_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24604    15452    ?    Ss    Jan08    0:02    23:30:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:30:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/2]    <noArgs>
root    31    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:33    [kworker/2:0-events]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [oom_reaper]    <noArgs>
root    54    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-writeback]    <noArgs>
root    55    0.0    0.0    0    0    ?    S    Jan08    0:02    23:30:33    [kcompactd0]    <noArgs>
root    56    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [ksmd]    <noArgs>
root    57    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [khugepaged]    <noArgs>
root    58    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kblockd]    <noArgs>
root    59    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kintegrityd]    <noArgs>
root    61    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [irq/9-acpi]    <noArgs>
root    63    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:33    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    64    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-edac-poller]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-devfreq_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/0:1H-kblockd]    <noArgs>
root    69    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kswapd0]    <noArgs>
root    77    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kthrotld]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-mld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/3:1H-kblockd]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    89    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kstrp]    <noArgs>
root    95    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u21:0]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u22:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u23:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u24:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u25:0]    <noArgs>
root    174    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/2:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/1:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:32    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    239    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ata_sff]    <noArgs>
root    244    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [scsi_eh_0]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [scsi_eh_1]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41984    20604    ?    Ss    Jan08    0:00    23:30:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7464    ?    Ssl    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12144    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [psimon]    <noArgs>
root    564    0.0    0.0    8388    6160    ?    Ss    Jan08    0:01    23:30:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10536    4512    ?    S    Jan08    0:00    23:30:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [DHCP6_proxy]_fe80::b82d:4506:710a:fecd
dhcpcd    647    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:30:23    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    7192    ?    Ssl    Jan08    0:00    23:30:22    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2780    ?    Ss    Jan08    0:00    23:30:22    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9068    5464    ?    Ss    Jan08    0:00    23:30:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9876    ?    Ssl    Jan08    0:01    23:30:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18360    8824    ?    Ss    Jan08    0:00    23:30:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    790    0.0    0.2    336460    19104    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    317328    12440    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381356    7644    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.0    16356    2188    ?    S    Jan08    0:00    23:30:22    /usr/sbin/xrdp-sesman    <noArgs>
root    850    0.0    0.2    1905076    20488    ?    Ssl    Jan08    0:19    23:30:22    /laforge.bin    <noArgs>
xrdp    874    0.0    0.0    15652    2400    ?    S    Jan08    0:00    23:30:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.2    915132    104652    tty7    Ssl+    Jan08    0:02    23:30:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    879    0.0    0.0    8124    2512    tty1    Ss+    Jan08    0:00    23:30:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    901    0.0    0.1    169620    8300    ?    Sl    Jan08    0:00    23:30:21    lightdm    --session-child_17_20
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:21    [psimon]    <noArgs>
lightdm    908    0.0    0.1    22456    12984    ?    Ss    Jan08    0:00    23:30:21    /usr/lib/systemd/systemd    --user
lightdm    910    0.0    0.0    22712    3816    ?    S    Jan08    0:00    23:30:21    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4652    ?    Ss    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101240    10640    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105548    ?    Ssl    Jan08    0:16    23:30:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479280    16000    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/wireplumber    <noArgs>
lightdm    943    0.0    0.0    84704    5120    ?    Ssl    Jan08    0:00    23:30:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    944    0.0    0.1    98776    8368    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    945    0.0    0.0    21492    3156    ?    SNsl    Jan08    0:00    23:30:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    971    0.0    0.0    381080    7284    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4444    ?    S    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    8024    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7440    ?    Sl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5696    ?    S    Jan08    0:00    23:30:20    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7040    ?    Sl    Jan08    0:00    23:30:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    375728    149496    ?    Sl    Jan08    3:54    23:30:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17896    ?    Ss    Jan08    0:04    23:30:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1897    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:29:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1898    0.1    10.2    1414160    835756    ?    Sl    Jan08    2:14    23:29:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    4419    0.0    0.0    0    0    ?    I    Jan08    0:00    23:14:05    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    22012    0.0    0.0    0    0    ?    I    Jan08    0:00    21:22:31    [kworker/u20:2-flush-254:0]    <noArgs>
root    83845    0.0    0.0    0    0    ?    I    Jan08    0:00    14:54:12    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    136848    0.0    0.0    0    0    ?    I    00:10    0:00    09:20:56    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    154886    0.0    0.0    0    0    ?    I    02:02    0:00    07:29:34    [kworker/u18:1-flush-254:0]    <noArgs>
root    165211    0.0    0.0    0    0    ?    I    03:07    0:01    06:23:44    [kworker/0:1-events]    <noArgs>
root    183715    0.0    0.0    0    0    ?    I    05:02    0:00    04:28:54    [kworker/u17:2-events_unbound]    <noArgs>
root    189307    0.0    0.0    0    0    ?    I    05:39    0:00    03:52:06    [kworker/u18:2-writeback]    <noArgs>
root    199155    0.0    0.0    0    0    ?    I    06:41    0:00    02:50:07    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    201386    0.0    0.0    0    0    ?    I    06:55    0:00    02:35:41    [kworker/u19:1-flush-254:0]    <noArgs>
root    214158    0.0    0.0    0    0    ?    I    08:16    0:00    01:15:21    [kworker/u17:0-flush-254:0]    <noArgs>
root    222884    0.0    0.0    0    0    ?    I    09:09    0:00    22:07    [kworker/u20:3]    <noArgs>
root    224709    0.0    0.0    0    0    ?    I    09:21    0:00    10:14    [kworker/0:2-ata_sff]    <noArgs>
root    225017    0.0    0.0    0    0    ?    I    09:22    0:00    09:13    [kworker/2:2-ata_sff]    <noArgs>
root    225168    0.0    0.0    0    0    ?    I    09:24    0:00    07:34    [kworker/1:1-ata_sff]    <noArgs>
root    225308    0.0    0.0    0    0    ?    I    09:25    0:00    06:10    [kworker/3:2-ata_sff]    <noArgs>
root    225602    0.0    0.0    0    0    ?    I    09:26    0:00    04:53    [kworker/0:0-ata_sff]    <noArgs>
root    225707    0.0    0.0    0    0    ?    I    09:27    0:00    04:03    [kworker/2:1-ata_sff]    <noArgs>
root    225843    0.0    0.0    0    0    ?    I    09:29    0:00    02:32    [kworker/1:0-ata_sff]    <noArgs>
root    226025    0.0    0.0    0    0    ?    I    09:30    0:00    00:39    [kworker/3:0]    <noArgs>
root    226201    0.0    0.0    2688    1784    ?    S    09:31    0:00    00:10    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226202    0.0    0.0    2688    1904    ?    S    09:31    0:00    00:10    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226223    0.0    0.0    5624    2224    ?    S    09:31    0:00    00:10    iostat    -xky_60_1
root    226224    0.0    0.0    5592    1876    ?    S    09:31    0:00    00:10    tee    /dev/null
root    226225    0.0    0.0    9472    3952    ?    S    09:31    0:00    00:10    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226350    0.0    0.0    2688    1764    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226351    0.0    0.0    2688    1860    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226372    0.0    0.0    9372    4240    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226373    0.0    0.0    5592    1980    ?    S    09:31    0:00    00:00    tee    /dev/null
root    226374    0.0    0.0    9472    3964    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    15212    ?    Ss    Jan08    0:02    23:30:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:30:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:30:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:33    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:1H-kblockd]    <noArgs>
root    70    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:32    [kworker/1:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/3:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/0:1H-kblockd]    <noArgs>
root    238    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ata_sff]    <noArgs>
root    239    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [scsi_eh_0]    <noArgs>
root    240    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    243    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [scsi_eh_1]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    272    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:31    [kworker/0:2-events]    <noArgs>
root    306    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:31    [jbd2/vda1-8]    <noArgs>
root    307    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    332    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20664    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7400    ?    Ssl    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12120    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    432    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [psimon]    <noArgs>
root    566    0.0    0.0    8388    6068    ?    Ss    Jan08    0:01    23:30:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    610    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:30:28    dhcpcd:    eth0_[ip4]_[ip6]
root    611    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2072    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2136    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-rpciod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-xprtiod]    <noArgs>
root    621    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    631    0.0    0.0    10536    2212    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    632    0.0    0.0    10536    2340    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [DHCP6_proxy]_fe80::f9bb:2516:e327:7671
dhcpcd    651    0.0    0.0    10536    2340    ?    S    Jan08    0:00    23:30:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    744    0.0    0.0    309036    7052    ?    Ssl    Jan08    0:00    23:30:22    /usr/libexec/accounts-daemon    <noArgs>
root    746    0.0    0.0    6876    2772    ?    Ss    Jan08    0:00    23:30:22    /usr/sbin/cron    -f
messagebus    747    0.0    0.0    9208    5548    ?    Ss    Jan08    0:00    23:30:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382300    9980    ?    Ssl    Jan08    0:01    23:30:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3960    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18260    8808    ?    Ss    Jan08    0:00    23:30:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    776    0.0    0.2    336476    18876    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    317332    12444    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/ModemManager    <noArgs>
root    831    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:22    [kworker/3:2H-kblockd]    <noArgs>
root    833    0.0    0.0    381356    7768    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/lightdm    <noArgs>
root    850    0.0    0.2    1978552    20500    ?    Ssl    Jan08    0:18    23:30:22    /laforge.bin    <noArgs>
root    854    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:30:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    880    0.0    0.0    15652    2348    ?    S    Jan08    0:00    23:30:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915132    105880    tty7    Ssl+    Jan08    0:02    23:30:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    883    0.0    0.0    8124    2516    tty1    Ss+    Jan08    0:00    23:30:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    905    0.0    0.0    169620    8048    ?    Sl    Jan08    0:00    23:30:20    lightdm    --session-child_17_20
lightdm    911    0.0    0.1    22464    12968    ?    Ss    Jan08    0:00    23:30:20    /usr/lib/systemd/systemd    --user
root    915    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:20    [psimon]    <noArgs>
lightdm    917    0.0    0.0    22712    3824    ?    S    Jan08    0:00    23:30:20    (sd-pam)    <noArgs>
lightdm    947    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    948    0.0    0.1    101160    10832    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire    <noArgs>
lightdm    949    0.0    1.2    666648    105632    ?    Ssl    Jan08    0:15    23:30:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    952    0.0    0.1    413744    16156    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/wireplumber    <noArgs>
lightdm    953    0.0    0.0    84704    5160    ?    Ssl    Jan08    0:00    23:30:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    954    0.0    0.1    98776    8344    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    956    0.0    0.0    21492    3052    ?    SNsl    Jan08    0:00    23:30:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    983    0.0    0.0    381080    7284    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    997    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1003    0.0    0.0    312816    7880    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1012    0.0    0.0    398408    7476    ?    Sl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1041    0.0    0.0    14372    5760    ?    S    Jan08    0:00    23:30:19    lightdm    --session-child_13_20
lightdm    1043    0.0    0.0    168772    7084    ?    Sl    Jan08    0:00    23:30:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    377776    149556    ?    Sl    Jan08    3:20    23:30:19    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    18028    ?    Ss    Jan08    0:03    23:30:19    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1902    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:29:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.2    1414160    831552    ?    Sl    Jan08    1:44    23:29:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    103339    0.0    0.0    0    0    ?    I    Jan08    0:00    12:50:57    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    115813    0.0    0.0    0    0    ?    I    Jan08    0:00    11:31:46    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    117050    0.0    0.0    0    0    ?    I    Jan08    0:00    11:26:06    [kworker/u17:3-events_unbound]    <noArgs>
root    161721    0.0    0.0    0    0    ?    I    02:46    0:00    06:45:07    [kworker/u19:1-flush-254:0]    <noArgs>
root    174093    0.0    0.0    0    0    ?    I    04:01    0:00    05:29:40    [kworker/u17:1-writeback]    <noArgs>
root    178908    0.0    0.0    0    0    ?    I    04:32    0:00    04:58:56    [kworker/u17:0-flush-254:0]    <noArgs>
root    195070    0.0    0.0    0    0    ?    I    06:16    0:00    03:15:27    [kworker/u20:1-flush-254:0]    <noArgs>
root    202904    0.0    0.0    0    0    ?    I    07:02    0:00    02:29:09    [kworker/3:0-mm_percpu_wq]    <noArgs>
root    204968    0.0    0.0    0    0    ?    I    07:16    0:00    02:14:59    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    217436    0.0    0.0    0    0    ?    I    08:35    0:00    56:05    [kworker/u20:0-writeback]    <noArgs>
root    222299    0.0    0.0    0    0    ?    I    09:05    0:00    26:06    [kworker/u18:0-flush-254:0]    <noArgs>
root    222927    0.0    0.0    0    0    ?    I    09:09    0:00    22:07    [kworker/u18:3]    <noArgs>
root    223019    0.0    0.0    0    0    ?    I    09:10    0:00    21:06    [kworker/u19:0-flush-254:0]    <noArgs>
root    225030    0.0    0.0    0    0    ?    I    09:22    0:00    09:37    [kworker/2:2-ata_sff]    <noArgs>
root    225136    0.0    0.0    0    0    ?    I    09:23    0:00    08:26    [kworker/0:1-ata_sff]    <noArgs>
root    225182    0.0    0.0    0    0    ?    I    09:23    0:00    07:54    [kworker/1:0-ata_sff]    <noArgs>
root    225307    0.0    0.0    0    0    ?    I    09:25    0:00    06:35    [kworker/3:1-ata_sff]    <noArgs>
root    225750    0.0    0.0    0    0    ?    I    09:27    0:00    04:08    [kworker/2:0-ata_sff]    <noArgs>
root    225826    0.0    0.0    0    0    ?    I    09:28    0:00    03:20    [kworker/0:0-ata_sff]    <noArgs>
root    225872    0.0    0.0    0    0    ?    I    09:28    0:00    02:46    [kworker/1:1-ata_sff]    <noArgs>
root    226039    0.0    0.0    0    0    ?    I    09:30    0:00    01:01    [kworker/3:2-ata_sff]    <noArgs>
root    226245    0.0    0.0    2688    1760    ?    S    09:31    0:00    00:10    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226246    0.0    0.0    2688    1852    ?    S    09:31    0:00    00:10    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226267    0.0    0.0    5624    2312    ?    S    09:31    0:00    00:10    iostat    -xky_60_1
root    226268    0.0    0.0    5592    2000    ?    S    09:31    0:00    00:10    tee    /dev/null
root    226269    0.0    0.0    9472    3972    ?    S    09:31    0:00    00:10    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226394    0.0    0.0    2688    1760    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226395    0.0    0.0    2688    1832    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226416    0.0    0.0    9372    4276    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226417    0.0    0.0    5592    1912    ?    S    09:31    0:00    00:00    tee    /dev/null
root    226418    0.0    0.0    9472    3992    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24676    14900    ?    Ss    Jan08    0:02    23:30:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:30:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:03    23:30:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:33    [kworker/2:1-events]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:33    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/1:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/3:1H-kblockd]    <noArgs>
root    217    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/0:1H-kblockd]    <noArgs>
root    241    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:31    [kworker/0:2-events]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ata_sff]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_0]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_1]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:31    [kworker/1:2-events]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:30    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20692    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37588    12312    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [psimon]    <noArgs>
root    559    0.0    0.0    8388    6824    ?    Ss    Jan08    0:02    23:30:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:30:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2144    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10540    2220    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    626    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [DHCP6_proxy]_fe80::d94b:f42b:6277:b243
dhcpcd    645    0.0    0.0    10540    2348    ?    S    Jan08    0:00    23:30:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    738    0.0    0.0    309036    7260    ?    Ssl    Jan08    0:00    23:30:22    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2668    ?    Ss    Jan08    0:00    23:30:22    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9212    5572    ?    Ss    Jan08    0:00    23:30:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9992    ?    Ssl    Jan08    0:02    23:30:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    745    0.0    0.0    80876    3956    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18336    8804    ?    Ss    Jan08    0:00    23:30:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    770    0.0    0.2    336460    18976    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/NetworkManager    --no-daemon
root    808    0.0    0.1    391052    12504    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/ModemManager    <noArgs>
root    834    0.0    0.0    381356    7688    ?    Ssl    Jan08    0:00    23:30:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.2    1904820    20120    ?    Ssl    Jan08    0:20    23:30:21    /laforge.bin    <noArgs>
root    850    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:30:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    870    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:30:21    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.2    915132    104392    tty7    Ssl+    Jan08    0:02    23:30:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    878    0.0    0.0    8124    2636    tty1    Ss+    Jan08    0:00    23:30:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    905    0.0    0.0    169620    8120    ?    Sl    Jan08    0:00    23:30:20    lightdm    --session-child_17_20
root    916    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:20    [psimon]    <noArgs>
lightdm    918    0.0    0.1    22808    13232    ?    Ss    Jan08    0:00    23:30:20    /usr/lib/systemd/systemd    --user
lightdm    922    0.0    0.0    22712    3864    ?    S    Jan08    0:00    23:30:20    (sd-pam)    <noArgs>
lightdm    957    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    958    0.0    0.1    101224    10700    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire    <noArgs>
lightdm    959    0.0    1.2    666648    105260    ?    Ssl    Jan08    0:17    23:30:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    961    0.0    0.1    479284    16072    ?    S<sl    Jan08    0:00    23:30:19    /usr/bin/wireplumber    <noArgs>
lightdm    962    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:30:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    963    0.0    0.0    98776    8100    ?    S<sl    Jan08    0:00    23:30:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    964    0.0    0.0    21492    3204    ?    SNsl    Jan08    0:00    23:30:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    985    0.0    0.0    381080    7328    ?    Ssl    Jan08    0:00    23:30:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    995    0.0    0.0    8208    4440    ?    S    Jan08    0:00    23:30:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1001    0.0    0.1    312816    8152    ?    Ssl    Jan08    0:00    23:30:19    /usr/libexec/gvfsd    <noArgs>
lightdm    1007    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:30:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1036    0.0    0.0    14372    5716    ?    S    Jan08    0:00    23:30:19    lightdm    --session-child_13_20
lightdm    1038    0.0    0.0    168772    7048    ?    Sl    Jan08    0:00    23:30:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    381872    149200    ?    Sl    Jan08    4:10    23:30:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    18020    ?    Ss    Jan08    0:04    23:30:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1752    ?    S    Jan08    0:00    23:29:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.2    1414160    835732    ?    Sl    Jan08    2:20    23:29:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    6911    0.0    0.0    0    0    ?    I    Jan08    0:00    22:57:16    [kworker/u18:1-ext4-rsv-conversion]    <noArgs>
root    27516    0.0    0.0    0    0    ?    I    Jan08    0:00    20:46:37    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    160494    0.0    0.0    0    0    ?    I    02:38    0:00    06:53:30    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    178912    0.0    0.0    0    0    ?    I    04:32    0:00    04:58:56    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    186795    0.0    0.0    0    0    ?    I    05:22    0:00    04:09:11    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    187654    0.0    0.0    0    0    ?    I    05:29    0:00    04:02:06    [kworker/u19:2-flush-254:0]    <noArgs>
root    199052    0.0    0.0    0    0    ?    I    06:40    0:00    02:51:18    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    207640    0.0    0.0    0    0    ?    I    07:32    0:00    01:58:53    [kworker/u20:1-flush-254:0]    <noArgs>
root    215733    0.0    0.0    0    0    ?    I    08:24    0:00    01:06:49    [kworker/u17:0-flush-254:0]    <noArgs>
root    217146    0.0    0.0    0    0    ?    I    08:32    0:00    59:23    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    219584    0.0    0.0    0    0    ?    I    08:47    0:00    43:56    [kworker/u17:1-writeback]    <noArgs>
root    221974    0.0    0.0    0    0    ?    I    09:02    0:00    29:32    [kworker/u20:0]    <noArgs>
root    225151    0.0    0.0    0    0    ?    I    09:23    0:00    08:30    [kworker/0:0-ata_sff]    <noArgs>
root    225227    0.0    0.0    0    0    ?    I    09:24    0:00    07:36    [kworker/2:0-ata_sff]    <noArgs>
root    225273    0.0    0.0    0    0    ?    I    09:24    0:00    07:05    [kworker/3:2-ata_sff]    <noArgs>
root    225443    0.0    0.0    0    0    ?    I    09:26    0:00    05:12    [kworker/1:1-ata_sff]    <noArgs>
root    225841    0.0    0.0    0    0    ?    I    09:28    0:00    03:11    [kworker/0:1-ata_sff]    <noArgs>
root    225917    0.0    0.0    0    0    ?    I    09:29    0:00    02:31    [kworker/2:2-ata_sff]    <noArgs>
root    225993    0.0    0.0    0    0    ?    I    09:29    0:00    01:37    [kworker/3:0-ata_sff]    <noArgs>
root    226260    0.0    0.0    2688    1768    ?    S    09:31    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226261    0.0    0.0    2688    1740    ?    S    09:31    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226282    0.0    0.0    5624    2136    ?    S    09:31    0:00    00:09    iostat    -xky_60_1
root    226283    0.0    0.0    5592    1972    ?    S    09:31    0:00    00:09    tee    /dev/null
root    226284    0.0    0.0    9472    3940    ?    S    09:31    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226409    0.0    0.0    2688    1760    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226410    0.0    0.0    2688    1860    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226431    0.0    0.0    9372    4208    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226432    0.0    0.0    5592    1924    ?    S    09:31    0:00    00:00    tee    /dev/null
root    226433    0.0    0.0    9472    4008    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24684    14900    ?    Ss    Jan08    0:02    23:25:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:25:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:33    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/0:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/3:1H-kblockd]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-ata_sff]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [scsi_eh_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [scsi_eh_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:32    [kworker/2:2-events]    <noArgs>
root    274    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:32    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    306    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:31    [jbd2/vda1-8]    <noArgs>
root    307    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    331    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41980    20676    ?    Ss    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    400    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12068    ?    Ss    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    430    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [psimon]    <noArgs>
root    564    0.0    0.0    8388    5224    ?    Ss    Jan08    0:01    23:25:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:25:29    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10540    2448    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    1912    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2056    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    631    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [DHCP6_proxy]_fe80::d7e4:f71f:c3c3:344
dhcpcd    651    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:25:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    743    0.0    0.0    309036    7000    ?    Ssl    Jan08    0:00    23:25:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2732    ?    Ss    Jan08    0:00    23:25:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9072    5476    ?    Ss    Jan08    0:00    23:25:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382300    9800    ?    Ssl    Jan08    0:01    23:25:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3904    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18352    8776    ?    Ss    Jan08    0:00    23:25:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    788    0.0    0.2    336464    19088    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12252    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/ModemManager    <noArgs>
root    841    0.0    0.0    381356    7500    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:22    [kworker/3:2H-kblockd]    <noArgs>
root    845    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:25:22    /usr/sbin/xrdp-sesman    <noArgs>
root    855    0.0    0.2    1904820    20704    ?    Ssl    Jan08    0:19    23:25:21    /laforge.bin    <noArgs>
xrdp    879    0.0    0.0    15652    2384    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    0.0    8124    2544    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    882    0.0    1.2    915128    104520    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    905    0.0    0.1    169620    8304    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
lightdm    911    0.0    0.1    22800    13232    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
root    913    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    915    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101240    10780    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105576    ?    Ssl    Jan08    0:16    23:25:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    946    0.0    0.1    479268    16040    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5252    ?    Ssl    Jan08    0:00    23:25:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    948    0.0    0.0    21492    3112    ?    SNsl    Jan08    0:00    23:25:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    98776    8172    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    976    0.0    0.0    381080    7164    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    989    0.0    0.0    8208    4404    ?    S    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    992    0.0    0.0    312816    7856    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd    <noArgs>
lightdm    999    0.0    0.0    398408    7188    ?    Sl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5692    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    377776    150792    ?    Sl    Jan08    3:34    23:25:18    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    17956    ?    Ss    Jan08    0:04    23:25:18    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1955    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:24:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1956    0.1    10.2    1414160    833828    ?    Sl    Jan08    1:57    23:24:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    105668    0.0    0.0    0    0    ?    I    Jan08    0:00    12:31:09    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    139999    0.0    0.0    0    0    ?    I    00:35    0:00    08:55:44    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    172408    0.0    0.0    0    0    ?    I    03:57    0:00    05:33:47    [kworker/u19:2-flush-254:0]    <noArgs>
root    174912    0.0    0.0    0    0    ?    I    04:11    0:00    05:19:16    [kworker/u19:0-events_unbound]    <noArgs>
root    175759    0.0    0.0    0    0    ?    I    04:18    0:00    05:12:22    [kworker/u17:0-events_unbound]    <noArgs>
root    198290    0.0    0.0    0    0    ?    I    06:39    0:00    02:51:44    [kworker/u18:0-flush-254:0]    <noArgs>
root    200766    0.0    0.0    0    0    ?    I    06:55    0:00    02:35:43    [kworker/u17:2-writeback]    <noArgs>
root    202143    0.0    0.0    0    0    ?    I    07:05    0:00    02:25:31    [kworker/u18:2-flush-254:0]    <noArgs>
root    205387    0.0    0.0    0    0    ?    I    07:22    0:00    02:08:16    [kworker/3:1-events]    <noArgs>
root    209077    0.0    0.0    0    0    ?    I    07:47    0:00    01:43:33    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    212499    0.0    0.0    0    0    ?    I    08:07    0:00    01:23:55    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    215167    0.0    0.0    0    0    ?    I    08:25    0:00    01:05:43    [kworker/u19:1]    <noArgs>
root    223311    0.0    0.0    0    0    ?    I    09:16    0:00    14:56    [kworker/1:2-ata_sff]    <noArgs>
root    224547    0.0    0.0    0    0    ?    I    09:23    0:00    07:51    [kworker/2:1-ata_sff]    <noArgs>
root    224732    0.0    0.0    0    0    ?    I    09:25    0:00    05:44    [kworker/3:2-ata_sff]    <noArgs>
root    224763    0.0    0.0    0    0    ?    I    09:25    0:00    05:25    [kworker/0:1-ata_sff]    <noArgs>
root    225056    0.0    0.0    0    0    ?    I    09:26    0:00    04:37    [kworker/1:0-ata_sff]    <noArgs>
root    225237    0.0    0.0    0    0    ?    I    09:28    0:00    02:34    [kworker/2:0-ata_sff]    <noArgs>
root    225449    0.0    0.0    0    0    ?    I    09:30    0:00    00:17    [kworker/3:0-ata_sff]    <noArgs>
root    225465    0.0    0.0    0    0    ?    I    09:31    0:00    00:09    [kworker/0:0]    <noArgs>
root    225590    0.0    0.0    2688    1732    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225591    0.0    0.0    2688    1860    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225612    0.0    0.0    9372    4172    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225613    0.0    0.0    5592    1868    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225614    0.0    0.0    9472    4004    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24668    15184    ?    Ss    Jan08    0:02    23:25:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:32    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:32    [kworker/1:1-events]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/0:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/1:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_1]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    306    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:30    [jbd2/vda1-8]    <noArgs>
root    307    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    331    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [hwrng]    <noArgs>
root    386    0.0    0.2    41984    20544    ?    Ss    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12132    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:28    [psimon]    <noArgs>
root    478    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:28    [kworker/0:3-events_freezable_pwr_efficient]    <noArgs>
root    562    0.0    0.0    8388    5408    ?    Ss    Jan08    0:01    23:25:27    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:25:27    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    630    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [DHCP6_proxy]_fe80::e238:f0f2:3dec:5dcf
dhcpcd    649    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:25:21    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    742    0.0    0.0    309036    7304    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2748    ?    Ss    Jan08    0:00    23:25:21    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    9220    5508    ?    Ss    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    748    0.0    0.1    382300    9916    ?    Ssl    Jan08    0:01    23:25:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18260    8828    ?    Ss    Jan08    0:00    23:25:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336452    18800    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    391060    12336    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/ModemManager    <noArgs>
root    840    0.0    0.0    381364    7656    ?    Ssl    Jan08    0:00    23:25:20    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    16356    2336    ?    S    Jan08    0:00    23:25:20    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1978552    20528    ?    Ssl    Jan08    0:19    23:25:20    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2356    ?    S    Jan08    0:00    23:25:20    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.2    915132    104424    tty7    Ssl+    Jan08    0:02    23:25:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:25:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8192    ?    Sl    Jan08    0:00    23:25:19    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:19    [psimon]    <noArgs>
lightdm    910    0.0    0.1    22448    12896    ?    Ss    Jan08    0:00    23:25:19    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3828    ?    S    Jan08    0:00    23:25:19    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4552    ?    Ss    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101208    10600    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105296    ?    Ssl    Jan08    0:16    23:25:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    943    0.0    0.1    479272    16104    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/wireplumber    <noArgs>
lightdm    944    0.0    0.0    84704    5036    ?    Ssl    Jan08    0:00    23:25:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    946    0.0    0.1    98776    8204    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    947    0.0    0.0    21492    3116    ?    SNsl    Jan08    0:00    23:25:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    973    0.0    0.0    381080    7056    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    987    0.0    0.0    312816    7860    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5740    ?    S    Jan08    0:00    23:25:18    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7116    ?    Sl    Jan08    0:00    23:25:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    379824    148480    ?    Sl    Jan08    3:28    23:25:17    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18020    ?    Ss    Jan08    0:04    23:25:17    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1954    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:24:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1955    0.1    10.2    1414160    835800    ?    Sl    Jan08    1:47    23:24:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    2827    0.0    0.0    0    0    ?    I    Jan08    0:00    23:19:00    [kworker/u18:1-writeback]    <noArgs>
root    9190    0.0    0.0    0    0    ?    I    Jan08    0:00    22:38:56    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    22918    0.0    0.0    0    0    ?    I    Jan08    0:00    21:10:35    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    46749    0.0    0.0    0    0    ?    I    Jan08    0:00    18:40:15    [kworker/u20:2-flush-254:0]    <noArgs>
root    103164    0.0    0.0    0    0    ?    I    Jan08    0:00    12:47:50    [kworker/u20:0-flush-254:0]    <noArgs>
root    121505    0.0    0.0    0    0    ?    I    Jan08    0:00    10:53:50    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    132064    0.0    0.0    0    0    ?    I    Jan08    0:00    09:45:43    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    181502    0.0    0.0    0    0    ?    I    04:55    0:00    04:36:08    [kworker/u17:0-flush-254:0]    <noArgs>
root    195613    0.0    0.0    0    0    ?    I    06:21    0:00    03:09:35    [kworker/u19:1-events_unbound]    <noArgs>
root    200377    0.0    0.0    0    0    ?    I    06:51    0:00    02:39:33    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    214777    0.0    0.0    0    0    ?    I    08:21    0:00    01:09:35    [kworker/u17:2]    <noArgs>
root    214980    0.0    0.0    0    0    ?    I    08:23    0:00    01:07:38    [kworker/2:0-mm_percpu_wq]    <noArgs>
root    221214    0.0    0.0    0    0    ?    I    09:05    0:00    25:42    [kworker/u18:0]    <noArgs>
root    224344    0.0    0.0    0    0    ?    I    09:21    0:00    09:34    [kworker/3:2-ata_sff]    <noArgs>
root    224381    0.0    0.0    0    0    ?    I    09:21    0:00    09:26    [kworker/1:2-ata_sff]    <noArgs>
root    224457    0.0    0.0    0    0    ?    I    09:22    0:00    08:36    [kworker/0:0-ata_sff]    <noArgs>
root    224503    0.0    0.0    0    0    ?    I    09:23    0:00    08:05    [kworker/2:2-ata_sff]    <noArgs>
root    225070    0.0    0.0    0    0    ?    I    09:26    0:00    04:20    [kworker/3:0-ata_sff]    <noArgs>
root    225086    0.0    0.0    0    0    ?    I    09:27    0:00    04:10    [kworker/1:0-ata_sff]    <noArgs>
root    225132    0.0    0.0    0    0    ?    I    09:27    0:00    03:31    [kworker/0:1-ata_sff]    <noArgs>
root    225208    0.0    0.0    0    0    ?    I    09:28    0:00    02:45    [kworker/2:1-ata_sff]    <noArgs>
root    225574    0.0    0.0    2688    1736    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225575    0.0    0.0    2688    1836    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225596    0.0    0.0    9372    4200    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225597    0.0    0.0    5592    1924    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225598    0.0    0.0    9472    3944    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}