_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    14880    ?    Ss    Jan08    0:02    23:40:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/3:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [kworker/u16:1]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u25:0]    <noArgs>
root    172    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/0:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ata_sff]    <noArgs>
root    234    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_0]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    240    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_1]    <noArgs>
root    243    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    267    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:30    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:30    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    333    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:29    [kworker/0:8-events_power_efficient]    <noArgs>
root    388    0.0    0.2    41984    20620    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    419    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    422    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    432    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:28    [psimon]    <noArgs>
root    564    0.0    0.0    8388    5616    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
root    579    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:28    [kworker/1:3-mm_percpu_wq]    <noArgs>
dhcpcd    611    0.0    0.0    10528    4504    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    612    0.0    0.0    10532    2516    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    614    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:27    [kworker/R-rpciod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:27    [kworker/R-xprtiod]    <noArgs>
root    622    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    632    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    633    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [DHCP6_proxy]_fe80::a08f:e456:3ae9:eb31
dhcpcd    652    0.0    0.0    10532    2308    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    745    0.0    0.0    309036    7060    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    747    0.0    0.0    6876    2792    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    748    0.0    0.0    9068    5484    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382300    9732    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    755    0.0    0.1    18260    8824    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336460    18780    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    815    0.0    0.1    391060    12388    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/ModemManager    <noArgs>
root    842    0.0    0.0    381356    7592    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1905076    20876    ?    Ssl    Jan08    0:20    23:40:21    /laforge.bin    <noArgs>
xrdp    881    0.0    0.0    15652    2456    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.2    915128    104328    tty7    Ssl+    Jan08    0:02    23:40:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    886    0.0    0.0    8124    2640    tty1    Ss+    Jan08    0:00    23:40:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    907    0.0    0.1    169620    8300    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
lightdm    913    0.0    0.1    22808    13236    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
root    915    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    917    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    944    0.0    0.0    8348    4644    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    945    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    946    0.0    1.2    666648    105496    ?    Ssl    Jan08    0:17    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    948    0.0    0.1    479284    15992    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
rtkit    949    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.0    84704    5192    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    956    0.0    0.1    98776    8296    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    979    0.0    0.0    381080    7112    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    988    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    991    0.0    0.0    312816    7876    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1007    0.0    0.0    398408    7372    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1035    0.0    0.0    14372    5768    ?    S    Jan08    0:00    23:40:19    lightdm    --session-child_13_20
lightdm    1037    0.0    0.0    168772    7044    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1067    0.2    1.8    377776    146640    ?    Sl    Jan08    3:38    23:40:18    splunkd    -p_8089_start
root    1070    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:40:18    [splunkd    pid=1067]_splunkd_-p_8089_start_[process-runner]
root    1903    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:39:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1904    0.1    10.2    1414160    835260    ?    Sl    Jan08    1:51    23:39:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    140527    0.0    0.0    0    0    ?    I    00:37    0:00    09:09:35    [kworker/u17:2-flush-254:0]    <noArgs>
root    142911    0.0    0.0    0    0    ?    I    00:52    0:00    08:54:34    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    154973    0.0    0.0    0    0    ?    I    02:07    0:00    07:39:22    [kworker/u17:1-flush-254:0]    <noArgs>
root    171678    0.0    0.0    0    0    ?    I    03:53    0:00    05:53:36    [kworker/u17:0-writeback]    <noArgs>
root    181231    0.0    0.0    0    0    ?    I    04:52    0:00    04:53:54    [kworker/u18:1-flush-254:0]    <noArgs>
root    183623    0.0    0.0    0    0    ?    I    05:07    0:00    04:39:32    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    192393    0.0    0.0    0    0    ?    I    06:05    0:00    03:41:09    [kworker/u19:2-events_unbound]    <noArgs>
root    196315    0.0    0.0    0    0    ?    I    06:27    0:00    03:19:32    [kworker/u19:1-events_unbound]    <noArgs>
root    197921    0.0    0.0    0    0    ?    I    06:36    0:00    03:09:40    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    201122    0.0    0.0    0    0    ?    I    06:58    0:00    02:48:30    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    202878    0.0    0.0    0    0    ?    I    07:07    0:00    02:38:56    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    210060    0.0    0.0    0    0    ?    I    07:53    0:00    01:52:43    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    226697    0.0    0.0    0    0    ?    I    09:37    0:00    08:58    [kworker/2:0-ata_sff]    <noArgs>
root    226894    0.0    0.0    0    0    ?    I    09:39    0:00    07:13    [kworker/3:1-ata_sff]    <noArgs>
root    226940    0.0    0.0    0    0    ?    I    09:39    0:00    06:51    [kworker/0:0-ata_sff]    <noArgs>
root    226987    0.0    0.0    0    0    ?    I    09:40    0:00    06:14    [kworker/1:0-ata_sff]    <noArgs>
root    227430    0.0    0.0    0    0    ?    I    09:42    0:00    03:41    [kworker/2:1-ata_sff]    <noArgs>
root    227581    0.0    0.0    0    0    ?    I    09:44    0:00    02:02    [kworker/3:0-ata_sff]    <noArgs>
root    227691    0.0    0.0    0    0    ?    I    09:45    0:00    00:54    [kworker/1:1-ata_sff]    <noArgs>
root    227707    0.0    0.0    0    0    ?    I    09:45    0:00    00:44    [kworker/0:1-ata_sff]    <noArgs>
root    227892    0.0    0.0    2688    1748    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227893    0.0    0.0    2688    1836    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227914    0.0    0.0    9372    4256    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227915    0.0    0.0    5592    1904    ?    S    09:46    0:00    00:00    tee    /dev/null
root    227916    0.0    0.0    9472    4052    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    15496    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    31    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/2:0-events]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/1:1-events]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    383    0.0    0.2    41984    20556    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    559    0.0    0.0    8388    5484    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10536    4520    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2572    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2168    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2444    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::3e2b:b22:c951:d2ee
dhcpcd    628    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    647    0.0    0.0    10540    2444    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    740    0.0    0.0    309036    7184    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2700    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9072    5564    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9796    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3964    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8796    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    773    0.0    0.2    336460    19044    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391064    12408    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7840    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    844    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:22    [kworker/3:2H-kblockd]    <noArgs>
root    846    0.0    0.2    1978808    20428    ?    Ssl    Jan08    0:19    23:40:22    /laforge.bin    <noArgs>
root    852    0.0    0.0    16356    2304    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    876    0.0    0.0    15652    2380    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.3    915132    105812    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    879    0.0    0.0    8124    2512    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    901    0.0    0.0    169620    8076    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22816    13204    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
lightdm    911    0.0    0.0    22712    3856    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    938    0.0    0.0    8344    4732    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101240    10672    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105416    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479276    15976    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
rtkit    943    0.0    0.0    21492    3156    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    944    0.0    0.0    84704    5172    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    945    0.0    0.1    98776    8264    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    971    0.0    0.0    381080    7156    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4448    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    7860    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7432    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5768    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    6988    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    377776    150444    ?    Sl    Jan08    3:28    23:40:18    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    18028    ?    Ss    Jan08    0:04    23:40:18    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.3    1414160    839648    ?    Sl    Jan08    1:49    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    119170    0.0    0.0    0    0    ?    I    Jan08    0:00    11:23:55    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    149577    0.0    0.0    0    0    ?    I    01:36    0:00    08:10:18    [kworker/u19:2-writeback]    <noArgs>
root    159021    0.0    0.0    0    0    ?    I    02:35    0:00    07:11:31    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    164881    0.0    0.0    0    0    ?    I    03:10    0:00    06:36:33    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    164882    0.0    0.0    0    0    ?    I    03:10    0:00    06:36:33    [kworker/u17:3-flush-254:0]    <noArgs>
root    178189    0.0    0.0    0    0    ?    I    04:35    0:00    05:11:09    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    181238    0.0    0.0    0    0    ?    I    04:52    0:00    04:54:22    [kworker/u19:0-events_unbound]    <noArgs>
root    190789    0.0    0.0    0    0    ?    I    05:52    0:00    03:54:27    [kworker/u20:1-flush-254:0]    <noArgs>
root    193228    0.0    0.0    0    0    ?    I    06:07    0:00    03:39:36    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    195603    0.0    0.0    0    0    ?    I    06:22    0:00    03:24:34    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    205218    0.0    0.0    0    0    ?    I    07:22    0:00    02:24:32    [kworker/u19:1-writeback]    <noArgs>
root    217081    0.0    0.0    0    0    ?    I    08:37    0:00    01:09:37    [kworker/3:2-events]    <noArgs>
root    224317    0.0    0.0    0    0    ?    I    09:22    0:00    24:35    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    225896    0.0    0.0    0    0    ?    I    09:34    0:00    12:12    [kworker/0:0-ata_sff]    <noArgs>
root    226100    0.0    0.0    0    0    ?    I    09:36    0:00    10:21    [kworker/1:2-ata_sff]    <noArgs>
root    226956    0.0    0.0    0    0    ?    I    09:39    0:00    07:05    [kworker/2:2-ata_sff]    <noArgs>
root    227063    0.0    0.0    0    0    ?    I    09:40    0:00    05:59    [kworker/3:1-ata_sff]    <noArgs>
root    227263    0.0    0.0    0    0    ?    I    09:41    0:00    05:00    [kworker/1:0-ata_sff]    <noArgs>
root    227657    0.0    0.0    0    0    ?    I    09:44    0:00    01:49    [kworker/2:1-ata_sff]    <noArgs>
root    227767    0.0    0.0    0    0    ?    I    09:46    0:00    00:40    [kworker/3:0-ata_sff]    <noArgs>
root    227798    0.0    0.0    0    0    ?    I    09:46    0:00    00:18    [kworker/0:2-ata_sff]    <noArgs>
root    227938    0.0    0.0    2688    1752    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227939    0.0    0.0    2688    1748    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227960    0.0    0.0    9372    4176    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227961    0.0    0.0    5592    1912    ?    S    09:46    0:00    00:00    tee    /dev/null
root    227962    0.0    0.0    9472    3992    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24700    14888    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:34    [kworker/2:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    248    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/0:2-events]    <noArgs>
root    307    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    308    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    332    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    388    0.0    0.3    50356    24428    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    419    0.0    0.0    90112    7468    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    424    0.0    0.1    37452    12124    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    432    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    483    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:30    [kworker/1:4-events]    <noArgs>
root    570    0.0    0.0    8388    5452    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    611    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    612    0.0    0.0    10540    2512    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    614    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    622    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    632    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    633    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::69d6:d115:975d:314b
dhcpcd    652    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    745    0.0    0.0    309036    7224    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    747    0.0    0.0    6876    2664    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    748    0.0    0.0    9960    6504    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    750    0.0    0.1    382484    10072    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3980    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    755    0.0    0.1    18480    9152    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    798    0.0    0.2    336476    18972    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    817    0.0    0.1    391060    12384    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    845    0.0    0.0    381364    7780    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    847    0.0    0.0    18320    4312    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    858    0.0    0.2    1978552    20364    ?    Ssl    Jan08    0:18    23:40:22    /laforge.bin    <noArgs>
xrdp    874    0.0    0.0    15652    2508    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.3    915132    105848    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    887    0.0    0.0    8124    2488    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    908    0.0    0.1    169620    8244    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    913    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    915    0.0    0.1    22640    13124    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
root    916    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:20    [kworker/3:2H-kblockd]    <noArgs>
lightdm    919    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    944    0.0    0.0    8348    4660    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    945    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    948    0.0    1.2    666648    105248    ?    Ssl    Jan08    0:15    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    950    0.0    0.1    479268    16020    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
rtkit    951    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    952    0.0    0.0    84704    5084    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    957    0.0    0.1    98776    8348    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    981    0.0    0.0    381080    7256    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    990    0.0    0.0    8208    4472    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1000    0.0    0.0    312816    7956    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1009    0.0    0.0    398408    7296    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1040    0.0    0.0    14372    5784    ?    S    Jan08    0:00    23:40:19    lightdm    --session-child_13_20
lightdm    1042    0.0    0.0    168772    7108    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1072    0.2    1.8    377776    151060    ?    Sl    Jan08    3:22    23:40:18    splunkd    -p_8089_start
root    1075    0.0    0.2    135648    17900    ?    Ss    Jan08    0:04    23:40:18    [splunkd    pid=1072]_splunkd_-p_8089_start_[process-runner]
root    1909    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1910    0.1    10.3    1414160    838900    ?    Sl    Jan08    1:46    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    2511    0.0    0.0    0    0    ?    I    Jan08    0:03    23:35:06    [kworker/3:0-events]    <noArgs>
root    9404    0.0    0.0    0    0    ?    I    Jan08    0:00    22:51:08    [kworker/u20:0-flush-254:0]    <noArgs>
root    35338    0.0    0.0    0    0    ?    I    Jan08    0:00    20:09:33    [kworker/u20:1-flush-254:0]    <noArgs>
root    68905    0.0    0.0    0    0    ?    I    Jan08    0:00    16:39:22    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    92801    0.0    0.0    0    0    ?    I    Jan08    0:00    14:08:28    [kworker/u19:1-ext4-rsv-conversion]    <noArgs>
root    104595    0.0    0.0    0    0    ?    I    Jan08    0:00    12:54:34    [kworker/u18:2-flush-254:0]    <noArgs>
root    120621    0.0    0.0    0    0    ?    I    Jan08    0:00    11:12:12    [kworker/u18:0-flush-254:0]    <noArgs>
root    150139    0.0    0.0    0    0    ?    I    01:37    0:00    08:08:43    [kworker/u19:2-flush-254:0]    <noArgs>
root    155839    0.0    0.0    0    0    ?    I    02:14    0:00    07:32:20    [kworker/u17:2-flush-254:0]    <noArgs>
root    196556    0.0    0.0    0    0    ?    I    06:29    0:00    03:16:59    [kworker/u20:2-flush-254:0]    <noArgs>
root    199009    0.0    0.0    0    0    ?    I    06:45    0:00    03:01:09    [kworker/u19:0-events_unbound]    <noArgs>
root    201153    0.0    0.0    0    0    ?    I    06:58    0:00    02:48:06    [kworker/u17:0-writeback]    <noArgs>
root    202012    0.0    0.0    0    0    ?    I    07:05    0:00    02:41:09    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    226771    0.0    0.0    0    0    ?    I    09:38    0:00    08:10    [kworker/2:0-ata_sff]    <noArgs>
root    226802    0.0    0.0    0    0    ?    I    09:38    0:00    07:48    [kworker/0:0-ata_sff]    <noArgs>
root    226821    0.0    0.0    0    0    ?    I    09:39    0:00    07:37    [kworker/3:1-ata_sff]    <noArgs>
root    226837    0.0    0.0    0    0    ?    I    09:39    0:00    07:31    [kworker/1:0-ata_sff]    <noArgs>
xrdp    227475    0.6    0.4    61516    34744    ?    S    09:43    0:01    03:20    /usr/sbin/xrdp    <noArgs>
root    227506    0.0    0.0    0    0    ?    I    09:43    0:00    02:55    [kworker/2:2-ata_sff]    <noArgs>
root    227525    0.0    0.0    18320    4392    ?    S    09:43    0:00    02:47    /usr/sbin/xrdp-sesman    <noArgs>
pentester    227528    0.0    0.1    22916    13228    ?    Ss    09:43    0:00    02:46    /usr/lib/systemd/systemd    --user
pentester    227530    0.0    0.0    22592    3832    ?    S    09:43    0:00    02:46    (sd-pam)    <noArgs>
pentester    227550    0.1    0.0    8952    5552    ?    Ss    09:43    0:00    02:46    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    227551    0.0    0.0    97360    8128    ?    Ssl    09:43    0:00    02:46    /usr/bin/pipewire    <noArgs>
pentester    227552    0.1    1.2    630548    98064    ?    Sl    09:43    0:00    02:46    xfce4-session    <noArgs>
pentester    227553    0.5    1.7    405460    145688    ?    Sl    09:43    0:00    02:46    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    227556    0.0    0.0    7212    3448    ?    Ss    09:43    0:00    02:46    /usr/bin/mpris-proxy    <noArgs>
pentester    227557    0.0    0.1    399540    14248    ?    Ssl    09:43    0:00    02:46    /usr/bin/wireplumber    <noArgs>
pentester    227558    0.0    0.0    84704    5252    ?    Ssl    09:43    0:00    02:46    /usr/bin/pipewire    -c_filter-chain.conf
pentester    227559    0.0    0.1    99176    8804    ?    Ssl    09:43    0:00    02:46    /usr/bin/pipewire-pulse    <noArgs>
pentester    227582    0.0    0.0    95084    6212    ?    Sl    09:43    0:00    02:46    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    227659    0.0    0.0    10688    1856    ?    Ss    09:43    0:00    02:46    /usr/bin/ssh-agent    x-session-manager
pentester    227670    0.0    0.0    381172    7876    ?    Ssl    09:43    0:00    02:46    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    227677    0.0    0.0    8344    4768    ?    S    09:43    0:00    02:46    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    227681    0.1    0.0    307776    6792    ?    Ssl    09:43    0:00    02:46    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    227688    0.0    0.0    168784    7548    ?    Sl    09:43    0:00    02:46    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    227701    0.0    0.0    155488    3588    ?    SLsl    09:43    0:00    02:46    /usr/bin/gpg-agent    --supervised
pentester    227704    0.3    0.5    297308    48456    ?    Sl    09:43    0:00    02:46    xfwm4    <noArgs>
pentester    227709    0.0    0.1    312816    8140    ?    Ssl    09:43    0:00    02:46    /usr/libexec/gvfsd    <noArgs>
pentester    227715    0.0    0.0    398408    7460    ?    Sl    09:43    0:00    02:46    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    227724    0.0    0.3    348404    27192    ?    Sl    09:43    0:00    02:45    xfsettingsd    <noArgs>
pentester    227730    0.0    0.0    165276    5924    ?    Ssl    09:43    0:00    02:45    /usr/libexec/dconf-service    <noArgs>
pentester    227731    0.2    0.6    515536    52916    ?    Sl    09:43    0:00    02:45    xfce4-panel    <noArgs>
pentester    227737    0.0    0.3    420256    26388    ?    Sl    09:43    0:00    02:45    Thunar    --daemon
pentester    227753    0.3    0.8    663288    70280    ?    Sl    09:43    0:00    02:45    xfdesktop    <noArgs>
pentester    227758    0.1    0.5    428300    42636    ?    Sl    09:43    0:00    02:45    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    227763    0.0    0.0    7180    3300    ?    S    09:43    0:00    02:45    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    227768    0.0    0.2    405608    19356    ?    Sl    09:43    0:00    02:45    xfce4-power-manager    <noArgs>
pentester    227769    0.0    0.4    281548    35608    ?    Sl    09:43    0:00    02:45    xfce4-screensaver    <noArgs>
pentester    227775    0.0    0.4    532772    37612    ?    Sl    09:43    0:00    02:45    diodon    <noArgs>
pentester    227778    0.2    0.7    604468    61344    ?    Sl    09:43    0:00    02:45    /usr/bin/python3    /usr/bin/blueman-applet
pentester    227779    0.0    0.0    12432    2032    ?    Ssl    09:43    0:00    02:45    xcape    -e_Super_L_Control_L_Escape
pentester    227784    0.0    0.5    66232    41024    ?    S    09:43    0:00    02:45    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    227791    0.0    0.2    481796    21488    ?    Ssl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    227793    0.0    0.2    265304    18312    ?    Sl    09:43    0:00    02:44    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    227805    0.0    0.0    308560    6764    ?    Sl    09:43    0:00    02:44    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    227809    0.0    0.1    791540    8968    ?    Sl    09:43    0:00    02:44    xiccd    <noArgs>
pentester    227837    0.0    0.5    586932    43252    ?    Sl    09:43    0:00    02:44    nm-applet    <noArgs>
pentester    227839    0.0    0.3    282404    28148    ?    SNsl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
colord    227849    0.0    0.1    317056    15192    ?    Ssl    09:43    0:00    02:44    /usr/libexec/colord    <noArgs>
pentester    227892    0.0    0.0    95896    7532    ?    Sl    09:43    0:00    02:44    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    227903    0.0    0.1    458444    9904    ?    Ssl    09:43    0:00    02:44    /usr/bin/zeitgeist-daemon    <noArgs>
root    227924    0.0    0.1    318520    10032    ?    Ssl    09:43    0:00    02:44    /usr/libexec/upowerd    <noArgs>
pentester    227954    0.0    0.2    352692    20428    ?    Ssl    09:43    0:00    02:44    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    227971    0.2    0.7    310940    61560    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    227973    0.0    0.4    499484    38092    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    227974    0.2    0.3    272796    29044    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    227976    0.0    0.4    359160    39216    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    227977    0.0    0.4    425196    37344    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    227978    0.0    0.4    286016    37668    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    227991    0.0    0.4    425472    37648    ?    Sl    09:43    0:00    02:44    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228064    0.0    0.1    538332    11648    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228068    0.0    0.1    478376    14068    ?    Ssl    09:43    0:00    02:43    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    228080    0.0    0.0    307864    6652    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    228085    0.0    0.0    308884    7016    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    228090    0.0    0.0    307916    6728    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    228095    0.0    0.1    389944    8680    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    228117    0.0    0.0    168868    6732    ?    Ssl    09:43    0:00    02:43    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    228121    0.0    0.1    534256    9276    ?    Sl    09:43    0:00    02:43    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
pentester    228175    0.2    0.8    808048    70644    ?    Sl    09:44    0:00    02:40    /usr/bin/qterminal    <noArgs>
pentester    228177    0.0    0.2    557008    19968    ?    Ssl    09:44    0:00    02:40    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    228195    0.0    0.0    308740    6512    ?    Ssl    09:44    0:00    02:40    /usr/libexec/xdg-permission-store    <noArgs>
pentester    228200    0.0    0.0    539704    7072    ?    Ssl    09:44    0:00    02:40    /usr/libexec/xdg-document-portal    <noArgs>
root    228206    0.0    0.0    2592    2028    ?    Ss    09:44    0:00    02:40    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    228209    0.0    0.2    479576    19724    ?    Ssl    09:44    0:00    02:40    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    228219    0.6    0.0    10504    6600    pts/0    Ss    09:44    0:01    02:39    /usr/bin/zsh    <noArgs>
root    228241    0.0    0.0    0    0    ?    I    09:44    0:00    02:39    [kworker/0:1-ata_sff]    <noArgs>
root    228674    0.0    0.0    0    0    ?    I    09:44    0:00    02:23    [kworker/3:2-ata_sff]    <noArgs>
root    228746    0.0    0.0    0    0    ?    I    09:44    0:00    02:16    [kworker/u20:3-events_unbound]    <noArgs>
root    228966    0.0    0.0    0    0    ?    I    09:44    0:00    01:55    [kworker/1:1-ata_sff]    <noArgs>
pentester    230183    62.7    2.2    4332576    183904    pts/0    Sl+    09:46    0:03    00:05    /usr/bin/python3    /usr/bin/nxc_rdp_10.0.1.0/24_-u_Guest_-p
pentester    230194    0.0    0.0    5588    1988    ?    S    09:46    0:00    00:04    sleep    10
root    230521    0.0    0.0    2688    1756    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230522    0.0    0.0    2688    1844    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230543    0.0    0.0    9504    4316    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230544    0.0    0.0    5592    1948    ?    S    09:46    0:00    00:00    tee    /dev/null
root    230545    0.0    0.0    9472    4148    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24716    15528    ?    Ss    Jan08    0:02    23:40:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    74    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [kswapd0]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:31    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/2:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/0:1H-kblockd]    <noArgs>
root    227    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/3:1H-kblockd]    <noArgs>
root    244    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:30    [kworker/0:2-events]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ata_sff]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [scsi_eh_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    265    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [scsi_eh_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:29    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    331    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [hwrng]    <noArgs>
root    386    0.0    0.2    41984    20628    ?    Ss    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37588    12320    ?    Ss    Jan08    0:00    23:40:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:27    [psimon]    <noArgs>
root    561    0.0    0.0    8388    5504    ?    Ss    Jan08    0:01    23:40:27    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:40:27    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10536    2444    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:40:25    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:25    dhcpcd:    [DHCP6_proxy]_fe80::5a05:7b72:ef72:2476
dhcpcd    647    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:20    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    7276    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:40:20    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9196    5572    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9724    ?    Ssl    Jan08    0:01    23:40:20    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    4016    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18260    8812    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd-logind    <noArgs>
root    789    0.0    0.2    336456    19112    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391060    12572    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/ModemManager    <noArgs>
root    833    0.0    0.0    307632    7736    ?    Ssl    Jan08    0:00    23:40:19    /usr/sbin/lightdm    <noArgs>
root    838    0.0    0.0    16356    2252    ?    S    Jan08    0:00    23:40:19    /usr/sbin/xrdp-sesman    <noArgs>
root    852    0.0    0.2    1978808    20800    ?    Ssl    Jan08    0:20    23:40:19    /laforge.bin    <noArgs>
xrdp    871    0.0    0.0    15652    2532    ?    S    Jan08    0:00    23:40:19    /usr/sbin/xrdp    <noArgs>
root    877    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:40:19    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    878    0.0    1.3    915132    107708    tty7    Ssl+    Jan08    0:02    23:40:19    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    900    0.0    0.1    169620    8360    ?    Sl    Jan08    0:00    23:40:18    lightdm    --session-child_17_20
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:18    [psimon]    <noArgs>
lightdm    907    0.0    0.1    22864    13040    ?    Ss    Jan08    0:00    23:40:18    /usr/lib/systemd/systemd    --user
lightdm    909    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:40:18    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4684    ?    Ss    Jan08    0:00    23:40:18    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101208    10644    ?    S<sl    Jan08    0:00    23:40:18    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105364    ?    Ssl    Jan08    0:16    23:40:18    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    937    0.0    0.1    479276    16008    ?    S<sl    Jan08    0:00    23:40:18    /usr/bin/wireplumber    <noArgs>
rtkit    938    0.0    0.0    21492    3072    ?    SNsl    Jan08    0:00    23:40:18    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.0    84704    5276    ?    Ssl    Jan08    0:00    23:40:18    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    943    0.0    0.1    98776    8236    ?    S<sl    Jan08    0:00    23:40:18    /usr/bin/pipewire-pulse    <noArgs>
lightdm    965    0.0    0.0    381080    7344    ?    Ssl    Jan08    0:00    23:40:18    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    975    0.0    0.0    8208    4508    ?    S    Jan08    0:00    23:40:18    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    7964    ?    Ssl    Jan08    0:00    23:40:18    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7460    ?    Sl    Jan08    0:00    23:40:18    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5676    ?    S    Jan08    0:00    23:40:17    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7208    ?    Sl    Jan08    0:00    23:40:17    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1060    0.2    1.8    377776    149812    ?    Sl    Jan08    3:31    23:40:16    splunkd    -p_8089_start
root    1063    0.0    0.2    135648    18008    ?    Ss    Jan08    0:04    23:40:16    [splunkd    pid=1060]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1736    ?    S    Jan08    0:00    23:39:43    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    10.2    1414160    833208    ?    Sl    Jan08    1:46    23:39:43    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    50823    0.0    0.0    0    0    ?    I    Jan08    0:00    18:31:18    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    128803    0.0    0.0    0    0    ?    I    Jan08    0:00    10:23:34    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    164644    0.0    0.0    0    0    ?    I    03:07    0:00    06:38:46    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    170223    0.0    0.0    0    0    ?    I    03:44    0:00    06:02:06    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    178950    0.0    0.0    0    0    ?    I    04:38    0:00    05:08:29    [kworker/u17:0-flush-254:0]    <noArgs>
root    202902    0.0    0.0    0    0    ?    I    07:07    0:00    02:39:32    [kworker/u20:1-flush-254:0]    <noArgs>
root    205360    0.0    0.0    0    0    ?    I    07:22    0:00    02:23:53    [kworker/u20:2]    <noArgs>
root    213513    0.0    0.0    0    0    ?    I    08:15    0:00    01:31:07    [kworker/u17:2]    <noArgs>
root    216518    0.0    0.0    0    0    ?    I    08:35    0:00    01:11:08    [kworker/u18:0-flush-254:0]    <noArgs>
root    219656    0.0    0.0    0    0    ?    I    08:53    0:00    53:23    [kworker/3:0-events]    <noArgs>
root    223757    0.0    0.0    0    0    ?    I    09:20    0:00    26:08    [kworker/u19:1-events_unbound]    <noArgs>
root    226683    0.0    0.0    0    0    ?    I    09:36    0:00    09:40    [kworker/0:0-ata_sff]    <noArgs>
root    226852    0.0    0.0    0    0    ?    I    09:38    0:00    08:23    [kworker/1:1-ata_sff]    <noArgs>
root    226976    0.0    0.0    0    0    ?    I    09:39    0:00    07:09    [kworker/2:0-ata_sff]    <noArgs>
root    227156    0.0    0.0    0    0    ?    I    09:41    0:00    05:34    [kworker/3:2-ata_sff]    <noArgs>
root    227464    0.0    0.0    0    0    ?    I    09:42    0:00    04:34    [kworker/0:1-ata_sff]    <noArgs>
root    227600    0.0    0.0    0    0    ?    I    09:43    0:00    03:03    [kworker/1:0-ata_sff]    <noArgs>
root    227691    0.0    0.0    0    0    ?    I    09:44    0:00    02:07    [kworker/2:2-ata_sff]    <noArgs>
root    227861    0.0    0.0    0    0    ?    I    09:46    0:00    00:10    [kworker/3:1-ata_sff]    <noArgs>
root    227959    0.0    0.0    2688    1768    ?    S    09:46    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227960    0.0    0.0    2688    1900    ?    S    09:46    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227981    0.0    0.0    9372    4264    ?    R    09:46    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227982    0.0    0.0    5592    1932    ?    S    09:46    0:00    00:00    tee    /dev/null
root    227983    0.0    0.0    9472    4068    ?    S    09:46    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}