    ?    Ssl    Jan08    0:01    23:40:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    745    0.0    0.0    80876    3960    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    8808    ?    Ss    Jan08    0:00    23:40:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    771    0.0    0.2    336440    19048    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/NetworkManager    --no-daemon
root    802    0.0    0.1    391060    12396    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/ModemManager    <noArgs>
root    826    0.0    0.0    381356    7788    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    832    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    844    0.0    0.2    1978808    20764    ?    Ssl    Jan08    0:20    23:40:22    /laforge.bin    <noArgs>
xrdp    861    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    870    0.0    1.2    915132    104260    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    872    0.0    0.0    8124    2600    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    893    0.0    0.0    169620    8112    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
lightdm    901    0.0    0.1    22636    13060    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
root    902    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    905    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    926    0.0    0.0    8348    4660    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    927    0.0    0.1    101224    10668    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    928    0.0    1.2    666648    105576    ?    Ssl    Jan08    0:17    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    929    0.0    0.1    479272    15900    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    931    0.0    0.0    84704    5144    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    932    0.0    0.1    98776    8272    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
rtkit    933    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    954    0.0    0.0    381080    7068    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    962    0.0    0.0    8208    4436    ?    S    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    966    0.0    0.0    312816    8068    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd    <noArgs>
lightdm    976    0.0    0.0    398408    7208    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1015    0.0    0.0    14372    5804    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1017    0.0    0.0    168772    7092    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1055    0.2    1.8    377776    151388    ?    Sl    Jan08    3:43    23:40:19    splunkd    -p_8089_start
root    1058    0.0    0.2    135648    17956    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1055]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.3    1414160    841340    ?    Sl    Jan08    2:04    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    44943    0.0    0.0    0    0    ?    I    Jan08    0:00    19:09:06    [kworker/u19:0-flush-254:0]    <noArgs>
root    119047    0.0    0.0    0    0    ?    I    Jan08    0:00    11:24:42    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    131034    0.0    0.0    0    0    ?    I    Jan08    0:00    10:08:58    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    166005    0.0    0.0    0    0    ?    I    03:16    0:00    06:28:17    [kworker/u19:1-flush-254:0]    <noArgs>
root    183617    0.0    0.0    0    0    ?    I    05:05    0:00    04:39:31    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    188754    0.0    0.0    0    0    ?    I    05:39    0:00    04:05:23    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    193587    0.0    0.0    0    0    ?    I    06:09    0:00    03:35:34    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    195614    0.0    0.0    0    0    ?    I    06:20    0:00    03:23:57    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    209897    0.0    0.0    0    0    ?    I    07:50    0:00    01:54:17    [kworker/3:1-events]    <noArgs>
root    213045    0.0    0.0    0    0    ?    I    08:10    0:00    01:34:44    [kworker/u17:0-flush-254:0]    <noArgs>
root    223503    0.0    0.0    0    0    ?    I    09:17    0:00    27:31    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    226592    0.0    0.0    0    0    ?    I    09:35    0:00    09:34    [kworker/u17:2]    <noArgs>
root    226624    0.0    0.0    0    0    ?    I    09:35    0:00    09:29    [kworker/3:2-ata_sff]    <noArgs>
root    226660    0.0    0.0    0    0    ?    I    09:35    0:00    09:07    [kworker/0:1-ata_sff]    <noArgs>
root    226676    0.0    0.0    0    0    ?    I    09:35    0:00    08:57    [kworker/2:1-ata_sff]    <noArgs>
root    226842    0.0    0.0    0    0    ?    I    09:37    0:00    07:04    [kworker/1:2-ata_sff]    <noArgs>
root    227377    0.0    0.0    0    0    ?    I    09:40    0:00    04:05    [kworker/0:0-ata_sff]    <noArgs>
root    227393    0.0    0.0    0    0    ?    I    09:40    0:00    04:01    [kworker/3:0-ata_sff]    <noArgs>
root    227409    0.0    0.0    0    0    ?    I    09:41    0:00    03:46    [kworker/2:0-ata_sff]    <noArgs>
root    227590    0.0    0.0    0    0    ?    I    09:43    0:00    01:52    [kworker/1:0-ata_sff]    <noArgs>
root    227865    0.0    0.0    2688    1744    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227866    0.0    0.0    2688    1860    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227887    0.0    0.0    9372    4148    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227888    0.0    0.0    5592    1936    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227889    0.0    0.0    9472    3984    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    14936    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/0:0-events]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:0H-events_highpri]    <noArgs>
root    40    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/1:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    172    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    243    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    249    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    250    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    328    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/2:3-events_power_efficient]    <noArgs>
root    380    0.0    0.2    41980    20780    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    472    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:30    [kworker/u18:2-events_unbound]    <noArgs>
root    557    0.0    0.0    8388    7728    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4488    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2628    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2288    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2228    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2568    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::d3a5:27d9:580d:dc33
dhcpcd    629    0.0    0.0    10536    2440    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    648    0.0    0.0    10536    2568    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    741    0.0    0.0    309036    7128    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2776    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9076    5484    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9820    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    4028    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336476    18864    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12324    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    848    0.0    0.2    1904820    20264    ?    Ssl    Jan08    0:19    23:40:22    /laforge.bin    <noArgs>
root    851    0.0    0.0    16356    2268    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    876    0.0    0.0    15652    2444    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915132    107764    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2676    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22880    13072    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    911    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8348    4564    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101208    10704    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105488    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    943    0.0    0.1    479280    15956    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    944    0.0    0.0    84704    5136    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    945    0.0    0.1    98776    8184    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    946    0.0    0.0    21492    3172    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    969    0.0    0.0    381080    7316    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    983    0.0    0.0    8208    4496    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    989    0.0    0.1    312816    8136    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1001    0.0    0.0    398408    7440    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5764    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7072    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    151044    ?    Sl    Jan08    3:40    23:40:19    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17820    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1903    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1904    0.1    10.3    1414160    841348    ?    Sl    Jan08    2:04    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    55863    0.0    0.0    0    0    ?    I    Jan08    0:00    17:59:24    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    134705    0.0    0.0    0    0    ?    I    00:00    0:00    09:44:05    [kworker/u19:1-flush-254:0]    <noArgs>
root    173112    0.0    0.0    0    0    ?    I    04:02    0:00    05:42:39    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    190691    0.0    0.0    0    0    ?    I    05:50    0:00    03:54:34    [kworker/u19:0-writeback]    <noArgs>
root    203227    0.0    0.0    0    0    ?    I    07:09    0:00    02:35:24    [kworker/u17:0-flush-254:0]    <noArgs>
root    215440    0.0    0.0    0    0    ?    I    08:25    0:00    01:19:14    [kworker/3:2-events]    <noArgs>
root    217041    0.0    0.0    0    0    ?    I    08:35    0:00    01:09:32    [kworker/u17:1]    <noArgs>
root    221906    0.0    0.0    0    0    ?    I    09:05    0:00    39:32    [kworker/u18:1-flush-254:0]    <noArgs>
root    222004    0.0    0.0    0    0    ?    I    09:06    0:00    38:46    [kworker/u20:2-flush-254:0]    <noArgs>
root    224365    0.0    0.0    0    0    ?    I    09:20    0:00    24:01    [kworker/u20:0-flush-254:0]    <noArgs>
root    226389    0.0    0.0    0    0    ?    I    09:34    0:00    09:57    [kworker/2:1-ata_sff]    <noArgs>
root    226628    0.0    0.0    0    0    ?    I    09:35    0:00    09:30    [kworker/1:2-ata_sff]    <noArgs>
root    226845    0.0    0.0    0    0    ?    I    09:37    0:00    07:17    [kworker/3:0-ata_sff]    <noArgs>
root    226906    0.0    0.0    0    0    ?    I    09:38    0:00    06:33    [kworker/0:2-ata_sff]    <noArgs>
root    227058    0.0    0.0    0    0    ?    I    09:39    0:00    05:23    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    227293    0.0    0.0    0    0    ?    I    09:40    0:00    04:52    [kworker/2:0-ata_sff]    <noArgs>
root    227413    0.0    0.0    0    0    ?    I    09:40    0:00    03:58    [kworker/1:0-ata_sff]    <noArgs>
root    227579    0.0    0.0    0    0    ?    I    09:42    0:00    02:03    [kworker/3:1-ata_sff]    <noArgs>
root    227655    0.0    0.0    0    0    ?    I    09:43    0:00    01:17    [kworker/0:1-ata_sff]    <noArgs>
root    227885    0.0    0.0    2688    1808    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227886    0.0    0.0    2688    1852    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227907    0.0    0.0    9372    4164    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227908    0.0    0.0    5592    1916    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227909    0.0    0.0    9472    3960    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    14944    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:06    23:40:33    [kworker/0:1-events_freezable_pwr_efficient]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    R    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:03    23:40:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:32    [kworker/1:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:1H-kblockd]    <noArgs>
root    215    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:1H-kblockd]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    299    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    300    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    325    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    380    0.0    0.2    41984    20736    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37452    12108    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    558    0.0    0.0    8388    6444    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10536    2444    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    626    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [DHCP6_proxy]_fe80::85e3:a89b:3590:9ab8
dhcpcd    645    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    738    0.0    0.0    309036    7148    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2792    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9072    5536    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9948    ?    Ssl    Jan08    0:02    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    744    0.0    0.0    80876    3956    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18260    8820    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    780    0.0    0.2    336448    19008    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391064    12356    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381364    7656    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.2    1978808    20380    ?    Ssl    Jan08    0:20    23:40:22    /laforge.bin    <noArgs>
xrdp    872    0.0    0.0    15652    2448    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    874    0.0    1.3    915132    107792    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    875    0.0    0.0    8124    2516    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    897    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
lightdm    904    0.0    0.1    22868    13060    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    908    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
root    928    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:20    [kworker/3:2H]    <noArgs>
lightdm    930    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    931    0.0    0.1    101224    10668    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    932    0.0    1.2    666648    105560    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    935    0.0    0.2    479364    16300    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    936    0.0    0.0    84704    5280    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    937    0.0    0.0    98776    8116    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    940    0.0    0.0    21492    3196    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    962    0.0    0.0    381080    7296    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    973    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    978    0.0    0.0    312816    8044    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    990    0.0    0.0    398408    7284    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5712    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7116    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    375728    147760    ?    Sl    Jan08    4:03    23:40:19    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17812    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1804    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    831648    ?    Sl    Jan08    2:13    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    106325    0.0    0.0    0    0    ?    I    Jan08    0:00    12:41:44    [kworker/u20:0-flush-254:0]    <noArgs>
root    126375    0.0    0.0    0    0    ?    I    Jan08    0:00    10:39:13    [kworker/u17:2-flush-254:0]    <noArgs>
root    138671    0.0    0.0    0    0    ?    I    00:24    0:00    09:20:23    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    141031    0.0    0.0    0    0    ?    I    00:39    0:00    09:05:37    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    158463    0.0    0.0    0    0    ?    I    02:29    0:00    07:15:18    [kworker/u18:1-flush-254:0]    <noArgs>
root    160148    0.0    0.0    0    0    ?    I    02:39    0:00    07:05:23    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    166994    0.0    0.0    0    0    ?    I    03:20    0:00    06:24:11    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    171629    0.0    0.0    0    0    ?    I    03:50    0:00    05:54:36    [kworker/u19:2-flush-254:0]    <noArgs>
root    198066    0.0    0.0    0    0    ?    I    06:35    0:00    03:09:09    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    200440    0.0    0.0    0    0    ?    I    06:50    0:00    02:54:05    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    201176    0.0    0.0    0    0    ?    I    06:56    0:00    02:48:29    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    203297    0.0    0.0    0    0    ?    I    07:09    0:00    02:35:23    [kworker/u18:3-flush-254:0]    <noArgs>
root    226427    0.0    0.0    0    0    ?    I    09:34    0:00    09:59    [kworker/0:2-ata_sff]    <noArgs>
root    226772    0.0    0.0    0    0    ?    I    09:36    0:00    08:44    [kworker/2:2-ata_sff]    <noArgs>
root    226788    0.0    0.0    0    0    ?    I    09:36    0:00    08:36    [kworker/3:0-ata_sff]    <noArgs>
root    226984    0.0    0.0    0    0    ?    I    09:38    0:00    06:27    [kworker/1:1-ata_sff]    <noArgs>
root    227355    0.0    0.0    0    0    ?    I    09:40    0:00    04:52    [kworker/0:0-ata_sff]    <noArgs>
root    227490    0.0    0.0    0    0    ?    I    09:41    0:00    03:44    [kworker/2:0-ata_sff]    <noArgs>
root    227521    0.0    0.0    0    0    ?    I    09:41    0:00    03:30    [kworker/3:2-ata_sff]    <noArgs>
root    227717    0.0    0.0    0    0    ?    I    09:43    0:00    01:19    [kworker/1:0-ata_sff]    <noArgs>
root    227947    0.0    0.0    2688    1712    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227948    0.0    0.0    2688    1836    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227969    0.0    0.0    9372    4128    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227970    0.0    0.0    5592    1908    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227971    0.0    0.0    9472    3972    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14880    ?    Ss    Jan08    0:02    23:40:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:06    23:40:31    [kworker/1:0-mm_percpu_wq]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:30    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/1:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/0:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/3:1H-kblockd]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-ata_sff]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [scsi_eh_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-scsi_tmf_0]    <noArgs>
root    265    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [scsi_eh_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:29    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:28    [hwrng]    <noArgs>
root    385    0.0    0.2    41980    20704    ?    Ss    Jan08    0:00    23:40:27    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:40:27    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12176    ?    Ss    Jan08    0:00    23:40:27    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:27    [kworker/0:3-events]    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:27    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6188    ?    Ss    Jan08    0:02    23:40:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:40:26    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:24    dhcpcd:    [DHCP6_proxy]_fe80::db22:46bb:ab35:f093
dhcpcd    650    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:21    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    743    0.0    0.0    309036    7192    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2664    ?    Ss    Jan08    0:00    23:40:21    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9216    5632    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382300    9804    ?    Ssl    Jan08    0:02    23:40:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3980    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18480    8812    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336464    18804    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12576    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/ModemManager    <noArgs>
root    836    0.0    0.0    381356    7692    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:40:20    /usr/sbin/xrdp-sesman    <noArgs>
root    850    0.0    0.2    1904820    20676    ?    Ssl    Jan08    0:20    23:40:20    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:40:20    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.2    915128    102868    tty7    Ssl+    Jan08    0:02    23:40:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:40:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8272    ?    Sl    Jan08    0:00    23:40:19    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22644    13068    ?    Ss    Jan08    0:00    23:40:19    /usr/lib/systemd/systemd    --user
root    912    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:19    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:19    (sd-pam)    <noArgs>
lightdm    935    0.0    0.0    8348    4672    ?    Ss    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101160    10764    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:16    23:40:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    941    0.0    0.1    413748    16008    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/wireplumber    <noArgs>
lightdm    942    0.0    0.0    84704    5180    ?    Ssl    Jan08    0:00    23:40:19    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    943    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:40:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    944    0.0    0.1    98776    8280    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7180    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4468    ?    S    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    8100    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7428    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5788    ?    S    Jan08    0:00    23:40:18    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7108    ?    Sl    Jan08    0:00    23:40:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    377776    151556    ?    Sl    Jan08    4:04    23:40:17    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    17864    ?    Ss    Jan08    0:04    23:40:17    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1904    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1905    0.1    10.2    1414160    831528    ?    Sl    Jan08    2:13    23:39:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    16223    0.0    0.0    0    0    ?    I    Jan08    0:04    22:09:36    [kworker/3:0-mm_percpu_wq]    <noArgs>
root    69739    0.0    0.0    0    0    ?    I    Jan08    0:00    16:33:50    [kworker/u17:0-flush-254:0]    <noArgs>
root    155895    0.0    0.0    0    0    ?    I    02:12    0:00    07:32:21    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    169218    0.0    0.0    0    0    ?    I    03:35    0:00    06:09:34    [kworker/u20:1-flush-254:0]    <noArgs>
root    179191    0.0    0.0    0    0    ?    I    04:38    0:00    05:06:05    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    193333    0.0    0.0    0    0    ?    I    06:05    0:00    03:38:56    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    194279    0.0    0.0    0    0    ?    I    06:13    0:00    03:31:25    [kworker/u20:0-flush-254:0]    <noArgs>
root    195725    0.0    0.0    0    0    ?    I    06:21    0:00    03:23:49    [kworker/u20:2-flush-254:0]    <noArgs>
root    200342    0.0    0.0    0    0    ?    I    06:50    0:00    02:54:34    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    200545    0.0    0.0    0    0    ?    I    06:52    0:00    02:52:39    [kworker/u18:1-flush-254:0]    <noArgs>
root    217161    0.0    0.0    0    0    ?    I    08:35    0:00    01:09:21    [kworker/u18:2]    <noArgs>
root    226092    0.0    0.0    0    0    ?    I    09:34    0:00    10:38    [kworker/0:0-ata_sff]    <noArgs>
root    226108    0.0    0.0    0    0    ?    I    09:34    0:00    10:22    [kworker/u17:1-flush-254:0]    <noArgs>
root    226706    0.0    0.0    0    0    ?    I    09:35    0:00    09:29    [kworker/1:1-ata_sff]    <noArgs>
root    226728    0.0    0.0    0    0    ?    I    09:35    0:00    09:25    [kworker/3:2-ata_sff]    <noArgs>
root    226759    0.0    0.0    0    0    ?    I    09:35    0:00    09:09    [kworker/2:0-ata_sff]    <noArgs>
root    227414    0.0    0.0    0    0    ?    I    09:40    0:00    04:43    [kworker/0:1-ata_sff]    <noArgs>
root    227460    0.0    0.0    0    0    ?    I    09:40    0:00    04:14    [kworker/1:2-ata_sff]    <noArgs>
root    227476    0.0    0.0    0    0    ?    I    09:40    0:00    04:06    [kworker/3:1-ata_sff]    <noArgs>
root    227492    0.0    0.0    0    0    ?    I    09:40    0:00    03:58    [kworker/2:1-ata_sff]    <noArgs>
root    227538    0.0    0.0    0    0    ?    I    09:41    0:00    03:21    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    227963    0.0    0.0    2688    1768    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227964    0.0    0.0    2688    1764    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227985    0.0    0.0    9372    4192    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227986    0.0    0.0    5592    1824    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227987    0.0    0.0    9472    3976    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}