_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24440    14792    ?    Ss    Jan08    0:02    23:35:26    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:26    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:26    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [ksoftirqd/3]    <noArgs>
root    41    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:26    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:26    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:26    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:26    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:26    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:26    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:25    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:25    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:25    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:25    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:25    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:25    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:25    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:24    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/3:1H-kblockd]    <noArgs>
root    219    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/1:1H-kblockd]    <noArgs>
root    232    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:24    [kworker/2:3-events_power_efficient]    <noArgs>
root    233    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-ata_sff]    <noArgs>
root    234    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:24    [scsi_eh_0]    <noArgs>
root    235    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-scsi_tmf_0]    <noArgs>
root    236    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:24    [scsi_eh_1]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:24    [kworker/R-scsi_tmf_1]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:23    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:23    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    326    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:23    [hwrng]    <noArgs>
root    365    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:22    [kworker/0:2-events]    <noArgs>
root    380    0.0    0.2    41976    20536    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    411    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    415    0.0    0.1    37588    12080    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:22    [psimon]    <noArgs>
root    541    0.0    0.0    8388    5600    ?    Ss    Jan08    0:01    23:35:21    /usr/sbin/haveged    --Foreground_--verbose=1
root    554    0.0    0.0    309036    7212    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/accounts-daemon    <noArgs>
messagebus    555    0.0    0.0    9068    5588    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    556    0.0    0.1    382300    10008    ?    Ssl    Jan08    0:01    23:35:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    558    0.0    0.0    80876    3980    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/qemu-ga    <noArgs>
root    559    0.0    0.1    18492    8760    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    593    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:21    [kworker/R-rpciod]    <noArgs>
root    594    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:21    [kworker/R-xprtiod]    <noArgs>
root    608    0.0    0.0    6876    2824    ?    Ss    Jan08    0:00    23:35:21    /usr/sbin/cron    -f
dhcpcd    629    0.0    0.0    10532    4528    ?    S    Jan08    0:00    23:35:21    dhcpcd:    eth0_[ip4]_[ip6]
root    630    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:35:21    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    631    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:21    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    632    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:35:21    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    636    0.0    0.2    336464    18920    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/NetworkManager    --no-daemon
root    643    0.0    0.1    325528    12576    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/ModemManager    <noArgs>
root    671    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:21    [kworker/R-cfg80211]    <noArgs>
root    690    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:21    [kworker/3:2H-kblockd]    <noArgs>
dhcpcd    695    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:35:20    dhcpcd:    [DHCP6_proxy]_fe80::336e:5acb:1c14:e015
dhcpcd    724    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:35:19    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
root    751    0.2    1.8    381872    149384    ?    Sl    Jan08    3:25    23:35:18    splunkd    -p_8089_start
root    753    0.0    0.2    135648    18024    ?    Ss    Jan08    0:04    23:35:18    [splunkd    pid=751]_splunkd_-p_8089_start_[process-runner]
dhcpcd    833    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:35:14    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    897    0.0    0.2    1978552    20220    ?    Ssl    Jan08    0:19    23:35:14    /laforge.bin    <noArgs>
root    911    0.0    0.0    16356    2188    ?    S    Jan08    0:00    23:35:14    /usr/sbin/xrdp-sesman    <noArgs>
root    915    0.0    0.0    381364    7668    ?    Ssl    Jan08    0:00    23:35:14    /usr/sbin/lightdm    <noArgs>
xrdp    955    0.0    0.0    15652    2456    ?    S    Jan08    0:00    23:35:14    /usr/sbin/xrdp    <noArgs>
root    958    0.0    0.0    8124    2488    tty1    Ss+    Jan08    0:00    23:35:14    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    959    0.0    1.3    915128    106016    tty7    Ssl+    Jan08    0:02    23:35:14    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    979    0.0    0.1    169620    8236    ?    Sl    Jan08    0:00    23:35:13    lightdm    --session-child_17_20
lightdm    988    0.0    0.1    22452    12956    ?    Ss    Jan08    0:00    23:35:13    /usr/lib/systemd/systemd    --user
root    989    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:13    [psimon]    <noArgs>
lightdm    992    0.0    0.0    22712    3836    ?    S    Jan08    0:00    23:35:13    (sd-pam)    <noArgs>
lightdm    1042    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:35:12    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    1043    0.0    0.1    101160    10684    ?    S<sl    Jan08    0:00    23:35:12    /usr/bin/pipewire    <noArgs>
lightdm    1044    0.0    1.2    666648    105604    ?    Ssl    Jan08    0:16    23:35:12    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    1046    0.0    0.0    21492    3088    ?    SNsl    Jan08    0:00    23:35:12    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    1047    0.0    0.1    479288    15964    ?    S<sl    Jan08    0:00    23:35:12    /usr/bin/wireplumber    <noArgs>
lightdm    1048    0.0    0.0    84704    5088    ?    Ssl    Jan08    0:00    23:35:12    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    1049    0.0    0.1    98776    8152    ?    S<sl    Jan08    0:00    23:35:12    /usr/bin/pipewire-pulse    <noArgs>
lightdm    1070    0.0    0.0    381080    7156    ?    Ssl    Jan08    0:00    23:35:12    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    1077    0.0    0.0    8208    4424    ?    S    Jan08    0:00    23:35:12    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    1081    0.0    0.0    312816    8104    ?    Ssl    Jan08    0:00    23:35:12    /usr/libexec/gvfsd    <noArgs>
lightdm    1088    0.0    0.0    398408    7436    ?    Sl    Jan08    0:00    23:35:12    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1111    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:35:12    lightdm    --session-child_13_20
lightdm    1113    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:35:12    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1815    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:34:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1816    0.1    10.2    1414160    833312    ?    Sl    Jan08    1:49    23:34:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    35250    0.0    0.0    0    0    ?    I    Jan08    0:00    20:04:34    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    60854    0.0    0.0    0    0    ?    I    Jan08    0:02    17:22:19    [kworker/3:2-events]    <noArgs>
root    87954    0.0    0.0    0    0    ?    I    Jan08    0:00    14:33:55    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    123674    0.0    0.0    0    0    ?    I    Jan08    0:00    10:49:37    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    150260    0.0    0.0    0    0    ?    I    01:35    0:00    08:02:11    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    171566    0.0    0.0    0    0    ?    I    03:48    0:00    05:48:58    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    174851    0.0    0.0    0    0    ?    I    04:09    0:00    05:28:16    [kworker/u20:2-events_unbound]    <noArgs>
root    179556    0.0    0.0    0    0    ?    I    04:39    0:00    04:58:21    [kworker/u20:0-flush-254:0]    <noArgs>
root    191449    0.0    0.0    0    0    ?    I    05:54    0:00    03:43:10    [kworker/u18:2-flush-254:0]    <noArgs>
root    196120    0.0    0.0    0    0    ?    I    06:22    0:00    03:14:48    [kworker/u18:1-events_unbound]    <noArgs>
root    197206    0.0    0.0    0    0    ?    I    06:31    0:00    03:06:20    [kworker/u17:2-writeback]    <noArgs>
root    225719    0.0    0.0    0    0    ?    I    09:29    0:00    08:00    [kworker/0:0-ata_sff]    <noArgs>
root    225750    0.0    0.0    0    0    ?    I    09:29    0:00    07:40    [kworker/3:0-ata_sff]    <noArgs>
root    225887    0.0    0.0    0    0    ?    I    09:31    0:00    06:05    [kworker/1:2-ata_sff]    <noArgs>
root    226004    0.0    0.0    0    0    ?    I    09:32    0:00    05:13    [kworker/2:0-ata_sff]    <noArgs>
root    226527    0.0    0.0    0    0    ?    I    09:33    0:00    04:34    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    226729    0.0    0.0    0    0    ?    I    09:34    0:00    02:38    [kworker/0:1-ata_sff]    <noArgs>
root    226749    0.0    0.0    0    0    ?    I    09:35    0:00    02:30    [kworker/3:1-ata_sff]    <noArgs>
root    227057    0.0    0.0    0    0    ?    I    09:37    0:00    00:02    [kworker/1:0]    <noArgs>
root    227085    0.0    0.0    2688    1768    ?    S    09:37    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227086    0.0    0.0    2688    1820    ?    S    09:37    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227107    0.0    0.0    9372    4108    ?    R    09:37    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227108    0.0    0.0    5592    1960    ?    S    09:37    0:00    00:00    tee    /dev/null
root    227109    0.0    0.0    9472    3908    ?    S    09:37    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14872    ?    Ss    Jan08    0:02    23:35:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:34    [kworker/0:0-events_power_efficient]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/3]    <noArgs>
root    37    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:34    [kworker/3:0-mm_percpu_wq]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:34    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:34    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/3:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:1H-kblockd]    <noArgs>
root    244    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ata_sff]    <noArgs>
root    255    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_1]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:32    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20788    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12140    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [psimon]    <noArgs>
root    561    0.0    0.0    8388    6516    ?    Ss    Jan08    0:01    23:35:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    610    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:35:29    dhcpcd:    eth0_[ip4]_[ip6]
root    611    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2176    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-rpciod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-xprtiod]    <noArgs>
root    621    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    631    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    632    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [DHCP6_proxy]_fe80::64d:b35c:1b7d:fe2f
dhcpcd    651    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:35:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    744    0.0    0.0    309036    7292    ?    Ssl    Jan08    0:00    23:35:23    /usr/libexec/accounts-daemon    <noArgs>
root    746    0.0    0.0    6876    2788    ?    Ss    Jan08    0:00    23:35:23    /usr/sbin/cron    -f
messagebus    747    0.0    0.0    9220    5488    ?    Ss    Jan08    0:00    23:35:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    750    0.0    0.1    382300    9800    ?    Ssl    Jan08    0:01    23:35:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    752    0.0    0.0    80876    3848    ?    Ssl    Jan08    0:00    23:35:23    /usr/sbin/qemu-ga    <noArgs>
root    754    0.0    0.1    18356    8828    ?    Ss    Jan08    0:00    23:35:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    787    0.0    0.2    336460    19196    ?    Ssl    Jan08    0:00    23:35:23    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12388    ?    Ssl    Jan08    0:00    23:35:23    /usr/sbin/ModemManager    <noArgs>
root    840    0.0    0.0    381356    7812    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:22    [kworker/3:2H-kblockd]    <noArgs>
root    844    0.0    0.0    16356    2196    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
root    852    0.0    0.2    1904820    20644    ?    Ssl    Jan08    0:19    23:35:22    /laforge.bin    <noArgs>
xrdp    876    0.0    0.0    15652    2348    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp    <noArgs>
root    882    0.0    0.0    8124    2640    tty1    Ss+    Jan08    0:00    23:35:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    883    0.0    1.3    915128    107396    tty7    Ssl+    Jan08    0:02    23:35:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    905    0.0    0.1    169620    8276    ?    Sl    Jan08    0:00    23:35:21    lightdm    --session-child_17_20
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:21    [psimon]    <noArgs>
lightdm    912    0.0    0.1    22868    13084    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3864    ?    S    Jan08    0:00    23:35:21    (sd-pam)    <noArgs>
lightdm    938    0.0    0.0    8344    4740    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101208    10728    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105368    ?    Ssl    Jan08    0:16    23:35:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479280    15984    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/wireplumber    <noArgs>
lightdm    943    0.0    0.0    84704    5256    ?    Ssl    Jan08    0:00    23:35:21    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    944    0.0    0.0    21492    3096    ?    SNsl    Jan08    0:00    23:35:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    945    0.0    0.1    98776    8372    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    970    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    978    0.0    0.0    8208    4432    ?    S    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.1    312816    8144    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7420    ?    Sl    Jan08    0:00    23:35:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5724    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7080    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1065    0.2    1.8    377776    149360    ?    Sl    Jan08    3:30    23:35:19    splunkd    -p_8089_start
root    1068    0.0    0.2    135648    17816    ?    Ss    Jan08    0:04    23:35:19    [splunkd    pid=1065]_splunkd_-p_8089_start_[process-runner]
root    1954    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1955    0.1    10.2    1414160    835856    ?    Sl    Jan08    1:47    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    102560    0.0    0.0    0    0    ?    I    Jan08    0:00    13:01:43    [kworker/u20:1-flush-254:0]    <noArgs>
root    160406    0.0    0.0    0    0    ?    I    02:37    0:00    06:59:37    [kworker/u19:1-flush-254:0]    <noArgs>
root    178117    0.0    0.0    0    0    ?    I    04:30    0:00    05:07:04    [kworker/u18:0-flush-254:0]    <noArgs>
root    181225    0.0    0.0    0    0    ?    I    04:47    0:00    04:49:34    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    187608    0.0    0.0    0    0    ?    I    05:29    0:00    04:07:44    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    190167    0.0    0.0    0    0    ?    I    05:46    0:00    03:50:45    [kworker/u17:0-flush-254:0]    <noArgs>
root    191193    0.0    0.0    0    0    ?    I    05:51    0:00    03:45:17    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    201234    0.0    0.0    0    0    ?    I    06:54    0:00    02:43:02    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    219675    0.0    0.0    0    0    ?    I    08:49    0:00    47:50    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    221960    0.0    0.0    0    0    ?    I    09:02    0:00    34:36    [kworker/u20:2]    <noArgs>
root    225430    0.0    0.0    0    0    ?    I    09:26    0:00    10:32    [kworker/1:0-ata_sff]    <noArgs>
root    225783    0.0    0.0    0    0    ?    I    09:28    0:00    08:53    [kworker/2:0-ata_sff]    <noArgs>
root    225995    0.0    0.0    0    0    ?    I    09:30    0:00    06:42    [kworker/3:1-ata_sff]    <noArgs>
root    226101    0.0    0.0    0    0    ?    I    09:31    0:00    05:32    [kworker/0:1-ata_sff]    <noArgs>
root    226461    0.0    0.0    0    0    ?    I    09:32    0:00    04:57    [kworker/1:2-ata_sff]    <noArgs>
root    226747    0.0    0.0    0    0    ?    I    09:33    0:00    04:05    [kworker/u18:1-flush-254:0]    <noArgs>
root    226778    0.0    0.0    0    0    ?    I    09:33    0:00    03:43    [kworker/2:2-ata_sff]    <noArgs>
root    226993    0.0    0.0    0    0    ?    I    09:35    0:00    01:32    [kworker/3:2-ata_sff]    <noArgs>
root    227084    0.0    0.0    0    0    ?    I    09:36    0:00    00:27    [kworker/0:2-ata_sff]    <noArgs>
root    227239    0.0    0.0    2688    1764    ?    S    09:37    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227240    0.0    0.0    2688    1788    ?    S    09:37    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227261    0.0    0.0    9372    4132    ?    R    09:37    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227262    0.0    0.0    5592    1928    ?    S    09:37    0:00    00:00    tee    /dev/null
root    227263    0.0    0.0    9472    4028    ?    S    09:37    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24692    14908    ?    Ss    Jan08    0:02    23:35:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:35    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:35:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [kworker/u18:3-events_unbound]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:35    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:35    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:35    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:35    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/0:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/u25:0]    <noArgs>
root    174    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/3:1H-kblockd]    <noArgs>
root    207    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:33    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [hwrng]    <noArgs>
root    383    0.0    0.2    41984    20632    ?    Ss    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37452    12116    ?    Ss    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [psimon]    <noArgs>
root    556    0.0    0.0    8388    5168    ?    Ss    Jan08    0:01    23:35:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:35:30    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2068    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2132    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10532    2208    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [DHCP6_proxy]_fe80::48d1:d6d2:4d7d:258f
dhcpcd    648    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:35:23    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7184    ?    Ssl    Jan08    0:00    23:35:23    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2700    ?    Ss    Jan08    0:00    23:35:23    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9212    5460    ?    Ss    Jan08    0:00    23:35:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9752    ?    Ssl    Jan08    0:01    23:35:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    4032    ?    Ssl    Jan08    0:00    23:35:23    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18344    8824    ?    Ss    Jan08    0:00    23:35:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    784    0.0    0.2    336448    19052    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    325524    12376    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    821    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:22    [kworker/3:2H-kblockd]    <noArgs>
root    839    0.0    0.0    381356    7836    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2324    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
root    856    0.0    0.2    1904820    20292    ?    Ssl    Jan08    0:19    23:35:22    /laforge.bin    <noArgs>
xrdp    872    0.0    0.0    15652    2440    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp    <noArgs>
root    883    0.0    1.3    915128    107560    tty7    Ssl+    Jan08    0:02    23:35:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    884    0.0    0.0    8124    2720    tty1    Ss+    Jan08    0:00    23:35:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    905    0.0    0.0    169620    8104    ?    Sl    Jan08    0:00    23:35:21    lightdm    --session-child_17_20
root    911    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:21    [psimon]    <noArgs>
lightdm    914    0.0    0.1    22824    13208    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd    --user
lightdm    916    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:35:21    (sd-pam)    <noArgs>
lightdm    939    0.0    0.0    8348    4660    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    940    0.0    0.1    101224    10632    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire    <noArgs>
lightdm    941    0.0    1.2    666648    105504    ?    Ssl    Jan08    0:16    23:35:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    945    0.0    0.1    479276    16108    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/wireplumber    <noArgs>
rtkit    946    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:35:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    947    0.0    0.0    84704    5188    ?    Ssl    Jan08    0:00    23:35:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    948    0.0    0.1    98776    8264    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    973    0.0    0.0    381080    7308    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4476    ?    S    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    988    0.0    0.0    312816    7944    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/gvfsd    <noArgs>
lightdm    999    0.0    0.0    398408    7444    ?    Sl    Jan08    0:00    23:35:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7076    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1069    0.2    1.8    375728    146972    ?    Sl    Jan08    3:39    23:35:19    splunkd    -p_8089_start
root    1072    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:35:19    [splunkd    pid=1069]_splunkd_-p_8089_start_[process-runner]
root    1959    0.0    0.0    2688    1736    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1960    0.1    10.2    1414160    833880    ?    Sl    Jan08    1:59    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    122312    0.0    0.0    0    0    ?    I    Jan08    0:00    10:57:59    [kworker/u17:0-writeback]    <noArgs>
root    128739    0.0    0.0    0    0    ?    I    Jan08    0:00    10:18:52    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    137590    0.0    0.0    0    0    ?    I    00:16    0:00    09:20:44    [kworker/u19:1-flush-254:0]    <noArgs>
root    142001    0.0    0.0    0    0    ?    I    00:43    0:00    08:54:09    [kworker/u17:2-flush-254:0]    <noArgs>
root    147752    0.0    0.0    0    0    ?    I    01:17    0:01    08:19:37    [kworker/3:2-events]    <noArgs>
root    167004    0.0    0.0    0    0    ?    I    03:18    0:00    06:18:55    [kworker/u17:1]    <noArgs>
root    167157    0.0    0.0    0    0    ?    I    03:19    0:00    06:17:17    [kworker/u19:0-flush-254:0]    <noArgs>
root    171406    0.0    0.0    0    0    ?    I    03:47    0:00    05:49:55    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    188460    0.0    0.0    0    0    ?    I    05:33    0:00    04:04:01    [kworker/u20:1-flush-254:0]    <noArgs>
root    203554    0.0    0.0    0    0    ?    I    07:07    0:00    02:29:25    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    217179    0.0    0.0    0    0    ?    I    08:33    0:00    01:03:54    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    225429    0.0    0.0    0    0    ?    I    09:26    0:00    10:16    [kworker/1:2-ata_sff]    <noArgs>
root    225797    0.0    0.0    0    0    ?    I    09:28    0:00    08:37    [kworker/2:1-ata_sff]    <noArgs>
root    225828    0.0    0.0    0    0    ?    I    09:28    0:00    08:19    [kworker/3:1-ata_sff]    <noArgs>
root    225904    0.0    0.0    0    0    ?    I    09:29    0:00    07:26    [kworker/0:2-ata_sff]    <noArgs>
root    226715    0.0    0.0    0    0    ?    I    09:32    0:00    04:19    [kworker/1:0-ata_sff]    <noArgs>
root    226806    0.0    0.0    0    0    ?    I    09:33    0:00    03:19    [kworker/2:0-ata_sff]    <noArgs>
root    226822    0.0    0.0    0    0    ?    I    09:34    0:00    03:10    [kworker/3:0-ata_sff]    <noArgs>
root    226977    0.0    0.0    0    0    ?    I    09:35    0:00    01:28    [kworker/0:1-ata_sff]    <noArgs>
root    227222    0.0    0.0    2688    1764    ?    S    09:37    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227223    0.0    0.0    2688    1764    ?    S    09:37    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227244    0.0    0.0    9372    4152    ?    R    09:37    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227245    0.0    0.0    5592    1908    ?    S    09:37    0:00    00:00    tee    /dev/null
root    227246    0.0    0.0    9472    3928    ?    S    09:37    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15328    ?    Ss    Jan08    0:02    23:35:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:35    [kworker/0:0-events]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [ksoftirqd/3]    <noArgs>
root    37    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:35    [kworker/3:0-mm_percpu_wq]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/3:0H-events_highpri]    <noArgs>
root    39    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [kworker/u17:0-flush-254:0]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:35    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:35    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:35    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:35    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:35    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/1:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:34    [kworker/1:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/2:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/3:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ata_sff]    <noArgs>
root    238    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_0]    <noArgs>
root    239    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    240    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [scsi_eh_1]    <noArgs>
root    241    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    289    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:32    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [hwrng]    <noArgs>
root    385    0.0    0.2    41980    20464    ?    Ss    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12088    ?    Ss    Jan08    0:00    23:35:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [psimon]    <noArgs>
root    553    0.0    0.0    8388    6768    ?    Ss    Jan08    0:01    23:35:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4524    ?    S    Jan08    0:00    23:35:30    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2504    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2088    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2088    ?    S    Jan08    0:00    23:35:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2228    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    630    0.0    0.0    10540    2356    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [DHCP6_proxy]_fe80::29b1:e948:117a:5152
dhcpcd    649    0.0    0.0    10540    2292    ?    S    Jan08    0:00    23:35:23    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    742    0.0    0.0    309036    7000    ?    Ssl    Jan08    0:00    23:35:22    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2720    ?    Ss    Jan08    0:00    23:35:22    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    9224    5592    ?    Ss    Jan08    0:00    23:35:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9904    ?    Ssl    Jan08    0:01    23:35:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3968    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18260    8804    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:22    [kworker/2:2H-kblockd]    <noArgs>
root    786    0.0    0.2    336472    18840    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    816    0.0    0.1    391064    12380    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    844    0.0    0.0    381356    7748    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    851    0.0    0.2    1978808    20744    ?    Ssl    Jan08    0:19    23:35:22    /laforge.bin    <noArgs>
root    858    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    880    0.0    0.0    15652    2384    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.3    915128    105848    tty7    Ssl+    Jan08    0:02    23:35:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    885    0.0    0.0    8124    2684    tty1    Ss+    Jan08    0:00    23:35:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    906    0.0    0.0    169620    8012    ?    Sl    Jan08    0:00    23:35:21    lightdm    --session-child_17_20
root    911    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:21    [psimon]    <noArgs>
lightdm    914    0.0    0.1    22452    12932    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd    --user
lightdm    916    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:35:21    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4648    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101224    10596    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire    <noArgs>
lightdm    942    0.0    1.2    666648    105484    ?    Ssl    Jan08    0:16    23:35:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    945    0.0    0.1    479268    16032    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/wireplumber    <noArgs>
lightdm    946    0.0    0.0    84704    5004    ?    Ssl    Jan08    0:00    23:35:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    947    0.0    0.1    98776    8260    ?    S<sl    Jan08    0:00    23:35:21    /usr/bin/pipewire-pulse    <noArgs>
rtkit    949    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:35:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    975    0.0    0.0    381080    7360    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    986    0.0    0.0    8208    4348    ?    S    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    992    0.0    0.0    312816    7968    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1000    0.0    0.0    398408    7272    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1037    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1039    0.0    0.0    168772    7132    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1070    0.2    1.8    377776    149256    ?    Sl    Jan08    3:28    23:35:19    splunkd    -p_8089_start
root    1073    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:35:19    [splunkd    pid=1070]_splunkd_-p_8089_start_[process-runner]
root    1960    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1961    0.1    10.2    1414160    835192    ?    Sl    Jan08    1:44    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    131872    0.0    0.0    0    0    ?    I    Jan08    0:00    09:57:44    [kworker/u20:0-events_unbound]    <noArgs>
root    143134    0.0    0.0    0    0    ?    I    00:49    0:00    08:47:54    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    167192    0.0    0.0    0    0    ?    I    03:20    0:00    06:16:45    [kworker/u19:1-flush-254:0]    <noArgs>
root    173012    0.0    0.0    0    0    ?    I    03:57    0:01    05:39:18    [kworker/2:1-events]    <noArgs>
root    189285    0.0    0.0    0    0    ?    I    05:39    0:00    03:57:44    [kworker/u17:3-ext4-rsv-conversion]    <noArgs>
root    198056    0.0    0.0    0    0    ?    I    06:33    0:00    03:04:05    [kworker/u19:0-flush-254:0]    <noArgs>
root    203927    0.0    0.0    0    0    ?    I    07:11    0:00    02:25:50    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    205600    0.0    0.0    0    0    ?    I    07:21    0:00    02:15:38    [kworker/u20:2-events_unbound]    <noArgs>
root    218840    0.0    0.0    0    0    ?    I    08:46    0:00    50:52    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    220970    0.0    0.0    0    0    ?    I    08:58    0:00    38:20    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    224290    0.0    0.0    0    0    ?    I    09:17    0:00    19:44    [kworker/u18:1-flush-254:0]    <noArgs>
root    225760    0.0    0.0    0    0    ?    I    09:28    0:00    08:55    [kworker/0:2-ata_sff]    <noArgs>
root    225791    0.0    0.0    0    0    ?    I    09:28    0:00    08:33    [kworker/1:1-ata_sff]    <noArgs>
root    225958    0.0    0.0    0    0    ?    I    09:30    0:00    06:50    [kworker/3:2-ata_sff]    <noArgs>
root    226064    0.0    0.0    0    0    ?    I    09:31    0:00    05:37    [kworker/2:2-ata_sff]    <noArgs>
root    226784    0.0    0.0    0    0    ?    I    09:33    0:00    03:26    [kworker/1:0-ata_sff]    <noArgs>
root    226815    0.0    0.0    0    0    ?    I    09:34    0:00    03:10    [kworker/0:1-ata_sff]    <noArgs>
root    226940    0.0    0.0    0    0    ?    I    09:35    0:00    01:49    [kworker/3:1-ata_sff]    <noArgs>
root    227076    0.0    0.0    0    0    ?    I    09:36    0:00    00:19    [kworker/2:0-ata_sff]    <noArgs>
root    227216    0.0    0.0    2688    1760    ?    S    09:37    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227217    0.0    0.0    2688    1824    ?    S    09:37    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227238    0.0    0.0    9372    4192    ?    R    09:37    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227239    0.0    0.0    5592    1872    ?    S    09:37    0:00    00:00    tee    /dev/null
root    227240    0.0    0.0    9472    3992    ?    S    09:37    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14868    ?    Ss    Jan08    0:02    23:35:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/3]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:33    [kworker/1:1-events]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u25:0]    <noArgs>
root    132    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [kworker/u19:3-writeback]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/2:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/3:1H-kblockd]    <noArgs>
root    219    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/0:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [scsi_eh_0]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:31    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [hwrng]    <noArgs>
root    383    0.0    0.2    41980    20520    ?    Ss    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12096    ?    Ss    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    7712    ?    Ss    Jan08    0:01    23:35:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:35:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:35:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:35:26    dhcpcd:    [DHCP6_proxy]_fe80::d870:a9e1:678:d338
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:35:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    6984    ?    Ssl    Jan08    0:00    23:35:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2644    ?    Ss    Jan08    0:00    23:35:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9068    5460    ?    Ss    Jan08    0:00    23:35:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9824    ?    Ssl    Jan08    0:01    23:35:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3880    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18480    8812    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    787    0.0    0.2    336476    18792    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12368    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    16356    2308    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    860    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp    <noArgs>
root    863    0.0    0.2    1978552    20724    ?    Ssl    Jan08    0:18    23:35:22    /laforge.bin    <noArgs>
root    869    0.0    1.2    915132    104272    tty7    Ssl+    Jan08    0:02    23:35:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    875    0.0    0.0    8124    2600    tty1    Ss+    Jan08    0:00    23:35:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.0    169620    8128    ?    Sl    Jan08    0:00    23:35:21    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22452    12968    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:21    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:35:21    (sd-pam)    <noArgs>
root    930    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:20    [kworker/3:2H-kblockd]    <noArgs>
lightdm    938    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101240    10684    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105372    ?    Ssl    Jan08    0:16    23:35:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    942    0.0    0.0    21492    3128    ?    SNsl    Jan08    0:00    23:35:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    946    0.0    0.1    479280    15968    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5228    ?    Ssl    Jan08    0:00    23:35:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    948    0.0    0.1    98776    8352    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    974    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4420    ?    S    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    990    0.0    0.1    312816    8180    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd    <noArgs>
lightdm    997    0.0    0.0    398408    7412    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5780    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    375728    147344    ?    Sl    Jan08    3:33    23:35:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    17812    ?    Ss    Jan08    0:04    23:35:18    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1076    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:18    [kworker/0:3-events]    <noArgs>
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.2    1414160    833636    ?    Sl    Jan08    2:01    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    128688    0.0    0.0    0    0    ?    I    Jan08    0:00    10:19:33    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    141502    0.0    0.0    0    0    ?    I    00:39    0:00    08:57:34    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    154915    0.0    0.0    0    0    ?    I    02:02    0:00    07:34:46    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    174072    0.0    0.0    0    0    ?    I    04:02    0:00    05:34:43    [kworker/u18:1-flush-254:0]    <noArgs>
root    174241    0.0    0.0    0    0    ?    I    04:03    0:00    05:33:26    [kworker/u20:2-flush-254:0]    <noArgs>
root    178810    0.0    0.0    0    0    ?    I    04:32    0:00    05:04:36    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    198103    0.0    0.0    0    0    ?    I    06:33    0:00    03:03:36    [kworker/u19:1-flush-254:0]    <noArgs>
root    202919    0.0    0.0    0    0    ?    I    07:03    0:00    02:33:57    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    208376    0.0    0.0    0    0    ?    I    07:39    0:00    01:58:07    [kworker/u20:1-flush-254:0]    <noArgs>
root    212470    0.0    0.0    0    0    ?    I    08:03    0:00    01:33:57    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    219548    0.0    0.0    0    0    ?    I    08:48    0:00    48:54    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    224597    0.0    0.0    0    0    ?    I    09:20    0:00    16:59    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    225700    0.0    0.0    0    0    ?    I    09:27    0:00    09:41    [kworker/0:0-ata_sff]    <noArgs>
root    225746    0.0    0.0    0    0    ?    I    09:28    0:00    09:09    [kworker/2:1-ata_sff]    <noArgs>
root    225988    0.0    0.0    0    0    ?    I    09:30    0:00    06:32    [kworker/1:0-ata_sff]    <noArgs>
root    226004    0.0    0.0    0    0    ?    I    09:30    0:00    06:17    [kworker/3:0-ata_sff]    <noArgs>
root    226709    0.0    0.0    0    0    ?    I    09:32    0:00    04:20    [kworker/0:1-ata_sff]    <noArgs>
root    226740    0.0    0.0    0    0    ?    I    09:33    0:00    03:58    [kworker/2:0-ata_sff]    <noArgs>
root    227015    0.0    0.0    0    0    ?    I    09:36    0:00    01:01    [kworker/1:2-ata_sff]    <noArgs>
root    227061    0.0    0.0    0    0    ?    I    09:36    0:00    00:31    [kworker/3:2-ata_sff]    <noArgs>
root    227216    0.0    0.0    2688    1748    ?    S    09:37    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227217    0.0    0.0    2688    1824    ?    S    09:37    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227238    0.0    0.0    9372    4116    ?    R    09:37    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227239    0.0    0.0    5592    1916    ?    S    09:37    0:00    00:00    tee    /dev/null
root    227240    0.0    0.0    9472    3952    ?    S    09:37    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}