_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    15540    ?    Ss    Jan08    0:02    23:55:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:55:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:32    [kworker/1:0-mm_percpu_wq]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:31    [kworker/u16:1-netns]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/3:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/0:1H-kblockd]    <noArgs>
root    235    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:31    [kworker/3:2-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:30    [hwrng]    <noArgs>
root    384    0.0    0.3    50356    25012    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    417    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    422    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    430    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    7008    ?    Ss    Jan08    0:01    23:55:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    610    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:55:28    dhcpcd:    eth0_[ip4]_[ip6]
root    611    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-rpciod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-xprtiod]    <noArgs>
root    621    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    631    0.0    0.0    10536    2160    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    632    0.0    0.0    10536    2352    ?    S    Jan08    0:00    23:55:25    dhcpcd:    [DHCP6_proxy]_fe80::f226:d368:d6f7:dc65
dhcpcd    651    0.0    0.0    10536    2288    ?    S    Jan08    0:00    23:55:21    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    744    0.0    0.0    309036    7036    ?    Ssl    Jan08    0:00    23:55:21    /usr/libexec/accounts-daemon    <noArgs>
root    746    0.0    0.0    6876    2764    ?    Ss    Jan08    0:00    23:55:21    /usr/sbin/cron    -f
messagebus    747    0.0    0.0    10080    6600    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382480    9976    ?    Ssl    Jan08    0:01    23:55:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3912    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18476    9172    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336472    19020    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    814    0.0    0.1    391060    12384    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    842    0.0    0.0    381356    7624    ?    Ssl    Jan08    0:00    23:55:20    /usr/sbin/lightdm    <noArgs>
root    844    0.0    0.0    18320    4284    ?    S    Jan08    0:00    23:55:20    /usr/sbin/xrdp-sesman    <noArgs>
root    854    0.0    0.2    1905076    20224    ?    Ssl    Jan08    0:19    23:55:20    /laforge.bin    <noArgs>
root    881    0.0    1.2    915128    104504    tty7    Ssl+    Jan08    0:02    23:55:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
xrdp    882    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:55:20    /usr/sbin/xrdp    <noArgs>
root    883    0.0    0.0    8124    2720    tty1    Ss+    Jan08    0:00    23:55:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169620    8260    ?    Sl    Jan08    0:00    23:55:19    lightdm    --session-child_17_20
lightdm    910    0.0    0.1    22888    13168    ?    Ss    Jan08    0:00    23:55:19    /usr/lib/systemd/systemd    --user
root    911    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:19    [psimon]    <noArgs>
lightdm    914    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:55:19    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8216    4680    ?    Ss    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101224    10728    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.3    666648    105844    ?    Ssl    Jan08    0:16    23:55:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479288    15992    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/wireplumber    <noArgs>
lightdm    944    0.0    0.0    84704    5108    ?    Ssl    Jan08    0:00    23:55:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    945    0.0    0.1    98776    8328    ?    S<sl    Jan08    0:00    23:55:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    946    0.0    0.0    21492    3088    ?    SNsl    Jan08    0:00    23:55:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    971    0.0    0.0    381080    7180    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:55:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.1    312816    8164    ?    Ssl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd    <noArgs>
lightdm    997    0.0    0.0    398408    7428    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5740    ?    S    Jan08    0:00    23:55:18    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7040    ?    Sl    Jan08    0:00    23:55:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    377776    150884    ?    Sl    Jan08    3:32    23:55:17    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    17992    ?    Ss    Jan08    0:04    23:55:17    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1901    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:54:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1902    0.1    10.3    1414160    840520    ?    Sl    Jan08    1:47    23:54:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    11543    0.0    0.0    0    0    ?    I    Jan08    0:00    22:54:30    [kworker/u20:0-flush-254:0]    <noArgs>
root    116793    0.0    0.0    0    0    ?    I    Jan08    0:00    11:53:55    [kworker/u19:0-events_unbound]    <noArgs>
root    167016    0.0    0.0    0    0    ?    I    03:18    0:00    06:38:44    [kworker/u18:1-events_unbound]    <noArgs>
root    169244    0.0    0.0    0    0    ?    I    03:33    0:00    06:24:34    [kworker/u17:1-events_unbound]    <noArgs>
root    191842    0.0    0.0    0    0    ?    I    05:57    0:00    04:00:11    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    198825    0.0    0.0    0    0    ?    I    06:39    0:00    03:18:34    [kworker/u18:0-flush-254:0]    <noArgs>
root    199700    0.0    0.0    0    0    ?    I    06:46    0:00    03:11:22    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    202954    0.0    0.0    0    0    ?    I    07:04    0:00    02:53:38    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    219486    0.0    0.0    0    0    ?    I    08:48    0:00    01:09:32    [kworker/u20:1-events_unbound]    <noArgs>
root    228442    0.0    0.0    0    0    ?    I    09:47    0:00    10:38    [kworker/u19:2-writeback]    <noArgs>
root    229025    0.0    0.0    0    0    ?    I    09:48    0:00    09:36    [kworker/2:2-ata_sff]    <noArgs>
root    229037    0.0    0.0    0    0    ?    I    09:48    0:00    09:32    [kworker/u20:2-events_unbound]    <noArgs>
root    229065    0.0    0.0    0    0    ?    I    09:48    0:00    09:28    [kworker/1:2-ata_sff]    <noArgs>
root    229286    0.0    0.0    0    0    ?    I    09:50    0:00    07:01    [kworker/0:2-ata_sff]    <noArgs>
root    229332    0.0    0.0    0    0    ?    I    09:51    0:00    06:35    [kworker/3:1-ata_sff]    <noArgs>
root    229790    0.0    0.0    0    0    ?    I    09:53    0:00    03:53    [kworker/2:0-ata_sff]    <noArgs>
xrdp    229882    5.1    0.5    63528    42772    ?    S    09:54    0:09    02:56    /usr/sbin/xrdp    <noArgs>
root    229883    0.0    0.0    0    0    ?    I    09:54    0:00    02:51    [kworker/1:1-ata_sff]    <noArgs>
root    229966    0.0    0.0    18320    4328    ?    S    09:55    0:00    02:02    /usr/sbin/xrdp-sesman    <noArgs>
pentester    229969    0.1    0.1    23088    13412    ?    Ss    09:55    0:00    02:02    /usr/lib/systemd/systemd    --user
pentester    229971    0.0    0.0    22592    3836    ?    S    09:55    0:00    02:02    (sd-pam)    <noArgs>
pentester    229991    0.1    0.0    8908    5604    ?    Ss    09:55    0:00    02:01    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
pentester    229992    0.0    0.0    97392    8068    ?    Ssl    09:55    0:00    02:01    /usr/bin/pipewire    <noArgs>
pentester    229993    0.9    1.2    630548    98068    ?    Sl    09:55    0:01    02:01    xfce4-session    <noArgs>
pentester    229994    5.2    2.0    442644    165016    ?    Sl    09:55    0:06    02:01    /usr/lib/xorg/Xorg    :10_-auth_.Xauthority_-config_xrdp/xorg.conf_-noreset_-nolisten_tcp_-logfile_.xorgxrdp.%s.log
pentester    229997    0.0    0.0    7212    3536    ?    Ss    09:55    0:00    02:01    /usr/bin/mpris-proxy    <noArgs>
pentester    229998    0.0    0.1    399588    14248    ?    Ssl    09:55    0:00    02:01    /usr/bin/wireplumber    <noArgs>
pentester    229999    0.0    0.0    84704    5312    ?    Ssl    09:55    0:00    02:01    /usr/bin/pipewire    -c_filter-chain.conf
pentester    230000    0.0    0.1    99176    8992    ?    Ssl    09:55    0:00    02:01    /usr/bin/pipewire-pulse    <noArgs>
pentester    230023    0.0    0.0    95084    6156    ?    Sl    09:55    0:00    02:01    /usr/sbin/xrdp-chansrv    <noArgs>
pentester    230100    0.0    0.0    10688    1856    ?    Ss    09:55    0:00    02:01    /usr/bin/ssh-agent    x-session-manager
pentester    230111    0.0    0.0    381172    7724    ?    Ssl    09:55    0:00    02:01    /usr/libexec/at-spi-bus-launcher    <noArgs>
pentester    230118    0.0    0.0    8340    4760    ?    S    09:55    0:00    02:01    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/1001/at-spi/bus_10.0
pentester    230122    0.1    0.0    307776    6712    ?    Ssl    09:55    0:00    02:01    /usr/lib/x86_64-linux-gnu/xfce4/xfconf/xfconfd    <noArgs>
pentester    230129    0.0    0.0    168784    7832    ?    Sl    09:55    0:00    02:01    /usr/libexec/at-spi2-registryd    --use-gnome-session
pentester    230142    0.0    0.0    155488    3656    ?    SLsl    09:55    0:00    02:01    /usr/bin/gpg-agent    --supervised
pentester    230145    1.4    0.5    297312    48440    ?    Sl    09:55    0:01    02:01    xfwm4    <noArgs>
pentester    230150    0.0    0.0    312816    8080    ?    Ssl    09:55    0:00    02:01    /usr/libexec/gvfsd    <noArgs>
pentester    230156    0.0    0.0    398408    7540    ?    Sl    09:55    0:00    02:01    /usr/libexec/gvfsd-fuse    /run/user/1001/gvfs_-f
pentester    230180    0.1    0.3    348404    27324    ?    Sl    09:55    0:00    02:00    xfsettingsd    <noArgs>
pentester    230186    0.0    0.0    165276    5928    ?    Ssl    09:55    0:00    02:00    /usr/libexec/dconf-service    <noArgs>
pentester    230187    1.9    0.6    516192    53504    ?    Sl    09:55    0:02    02:00    xfce4-panel    <noArgs>
pentester    230196    0.0    0.3    420260    26332    ?    Sl    09:55    0:00    02:00    Thunar    --daemon
pentester    230209    4.7    1.1    710140    91460    ?    Sl    09:55    0:05    02:00    xfdesktop    <noArgs>
pentester    230214    0.9    0.5    428300    42724    ?    Sl    09:55    0:01    02:00    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libwhiskermenu.so_1_14680071_whiskermenu_Whisker_Menu_Show_a_menu_to_easily_access_installed_applications
pentester    230219    0.0    0.0    7180    3536    ?    S    09:55    0:00    02:00    /bin/bash    /usr/local/bin/log_wintitles.sh
pentester    230224    0.0    0.2    405608    19600    ?    Sl    09:55    0:00    02:00    xfce4-power-manager    <noArgs>
pentester    230225    0.9    0.4    281552    35448    ?    Sl    09:55    0:01    02:00    xfce4-screensaver    <noArgs>
pentester    230234    0.3    0.4    532772    37656    ?    Sl    09:55    0:00    02:00    diodon    <noArgs>
pentester    230235    0.0    0.0    12432    2000    ?    Ssl    09:55    0:00    02:00    xcape    -e_Super_L_Control_L_Escape
pentester    230239    2.3    0.7    678200    61384    ?    Sl    09:55    0:02    02:00    /usr/bin/python3    /usr/bin/blueman-applet
pentester    230244    1.0    0.5    66232    41048    ?    S    09:55    0:01    02:00    /usr/bin/python3    /usr/share/system-config-printer/applet.py
pentester    230248    0.2    0.2    416260    21616    ?    Ssl    09:55    0:00    02:00    /usr/lib/x86_64-linux-gnu/xfce4/notifyd/xfce4-notifyd    <noArgs>
pentester    230260    0.1    0.2    265304    18444    ?    Sl    09:55    0:00    01:59    /usr/libexec/polkit-mate-authentication-agent-1    <noArgs>
pentester    230265    1.1    0.3    282404    28044    ?    SNsl    09:55    0:01    01:59    /usr/lib/x86_64-linux-gnu/tumbler-1/tumblerd    <noArgs>
pentester    230268    0.0    0.0    308560    6808    ?    Sl    09:55    0:00    01:59    /usr/libexec/geoclue-2.0/demos/agent    <noArgs>
pentester    230269    0.4    0.1    529396    9292    ?    Sl    09:55    0:00    01:59    xiccd    <noArgs>
pentester    230289    1.5    0.5    586932    43120    ?    Sl    09:55    0:01    01:59    nm-applet    <noArgs>
colord    230298    1.0    0.1    317060    15304    ?    Ssl    09:55    0:01    01:59    /usr/libexec/colord    <noArgs>
pentester    230323    0.2    0.1    458428    9824    ?    Ssl    09:55    0:00    01:58    /usr/bin/zeitgeist-daemon    <noArgs>
root    230324    0.1    0.0    0    0    ?    I    09:55    0:00    01:57    [kworker/u20:3-ext4-rsv-conversion]    <noArgs>
pentester    230352    0.5    0.2    352692    20332    ?    Ssl    09:55    0:00    01:56    /usr/lib/zeitgeist/zeitgeist-fts    <noArgs>
pentester    230371    0.0    0.0    95896    7600    ?    Sl    09:55    0:00    01:56    pw-cli    -m_-d_load-module_libpipewire-module-xrdp_sink.node.latency=2048_sink.stream.props={node.name=xrdp-sink}_source.stream.props={node.name=xrdp-source}
root    230383    0.4    0.1    318516    10112    ?    Ssl    09:55    0:00    01:56    /usr/libexec/upowerd    <noArgs>
pentester    230426    2.2    0.7    310940    61912    ?    Sl    09:55    0:02    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libcpugraph.so_13_14680076_cpugraph_CPU_Graph_Graphical_representation_of_the_CPU_load
pentester    230432    1.5    0.4    499532    38360    ?    Sl    09:55    0:01    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libsystray.so_14_14680077_systray_Status_Tray_Plugin_Provides_status_notifier_items_(application_indicators)_and_legacy_systray_items
pentester    230433    1.5    0.3    272796    28940    ?    Sl    09:55    0:01    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libgenmon.so_15_14680078_genmon_Generic_Monitor_Show_output_of_a_command.
pentester    230434    0.7    0.4    359160    39340    ?    Sl    09:55    0:00    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libpulseaudio-plugin.so_16_14680079_pulseaudio_PulseAudio_Plugin_Adjust_the_audio_volume_of_the_PulseAudio_sound_system
pentester    230435    0.8    0.4    425196    37488    ?    Sl    09:55    0:00    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libnotification-plugin.so_17_14680080_notification-plugin_Notification_Plugin_Notification_plugin_for_the_Xfce_panel
pentester    230449    0.7    0.4    286016    37612    ?    Sl    09:55    0:00    01:54    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libxfce4powermanager.so_18_14680081_power-manager-plugin_Power_Manager_Plugin_Display_the_battery_levels_of_your_devices_and_control_the_brightness_of_your_display
pentester    230471    1.0    0.4    425472    37828    ?    Sl    09:55    0:01    01:53    /usr/lib/x86_64-linux-gnu/xfce4/panel/wrapper-2.0    /usr/lib/x86_64-linux-gnu/xfce4/panel/plugins/libactions.so_22_14680082_actions_Action_Buttons_Log_out,_lock_or_other_system_actions
pentester    230589    0.0    0.1    538332    11688    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfs-udisks2-volume-monitor    <noArgs>
root    230593    0.0    0.1    478372    14232    ?    Ssl    09:55    0:00    01:43    /usr/libexec/udisks2/udisksd    <noArgs>
pentester    230605    0.0    0.0    307864    6524    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfs-goa-volume-monitor    <noArgs>
pentester    230610    0.0    0.0    308884    7100    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfs-gphoto2-volume-monitor    <noArgs>
pentester    230615    0.0    0.0    307916    6768    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfs-mtp-volume-monitor    <noArgs>
pentester    230620    0.0    0.1    389944    8816    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfs-afc-volume-monitor    <noArgs>
pentester    230634    0.0    0.0    168868    6612    ?    Ssl    09:55    0:00    01:43    /usr/libexec/gvfsd-metadata    <noArgs>
pentester    230638    0.0    0.1    534256    9208    ?    Sl    09:55    0:00    01:43    /usr/libexec/gvfsd-trash    --spawner_:1.21_/org/gtk/gvfs/exec_spaw/0
root    230717    0.0    0.0    0    0    ?    I    09:56    0:00    01:37    [kworker/0:0-ata_sff]    <noArgs>
pentester    230745    2.8    0.7    793528    57260    ?    Sl    09:56    0:02    01:35    /usr/bin/qterminal    <noArgs>
pentester    230756    0.4    0.2    557012    19880    ?    Ssl    09:56    0:00    01:34    /usr/libexec/xdg-desktop-portal    <noArgs>
pentester    230761    0.1    0.0    308740    6668    ?    Ssl    09:56    0:00    01:34    /usr/libexec/xdg-permission-store    <noArgs>
pentester    230778    0.0    0.0    539704    7040    ?    Ssl    09:56    0:00    01:34    /usr/libexec/xdg-document-portal    <noArgs>
root    230784    0.0    0.0    2592    2008    ?    Ss    09:56    0:00    01:34    fusermount3    -o_rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal_--_/run/user/1001/doc
pentester    230789    0.5    0.2    479576    19972    ?    Ssl    09:56    0:00    01:34    /usr/libexec/xdg-desktop-portal-gtk    <noArgs>
pentester    230799    2.4    0.0    10504    6596    pts/0    Ss+    09:56    0:02    01:33    /usr/bin/zsh    <noArgs>
pentester    230990    103    5.5    3160064    452736    ?    Sl    09:56    1:23    01:20    /usr/lib/firefox-esr/firefox-esr    <noArgs>
pentester    231006    0.0    0.0    20868    3124    ?    Sl    09:56    0:00    01:19    /usr/lib/firefox-esr/crashhelper    230990_9_/tmp/_11
root    231046    0.0    0.0    0    0    ?    I    09:56    0:00    01:17    [kworker/3:0-events_freezable_pwr_efficient]    <noArgs>
pentester    231133    0.9    0.5    235304    43244    ?    Sl    09:56    0:00    01:12    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:26899_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{79f4f715-727f-47f1-bb87-9969900de0a4}_-parentPid_230990_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_1_socket
pentester    231239    3.3    1.3    2471596    107396    ?    Sl    09:56    0:02    01:07    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:27829_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{97c3280c-bc13-497b-9dfb-10d145dc3cb0}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_2_tab
pentester    231245    0.4    0.6    373104    49984    ?    Sl    09:56    0:00    01:06    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-prefsHandle_0:27874_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{d2d9e32d-c3eb-4cc1-9ab4-62d4610b983d}_-parentPid_230990_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_3_rdd
pentester    231321    8.8    1.4    2482732    121048    ?    Sl    09:56    0:05    01:04    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:28089_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{276a7368-3eee-4055-a4e1-1ff8fe706620}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_4_tab
pentester    231495    6.7    2.6    2555660    213324    ?    Sl    09:56    0:03    00:53    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:36993_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{483925c9-5be9-4f48-8e83-729d7805c246}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_6_tab
pentester    231555    0.2    0.4    232408    40464    ?    Sl    09:56    0:00    00:52    /usr/lib/firefox-esr/firefox-esr    -contentproc_-parentBuildID_20251106203603_-sandboxingKind_0_-prefsHandle_0:39222_-prefMapHandle_1:268701_-sandboxReporter_2_-chrootClient_3_-ipcHandle_4_-initialChannelId_{644d56e5-bc2f-4690-bb54-1b71658e3a03}_-parentPid_230990_-crashReporter_5_-crashHelper_6_-appDir_/usr/lib/firefox-esr/browser_7_utility
pentester    231561    0.1    0.9    2429912    79204    ?    Sl    09:56    0:00    00:52    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:37546_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{d90e134b-3e71-40a5-938f-7445a1e33100}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_8_tab
pentester    231590    4.1    1.6    2497820    136688    ?    Sl    09:56    0:02    00:51    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:39660_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{fb7844f6-e6b7-4431-b1d3-37ef2859db78}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_9_tab
pentester    231822    3.2    0.9    2430540    80496    ?    Sl    09:57    0:01    00:39    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:38228_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{51bdf025-a7db-4134-941c-04890805af8f}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_10_tab
pentester    231938    0.3    0.9    2430540    80356    ?    Sl    09:57    0:00    00:30    /usr/lib/firefox-esr/firefox-esr    -contentproc_-isForBrowser_-prefsHandle_0:40800_-prefMapHandle_1:268701_-jsInitHandle_2:242716_-parentBuildID_20251106203603_-sandboxReporter_3_-chrootClient_4_-ipcHandle_5_-initialChannelId_{f4c1d254-8069-4283-8ff5-2c7fd5c45031}_-parentPid_230990_-crashReporter_6_-crashHelper_7_-greomni_/usr/lib/firefox-esr/omni.ja_-appomni_/usr/lib/firefox-esr/browser/omni.ja_-appDir_/usr/lib/firefox-esr/browser_11_tab
pentester    232174    0.0    0.0    5588    2132    ?    S    09:57    0:00    00:09    sleep    10
root    232409    0.0    0.0    2688    1768    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232410    0.0    0.0    2688    1884    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    232431    0.0    0.0    9504    4436    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    232432    0.0    0.0    5592    1884    ?    S    09:57    0:00    00:00    tee    /dev/null
root    232433    0.0    0.0    9472    4088    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24660    14928    ?    Ss    Jan08    0:02    23:55:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:33    [kworker/0:0-events_power_efficient]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/u25:0]    <noArgs>
root    104    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:32    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/1:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/3:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:32    [kworker/2:2-events]    <noArgs>
root    250    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:32    [scsi_eh_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:31    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:31    [hwrng]    <noArgs>
root    373    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:30    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    385    0.0    0.2    41980    20788    ?    Ss    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    418    0.0    0.0    90112    7472    ?    Ssl    Jan08    0:00    23:55:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    422    0.0    0.1    37452    12108    ?    Ss    Jan08    0:00    23:55:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    431    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:29    [psimon]    <noArgs>
root    558    0.0    0.0    8388    6064    ?    Ss    Jan08    0:01    23:55:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10528    4512    ?    S    Jan08    0:00    23:55:28    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10532    2504    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10532    2248    ?    S    Jan08    0:00    23:55:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    631    0.0    0.0    10532    2376    ?    S    Jan08    0:00    23:55:26    dhcpcd:    [DHCP6_proxy]_fe80::d15b:e67f:724e:1eff
dhcpcd    650    0.0    0.0    10532    2312    ?    S    Jan08    0:00    23:55:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    743    0.0    0.0    309036    7204    ?    Ssl    Jan08    0:00    23:55:21    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2788    ?    Ss    Jan08    0:00    23:55:21    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9072    5464    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382300    9804    ?    Ssl    Jan08    0:01    23:55:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    4016    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18260    8812    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    777    0.0    0.2    336460    19000    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391064    12560    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    833    0.0    0.0    381356    7796    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    16356    3632    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp-sesman    <noArgs>
root    860    0.0    0.2    1905076    20308    ?    Ssl    Jan08    0:19    23:55:21    /laforge.bin    <noArgs>
xrdp    870    0.0    0.0    15652    2452    ?    S    Jan08    0:00    23:55:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.2    915128    104400    tty7    Ssl+    Jan08    0:02    23:55:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2496    tty1    Ss+    Jan08    0:00    23:55:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8252    ?    Sl    Jan08    0:00    23:55:20    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:20    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22804    13176    ?    Ss    Jan08    0:00    23:55:20    /usr/lib/systemd/systemd    --user
lightdm    913    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:55:20    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8348    4684    ?    Ss    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101224    10800    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105392    ?    Ssl    Jan08    0:16    23:55:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479292    16004    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/wireplumber    <noArgs>
rtkit    944    0.0    0.0    21492    3236    ?    SNsl    Jan08    0:00    23:55:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    945    0.0    0.0    84704    5100    ?    Ssl    Jan08    0:00    23:55:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    946    0.0    0.1    98776    8320    ?    S<sl    Jan08    0:00    23:55:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    971    0.0    0.0    381080    7268    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    983    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:55:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_11_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7876    ?    Ssl    Jan08    0:00    23:55:20    /usr/libexec/gvfsd    <noArgs>
lightdm    997    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5732    ?    S    Jan08    0:00    23:55:19    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7020    ?    Sl    Jan08    0:00    23:55:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    379824    149328    ?    Sl    Jan08    3:24    23:55:18    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    17892    ?    Ss    Jan08    0:04    23:55:18    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:54:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.2    1414160    832224    ?    Sl    Jan08    1:39    23:54:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    70830    0.0    0.0    0    0    ?    I    Jan08    0:00    16:40:09    [kworker/u19:1-flush-254:0]    <noArgs>
root    95159    0.0    0.0    0    0    ?    I    Jan08    0:02    14:08:32    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    102223    0.0    0.0    0    0    ?    I    Jan08    0:00    13:24:35    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    102350    0.0    0.0    0    0    ?    I    Jan08    0:00    13:23:29    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    186002    0.0    0.0    0    0    ?    I    05:18    0:00    04:39:34    [kworker/u20:2-flush-254:0]    <noArgs>
root    194914    0.0    0.0    0    0    ?    I    06:16    0:00    03:41:08    [kworker/u17:2-flush-254:0]    <noArgs>
root    197895    0.0    0.0    0    0    ?    I    06:33    0:00    03:24:35    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    199416    0.0    0.0    0    0    ?    I    06:44    0:00    03:13:29    [kworker/u19:0-events_unbound]    <noArgs>
root    205255    0.0    0.0    0    0    ?    I    07:18    0:00    02:39:01    [kworker/u18:2-flush-254:0]    <noArgs>
root    207500    0.0    0.0    0    0    ?    I    07:33    0:00    02:24:36    [kworker/u18:0-flush-254:0]    <noArgs>
root    215966    0.0    0.0    0    0    ?    I    08:27    0:00    01:30:04    [kworker/u19:2-flush-254:0]    <noArgs>
root    217105    0.0    0.0    0    0    ?    I    08:33    0:00    01:24:36    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    229095    0.0    0.0    0    0    ?    I    09:48    0:00    09:17    [kworker/0:1-ata_sff]    <noArgs>
root    229171    0.0    0.0    0    0    ?    I    09:49    0:00    08:26    [kworker/3:2-ata_sff]    <noArgs>
root    229248    0.0    0.0    0    0    ?    I    09:50    0:00    07:36    [kworker/1:0-ata_sff]    <noArgs>
root    229384    0.0    0.0    0    0    ?    I    09:51    0:00    06:09    [kworker/2:1-ata_sff]    <noArgs>
root    229812    0.0    0.0    0    0    ?    I    09:53    0:00    03:48    [kworker/0:2-ata_sff]    <noArgs>
root    229858    0.0    0.0    0    0    ?    I    09:54    0:00    03:12    [kworker/3:0-ata_sff]    <noArgs>
root    229938    0.0    0.0    0    0    ?    I    09:55    0:00    02:23    [kworker/1:1-ata_sff]    <noArgs>
xrdp    230000    0.0    0.2    41108    16324    ?    S    09:55    0:00    01:48    /usr/sbin/xrdp    <noArgs>
root    230061    0.0    0.0    0    0    ?    I    09:56    0:00    01:03    [kworker/2:0-ata_sff]    <noArgs>
root    230278    0.0    0.0    2688    1784    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230279    0.0    0.0    2688    1900    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230300    0.0    0.0    9372    4240    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230301    0.0    0.0    5592    1832    ?    S    09:57    0:00    00:00    tee    /dev/null
root    230302    0.0    0.0    9472    3944    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24440    14792    ?    Ss    Jan08    0:02    23:55:26    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:26    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:26    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:26    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [ksoftirqd/3]    <noArgs>
root    41    0.0    0.0    0    0    ?    I    Jan08    0:01    23:55:26    [kworker/u19:0-flush-254:0]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:26    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:25    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:25    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:25    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:25    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:25    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:25    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:55:25    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:25    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:55:25    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:25    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:25    [kworker/1:1-events]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:25    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:25    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:55:24    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/3:1H-kblockd]    <noArgs>
root    219    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/1:1H-kblockd]    <noArgs>
root    232    0.0    0.0    0    0    ?    I    Jan08    0:04    23:55:24    [kworker/2:3-events]    <noArgs>
root    233    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-ata_sff]    <noArgs>
root    234    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:24    [scsi_eh_0]    <noArgs>
root    235    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-scsi_tmf_0]    <noArgs>
root    236    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:24    [scsi_eh_1]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:24    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:55:23    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:23    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:23    [hwrng]    <noArgs>
root    365    0.0    0.0    0    0    ?    I    Jan08    0:05    23:55:22    [kworker/0:2-events]    <noArgs>
root    380    0.0    0.2    41976    20544    ?    Ss    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37588    12080    ?    Ss    Jan08    0:00    23:55:22    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:22    [psimon]    <noArgs>
root    541    0.0    0.0    8388    5600    ?    Ss    Jan08    0:01    23:55:21    /usr/sbin/haveged    --Foreground_--verbose=1
root    554    0.0    0.0    309036    7212    ?    Ssl    Jan08    0:00    23:55:21    /usr/libexec/accounts-daemon    <noArgs>
messagebus    555    0.0    0.0    9068    5588    ?    Ss    Jan08    0:00    23:55:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    556    0.0    0.1    382300    10008    ?    Ssl    Jan08    0:01    23:55:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    558    0.0    0.0    80876    3980    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/qemu-ga    <noArgs>
root    559    0.0    0.1    18492    8760    ?    Ss    Jan08    0:00    23:55:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    593    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/R-rpciod]    <noArgs>
root    594    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/R-xprtiod]    <noArgs>
root    608    0.0    0.0    6876    2824    ?    Ss    Jan08    0:00    23:55:21    /usr/sbin/cron    -f
dhcpcd    629    0.0    0.0    10532    4528    ?    S    Jan08    0:00    23:55:21    dhcpcd:    eth0_[ip4]_[ip6]
root    630    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:55:21    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    631    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:55:21    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    632    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:55:21    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    636    0.0    0.2    336464    18920    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/NetworkManager    --no-daemon
root    643    0.0    0.1    325528    12576    ?    Ssl    Jan08    0:00    23:55:21    /usr/sbin/ModemManager    <noArgs>
root    671    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/R-cfg80211]    <noArgs>
root    690    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:55:21    [kworker/3:2H-kblockd]    <noArgs>
dhcpcd    695    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:55:20    dhcpcd:    [DHCP6_proxy]_fe80::336e:5acb:1c14:e015
dhcpcd    724    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:55:19    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
root    751    0.2    1.8    381872    149616    ?    Sl    Jan08    3:28    23:55:18    splunkd    -p_8089_start
root    753    0.0    0.2    135648    18024    ?    Ss    Jan08    0:04    23:55:18    [splunkd    pid=751]_splunkd_-p_8089_start_[process-runner]
dhcpcd    833    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:55:14    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    897    0.0    0.2    1978552    19960    ?    Ssl    Jan08    0:19    23:55:14    /laforge.bin    <noArgs>
root    911    0.0    0.0    16356    2188    ?    S    Jan08    0:00    23:55:14    /usr/sbin/xrdp-sesman    <noArgs>
root    915    0.0    0.0    381364    7668    ?    Ssl    Jan08    0:00    23:55:14    /usr/sbin/lightdm    <noArgs>
xrdp    955    0.0    0.0    15652    2456    ?    S    Jan08    0:00    23:55:14    /usr/sbin/xrdp    <noArgs>
root    958    0.0    0.0    8124    2488    tty1    Ss+    Jan08    0:00    23:55:14    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    959    0.0    1.3    915128    106016    tty7    Ssl+    Jan08    0:02    23:55:14    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    979    0.0    0.1    169620    8236    ?    Sl    Jan08    0:00    23:55:13    lightdm    --session-child_17_20
lightdm    988    0.0    0.1    22452    12956    ?    Ss    Jan08    0:00    23:55:13    /usr/lib/systemd/systemd    --user
root    989    0.0    0.0    0    0    ?    S    Jan08    0:00    23:55:13    [psimon]    <noArgs>
lightdm    992    0.0    0.0    22712    3836    ?    S    Jan08    0:00    23:55:12    (sd-pam)    <noArgs>
lightdm    1042    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:55:12    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    1043    0.0    0.1    101160    10684    ?    S<sl    Jan08    0:00    23:55:12    /usr/bin/pipewire    <noArgs>
lightdm    1044    0.0    1.2    666648    105604    ?    Ssl    Jan08    0:16    23:55:12    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    1046    0.0    0.0    21492    3088    ?    SNsl    Jan08    0:00    23:55:12    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    1047    0.0    0.1    479288    15964    ?    S<sl    Jan08    0:00    23:55:12    /usr/bin/wireplumber    <noArgs>
lightdm    1048    0.0    0.0    84704    5088    ?    Ssl    Jan08    0:00    23:55:12    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    1049    0.0    0.1    98776    8152    ?    S<sl    Jan08    0:00    23:55:12    /usr/bin/pipewire-pulse    <noArgs>
lightdm    1070    0.0    0.0    381080    7156    ?    Ssl    Jan08    0:00    23:55:12    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    1077    0.0    0.0    8208    4424    ?    S    Jan08    0:00    23:55:12    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1081    0.0    0.0    312816    8104    ?    Ssl    Jan08    0:00    23:55:12    /usr/libexec/gvfsd    <noArgs>
lightdm    1088    0.0    0.0    398408    7436    ?    Sl    Jan08    0:00    23:55:12    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1111    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:55:12    lightdm    --session-child_13_20
lightdm    1113    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:55:12    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1815    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:54:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1816    0.1    11.2    1479696    917200    ?    Sl    Jan08    1:51    23:54:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    35250    0.0    0.0    0    0    ?    I    Jan08    0:00    20:24:34    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    60854    0.0    0.0    0    0    ?    I    Jan08    0:03    17:42:19    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    87954    0.0    0.0    0    0    ?    I    Jan08    0:00    14:53:55    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    123674    0.0    0.0    0    0    ?    I    Jan08    0:00    11:09:37    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    150260    0.0    0.0    0    0    ?    I    01:35    0:00    08:22:11    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    171566    0.0    0.0    0    0    ?    I    03:48    0:00    06:08:58    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    174851    0.0    0.0    0    0    ?    I    04:09    0:00    05:48:16    [kworker/u20:2-events_unbound]    <noArgs>
root    179556    0.0    0.0    0    0    ?    I    04:39    0:00    05:18:21    [kworker/u20:0-flush-254:0]    <noArgs>
root    191449    0.0    0.0    0    0    ?    I    05:54    0:00    04:03:10    [kworker/u18:2-flush-254:0]    <noArgs>
root    196120    0.0    0.0    0    0    ?    I    06:22    0:00    03:34:48    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    197206    0.0    0.0    0    0    ?    I    06:31    0:00    03:26:20    [kworker/u17:2-events_unbound]    <noArgs>
root    226527    0.0    0.0    0    0    ?    I    09:33    0:00    24:34    [kworker/u17:1-flush-254:0]    <noArgs>
root    228901    0.0    0.0    0    0    ?    I    09:48    0:00    09:35    [kworker/2:1-ata_sff]    <noArgs>
root    228968    0.0    0.0    0    0    ?    I    09:48    0:00    09:11    [kworker/1:0-ata_sff]    <noArgs>
root    229150    0.0    0.0    0    0    ?    I    09:50    0:00    07:04    [kworker/0:0-ata_sff]    <noArgs>
root    229211    0.0    0.0    0    0    ?    I    09:51    0:00    06:26    [kworker/3:0-ata_sff]    <noArgs>
root    229609    0.0    0.0    0    0    ?    I    09:53    0:00    04:25    [kworker/2:0-ata_sff]    <noArgs>
root    229685    0.0    0.0    0    0    ?    I    09:54    0:00    03:37    [kworker/1:2-ata_sff]    <noArgs>
root    229840    0.0    0.0    0    0    ?    I    09:55    0:00    01:54    [kworker/0:1-ata_sff]    <noArgs>
root    229916    0.0    0.0    0    0    ?    I    09:56    0:00    01:07    [kworker/3:1-ata_sff]    <noArgs>
root    230131    0.0    0.0    2688    1736    ?    S    09:57    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230132    0.0    0.0    2688    1768    ?    S    09:57    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    230153    0.0    0.0    9372    4172    ?    R    09:57    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    230154    0.0    0.0    5592    1876    ?    S    09:57    0:00    00:00    tee    /dev/null
root    230155    0.0    0.0    9472    4008    ?    S    09:57    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}