_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    15216    ?    Ss    Jan08    0:02    23:45:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:35    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:35    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:35    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:35    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:35    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/2:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/0:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:33    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ata_sff]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:33    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20648    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    398    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6572    ?    Ss    Jan08    0:01    23:45:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:45:30    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10540    2512    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [DHCP6_proxy]_fe80::7a39:1a2a:bca2:81e0
dhcpcd    629    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    648    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:45:23    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    7120    ?    Ssl    Jan08    0:00    23:45:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:45:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9212    5500    ?    Ss    Jan08    0:00    23:45:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9900    ?    Ssl    Jan08    0:01    23:45:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18352    8764    ?    Ss    Jan08    0:00    23:45:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    792    0.0    0.2    336460    18852    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    814    0.0    0.1    317328    12220    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7792    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.2    1904820    20344    ?    Ssl    Jan08    0:19    23:45:22    /laforge.bin    <noArgs>
root    853    0.0    0.0    16356    3656    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    876    0.0    0.0    15652    2416    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp    <noArgs>
root    882    0.0    1.3    915128    107404    tty7    Ssl+    Jan08    0:02    23:45:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    883    0.0    0.0    8124    2688    tty1    Ss+    Jan08    0:00    23:45:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8196    ?    Sl    Jan08    0:00    23:45:21    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22464    12916    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd    --user
root    912    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:21    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3816    ?    S    Jan08    0:00    23:45:21    (sd-pam)    <noArgs>
root    920    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:21    [kworker/3:2H-kblockd]    <noArgs>
lightdm    938    0.0    0.0    8348    4704    ?    Ss    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101224    10860    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:16    23:45:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    944    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:45:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    945    0.0    0.1    479360    16128    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/wireplumber    <noArgs>
lightdm    946    0.0    0.0    84704    5272    ?    Ssl    Jan08    0:00    23:45:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    947    0.0    0.1    98776    8292    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    972    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    987    0.0    0.0    8208    4464    ?    S    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    993    0.0    0.0    312816    7972    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1003    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1040    0.0    0.0    14372    5808    ?    S    Jan08    0:00    23:45:20    lightdm    --session-child_13_20
lightdm    1042    0.0    0.0    168772    7152    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1072    0.2    1.8    377776    148868    ?    Sl    Jan08    3:29    23:45:19    splunkd    -p_8089_start
root    1075    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:45:19    [splunkd    pid=1072]_splunkd_-p_8089_start_[process-runner]
root    1908    0.0    0.0    2688    1772    ?    S    Jan08    0:00    23:44:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1909    0.1    10.1    1414160    829588    ?    Sl    Jan08    1:44    23:44:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    160052    0.0    0.0    0    0    ?    I    02:39    0:00    07:10:52    [kworker/u17:0-flush-254:0]    <noArgs>
root    165319    0.0    0.0    0    0    ?    I    03:11    0:01    06:38:46    [kworker/3:0-events]    <noArgs>
root    167562    0.0    0.0    0    0    ?    I    03:25    0:00    06:24:43    [kworker/u18:2-flush-254:0]    <noArgs>
root    186430    0.0    0.0    0    0    ?    I    05:25    0:00    04:25:19    [kworker/u20:1-writeback]    <noArgs>
root    189381    0.0    0.0    0    0    ?    I    05:44    0:00    04:06:15    [kworker/u19:1-flush-254:0]    <noArgs>
root    193270    0.0    0.0    0    0    ?    I    06:06    0:00    03:43:57    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    194004    0.0    0.0    0    0    ?    I    06:11    0:00    03:38:49    [kworker/u19:3-events_unbound]    <noArgs>
root    198308    0.0    0.0    0    0    ?    I    06:39    0:00    03:10:52    [kworker/u18:3-ext4-rsv-conversion]    <noArgs>
root    207593    0.0    0.0    0    0    ?    I    07:36    0:00    02:13:57    [kworker/u19:0]    <noArgs>
root    214612    0.0    0.0    0    0    ?    I    08:20    0:00    01:29:51    [kworker/u18:1]    <noArgs>
root    218024    0.0    0.0    0    0    ?    I    08:42    0:00    01:07:57    [kworker/u17:1-flush-254:0]    <noArgs>
root    226683    0.0    0.0    0    0    ?    I    09:35    0:00    14:35    [kworker/u20:2-flush-254:0]    <noArgs>
root    227573    0.0    0.0    0    0    ?    I    09:42    0:00    08:00    [kworker/2:0-ata_sff]    <noArgs>
root    227619    0.0    0.0    0    0    ?    I    09:42    0:00    07:31    [kworker/0:2-ata_sff]    <noArgs>
root    227635    0.0    0.0    0    0    ?    I    09:43    0:00    07:21    [kworker/1:2-ata_sff]    <noArgs>
root    227820    0.0    0.0    0    0    ?    I    09:45    0:00    05:16    [kworker/3:2-ata_sff]    <noArgs>
root    228263    0.0    0.0    0    0    ?    I    09:47    0:00    02:47    [kworker/2:1-ata_sff]    <noArgs>
root    228324    0.0    0.0    0    0    ?    I    09:48    0:00    02:11    [kworker/1:0-ata_sff]    <noArgs>
root    228340    0.0    0.0    0    0    ?    I    09:48    0:00    01:53    [kworker/0:0-ata_sff]    <noArgs>
root    228433    0.0    0.0    0    0    ?    I    09:49    0:00    00:58    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
xrdp    228498    0.1    0.1    47584    11916    ?    S    09:50    0:00    00:16    /usr/sbin/xrdp    <noArgs>
root    228644    0.0    0.0    2688    1716    ?    S    09:50    0:00    00:10    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228645    0.0    0.0    2688    1760    ?    S    09:50    0:00    00:10    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228666    0.0    0.0    5624    2292    ?    S    09:50    0:00    00:10    iostat    -xky_60_1
root    228667    0.0    0.0    5592    1844    ?    S    09:50    0:00    00:10    tee    /dev/null
root    228668    0.0    0.0    9472    4056    ?    S    09:50    0:00    00:10    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    228793    0.0    0.0    2688    1772    ?    S    09:50    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228794    0.0    0.0    2688    1812    ?    S    09:50    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228815    0.0    0.0    9372    4196    ?    R    09:50    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    228816    0.0    0.0    5592    1916    ?    S    09:50    0:00    00:00    tee    /dev/null
root    228817    0.0    0.0    9472    4028    ?    S    09:50    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    15208    ?    Ss    Jan08    0:02    23:45:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:35    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/3:0H-kblockd]    <noArgs>
root    42    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:35    [kworker/u20:0-flush-254:0]    <noArgs>
root    45    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [kworker/u18:2-flush-254:0]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:34    [kworker/1:1-events]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:33    [kworker/2:2-events]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/0:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/3:1H-kblockd]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ata_sff]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_0]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [scsi_eh_1]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [hwrng]    <noArgs>
root    385    0.0    0.2    41980    20592    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7560    ?    Ssl    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:45:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [psimon]    <noArgs>
root    567    0.0    0.0    8388    5296    ?    Ss    Jan08    0:01    23:45:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10532    4484    ?    S    Jan08    0:00    23:45:30    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10536    2520    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2044    ?    S    Jan08    0:00    23:45:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:30    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10536    2316    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [DHCP6_proxy]_fe80::af80:ef6:f066:344b
dhcpcd    631    0.0    0.0    10536    2188    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    650    0.0    0.0    10536    2252    ?    S    Jan08    0:00    23:45:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    743    0.0    0.0    309036    7176    ?    Ssl    Jan08    0:00    23:45:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2784    ?    Ss    Jan08    0:00    23:45:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9056    5548    ?    Ss    Jan08    0:00    23:45:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9744    ?    Ssl    Jan08    0:01    23:45:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3912    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:45:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336464    19068    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    391064    12476    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    840    0.0    0.0    381356    7768    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    848    0.0    0.2    1905076    20272    ?    Ssl    Jan08    0:20    23:45:22    /laforge.bin    <noArgs>
root    854    0.0    0.0    16356    2348    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    875    0.0    0.0    15652    2348    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915132    106048    tty7    Ssl+    Jan08    0:02    23:45:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    884    0.0    0.0    8124    2504    tty1    Ss+    Jan08    0:00    23:45:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8168    ?    Sl    Jan08    0:00    23:45:21    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22464    12944    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd    --user
root    912    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:21    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3836    ?    S    Jan08    0:00    23:45:21    (sd-pam)    <noArgs>
lightdm    935    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    936    0.0    0.1    101224    10704    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    1.2    666648    105632    ?    Ssl    Jan08    0:17    23:45:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    939    0.0    0.1    479352    16088    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/wireplumber    <noArgs>
rtkit    940    0.0    0.0    21492    3068    ?    SNsl    Jan08    0:00    23:45:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    941    0.0    0.0    84704    5196    ?    Ssl    Jan08    0:00    23:45:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8296    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    967    0.0    0.0    381080    7108    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4400    ?    S    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    981    0.0    0.1    312816    8184    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7328    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5704    ?    S    Jan08    0:00    23:45:20    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7080    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    379824    150888    ?    Sl    Jan08    3:33    23:45:19    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    17864    ?    Ss    Jan08    0:04    23:45:19    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1906    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:44:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1907    0.1    10.1    1414160    829608    ?    Sl    Jan08    1:46    23:44:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    70236    0.0    0.0    0    0    ?    I    Jan08    0:00    16:34:49    [kworker/u20:2-flush-254:0]    <noArgs>
root    150938    0.0    0.0    0    0    ?    I    01:42    0:00    08:07:47    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    152405    0.0    0.0    0    0    ?    I    01:50    0:00    07:59:33    [kworker/u18:0-flush-254:0]    <noArgs>
root    164479    0.0    0.0    0    0    ?    I    03:06    0:00    06:44:15    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    169538    0.0    0.0    0    0    ?    I    03:39    0:00    06:10:57    [kworker/u19:2-events_unbound]    <noArgs>
root    176669    0.0    0.0    0    0    ?    I    04:23    0:00    05:26:50    [kworker/u19:1-flush-254:0]    <noArgs>
root    179535    0.0    0.0    0    0    ?    I    04:41    0:00    05:08:46    [kworker/u19:0-flush-254:0]    <noArgs>
root    209668    0.0    0.0    0    0    ?    I    07:50    0:00    01:59:53    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    213148    0.0    0.0    0    0    ?    I    08:11    0:00    01:38:50    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    214725    0.0    0.0    0    0    ?    I    08:20    0:00    01:29:31    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    222087    0.0    0.0    0    0    ?    I    09:07    0:00    42:40    [kworker/3:0-events]    <noArgs>
root    227082    0.0    0.0    0    0    ?    I    09:40    0:00    10:10    [kworker/3:2-ata_sff]    <noArgs>
root    227600    0.0    0.0    0    0    ?    I    09:43    0:00    06:47    [kworker/0:2-ata_sff]    <noArgs>
root    227676    0.0    0.0    0    0    ?    I    09:44    0:00    05:56    [kworker/1:0-ata_sff]    <noArgs>
root    227741    0.0    0.0    0    0    ?    I    09:45    0:00    05:16    [kworker/2:0-ata_sff]    <noArgs>
root    227975    0.0    0.0    0    0    ?    I    09:45    0:00    04:48    [kworker/3:1-ata_sff]    <noArgs>
root    228290    0.0    0.0    0    0    ?    I    09:48    0:00    01:32    [kworker/0:0-ata_sff]    <noArgs>
root    228351    0.0    0.0    0    0    ?    I    09:49    0:00    00:52    [kworker/1:2-ata_sff]    <noArgs>
root    228558    0.0    0.0    2688    1760    ?    S    09:50    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228559    0.0    0.0    2688    1788    ?    S    09:50    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228580    0.0    0.0    5624    2208    ?    S    09:50    0:00    00:09    iostat    -xky_60_1
root    228581    0.0    0.0    5592    1912    ?    S    09:50    0:00    00:09    tee    /dev/null
root    228582    0.0    0.0    9472    4008    ?    S    09:50    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    228707    0.0    0.0    2688    1760    ?    S    09:50    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228708    0.0    0.0    2688    1740    ?    S    09:50    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228729    0.0    0.0    9372    4112    ?    R    09:50    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    228730    0.0    0.0    5592    1912    ?    S    09:50    0:00    00:00    tee    /dev/null
root    228731    0.0    0.0    9472    4120    ?    S    09:50    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15284    ?    Ss    Jan08    0:02    23:45:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:45:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/3:0H-events_highpri]    <noArgs>
root    39    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u17:0-flush-254:0]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:33    [kswapd0]    <noArgs>
root    75    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:33    [kworker/1:1-events]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/0:1H-kblockd]    <noArgs>
root    235    0.0    0.0    0    0    ?    I    Jan08    0:03    23:45:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ata_sff]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [scsi_eh_1]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:31    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [hwrng]    <noArgs>
root    385    0.0    0.3    58552    24864    ?    Ss    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-journald    <noArgs>
root    414    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:29    [kworker/0:3-events]    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12092    ?    Ss    Jan08    0:00    23:45:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:29    [psimon]    <noArgs>
root    560    0.0    0.0    8388    6052    ?    Ss    Jan08    0:01    23:45:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:45:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:45:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:45:26    dhcpcd:    [DHCP6_proxy]_fe80::cf65:7eaf:ee22:f5f7
dhcpcd    648    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:45:22    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7080    ?    Ssl    Jan08    0:00    23:45:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2692    ?    Ss    Jan08    0:00    23:45:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9948    6528    ?    Ss    Jan08    0:00    23:45:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382480    10040    ?    Ssl    Jan08    0:01    23:45:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3916    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18464    9156    ?    Ss    Jan08    0:00    23:45:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    785    0.0    0.2    336460    19092    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/NetworkManager    --no-daemon
root    808    0.0    0.1    391064    12384    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/ModemManager    <noArgs>
root    828    0.0    0.0    381356    7796    ?    Ssl    Jan08    0:00    23:45:21    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.0    18320    4316    ?    S    Jan08    0:00    23:45:21    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.2    1904820    20568    ?    Ssl    Jan08    0:19    23:45:21    /laforge.bin    <noArgs>
xrdp    873    0.0    0.0    15652    2356    ?    S    Jan08    0:00    23:45:21    /usr/sbin/xrdp    <noArgs>
root    875    0.0    1.3    915128    105940    tty7    Ssl+    Jan08    0:02    23:45:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    878    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:45:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.1    169620    8324    ?    Sl    Jan08    0:00    23:45:20    lightdm    --session-child_17_20
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:20    [psimon]    <noArgs>
lightdm    907    0.0    0.1    22876    13064    ?    Ss    Jan08    0:00    23:45:20    /usr/lib/systemd/systemd    --user
lightdm    909    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:45:20    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4748    ?    Ss    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101160    10824    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105308    ?    Ssl    Jan08    0:15    23:45:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479292    16120    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/wireplumber    <noArgs>
lightdm    943    0.0    0.0    84704    5212    ?    Ssl    Jan08    0:00    23:45:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    944    0.0    0.1    98776    8256    ?    S<sl    Jan08    0:00    23:45:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    945    0.0    0.0    21492    3172    ?    SNsl    Jan08    0:00    23:45:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    971    0.0    0.0    381080    7152    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4472    ?    S    Jan08    0:00    23:45:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.0    312816    8036    ?    Ssl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd    <noArgs>
lightdm    998    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5704    ?    S    Jan08    0:00    23:45:19    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7088    ?    Sl    Jan08    0:00    23:45:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    377776    148772    ?    Sl    Jan08    3:19    23:45:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17916    ?    Ss    Jan08    0:04    23:45:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1900    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:44:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1901    0.1    10.5    1414160    857400    ?    Sl    Jan08    1:38    23:44:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    28274    0.0    0.0    0    0    ?    I    Jan08    0:00    20:59:04    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    104047    0.0    0.0    0    0    ?    I    Jan08    0:00    13:00:40    [kworker/u20:0-flush-254:0]    <noArgs>
root    111102    0.0    0.0    0    0    ?    I    Jan08    0:02    12:16:54    [kworker/3:2-events]    <noArgs>
root    122953    0.0    0.0    0    0    ?    I    Jan08    0:00    11:03:14    [kworker/u19:2-flush-254:0]    <noArgs>
root    127080    0.0    0.0    0    0    ?    I    Jan08    0:00    10:38:46    [kworker/u19:0-flush-254:0]    <noArgs>
root    131006    0.0    0.0    0    0    ?    I    Jan08    0:00    10:14:23    [kworker/u19:1-flush-254:0]    <noArgs>
root    160702    0.0    0.0    0    0    ?    I    02:44    0:00    07:06:06    [kworker/u18:0-flush-254:0]    <noArgs>
root    184403    0.0    0.0    0    0    ?    I    05:10    0:00    04:39:46    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    185384    0.0    0.0    0    0    ?    I    05:18    0:00    04:31:29    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    193696    0.0    0.0    0    0    ?    I    06:09    0:00    03:40:47    [kworker/u20:1-flush-254:0]    <noArgs>
root    220257    0.0    0.0    0    0    ?    I    08:56    0:00    53:34    [kworker/u17:2-events_unbound]    <noArgs>
root    227598    0.0    0.0    0    0    ?    I    09:42    0:00    07:23    [kworker/3:0-ata_sff]    <noArgs>
root    227704    0.0    0.0    0    0    ?    I    09:44    0:00    06:14    [kworker/0:0-ata_sff]    <noArgs>
root    227720    0.0    0.0    0    0    ?    I    09:44    0:00    06:06    [kworker/2:0-ata_sff]    <noArgs>
root    227736    0.0    0.0    0    0    ?    I    09:44    0:00    05:54    [kworker/1:0-ata_sff]    <noArgs>
root    228288    0.0    0.0    0    0    ?    I    09:48    0:00    02:12    [kworker/3:1-ata_sff]    <noArgs>
xrdp    228380    0.8    0.4    61852    32544    ?    S    09:49    0:00    01:12    /usr/sbin/xrdp    <noArgs>
root    228396    0.0    0.0    0    0    ?    I    09:49    0:00    01:04    [kworker/0:1-ata_sff]    <noArgs>
root    228427    0.0    0.0    0    0    ?    I    09:49    0:00    00:44    [kworker/2:1-ata_sff]    <noArgs>
root    228446    0.0    0.0    18320    4376    ?    S    09:49    0:00    00:39    /usr/sbin/xrdp-sesman    <noArgs>
pentester    228449    0.3    0.1    22916    13280    ?    Ss    09:49    0:00    00:39    /usr/lib/systemd/systemd    --user
pentester    228451    0.0    0.0    22592    3864    ?    S    09:49    0:00    00:39    (sd-pam)    <noArgs>
pentester    228471    0.4    0.0    8884    5600    ?    Ss    09:49    0:00    00:39    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    228472    0.0    0.0    97376    8016    ?    Ssl    09:49    0:00    00:39    /usr/bin/pipewire    <noArgs>
pentester    228473    0.8    1.2    630544    97916    ?    Sl    09:49    0:00    00:39    xfce4-session    <noArgs>
pentester    228474    1.6    1.6    386640    135328    ?    Sl    09:49    0:00    00:39    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    228477    0.0    0.0    7212    3456    ?    Ss    09:49    0:00    00:39    /usr/bin/mpris-proxy    <noArgs>
pentester    228478    0.1    0.1    399536    14336    ?    Ssl    09:49    0:00    00:39    /usr/bin/wireplumber    <noArgs>
pentester    228479    0.0    0.0    84704    5296    ?    Ssl    09:49    0:00    00:39    /usr/bin/pipewire    -c_filter-chain.conf
pentester    228480    0.0    0.1    99176    8904    ?    Ssl    09:49    0:00    00:39    /usr/bin/pipewire-pulse    <noArgs>
pentester    228503    0.0    0.0    95084    6280    ?    Sl    09:49    0:00    00:39    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    228580    0.0    0.0    10688    1840    ?    Ss    09:49    0:00    00:38    /usr/bin/ssh-agent    x-session-manager
pentester    228591    0.0    0.0    381172    7820    ?    Ssl    09:49    0:00    00:38    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    228598    0.0    0.0    8344    4896    ?    S    09:49    0:00    00:38    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    228602    0.4    0.0    307776    6524    ?    Ssl    09:49    0:00    00:38    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    228609    0.0    0.0    168784    7576    ?    Sl    09:49    0:00    00:38    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    228622    0.0    0.0    155488    3816    ?    SLsl    09:49    0:00    00:38    /usr/bin/gpg-agent    --supervised
root    228623    0.0    0.0    0    0    ?    I    09:49    0:00    00:38    [kworker/u17:1-flush-254:0]    <noArgs>
pentester    228626    1.2    0.5    297308    48372    ?    Sl    09:49    0:00    00:38    xfwm4    <noArgs>
pentester    228631    0.0    0.0    312816    8112    ?    Ssl    09:49    0:00    00:38    /usr/libexec/gvfsd    <noArgs>
pentester    228637    0.0    0.0    398408    7504    ?    Sl    09:49    0:00    00:38    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    228646    0.3    0.3    348408    26760    ?    Sl    09:49    0:00    00:38    xfsettingsd    <noArgs>
pentester    228652    0.0    0.0    165276    5968    ?    Ssl    09:49    0:00    00:37    /usr/libexec/dconf-service    <noArgs>
pentester    228653    1.2    0.6    515208    52684    ?    Sl    09:49    0:00    00:37    xfce4-panel    <noArgs>
pentester    228662    0.2    0.3    485792    26348    ?    Sl    09:49    0:00    00:37    Thunar    --daemon
pentester    228675    1.4    0.8    663288    69432    ?    Sl    09:49    0:00    00:37    xfdesktop    <noArgs>
pentester    228680    0.4    0.5    428300    42652    ?    Sl    09:49    0:00    00:37    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    228685    0.0    0.0    7180    3316    ?    S    09:49    0:00    00:37    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    228690    0.1    0.2    405604    19316    ?    Sl    09:49    0:00    00:37    xfce4-power-manager    <noArgs>
pentester    228692    0.2    0.4    281548    35428    ?    Sl    09:49    0:00    00:37    xfce4-screensaver    <noArgs>
pentester    228697    0.2    0.4    614696    37444    ?    Sl    09:49    0:00    00:37    diodon    <noArgs>
pentester    228702    0.0    0.0    12432    1916    ?    Ssl    09:49    0:00    00:37    xcape    -e_Super_L_Control_L_Escape
pentester    228704    0.9    0.7    604468    61280    ?    Sl    09:49    0:00    00:37    /usr/bin/python3    /usr/bin/blueman-applet
pentester    228705    0.4    0.5    66232    41044    ?    S    09:49    0:00    00:37    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pcscd    228706    0.1    0.0    257324    7484    ?    Ssl    09:49    0:00    00:37    /usr/sbin/pcscd    --foreground_--auto-exit
pentester    228707    0.1    0.2    416260    21352    ?    Ssl    09:49    0:00    00:37    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    228717    0.0    0.2    265304    18084    ?    Sl    09:49    0:00    00:37    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    228739    0.0    0.0    308560    6532    ?    Sl    09:49    0:00    00:37    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    228743    0.1    0.1    922612    9120    ?    Sl    09:49    0:00    00:37    xiccd    <noArgs>
pentester    228770    0.2    0.5    586932    43236    ?    Sl    09:49    0:00    00:37    nm-applet    <noArgs>
colord    228781    0.3    0.1    317072    15200    ?    Ssl    09:49    0:00    00:37    /usr/libexec/colord    <noArgs>
pentester    228782    0.2    0.3    282404    28252    ?    SNsl    09:49    0:00    00:37    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
root    228800    0.1    0.1    318516    10248    ?    Ssl    09:49    0:00    00:37    /usr/libexec/upowerd    <noArgs>
pentester    228822    0.0    0.0    95896    7652    ?    Sl    09:49    0:00    00:37    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
pentester    228852    0.0    0.1    457844    8872    ?    Ssl    09:49    0:00    00:37    /usr/bin/zeitgeist-daemon    <noArgs>
pentester    228881    0.4    0.7    310940    61528    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    228882    0.2    0.4    499532    37768    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    228883    0.4    0.3    272796    29152    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    228884    0.2    0.4    359160    39252    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    228886    0.2    0.4    425196    37432    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    228888    0.2    0.4    286068    37388    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    228904    0.0    0.1    349660    13004    ?    Ssl    09:49    0:00    00:36    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    228905    0.2    0.4    425472    37576    ?    Sl    09:49    0:00    00:36    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    228989    0.0    0.1    538332    11664    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    228993    0.0    0.1    478372    14144    ?    Ssl    09:49    0:00    00:35    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    229013    0.0    0.0    307864    6708    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    229018    0.0    0.0    308884    7204    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    229023    0.0    0.0    307916    6744    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    229028    0.0    0.1    389944    8936    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    229042    0.0    0.0    168868    6656    ?    Ssl    09:49    0:00    00:35    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    229046    0.0    0.1    534256    9248    ?    Sl    09:49    0:00    00:35    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    229066    0.0    0.0    0    0    ?    I    09:49    0:00    00:34    [kworker/1:2-ata_sff]    <noArgs>
root    229442    0.0    0.0    2688    1828    ?    S    09:50    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    229443    0.0    0.0    2688    1872    ?    S    09:50    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    229464    0.0    0.0    5624    2148    ?    S    09:50    0:00    00:09    iostat    -xky_60_1
root    229465    0.0    0.0    5592    1912    ?    S    09:50    0:00    00:09    tee    /dev/null
root    229466    0.0    0.0    9472    3896    ?    S    09:50    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
pentester    229515    0.0    0.0    5588    2044    ?    S    09:50    0:00    00:07    sleep    10
pentester    229598    0.3    0.2    265808    18272    ?    Sl    09:50    0:00    00:05    /usr/bin/xfce4-mime-helper    --launch_TerminalEmulator
pentester    229603    3.2    0.7    802748    64960    ?    Sl    09:50    0:00    00:05    /usr/bin/qterminal    <noArgs>
pentester    229606    0.5    0.2    557012    19972    ?    Ssl    09:50    0:00    00:05    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    229611    0.0    0.0    308740    6384    ?    Ssl    09:50    0:00    00:05    /usr/libexec/xdg-permission-store    <noArgs>
pentester    229620    0.0    0.0    539704    6980    ?    Ssl    09:50    0:00    00:05    /usr/libexec/xdg-document-portal    <noArgs>
root    229626    0.0    0.0    2592    2020    ?    Ss    09:50    0:00    00:05    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    229630    0.5    0.2    479576    19444    ?    Ssl    09:50    0:00    00:05    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    229641    12.7    0.0    10328    6344    pts/0    Ss+    09:50    0:00    00:05    /usr/bin/zsh    <noArgs>
root    229753    0.0    0.0    2688    1752    ?    S    09:50    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229754    0.0    0.0    2688    1832    ?    S    09:50    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    229775    0.0    0.0    9504    4272    ?    R    09:50    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    229776    0.0    0.0    5592    1940    ?    S    09:50    0:00    00:00    tee    /dev/null
root    229777    0.0    0.0    9472    4076    ?    S    09:50    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15120    ?    Ss    Jan08    0:02    23:45:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:45:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [oom_reaper]    <noArgs>
root    54    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:34    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:45:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:45:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:34    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:34    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:45:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/u25:0]    <noArgs>
root    173    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/2:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:33    [kworker/0:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I    Jan08    0:04    23:45:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    241    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [scsi_eh_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:32    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I    Jan08    0:05    23:45:32    [kworker/0:2-events]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:45:32    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:31    [hwrng]    <noArgs>
root    379    0.0    0.2    41988    20604    ?    Ss    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7464    ?    Ssl    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37452    12236    ?    Ss    Jan08    0:00    23:45:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    425    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:30    [psimon]    <noArgs>
root    552    0.0    0.0    8388    6380    ?    Ss    Jan08    0:01    23:45:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    603    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:45:29    dhcpcd:    eth0_[ip4]_[ip6]
root    604    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    605    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2144    ?    S    Jan08    0:00    23:45:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:45:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10540    2220    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    626    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:45:28    dhcpcd:    [DHCP6_proxy]_fe80::ee37:fe60:99d6:8a36
dhcpcd    645    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:45:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    738    0.0    0.0    309036    7140    ?    Ssl    Jan08    0:00    23:45:23    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2684    ?    Ss    Jan08    0:00    23:45:23    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9072    5508    ?    Ss    Jan08    0:00    23:45:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9732    ?    Ssl    Jan08    0:01    23:45:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    745    0.0    0.0    80876    3960    ?    Ssl    Jan08    0:00    23:45:23    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    8808    ?    Ss    Jan08    0:00    23:45:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    771    0.0    0.2    336440    19048    ?    Ssl    Jan08    0:00    23:45:23    /usr/sbin/NetworkManager    --no-daemon
root    802    0.0    0.1    391060    12396    ?    Ssl    Jan08    0:00    23:45:23    /usr/sbin/ModemManager    <noArgs>
root    826    0.0    0.0    381356    7788    ?    Ssl    Jan08    0:00    23:45:22    /usr/sbin/lightdm    <noArgs>
root    832    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp-sesman    <noArgs>
root    844    0.0    0.2    1978808    20764    ?    Ssl    Jan08    0:20    23:45:22    /laforge.bin    <noArgs>
xrdp    861    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:45:22    /usr/sbin/xrdp    <noArgs>
root    870    0.0    1.2    915132    104260    tty7    Ssl+    Jan08    0:02    23:45:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    872    0.0    0.0    8124    2600    tty1    Ss+    Jan08    0:00    23:45:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    893    0.0    0.0    169620    8112    ?    Sl    Jan08    0:00    23:45:21    lightdm    --session-child_17_20
lightdm    901    0.0    0.1    22636    13060    ?    Ss    Jan08    0:00    23:45:21    /usr/lib/systemd/systemd    --user
root    902    0.0    0.0    0    0    ?    S    Jan08    0:00    23:45:21    [psimon]    <noArgs>
lightdm    905    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:45:21    (sd-pam)    <noArgs>
lightdm    926    0.0    0.0    8348    4660    ?    Ss    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    927    0.0    0.1    101224    10668    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire    <noArgs>
lightdm    928    0.0    1.2    666648    105576    ?    Ssl    Jan08    0:17    23:45:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    929    0.0    0.1    479272    15900    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/wireplumber    <noArgs>
lightdm    931    0.0    0.0    84704    5144    ?    Ssl    Jan08    0:00    23:45:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    932    0.0    0.1    98776    8272    ?    S<sl    Jan08    0:00    23:45:21    /usr/bin/pipewire-pulse    <noArgs>
rtkit    933    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:45:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    954    0.0    0.0    381080    7068    ?    Ssl    Jan08    0:00    23:45:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    962    0.0    0.0    8208    4436    ?    S    Jan08    0:00    23:45:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    966    0.0    0.0    312816    8068    ?    Ssl    Jan08    0:00    23:45:21    /usr/libexec/gvfsd    <noArgs>
lightdm    976    0.0    0.0    398408    7208    ?    Sl    Jan08    0:00    23:45:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1015    0.0    0.0    14372    5804    ?    S    Jan08    0:00    23:45:20    lightdm    --session-child_13_20
lightdm    1017    0.0    0.0    168772    7092    ?    Sl    Jan08    0:00    23:45:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1055    0.2    1.8    377776    151472    ?    Sl    Jan08    3:44    23:45:19    splunkd    -p_8089_start
root    1058    0.0    0.2    135648    17956    ?    Ss    Jan08    0:04    23:45:19    [splunkd    pid=1055]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:44:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.3    1414160    841340    ?    Sl    Jan08    2:05    23:44:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    44943    0.0    0.0    0    0    ?    I    Jan08    0:00    19:14:06    [kworker/u19:0-flush-254:0]    <noArgs>
root    119047    0.0    0.0    0    0    ?    I    Jan08    0:00    11:29:42    [kworker/u18:0-writeback]    <noArgs>
root    131034    0.0    0.0    0    0    ?    I    Jan08    0:00    10:13:58    [kworker/u20:0-flush-254:0]    <noArgs>
root    166005    0.0    0.0    0    0    ?    I    03:16    0:00    06:33:17    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    183617    0.0    0.0    0    0    ?    I    05:05    0:00    04:44:31    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    188754    0.0    0.0    0    0    ?    I    05:39    0:00    04:10:23    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    193587    0.0    0.0    0    0    ?    I    06:09    0:00    03:40:34    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    195614    0.0    0.0    0    0    ?    I    06:20    0:00    03:28:57    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    209897    0.0    0.0    0    0    ?    I    07:50    0:00    01:59:17    [kworker/3:1-events]    <noArgs>
root    213045    0.0    0.0    0    0    ?    I    08:10    0:00    01:39:44    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    223503    0.0    0.0    0    0    ?    I    09:17    0:00    32:31    [kworker/u18:1-events_unbound]    <noArgs>
root    226592    0.0    0.0    0    0    ?    I    09:35    0:00    14:34    [kworker/u17:2]    <noArgs>
root    227377    0.0    0.0    0    0    ?    I    09:40    0:00    09:05    [kworker/0:0-ata_sff]    <noArgs>
root    227393    0.0    0.0    0    0    ?    I    09:40    0:00    09:01    [kworker/3:0-ata_sff]    <noArgs>
root    227409    0.0    0.0    0    0    ?    I    09:41    0:00    08:46    [kworker/2:0-ata_sff]    <noArgs>
root    227590    0.0    0.0    0    0    ?    I    09:43    0:00    06:52    [kworker/1:0-ata_sff]    <noArgs>
root    228082    0.0    0.0    0    0    ?    I    09:46    0:00    03:52    [kworker/3:2-ata_sff]    <noArgs>
root    228098    0.0    0.0    0    0    ?    I    09:46    0:00    03:42    [kworker/0:1-ata_sff]    <noArgs>
root    228099    0.0    0.0    0    0    ?    I    09:46    0:00    03:36    [kworker/2:1-ata_sff]    <noArgs>
root    228280    0.0    0.0    0    0    ?    I    09:48    0:00    01:37    [kworker/1:2-ata_sff]    <noArgs>
root    228546    0.0    0.0    2688    1768    ?    S    09:49    0:00    00:10    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228547    0.0    0.0    2688    1788    ?    S    09:49    0:00    00:10    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    228568    0.0    0.0    5624    2296    ?    S    09:49    0:00    00:10    iostat    -xky_60_1
root    228569    0.0    0.0    5592    1988    ?    S    09:49    0:00    00:10    tee    /dev/null
root    228570    0.0    0.0    9472    4028    ?    S    09:49    0:00    00:10    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    228695    0.0    0.0    2688    1760    ?    S    09:49    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228696    0.0    0.0    2688    1836    ?    S    09:49    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228717    0.0    0.0    9372    4220    ?    R    09:49    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    228718    0.0    0.0    5592    1928    ?    S    09:49    0:00    00:00    tee    /dev/null
root    228719    0.0    0.0    9472    4016    ?    S    09:49    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}