_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24508    15440    ?    Ss    Jan08    0:02    23:50:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:03    23:50:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:03    23:50:32    [kworker/2:2-events_freezable_pwr_efficient]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/2:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/1:1H-kblockd]    <noArgs>
root    207    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/0:1H-kblockd]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:31    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [hwrng]    <noArgs>
root    381    0.0    0.3    58548    24576    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:29    [psimon]    <noArgs>
dhcpcd    601    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:50:28    dhcpcd:    eth0_[ip4]_[ip6]
root    602    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    603    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    604    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    8388    6316    ?    Ss    Jan08    0:01    23:50:28    /usr/sbin/haveged    --Foreground_--verbose=1
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10532    2352    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [DHCP6_proxy]_fe80::446f:e9f6:ac14:9e1c
dhcpcd    628    0.0    0.0    10532    2224    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    647    0.0    0.0    10532    2288    ?    S    Jan08    0:00    23:50:21    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    740    0.0    0.0    309036    7008    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2692    ?    Ss    Jan08    0:00    23:50:20    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    10092    6556    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382480    9976    ?    Ssl    Jan08    0:01    23:50:20    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3996    ?    Ssl    Jan08    0:00    23:50:20    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18480    9152    ?    Ss    Jan08    0:00    23:50:20    /usr/lib/systemd/systemd-logind    <noArgs>
root    773    0.0    0.2    336472    18792    ?    Ssl    Jan08    0:00    23:50:20    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391060    12364    ?    Ssl    Jan08    0:00    23:50:20    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7808    ?    Ssl    Jan08    0:00    23:50:20    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:20    [kworker/2:2H-kblockd]    <noArgs>
root    840    0.0    0.2    1904820    20464    ?    Ssl    Jan08    0:19    23:50:20    /laforge.bin    <noArgs>
root    844    0.0    0.0    18320    4216    ?    S    Jan08    0:00    23:50:20    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    870    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:50:20    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.3    915132    105888    tty7    Ssl+    Jan08    0:02    23:50:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2492    tty1    Ss+    Jan08    0:00    23:50:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.1    169620    8244    ?    Sl    Jan08    0:00    23:50:19    lightdm    --session-child_17_20
lightdm    905    0.0    0.1    22868    13084    ?    Ss    Jan08    0:00    23:50:19    /usr/lib/systemd/systemd    --user
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:19    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:50:19    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101160    10908    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.2    666648    105248    ?    Ssl    Jan08    0:16    23:50:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    937    0.0    0.1    479280    15992    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5116    ?    Ssl    Jan08    0:00    23:50:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    940    0.0    0.1    98776    8212    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    941    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:50:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    966    0.0    0.0    381080    7180    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4512    ?    S    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    981    0.0    0.0    312816    8040    ?    Ssl    Jan08    0:00    23:50:18    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:50:18    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1027    0.0    0.0    14372    5752    ?    S    Jan08    0:00    23:50:18    lightdm    --session-child_13_20
lightdm    1029    0.0    0.0    168772    7120    ?    Sl    Jan08    0:00    23:50:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    383920    153928    ?    Sl    Jan08    3:23    23:50:17    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17916    ?    Ss    Jan08    0:04    23:50:17    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1895    0.0    0.0    2688    1740    ?    S    Jan08    0:00    23:49:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1896    0.1    10.8    1414160    881704    ?    Sl    Jan08    1:40    23:49:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    83324    0.0    0.0    0    0    ?    I    Jan08    0:00    15:18:07    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    160642    0.0    0.0    0    0    ?    I    02:41    0:00    07:12:18    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    161468    0.0    0.0    0    0    ?    I    02:48    0:00    07:05:36    [kworker/u19:0-flush-254:0]    <noArgs>
root    163079    0.0    0.0    0    0    ?    I    02:57    0:00    06:56:08    [kworker/u19:2-flush-254:0]    <noArgs>
root    164697    0.0    0.0    0    0    ?    I    03:05    0:00    06:48:06    [kworker/u18:1-flush-254:0]    <noArgs>
root    169327    0.0    0.0    0    0    ?    I    03:34    0:00    06:18:56    [kworker/u18:2-flush-254:0]    <noArgs>
root    181269    0.0    0.0    0    0    ?    I    04:49    0:00    05:04:00    [kworker/u17:1-writeback]    <noArgs>
root    208436    0.0    0.0    0    0    ?    I    07:40    0:00    02:12:51    [kworker/u19:1-flush-254:0]    <noArgs>
root    220143    0.0    0.0    0    0    ?    I    08:53    0:00    59:41    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    222711    0.0    0.0    0    0    ?    I    09:09    0:00    44:27    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    226963    0.0    0.0    0    0    ?    I    09:37    0:00    16:34    [kworker/0:0-ata_sff]    <noArgs>
root    228233    0.0    0.0    0    0    ?    I    09:45    0:00    07:57    [kworker/2:1-ata_sff]    <noArgs>
xrdp    228265    1.5    0.4    62196    38532    ?    S    09:46    0:07    07:39    /usr/sbin/xrdp    <noArgs>
root    228281    0.0    0.0    0    0    ?    I    09:46    0:00    07:29    [kworker/3:0-ata_sff]    <noArgs>
root    228360    0.0    0.0    18320    4272    ?    S    09:47    0:00    06:34    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228363    0.0    0.1    22912    13308    ?    Ss    09:47    0:00    06:34    /usr/lib/systemd/systemd    --user
pentester    228365    0.0    0.0    22592    3860    ?    S    09:47    0:00    06:34    (sd-pam)    <noArgs>
pentester    228385    0.0    0.0    8948    5712    ?    Ss    09:47    0:00    06:34    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228386    0.0    0.1    97496    8244    ?    Ssl    09:47    0:00    06:34    /usr/bin/pipewire    <noArgs>
pentester    228387    0.0    1.2    630544    98104    ?    Sl    09:47    0:00    06:34    xfce4-session    <noArgs>
pentester    228388    0.7    1.8    403760    152584    ?    Sl    09:47    0:02    06:34    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228391    0.0    0.0    7212    3668    ?    Ss    09:47    0:00    06:34    /usr/bin/mpris-proxy    <noArgs>
pentester    228392    0.0    0.1    399536    14304    ?    Ssl    09:47    0:00    06:34    /usr/bin/wireplumber    <noArgs>
pentester    228393    0.0    0.0    84704    5372    ?    Ssl    09:47    0:00    06:34    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228394    0.0    0.1    99460    9072    ?    Ssl    09:47    0:00    06:34    /usr/bin/pipewire-pulse    <noArgs>
pentester    228417    0.0    0.0    95084    6208    ?    Sl    09:47    0:00    06:34    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228494    0.0    0.0    10688    1860    ?    Ss    09:47    0:00    06:34    /usr/bin/ssh-agent    x-session-manager
pentester    228505    0.0    0.0    381172    7712    ?    Ssl    09:47    0:00    06:34    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228512    0.0    0.0    8344    4860    ?    S    09:47    0:00    06:33    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228522    0.0    0.0    168784    7792    ?    Sl    09:47    0:00    06:33    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228536    0.0    0.0    155488    3704    ?    SLsl    09:47    0:00    06:33    /usr/bin/gpg-agent    --supervised
root    228537    0.0    0.0    0    0    ?    I    09:47    0:00    06:33    [kworker/0:3-events]    <noArgs>
pentester    228540    0.2    0.5    297308    48724    ?    Sl    09:47    0:01    06:33    xfwm4    <noArgs>
pentester    228545    0.0    0.0    312816    8124    ?    Ssl    09:47    0:00    06:33    /usr/libexec/gvfsd    <noArgs>
pentester    228551    0.0    0.0    398408    7488    ?    Sl    09:47    0:00    06:33    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228560    0.0    0.3    348404    26776    ?    Sl    09:47    0:00    06:33    xfsettingsd    <noArgs>
pentester    228566    0.0    0.0    165276    5908    ?    Ssl    09:47    0:00    06:33    /usr/libexec/dconf-service    <noArgs>
pentester    228567    0.1    0.6    449672    52632    ?    Sl    09:47    0:00    06:33    xfce4-panel    <noArgs>
pentester    228576    0.0    0.3    485796    26140    ?    Sl    09:47    0:00    06:33    Thunar    --daemon
pentester    228589    0.1    0.8    663288    69364    ?    Sl    09:47    0:00    06:33    xfdesktop    <noArgs>
pentester    228594    0.0    0.5    428300    42780    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228599    0.0    0.0    7180    3416    ?    S    09:47    0:00    06:32    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228604    0.0    0.2    405608    19420    ?    Sl    09:47    0:00    06:32    xfce4-power-manager    <noArgs>
pentester    228605    0.0    0.4    281548    35576    ?    Sl    09:47    0:00    06:32    xfce4-screensaver    <noArgs>
pentester    228611    0.0    0.4    606500    37568    ?    Sl    09:47    0:00    06:32    diodon    <noArgs>
pentester    228612    0.0    0.0    12432    2028    ?    Ssl    09:47    0:00    06:32    xcape    -e_Super_L_Control_L_Escape
pentester    228615    0.0    0.7    604468    61732    ?    Sl    09:47    0:00    06:32    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228619    0.0    0.5    66232    41000    ?    S    09:47    0:00    06:32    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    228621    0.0    0.2    481796    21752    ?    Ssl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228631    0.0    0.2    265304    18312    ?    Sl    09:47    0:00    06:32    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228642    0.0    0.0    308560    6816    ?    Sl    09:47    0:00    06:32    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228643    0.0    0.1    725872    8896    ?    Sl    09:47    0:00    06:32    xiccd    <noArgs>
pentester    228652    0.0    0.5    586928    43168    ?    Sl    09:47    0:00    06:32    nm-applet    <noArgs>
colord    228670    0.0    0.1    317144    15220    ?    Ssl    09:47    0:00    06:32    /usr/libexec/colord    <noArgs>
root    228716    0.0    0.1    318516    10032    ?    Ssl    09:47    0:00    06:32    /usr/libexec/upowerd    <noArgs>
pentester    228731    0.0    0.0    95896    7628    ?    Sl    09:47    0:00    06:32    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228759    0.0    0.1    457844    8808    ?    Ssl    09:47    0:00    06:32    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228794    0.0    0.1    349660    13076    ?    Ssl    09:47    0:00    06:32    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228807    0.2    0.7    310940    62932    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228808    0.0    0.4    499532    38096    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228812    0.2    0.3    272796    28936    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228813    0.0    0.4    359160    39380    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228815    0.0    0.4    425196    37532    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228817    0.0    0.4    286016    37456    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228827    0.0    0.4    425472    37536    ?    Sl    09:47    0:00    06:32    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228902    0.0    0.1    538332    11908    ?    Ssl    09:47    0:00    06:31    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228906    0.0    0.1    478372    14084    ?    Ssl    09:47    0:00    06:31    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228918    0.0    0.0    307864    6624    ?    Ssl    09:47    0:00    06:31    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228923    0.0    0.0    308884    7260    ?    Ssl    09:47    0:00    06:30    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228928    0.0    0.0    307916    6832    ?    Ssl    09:47    0:00    06:30    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228933    0.0    0.1    389944    8820    ?    Ssl    09:47    0:00    06:30    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228955    0.0    0.0    168868    6688    ?    Ssl    09:47    0:00    06:30    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228959    0.0    0.1    534256    9356    ?    Sl    09:47    0:00    06:30    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    229190    0.0    0.0    0    0    ?    I    09:47    0:00    06:09    [kworker/1:0-ata_sff]    <noArgs>
pentester    229269    0.0    0.8    805436    71296    ?    Sl    09:47    0:00    06:01    /usr/bin/qterminal    <noArgs>
pentester    229272    0.0    0.2    557012    19912    ?    Ssl    09:47    0:00    06:01    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229277    0.0    0.0    308740    6656    ?    Ssl    09:47    0:00    06:01    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229286    0.0    0.0    539704    7196    ?    Ssl    09:47    0:00    06:01    /usr/libexec/xdg-document-portal    <noArgs>
root    229292    0.0    0.0    2592    2012    ?    Ss    09:47    0:00    06:01    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229296    0.0    0.2    479576    19684    ?    Ssl    09:47    0:00    06:01    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229307    0.1    0.0    10328    6320    pts/0    Ss+    09:47    0:00    06:01    /usr/bin/zsh    <noArgs>
pentester    229803    6.8    5.5    3179444    451008    ?    Sl    09:48    0:21    05:13    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    229834    0.0    0.0    20868    3160    ?    Sl    09:48    0:00    05:13    /usr/lib/firefox-esr/crashhelper    229803_9_/tmp/_11
pentester    229910    0.0    0.5    235288    44100    ?    Sl    09:48    0:00    05:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{751a0afe-20c1-40e2-bab9-66b1ee93da5f}_-parentPid_229803_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    229980    0.1    1.2    2465144    102828    ?    Sl    09:48    0:00    05:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{4b616820-761e-49ca-b140-1fad3b4c2b7a}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    229985    0.0    0.6    394124    54468    ?    Sl    09:48    0:00    05:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{bc376873-5d90-45a7-863c-62db2be4d333}_-parentPid_229803_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    230101    0.0    0.5    232684    41896    ?    Sl    09:48    0:00    05:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39302_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{048b69b1-317d-4464-82c7-aec940e1d9a7}_-parentPid_229803_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_5_utility
pentester    230121    0.4    2.0    2552072    166288    ?    Sl    09:48    0:01    05:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37592_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{8129ffd7-ea8c-48f5-b4fc-ef1631303e34}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_7_tab
pentester    230161    0.0    0.9    2429896    81056    ?    Sl    09:48    0:00    05:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{529edd82-e745-48b0-83e3-9f797e1169c4}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    230200    0.2    1.7    2500024    143172    ?    Sl    09:48    0:00    05:10    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39740_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{8a6d737f-de59-41ea-b90a-7c30deb5012c}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
pentester    230477    0.0    0.9    2430524    81180    ?    Sl    09:48    0:00    05:02    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38298_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{7e81ef29-3564-40af-bd4b-6084646a6e50}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_10_tab
root    231078    0.0    0.0    0    0    ?    I    09:49    0:00    04:36    [kworker/u20:0-flush-254:0]    <noArgs>
root    232231    0.0    0.0    0    0    ?    I    09:50    0:00    02:43    [kworker/2:0-ata_sff]    <noArgs>
root    232478    0.0    0.0    0    0    ?    I    09:51    0:00    02:19    [kworker/3:2-ata_sff]    <noArgs>
root    232941    0.0    0.0    0    0    ?    I    09:52    0:00    01:30    [kworker/0:1-ata_sff]    <noArgs>
pentester    233216    0.1    0.9    2430540    81068    ?    Sl    09:52    0:00    01:06    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:42200_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{484f67b5-7689-4ffe-9ab8-809d16e416b9}_-parentPid_229803_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
pentester    233940    0.0    0.0    5588    2084    ?    S    09:53    0:00    00:02    sleep    10
root    233949    0.0    0.0    0    0    ?    I    09:53    0:00    00:02    [kworker/1:2]    <noArgs>
root    233981    0.0    0.0    2688    1788    ?    S    09:53    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    233982    0.0    0.0    2688    1856    ?    S    09:53    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    234003    0.0    0.0    9504    4372    ?    R    09:53    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    234004    0.0    0.0    5592    1976    ?    S    09:53    0:00    00:00    tee    /dev/null
root    234005    0.0    0.0    9472    4180    ?    S    09:53    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    15580    ?    Ss    Jan08    0:01    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:0H-kblockd]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [kswapd0]    <noArgs>
root    76    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:33    [kworker/3:2-events]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    88    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    93    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    103    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    173    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/1:1H-kblockd]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [hwrng]    <noArgs>
root    381    0.0    0.2    41980    20640    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7468    ?    Ssl    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:50:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    425    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [psimon]    <noArgs>
root    555    0.0    0.0    8388    6256    ?    Ss    Jan08    0:01    23:50:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:50:29    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2484    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2148    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2224    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    627    0.0    0.0    10540    2352    ?    S    Jan08    0:00    23:50:28    dhcpcd:    [DHCP6_proxy]_fe80::b4d4:5ec9:284a:f61
dhcpcd    646    0.0    0.0    10540    2352    ?    S    Jan08    0:00    23:50:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    739    0.0    0.0    309036    7140    ?    Ssl    Jan08    0:00    23:50:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2748    ?    Ss    Jan08    0:00    23:50:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9076    5492    ?    Ss    Jan08    0:00    23:50:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9848    ?    Ssl    Jan08    0:01    23:50:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3852    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18364    8848    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    773    0.0    0.2    336456    18964    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391052    12392    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7720    ?    Ssl    Jan08    0:00    23:50:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.2    1905076    20460    ?    Ssl    Jan08    0:18    23:50:22    /laforge.bin    <noArgs>
root    844    0.0    0.0    16356    2196    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    871    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:50:22    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.3    915128    106012    tty7    Ssl+    Jan08    0:02    23:50:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    878    0.0    0.0    8124    2684    tty1    Ss+    Jan08    0:00    23:50:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.1    169620    8200    ?    Sl    Jan08    0:00    23:50:21    lightdm    --session-child_17_20
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:21    [psimon]    <noArgs>
lightdm    907    0.0    0.1    22808    13232    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd    --user
lightdm    909    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:50:21    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4684    ?    Ss    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101160    10936    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    1.2    666652    105500    ?    Ssl    Jan08    0:15    23:50:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    941    0.0    0.1    479284    16068    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/wireplumber    <noArgs>
rtkit    942    0.0    0.0    21492    3188    ?    SNsl    Jan08    0:00    23:50:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    943    0.0    0.0    84704    5084    ?    Ssl    Jan08    0:00    23:50:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    944    0.0    0.1    98776    8332    ?    S<sl    Jan08    0:00    23:50:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    967    0.0    0.0    381080    7080    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4444    ?    S    Jan08    0:00    23:50:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    7880    ?    Ssl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7436    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5800    ?    S    Jan08    0:00    23:50:20    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7112    ?    Sl    Jan08    0:00    23:50:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1060    0.2    1.8    377776    149008    ?    Sl    Jan08    3:19    23:50:19    splunkd    -p_8089_start
root    1063    0.0    0.2    135648    18008    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1060]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1808    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.2    1414160    835328    ?    Sl    Jan08    1:39    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    115124    0.0    0.0    0    0    ?    I    Jan08    0:00    11:56:27    [kworker/u19:2-flush-254:0]    <noArgs>
root    137430    0.0    0.0    0    0    ?    I    00:15    0:00    09:37:37    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    146217    0.0    0.0    0    0    ?    I    01:09    0:00    08:43:37    [kworker/u20:0-flush-254:0]    <noArgs>
root    156071    0.0    0.0    0    0    ?    I    02:12    0:00    07:40:17    [kworker/u18:2-flush-254:0]    <noArgs>
root    157314    0.0    0.0    0    0    ?    I    02:18    0:00    07:34:33    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    172921    0.0    0.0    0    0    ?    I    03:58    0:00    05:54:43    [kworker/u19:0-flush-254:0]    <noArgs>
root    177907    0.0    0.0    0    0    ?    I    04:29    0:00    05:23:41    [kworker/2:1-events]    <noArgs>
root    179608    0.0    0.0    0    0    ?    I    04:39    0:00    05:13:37    [kworker/u18:1-flush-254:0]    <noArgs>
root    182028    0.0    0.0    0    0    ?    I    04:55    0:00    04:57:38    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    193298    0.0    0.0    0    0    ?    I    06:04    0:00    03:48:29    [kworker/u17:1]    <noArgs>
root    206087    0.0    0.0    0    0    ?    I    07:26    0:00    02:27:02    [kworker/u20:1-flush-254:0]    <noArgs>
root    217724    0.0    0.0    0    0    ?    I    08:38    0:00    01:14:43    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    227746    0.0    0.0    0    0    ?    I    09:42    0:00    10:12    [kworker/0:2-ata_sff]    <noArgs>
root    228039    0.0    0.0    0    0    ?    I    09:43    0:00    09:26    [kworker/3:1-ata_sff]    <noArgs>
root    228179    0.0    0.0    0    0    ?    I    09:45    0:00    07:55    [kworker/2:2-ata_sff]    <noArgs>
root    228345    0.0    0.0    0    0    ?    I    09:47    0:00    06:06    [kworker/1:0-ata_sff]    <noArgs>
root    228673    0.0    0.0    0    0    ?    I    09:48    0:00    05:04    [kworker/0:0-ata_sff]    <noArgs>
root    229051    0.0    0.0    0    0    ?    I    09:49    0:00    04:07    [kworker/3:0-ata_sff]    <noArgs>
root    229052    0.0    0.0    0    0    ?    I    09:49    0:00    04:02    [kworker/u19:1]    <noArgs>
root    229159    0.0    0.0    0    0    ?    I    09:50    0:00    02:53    [kworker/2:0-ata_sff]    <noArgs>
root    229355    0.0    0.0    0    0    ?    I    09:52    0:00    00:48    [kworker/1:2-ata_sff]    <noArgs>
root    229540    0.0    0.0    2688    1764    ?    S    09:53    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229541    0.0    0.0    2688    1788    ?    S    09:53    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229562    0.0    0.0    9372    4244    ?    R    09:53    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229563    0.0    0.0    5592    1908    ?    S    09:53    0:00    00:00    tee    /dev/null
root    229564    0.0    0.0    9472    4088    ?    S    09:53    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24700    15228    ?    Ss    Jan08    0:02    23:50:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:50:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/2:1-events]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:34    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:34    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/0:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/3:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:33    [scsi_eh_1]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    271    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:32    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [hwrng]    <noArgs>
root    384    0.0    0.2    41980    20404    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12084    ?    Ss    Jan08    0:00    23:50:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [psimon]    <noArgs>
root    559    0.0    0.0    8388    7684    ?    Ss    Jan08    0:01    23:50:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:50:30    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:50:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2076    ?    S    Jan08    0:00    23:50:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2140    ?    S    Jan08    0:00    23:50:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2216    ?    S    Jan08    0:00    23:50:29    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    627    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [DHCP6_proxy]_fe80::ea18:6dac:a302:c804
dhcpcd    646    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:50:23    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    739    0.0    0.0    309036    7040    ?    Ssl    Jan08    0:00    23:50:23    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2728    ?    Ss    Jan08    0:00    23:50:23    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9072    5496    ?    Ss    Jan08    0:00    23:50:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    744    0.0    0.1    382300    9772    ?    Ssl    Jan08    0:01    23:50:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3892    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18260    8808    ?    Ss    Jan08    0:00    23:50:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    790    0.0    0.2    336464    19044    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391060    12548    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7788    ?    Ssl    Jan08    0:00    23:50:23    /usr/sbin/lightdm    <noArgs>
root    839    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:23    [kworker/3:2H]    <noArgs>
root    842    0.0    0.2    1904820    20560    ?    Ssl    Jan08    0:19    23:50:23    /laforge.bin    <noArgs>
root    849    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:50:23    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    872    0.0    0.0    15652    2400    ?    S    Jan08    0:00    23:50:23    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.2    915128    105740    tty7    Ssl+    Jan08    0:02    23:50:23    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    879    0.0    0.0    8124    2668    tty1    Ss+    Jan08    0:00    23:50:23    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    900    0.0    0.1    169620    8320    ?    Sl    Jan08    0:00    23:50:22    lightdm    --session-child_17_20
lightdm    907    0.0    0.1    22452    12964    ?    Ss    Jan08    0:00    23:50:22    /usr/lib/systemd/systemd    --user
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:22    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:50:22    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10716    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.2    666648    105452    ?    Ssl    Jan08    0:16    23:50:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3104    ?    SNsl    Jan08    0:00    23:50:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479280    16028    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/wireplumber    <noArgs>
lightdm    940    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:50:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.1    98776    8276    ?    S<sl    Jan08    0:00    23:50:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7192    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4428    ?    S    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7976    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7432    ?    Sl    Jan08    0:00    23:50:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:50:21    lightdm    --session-child_13_20
lightdm    1030    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:50:21    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    375728    147416    ?    Sl    Jan08    3:25    23:50:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17908    ?    Ss    Jan08    0:04    23:50:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1832    ?    S    Jan08    0:00    23:49:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    835932    ?    Sl    Jan08    1:42    23:49:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    111225    0.0    0.0    0    0    ?    I    Jan08    0:00    12:20:43    [kworker/u19:0-writeback]    <noArgs>
root    122907    0.0    0.0    0    0    ?    I    Jan08    0:00    11:08:54    [kworker/u19:2-flush-254:0]    <noArgs>
root    136635    0.0    0.0    0    0    ?    I    00:09    0:00    09:44:07    [kworker/u18:0-flush-254:0]    <noArgs>
root    139436    0.0    0.0    0    0    ?    I    00:28    0:00    09:25:03    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    174171    0.0    0.0    0    0    ?    I    04:04    0:00    05:48:55    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    199533    0.0    0.0    0    0    ?    I    06:45    0:00    03:08:02    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    202827    0.0    0.0    0    0    ?    I    07:03    0:00    02:49:30    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    203646    0.0    0.0    0    0    ?    I    07:09    0:00    02:43:37    [kworker/u20:0-flush-254:0]    <noArgs>
root    207517    0.0    0.0    0    0    ?    I    07:33    0:00    02:19:35    [kworker/u17:0-flush-254:0]    <noArgs>
root    210818    0.0    0.0    0    0    ?    I    07:56    0:00    01:57:07    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    227937    0.0    0.0    0    0    ?    I    09:43    0:00    09:59    [kworker/3:0-ata_sff]    <noArgs>
root    228126    0.0    0.0    0    0    ?    I    09:44    0:00    08:45    [kworker/2:2-ata_sff]    <noArgs>
root    228266    0.0    0.0    0    0    ?    I    09:45    0:00    07:14    [kworker/1:0-ata_sff]    <noArgs>
root    228432    0.0    0.0    0    0    ?    I    09:47    0:00    05:29    [kworker/0:0-ata_sff]    <noArgs>
root    229047    0.0    0.0    0    0    ?    I    09:48    0:00    04:28    [kworker/3:2-ata_sff]    <noArgs>
root    229123    0.0    0.0    0    0    ?    I    09:49    0:00    03:40    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    229124    0.0    0.0    0    0    ?    I    09:49    0:00    03:39    [kworker/u18:1]    <noArgs>
root    229125    0.0    0.0    0    0    ?    I    09:49    0:00    03:36    [kworker/2:0-ata_sff]    <noArgs>
root    229262    0.0    0.0    0    0    ?    I    09:51    0:00    02:03    [kworker/1:2-ata_sff]    <noArgs>
root    229567    0.0    0.0    2688    1748    ?    S    09:53    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229568    0.0    0.0    2688    1816    ?    S    09:53    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229589    0.0    0.0    9372    4232    ?    R    09:53    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229590    0.0    0.0    5592    1880    ?    S    09:53    0:00    00:00    tee    /dev/null
root    229591    0.0    0.0    9472    3920    ?    S    09:53    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24716    14956    ?    Ss    Jan08    0:02    23:50:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:50:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:50:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:50:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:32    [kswapd0]    <noArgs>
root    75    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:32    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/0:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/3:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:50:31    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-ata_sff]    <noArgs>
root    241    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_0]    <noArgs>
root    242    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:31    [scsi_eh_1]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    252    0.0    0.0    0    0    ?    I    Jan08    0:00    23:50:31    [kworker/u17:3-flush-254:0]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:05    23:50:30    [kworker/0:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:50:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:30    [hwrng]    <noArgs>
root    382    0.0    0.2    41980    20848    ?    Ss    Jan08    0:00    23:50:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    413    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:50:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12140    ?    Ss    Jan08    0:00    23:50:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:28    [psimon]    <noArgs>
root    557    0.0    0.0    8388    6192    ?    Ss    Jan08    0:01    23:50:27    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:50:27    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:50:27    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:27    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:27    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    628    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:26    dhcpcd:    [DHCP6_proxy]_fe80::4993:4dc9:a3aa:5268
dhcpcd    647    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:50:21    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    740    0.0    0.0    309036    7296    ?    Ssl    Jan08    0:00    23:50:21    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2748    ?    Ss    Jan08    0:00    23:50:21    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9216    5492    ?    Ss    Jan08    0:00    23:50:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9900    ?    Ssl    Jan08    0:01    23:50:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3968    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:50:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336460    19008    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    325528    12252    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/ModemManager    <noArgs>
root    833    0.0    0.0    381364    7464    ?    Ssl    Jan08    0:00    23:50:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2348    ?    S    Jan08    0:00    23:50:21    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:50:21    [kworker/3:2H-kblockd]    <noArgs>
root    849    0.0    0.2    1904820    20528    ?    Ssl    Jan08    0:21    23:50:21    /laforge.bin    <noArgs>
root    876    0.0    1.3    915128    105768    tty7    Ssl+    Jan08    0:03    23:50:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    877    0.0    0.0    8124    2540    tty1    Ss+    Jan08    0:00    23:50:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
xrdp    882    0.0    0.0    15652    2448    ?    S    Jan08    0:00    23:50:20    /usr/sbin/xrdp    <noArgs>
root    900    0.0    0.1    169620    8252    ?    Sl    Jan08    0:00    23:50:20    lightdm    --session-child_17_20
lightdm    906    0.0    0.1    22640    13008    ?    Ss    Jan08    0:00    23:50:20    /usr/lib/systemd/systemd    --user
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:50:19    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3824    ?    S    Jan08    0:00    23:50:19    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101208    10744    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105384    ?    Ssl    Jan08    0:18    23:50:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    939    0.0    0.1    479268    16044    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/wireplumber    <noArgs>
rtkit    941    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:50:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    942    0.0    0.0    84704    5208    ?    Ssl    Jan08    0:00    23:50:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    943    0.0    0.1    98776    8260    ?    S<sl    Jan08    0:00    23:50:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    968    0.0    0.0    381080    7148    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    980    0.0    0.0    8208    4532    ?    S    Jan08    0:00    23:50:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    7940    ?    Ssl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7288    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1029    0.0    0.0    14372    5680    ?    S    Jan08    0:00    23:50:19    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7040    ?    Sl    Jan08    0:00    23:50:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    379824    152456    ?    Sl    Jan08    3:50    23:50:18    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:50:18    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:49:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    10.3    1414160    842888    ?    Sl    Jan08    2:03    23:49:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    88362    0.0    0.0    0    0    ?    I    Jan08    0:00    14:46:10    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    104632    0.0    0.0    0    0    ?    I    Jan08    0:02    13:04:36    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    145525    0.0    0.0    0    0    ?    I    01:04    0:00    08:48:51    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    161185    0.0    0.0    0    0    ?    I    02:44    0:00    07:08:49    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    184400    0.0    0.0    0    0    ?    I    05:08    0:00    04:44:15    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    186347    0.0    0.0    0    0    ?    I    05:21    0:00    04:31:35    [kworker/u20:1-writeback]    <noArgs>
root    196547    0.0    0.0    0    0    ?    I    06:25    0:00    03:27:40    [kworker/u18:2-flush-254:0]    <noArgs>
root    200450    0.0    0.0    0    0    ?    I    06:49    0:00    03:03:58    [kworker/u19:0-flush-254:0]    <noArgs>
root    201828    0.0    0.0    0    0    ?    I    06:59    0:00    02:53:35    [kworker/u17:0-flush-254:0]    <noArgs>
root    204441    0.0    0.0    0    0    ?    I    07:15    0:00    02:37:34    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    226443    0.0    0.0    0    0    ?    I    09:33    0:00    19:56    [kworker/u18:0-writeback]    <noArgs>
root    227799    0.0    0.0    0    0    ?    I    09:42    0:00    10:19    [kworker/2:1-ata_sff]    <noArgs>
root    228231    0.0    0.0    0    0    ?    I    09:45    0:00    07:54    [kworker/3:0-ata_sff]    <noArgs>
root    228307    0.0    0.0    0    0    ?    I    09:45    0:00    07:10    [kworker/0:0-ata_sff]    <noArgs>
root    228353    0.0    0.0    0    0    ?    I    09:46    0:00    06:37    [kworker/1:2-ata_sff]    <noArgs>
xrdp    228845    0.0    0.1    50404    15328    ?    S    09:48    0:00    04:53    /usr/sbin/xrdp    <noArgs>
root    229075    0.0    0.0    0    0    ?    I    09:48    0:00    04:25    [kworker/u18:1-flush-254:0]    <noArgs>
root    229106    0.0    0.0    0    0    ?    I    09:49    0:00    04:06    [kworker/2:0-ata_sff]    <noArgs>
root    229213    0.0    0.0    0    0    ?    I    09:50    0:00    02:54    [kworker/3:1-ata_sff]    <noArgs>
root    229304    0.0    0.0    0    0    ?    I    09:51    0:00    01:57    [kworker/0:1-ata_sff]    <noArgs>
root    229350    0.0    0.0    0    0    ?    I    09:51    0:00    01:29    [kworker/1:0-ata_sff]    <noArgs>
root    229595    0.0    0.0    2688    1748    ?    S    09:53    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229596    0.0    0.0    2688    1792    ?    S    09:53    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229617    0.0    0.0    9372    4164    ?    R    09:53    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229618    0.0    0.0    5592    1908    ?    S    09:53    0:00    00:00    tee    /dev/null
root    229619    0.0    0.0    9472    4040    ?    S    09:53    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}