_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14920    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    88    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    93    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    103    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    224    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41980    20492    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12272    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    566    0.0    0.0    8388    5232    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10532    2496    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2100    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10532    2240    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10532    2368    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::d79:ba5e:1844:5bea
dhcpcd    647    0.0    0.0    10532    2368    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    7288    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2768    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9056    5476    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9796    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3976    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8828    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336464    18924    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    317328    12436    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7780    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    16356    2188    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    844    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:22    [kworker/2:2H-kblockd]    <noArgs>
root    855    0.0    0.2    1905076    20860    ?    Ssl    Jan08    0:19    23:40:22    /laforge.bin    <noArgs>
xrdp    870    0.0    0.0    15652    2356    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.3    915128    106032    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2712    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.0    169620    8064    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22456    13040    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    913    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8216    4672    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101256    10944    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105560    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    940    0.0    0.1    479268    16108    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5244    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.0    98776    8092    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    946    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    969    0.0    0.0    381080    7280    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4424    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.1    312816    8180    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7328    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5676    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7120    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1067    0.2    1.8    379824    150916    ?    Sl    Jan08    3:29    23:40:19    splunkd    -p_8089_start
root    1070    0.0    0.2    135648    17896    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1067]_splunkd_-p_8089_start_[process-runner]
root    1909    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1910    0.1    10.2    1414160    836660    ?    Sl    Jan08    1:46    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    55134    0.0    0.0    0    0    ?    I    Jan08    0:00    18:04:49    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    78559    0.0    0.0    0    0    ?    I    Jan08    0:00    15:38:17    [kworker/u20:1-events_unbound]    <noArgs>
root    159696    0.0    0.0    0    0    ?    I    02:35    0:00    07:09:19    [kworker/u20:2-flush-254:0]    <noArgs>
root    164573    0.0    0.0    0    0    ?    I    03:05    0:00    06:38:55    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    166202    0.0    0.0    0    0    ?    I    03:18    0:00    06:26:27    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    176461    0.0    0.0    0    0    ?    I    04:20    0:00    05:24:32    [kworker/u19:2-flush-254:0]    <noArgs>
root    202855    0.0    0.0    0    0    ?    I    07:05    0:00    02:39:33    [kworker/u18:1-flush-254:0]    <noArgs>
root    215507    0.0    0.0    0    0    ?    I    08:25    0:00    01:19:21    [kworker/u19:1-writeback]    <noArgs>
root    219562    0.0    0.0    0    0    ?    I    08:50    0:00    53:55    [kworker/u17:3-kvfree_rcu_reclaim]    <noArgs>
root    224430    0.0    0.0    0    0    ?    I    09:20    0:00    23:58    [kworker/u20:0]    <noArgs>
root    225883    0.0    0.0    0    0    ?    I    09:32    0:00    12:49    [kworker/u17:1-writeback]    <noArgs>
root    226805    0.0    0.0    0    0    ?    I    09:36    0:00    08:24    [kworker/3:0-ata_sff]    <noArgs>
root    226941    0.0    0.0    0    0    ?    I    09:37    0:00    07:01    [kworker/2:0-ata_sff]    <noArgs>
root    226942    0.0    0.0    0    0    ?    I    09:37    0:00    06:59    [kworker/0:2-ata_sff]    <noArgs>
root    227003    0.0    0.0    0    0    ?    I    09:38    0:00    06:15    [kworker/1:1-ata_sff]    <noArgs>
root    227538    0.0    0.0    0    0    ?    I    09:41    0:00    03:14    [kworker/3:2-ata_sff]    <noArgs>
root    227674    0.0    0.0    0    0    ?    I    09:43    0:00    01:47    [kworker/0:0-ata_sff]    <noArgs>
root    227675    0.0    0.0    0    0    ?    I    09:43    0:00    01:43    [kworker/2:2-ata_sff]    <noArgs>
root    227751    0.0    0.0    0    0    ?    I    09:43    0:00    00:58    [kworker/1:0-ata_sff]    <noArgs>
root    227951    0.0    0.0    2688    1772    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227952    0.0    0.0    2688    1832    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227973    0.0    0.0    9372    4188    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227974    0.0    0.0    5592    1868    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227975    0.0    0.0    9472    3952    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    15608    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/2:1-events_power_efficient]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/1:2-events]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20424    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12108    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    567    0.0    0.0    8388    6636    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10532    2440    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2044    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::aed:3f97:b451:242c
dhcpcd    648    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7252    ?    Ssl    Jan08    0:00    23:40:23    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2700    ?    Ss    Jan08    0:00    23:40:23    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9068    5496    ?    Ss    Jan08    0:00    23:40:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9860    ?    Ssl    Jan08    0:01    23:40:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3900    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8804    ?    Ss    Jan08    0:00    23:40:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336360    19080    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12392    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381356    7792    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    16356    2196    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    842    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:22    [kworker/3:2H]    <noArgs>
root    850    0.0    0.2    1904820    20560    ?    Ssl    Jan08    0:17    23:40:22    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2448    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.2    915132    104396    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2492    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8192    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22456    12912    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3828    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    944    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    945    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    946    0.0    1.2    666648    105712    ?    Ssl    Jan08    0:15    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    948    0.0    0.1    479276    15968    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    949    0.0    0.0    84704    5220    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    950    0.0    0.0    21492    3104    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.1    98776    8220    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7288    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    989    0.0    0.0    8208    4452    ?    S    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    998    0.0    0.0    312816    7908    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd    <noArgs>
lightdm    1009    0.0    0.0    398408    7368    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7208    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    375728    148896    ?    Sl    Jan08    3:10    23:40:19    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17900    ?    Ss    Jan08    0:03    23:40:19    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.1    1414160    829624    ?    Sl    Jan08    1:32    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    21807    0.0    0.0    0    0    ?    I    Jan08    0:00    21:34:44    [kworker/u18:0-flush-254:0]    <noArgs>
root    42686    0.0    0.0    0    0    ?    I    Jan08    0:00    19:23:29    [kworker/u20:3-kvfree_rcu_reclaim]    <noArgs>
root    92888    0.0    0.0    0    0    ?    I    Jan08    0:02    14:07:30    [kworker/3:2-events]    <noArgs>
root    141922    0.0    0.0    0    0    ?    I    00:45    0:00    08:59:17    [kworker/u17:2-flush-254:0]    <noArgs>
root    142063    0.0    0.0    0    0    ?    I    00:46    0:00    08:57:49    [kworker/u18:1-flush-254:0]    <noArgs>
root    155568    0.0    0.0    0    0    ?    I    02:09    0:00    07:34:53    [kworker/u17:1-flush-254:0]    <noArgs>
root    161323    0.0    0.0    0    0    ?    I    02:48    0:00    06:56:07    [kworker/u19:2-writeback]    <noArgs>
root    164434    0.0    0.0    0    0    ?    I    03:04    0:00    06:39:36    [kworker/u19:0-flush-254:0]    <noArgs>
root    170757    0.0    0.0    0    0    ?    I    03:46    0:00    05:57:31    [kworker/u18:2-writeback]    <noArgs>
root    178726    0.0    0.0    0    0    ?    I    04:34    0:00    05:09:35    [kworker/u17:0-flush-254:0]    <noArgs>
root    198050    0.0    0.0    0    0    ?    I    06:35    0:00    03:08:51    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    214023    0.0    0.0    0    0    ?    I    08:17    0:00    01:26:51    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    225063    0.0    0.0    0    0    ?    I    09:25    0:00    18:51    [kworker/u19:1]    <noArgs>
root    226321    0.0    0.0    0    0    ?    I    09:34    0:00    10:01    [kworker/1:0-ata_sff]    <noArgs>
root    226958    0.0    0.0    0    0    ?    I    09:38    0:00    06:11    [kworker/0:1-ata_sff]    <noArgs>
root    226989    0.0    0.0    0    0    ?    I    09:38    0:00    05:43    [kworker/2:2-ata_sff]    <noArgs>
root    227020    0.0    0.0    0    0    ?    I    09:38    0:00    05:27    [kworker/3:0-ata_sff]    <noArgs>
root    227344    0.0    0.0    0    0    ?    I    09:39    0:00    04:47    [kworker/1:1-ata_sff]    <noArgs>
root    227736    0.0    0.0    0    0    ?    I    09:43    0:00    00:25    [kworker/2:0-ata_sff]    <noArgs>
root    227752    0.0    0.0    0    0    ?    I    09:44    0:00    00:15    [kworker/3:1-ata_sff]    <noArgs>
root    227753    0.0    0.0    0    0    ?    I    09:44    0:00    00:13    [kworker/0:0]    <noArgs>
root    227893    0.0    0.0    2688    1752    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227894    0.0    0.0    2688    1852    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227915    0.0    0.0    9372    4192    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227916    0.0    0.0    5592    1908    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227917    0.0    0.0    9472    4080    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24656    14928    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20692    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12068    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [psimon]    <noArgs>
root    565    0.0    0.0    8388    6628    ?    Ss    Jan08    0:01    23:40:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10536    4512    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::bdd7:7468:175c:deae
dhcpcd    650    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    743    0.0    0.0    309036    7152    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9072    5544    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382300    9852    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3876    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18496    8836    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336464    18920    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12532    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    832    0.0    0.0    381356    7612    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    16356    2268    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    857    0.0    0.2    1905076    20112    ?    Ssl    Jan08    0:20    23:40:22    /laforge.bin    <noArgs>
xrdp    874    0.0    0.0    15652    2444    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.3    915132    107396    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2668    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169616    8312    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22880    13072    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
root    924    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:20    [kworker/2:2H-kblockd]    <noArgs>
lightdm    942    0.0    0.0    8348    4724    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    943    0.0    0.1    101208    10864    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105472    ?    Ssl    Jan08    0:17    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    948    0.0    0.0    21492    3096    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    479272    16076    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    950    0.0    0.0    84704    5224    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    951    0.0    0.1    98776    8272    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    977    0.0    0.0    381080    7020    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    984    0.0    0.0    8208    4352    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    990    0.0    0.0    312816    7928    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1005    0.0    0.0    398408    7432    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1037    0.0    0.0    14372    5720    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1040    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    379824    151000    ?    Sl    Jan08    3:36    23:40:19    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    17888    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.2    1414160    831828    ?    Sl    Jan08    1:54    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    73681    0.0    0.0    0    0    ?    I    Jan08    0:00    16:08:38    [kworker/u20:2-flush-254:0]    <noArgs>
root    75060    0.0    0.0    0    0    ?    I    Jan08    0:00    15:58:44    [kworker/u17:0-flush-254:0]    <noArgs>
root    83119    0.0    0.0    0    0    ?    I    Jan08    0:00    15:09:35    [kworker/u18:0-writeback]    <noArgs>
root    117003    0.0    0.0    0    0    ?    I    Jan08    0:02    11:36:44    [kworker/2:2-events]    <noArgs>
root    163062    0.0    0.0    0    0    ?    I    02:58    0:00    06:45:42    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    166954    0.0    0.0    0    0    ?    I    03:20    0:00    06:23:59    [kworker/u18:2-flush-254:0]    <noArgs>
root    169254    0.0    0.0    0    0    ?    I    03:35    0:00    06:09:13    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    194301    0.0    0.0    0    0    ?    I    06:13    0:00    03:30:58    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    196583    0.0    0.0    0    0    ?    I    06:27    0:00    03:16:36    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    197941    0.0    0.0    0    0    ?    I    06:34    0:00    03:09:33    [kworker/u19:2]    <noArgs>
root    212336    0.0    0.0    0    0    ?    I    08:04    0:00    01:39:34    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    216447    0.0    0.0    0    0    ?    I    08:33    0:00    01:10:33    [kworker/u20:1-events_unbound]    <noArgs>
root    226051    0.0    0.0    0    0    ?    I    09:33    0:00    10:19    [kworker/2:1-ata_sff]    <noArgs>
root    226851    0.0    0.0    0    0    ?    I    09:37    0:00    07:17    [kworker/0:0-ata_sff]    <noArgs>
root    226927    0.0    0.0    0    0    ?    I    09:37    0:00    06:31    [kworker/3:0-ata_sff]    <noArgs>
root    226943    0.0    0.0    0    0    ?    I    09:37    0:00    06:19    [kworker/1:2-ata_sff]    <noArgs>
root    227226    0.0    0.0    0    0    ?    I    09:39    0:00    04:54    [kworker/2:0-ata_sff]    <noArgs>
root    227644    0.0    0.0    0    0    ?    I    09:42    0:00    01:31    [kworker/0:2-ata_sff]    <noArgs>
root    227660    0.0    0.0    0    0    ?    I    09:42    0:00    01:18    [kworker/3:2-ata_sff]    <noArgs>
root    227706    0.0    0.0    0    0    ?    I    09:43    0:00    00:42    [kworker/1:0-ata_sff]    <noArgs>
root    227891    0.0    0.0    2688    1760    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227892    0.0    0.0    2688    1788    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227913    0.0    0.0    9372    4160    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227914    0.0    0.0    5592    1872    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227915    0.0    0.0    9472    4020    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24656    14880    ?    Ss    Jan08    0:02    23:40:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:35    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:35    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u25:0]    <noArgs>
root    199    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:1H-kblockd]    <noArgs>
root    230    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    231    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/2:2-events]    <noArgs>
root    249    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/1:2-events]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:33    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20668    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.1    37452    12160    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [psimon]    <noArgs>
root    556    0.0    0.0    8388    7652    ?    Ss    Jan08    0:01    23:40:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:30    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10532    2352    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::501c:eee4:8a1b:d31c
dhcpcd    627    0.0    0.0    10532    2224    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    646    0.0    0.0    10532    2288    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    739    0.0    0.0    309036    7116    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2744    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9220    5640    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9812    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    4024    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18356    8820    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    773    0.0    0.2    336472    19060    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391060    12432    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    834    0.0    0.0    381356    7780    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    838    0.0    0.0    16356    2268    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    847    0.0    0.2    1905076    20192    ?    Ssl    Jan08    0:21    23:40:22    /laforge.bin    <noArgs>
xrdp    869    0.0    0.0    15652    2348    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    875    0.0    1.2    915128    104596    tty7    Ssl+    Jan08    0:03    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    876    0.0    0.0    8124    2508    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    898    0.0    0.1    169620    8164    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
lightdm    904    0.0    0.1    22880    13088    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    908    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4652    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101256    10752    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105320    ?    Ssl    Jan08    0:17    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    937    0.0    0.0    21492    3120    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479280    16028    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5204    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8288    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    965    0.0    0.0    381080    7328    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4352    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    7968    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7448    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1035    0.0    0.0    14372    5740    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1037    0.0    0.0    168772    7220    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1058    0.2    1.8    381872    151448    ?    Sl    Jan08    3:49    23:40:19    splunkd    -p_8089_start
root    1061    0.0    0.2    135648    18128    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1058]_splunkd_-p_8089_start_[process-runner]
root    1948    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1949    0.1    10.2    1414160    833672    ?    Sl    Jan08    2:04    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    37757    0.0    0.0    0    0    ?    I    Jan08    0:00    19:54:33    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    89442    0.0    0.0    0    0    ?    I    Jan08    0:02    14:29:26    [kworker/3:1-events]    <noArgs>
root    140594    0.0    0.0    0    0    ?    I    00:35    0:00    09:09:12    [kworker/u20:0-flush-254:0]    <noArgs>
root    166171    0.0    0.0    0    0    ?    I    03:16    0:00    06:27:22    [kworker/u18:2-flush-254:0]    <noArgs>
root    200365    0.0    0.0    0    0    ?    I    06:49    0:00    02:54:36    [kworker/u17:1-events_unbound]    <noArgs>
root    215544    0.0    0.0    0    0    ?    I    08:25    0:00    01:18:47    [kworker/u18:3]    <noArgs>
root    217949    0.0    0.0    0    0    ?    I    08:40    0:00    01:03:40    [kworker/u19:2-flush-254:0]    <noArgs>
root    219892    0.0    0.0    0    0    ?    I    08:53    0:00    50:30    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    222051    0.0    0.0    0    0    ?    I    09:05    0:00    38:53    [kworker/u20:1-flush-254:0]    <noArgs>
root    224713    0.0    0.0    0    0    ?    I    09:23    0:00    20:48    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    226629    0.0    0.0    0    0    ?    I    09:34    0:00    09:48    [kworker/u19:0-flush-254:0]    <noArgs>
root    226754    0.0    0.0    0    0    ?    I    09:34    0:00    09:29    [kworker/2:0-ata_sff]    <noArgs>
root    226884    0.0    0.0    0    0    ?    I    09:36    0:00    08:08    [kworker/3:2-ata_sff]    <noArgs>
root    226930    0.0    0.0    0    0    ?    I    09:36    0:00    07:36    [kworker/1:0-ata_sff]    <noArgs>
root    227241    0.0    0.0    0    0    ?    I    09:39    0:00    05:05    [kworker/0:1-ata_sff]    <noArgs>
root    227496    0.0    0.0    0    0    ?    I    09:40    0:00    04:16    [kworker/2:1-ata_sff]    <noArgs>
root    227617    0.0    0.0    0    0    ?    I    09:41    0:00    03:00    [kworker/3:0-ata_sff]    <noArgs>
root    227663    0.0    0.0    0    0    ?    I    09:41    0:00    02:28    [kworker/1:1-ata_sff]    <noArgs>
root    227998    0.0    0.0    2688    1764    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227999    0.0    0.0    2688    1740    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    228020    0.0    0.0    9372    4204    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    228021    0.0    0.0    5592    1892    ?    S    09:44    0:00    00:00    tee    /dev/null
root    228022    0.0    0.0    9472    3956    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24524    15272    ?    Ss    Jan08    0:02    23:40:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:32    [kworker/1:1-events]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/0:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/u25:0]    <noArgs>
root    174    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/1:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/3:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:30    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    303    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:30    [kworker/0:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    383    0.0    0.2    41984    20784    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12208    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    543    0.0    0.0    8388    7660    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:25    dhcpcd:    [DHCP6_proxy]_fe80::15f1:d5c6:c3d8:7f31
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    741    0.0    0.0    309036    7136    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2764    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9200    5604    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9964    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3916    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18332    8800    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336460    19108    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391064    12612    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    839    0.0    0.0    381356    7844    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.2    1904820    20720    ?    Ssl    Jan08    0:20    23:40:22    /laforge.bin    <noArgs>
root    852    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp-sesman    <noArgs>
root    867    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:22    [kworker/2:2H-kblockd]    <noArgs>
xrdp    878    0.0    0.0    15652    2444    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.3    915132    107680    tty7    Ssl+    Jan08    0:02    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2488    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169620    8240    ?    Sl    Jan08    0:00    23:40:21    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    910    0.0    0.1    22464    12920    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    913    0.0    0.0    22712    3824    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
lightdm    938    0.0    0.0    8344    4612    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101240    10772    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105500    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    944    0.0    0.1    479280    16068    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    945    0.0    0.0    84704    5256    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    946    0.0    0.0    21492    3072    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    947    0.0    0.1    98776    8300    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    973    0.0    0.0    381080    7328    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4480    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    8064    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7304    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5824    ?    S    Jan08    0:00    23:40:20    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7016    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    377776    148964    ?    Sl    Jan08    3:39    23:40:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18024    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1832    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    831516    ?    Sl    Jan08    1:57    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    33091    0.0    0.0    0    0    ?    I    Jan08    0:00    20:24:00    [kworker/u19:1-flush-254:0]    <noArgs>
root    35406    0.0    0.0    0    0    ?    I    Jan08    0:00    20:09:04    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    107228    0.0    0.0    0    0    ?    I    Jan08    0:00    12:38:35    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    142895    0.0    0.0    0    0    ?    I    00:49    0:01    08:54:37    [kworker/2:0-events]    <noArgs>
root    145632    0.0    0.0    0    0    ?    I    01:07    0:00    08:37:10    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    147759    0.0    0.0    0    0    ?    I    01:19    0:00    08:24:32    [kworker/u17:0]    <noArgs>
root    152458    0.0    0.0    0    0    ?    I    01:49    0:00    07:54:35    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    154931    0.0    0.0    0    0    ?    I    02:04    0:00    07:39:32    [kworker/u19:0-events_unbound]    <noArgs>
root    165976    0.0    0.0    0    0    ?    I    03:15    0:00    06:28:43    [kworker/u20:2-writeback]    <noArgs>
root    172332    0.0    0.0    0    0    ?    I    03:55    0:00    05:48:43    [kworker/u19:2-flush-254:0]    <noArgs>
root    198142    0.0    0.0    0    0    ?    I    06:36    0:00    03:07:42    [kworker/u18:2-flush-254:0]    <noArgs>
root    225879    0.0    0.0    0    0    ?    I    09:31    0:00    12:38    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    226643    0.0    0.0    0    0    ?    I    09:34    0:00    09:37    [kworker/0:0-ata_sff]    <noArgs>
root    226830    0.0    0.0    0    0    ?    I    09:36    0:00    07:58    [kworker/3:0-ata_sff]    <noArgs>
root    226861    0.0    0.0    0    0    ?    I    09:36    0:00    07:36    [kworker/1:2-ata_sff]    <noArgs>
root    227057    0.0    0.0    0    0    ?    I    09:38    0:00    05:25    [kworker/2:1-ata_sff]    <noArgs>
root    227396    0.0    0.0    0    0    ?    I    09:39    0:00    04:36    [kworker/0:1-ata_sff]    <noArgs>
root    227563    0.0    0.0    0    0    ?    I    09:41    0:00    02:49    [kworker/3:1-ata_sff]    <noArgs>
root    227609    0.0    0.0    0    0    ?    I    09:41    0:00    02:19    [kworker/1:0-ata_sff]    <noArgs>
root    227790    0.0    0.0    0    0    ?    I    09:44    0:00    00:12    [kworker/2:2-ata_sff]    <noArgs>
root    227930    0.0    0.0    2688    1764    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227931    0.0    0.0    2688    1904    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227952    0.0    0.0    9372    4268    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227953    0.0    0.0    5592    1928    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227954    0.0    0.0    9472    4036    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}