_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24604    15440    ?    Ss    Jan08    0:02    23:35:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:06    23:35:34    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:35:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-devfreq_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:1H-kblockd]    <noArgs>
root    69    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:33    [kworker/2:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/3:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/1:1H-kblockd]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ata_sff]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    271    0.0    0.0    0    0    ?    I    Jan08    0:05    23:35:32    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [hwrng]    <noArgs>
root    385    0.0    0.2    41980    20668    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12104    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [psimon]    <noArgs>
root    568    0.0    0.0    8388    5040    ?    Ss    Jan08    0:01    23:35:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    609    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:35:29    dhcpcd:    eth0_[ip4]_[ip6]
root    610    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2080    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    612    0.0    0.0    10516    2136    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-rpciod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-xprtiod]    <noArgs>
root    620    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    630    0.0    0.0    10536    2220    ?    S    Jan08    0:00    23:35:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    631    0.0    0.0    10536    2348    ?    S    Jan08    0:00    23:35:26    dhcpcd:    [DHCP6_proxy]_fe80::40a5:57cd:1493:bb0f
dhcpcd    650    0.0    0.0    10536    2348    ?    S    Jan08    0:00    23:35:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    743    0.0    0.0    309036    7184    ?    Ssl    Jan08    0:00    23:35:22    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2784    ?    Ss    Jan08    0:00    23:35:22    /usr/sbin/cron    -f
messagebus    747    0.0    0.0    9060    5524    ?    Ss    Jan08    0:00    23:35:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382300    9792    ?    Ssl    Jan08    0:01    23:35:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    750    0.0    0.0    80876    3992    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18260    8824    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    793    0.0    0.2    336468    18700    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    816    0.0    0.1    391060    12380    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    822    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:22    [kworker/3:2H-kblockd]    <noArgs>
root    845    0.0    0.0    381488    7796    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/lightdm    <noArgs>
root    849    0.0    0.2    1978808    20152    ?    Ssl    Jan08    0:20    23:35:21    /laforge.bin    <noArgs>
root    860    0.0    0.0    16356    2308    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    883    0.0    0.0    15652    2496    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.2    915128    104408    tty7    Ssl+    Jan08    0:02    23:35:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    886    0.0    0.0    8124    2588    tty1    Ss+    Jan08    0:00    23:35:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    907    0.0    0.1    169620    8280    ?    Sl    Jan08    0:00    23:35:20    lightdm    --session-child_17_20
lightdm    914    0.0    0.1    22868    13064    ?    Ss    Jan08    0:00    23:35:20    /usr/lib/systemd/systemd    --user
root    916    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:20    [psimon]    <noArgs>
lightdm    918    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:35:20    (sd-pam)    <noArgs>
lightdm    941    0.0    0.0    8348    4704    ?    Ss    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    942    0.0    0.1    101208    10732    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire    <noArgs>
lightdm    943    0.0    1.2    666648    105592    ?    Ssl    Jan08    0:16    23:35:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    947    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:35:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    479280    16000    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/wireplumber    <noArgs>
lightdm    950    0.0    0.0    84704    5228    ?    Ssl    Jan08    0:00    23:35:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    951    0.0    0.1    98776    8276    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7284    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    987    0.0    0.0    8208    4516    ?    S    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    992    0.0    0.0    312816    8040    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1001    0.0    0.0    398408    7384    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1036    0.0    0.0    14372    5760    ?    S    Jan08    0:00    23:35:19    lightdm    --session-child_13_20
lightdm    1038    0.0    0.0    168772    7008    ?    Sl    Jan08    0:00    23:35:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1071    0.2    1.8    377776    151036    ?    Sl    Jan08    3:55    23:35:18    splunkd    -p_8089_start
root    1074    0.0    0.2    135648    18012    ?    Ss    Jan08    0:04    23:35:18    [splunkd    pid=1071]_splunkd_-p_8089_start_[process-runner]
root    1908    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1909    0.1    10.2    1414160    833160    ?    Sl    Jan08    2:09    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    7502    0.0    0.0    0    0    ?    I    Jan08    0:00    22:58:48    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    54450    0.0    0.0    0    0    ?    I    Jan08    0:00    18:04:33    [kworker/u20:0-flush-254:0]    <noArgs>
root    88762    0.0    0.0    0    0    ?    I    Jan08    0:03    14:29:02    [kworker/3:0-events]    <noArgs>
root    93496    0.0    0.0    0    0    ?    I    Jan08    0:00    13:58:42    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    159062    0.0    0.0    0    0    ?    I    02:35    0:00    07:05:36    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    177524    0.0    0.0    0    0    ?    I    04:30    0:00    05:10:39    [kworker/u18:2-flush-254:0]    <noArgs>
root    181129    0.0    0.0    0    0    ?    I    04:51    0:00    04:49:43    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    181376    0.0    0.0    0    0    ?    I    04:53    0:00    04:47:31    [kworker/u19:2-events_unbound]    <noArgs>
root    186104    0.0    0.0    0    0    ?    I    05:21    0:00    04:18:56    [kworker/u19:0-flush-254:0]    <noArgs>
root    190725    0.0    0.0    0    0    ?    I    05:51    0:00    03:49:33    [kworker/u18:0-flush-254:0]    <noArgs>
root    190807    0.0    0.0    0    0    ?    I    05:51    0:00    03:48:57    [kworker/u17:1-flush-254:0]    <noArgs>
root    195711    0.0    0.0    0    0    ?    I    06:21    0:00    03:18:55    [kworker/u20:1]    <noArgs>
root    214844    0.0    0.0    0    0    ?    I    08:21    0:00    01:19:14    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    225804    0.0    0.0    0    0    ?    I    09:32    0:00    08:46    [kworker/1:0-ata_sff]    <noArgs>
root    225865    0.0    0.0    0    0    ?    I    09:32    0:00    08:10    [kworker/2:0-ata_sff]    <noArgs>
root    225941    0.0    0.0    0    0    ?    I    09:33    0:00    07:13    [kworker/0:2-ata_sff]    <noArgs>
root    226271    0.0    0.0    0    0    ?    I    09:35    0:00    05:10    [kworker/3:2-ata_sff]    <noArgs>
root    226801    0.0    0.0    0    0    ?    I    09:37    0:00    03:40    [kworker/1:1-ata_sff]    <noArgs>
root    226877    0.0    0.0    0    0    ?    I    09:38    0:00    02:47    [kworker/2:1-ata_sff]    <noArgs>
root    226968    0.0    0.0    0    0    ?    I    09:38    0:00    01:49    [kworker/0:0-ata_sff]    <noArgs>
root    227290    0.0    0.0    2688    1828    ?    S    09:40    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227291    0.0    0.0    2688    1792    ?    S    09:40    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227312    0.0    0.0    9372    4164    ?    R    09:40    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227313    0.0    0.0    5592    1912    ?    S    09:40    0:00    00:00    tee    /dev/null
root    227314    0.0    0.0    9472    4104    ?    S    09:40    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24696    15288    ?    Ss    Jan08    0:02    23:35:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:33    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:1H-kblockd]    <noArgs>
root    70    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:32    [kworker/2:2-events]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/3:1H-kblockd]    <noArgs>
root    209    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/0:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:32    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ata_sff]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_0]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    265    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:31    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [hwrng]    <noArgs>
root    383    0.0    0.2    41980    20728    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    6324    ?    Ss    Jan08    0:01    23:35:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:35:28    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10536    2444    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2048    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:35:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:35:26    dhcpcd:    [DHCP6_proxy]_fe80::408f:6226:16e4:1591
dhcpcd    649    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:35:22    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    741    0.0    0.0    309036    7308    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2720    ?    Ss    Jan08    0:00    23:35:21    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9204    5432    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9952    ?    Ssl    Jan08    0:01    23:35:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18348    8820    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    785    0.0    0.2    336460    19064    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391064    12324    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7696    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.2    1978552    20140    ?    Ssl    Jan08    0:17    23:35:21    /laforge.bin    <noArgs>
root    848    0.0    0.0    16356    2308    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    874    0.0    0.0    15652    2540    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    106104    tty7    Ssl+    Jan08    0:02    23:35:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2468    tty1    Ss+    Jan08    0:00    23:35:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8168    ?    Sl    Jan08    0:00    23:35:20    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22464    12908    ?    Ss    Jan08    0:00    23:35:20    /usr/lib/systemd/systemd    --user
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:20    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:35:20    (sd-pam)    <noArgs>
lightdm    941    0.0    0.0    8348    4744    ?    Ss    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    942    0.0    0.1    101224    10536    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire    <noArgs>
lightdm    943    0.0    1.2    666648    105340    ?    Ssl    Jan08    0:15    23:35:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    947    0.0    0.1    479288    16056    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/wireplumber    <noArgs>
lightdm    949    0.0    0.0    84704    5148    ?    Ssl    Jan08    0:00    23:35:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    950    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:35:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.1    98776    8240    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7100    ?    Ssl    Jan08    0:00    23:35:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    988    0.0    0.0    8208    4448    ?    S    Jan08    0:00    23:35:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    993    0.0    0.1    312816    8192    ?    Ssl    Jan08    0:00    23:35:19    /usr/libexec/gvfsd    <noArgs>
lightdm    1009    0.0    0.0    398408    7376    ?    Sl    Jan08    0:00    23:35:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1033    0.0    0.0    14372    5684    ?    S    Jan08    0:00    23:35:19    lightdm    --session-child_13_20
lightdm    1035    0.0    0.0    168772    7020    ?    Sl    Jan08    0:00    23:35:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    151852    ?    Sl    Jan08    3:16    23:35:18    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    17888    ?    Ss    Jan08    0:03    23:35:18    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1954    0.0    0.0    2688    1768    ?    S    Jan08    0:00    23:34:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1955    0.1    10.2    1414160    833408    ?    Sl    Jan08    1:46    23:34:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    75997    0.0    0.0    0    0    ?    I    Jan08    0:00    15:49:33    [kworker/u20:2-events_unbound]    <noArgs>
root    92162    0.0    0.0    0    0    ?    I    Jan08    0:00    14:05:16    [kworker/u17:3-kvfree_rcu_reclaim]    <noArgs>
root    135967    0.0    0.0    0    0    ?    I    00:06    0:00    09:33:57    [kworker/u20:0-flush-254:0]    <noArgs>
root    139286    0.0    0.0    0    0    ?    I    00:29    0:00    09:11:01    [kworker/u19:2-flush-254:0]    <noArgs>
root    140382    0.0    0.0    0    0    ?    I    00:35    0:00    09:04:56    [kworker/u19:1-flush-254:0]    <noArgs>
root    140654    0.0    0.0    0    0    ?    I    00:36    0:00    09:04:18    [kworker/u20:1-flush-254:0]    <noArgs>
root    145702    0.0    0.0    0    0    ?    I    01:08    0:01    08:32:10    [kworker/0:1-events_freezable_pwr_efficient]    <noArgs>
root    169265    0.0    0.0    0    0    ?    I    03:36    0:00    06:04:35    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    171719    0.0    0.0    0    0    ?    I    03:51    0:00    05:48:54    [kworker/u19:0]    <noArgs>
root    193179    0.0    0.0    0    0    ?    I    06:06    0:00    03:34:46    [kworker/u18:2-flush-254:0]    <noArgs>
root    194985    0.0    0.0    0    0    ?    I    06:19    0:00    03:21:32    [kworker/u18:1-flush-254:0]    <noArgs>
root    198336    0.0    0.0    0    0    ?    I    06:39    0:00    03:01:47    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    225760    0.0    0.0    0    0    ?    I    09:31    0:00    09:04    [kworker/3:0-ata_sff]    <noArgs>
root    225851    0.0    0.0    0    0    ?    I    09:32    0:00    08:04    [kworker/1:1-ata_sff]    <noArgs>
root    225927    0.0    0.0    0    0    ?    I    09:33    0:00    07:15    [kworker/2:1-ata_sff]    <noArgs>
root    226082    0.0    0.0    0    0    ?    I    09:35    0:00    05:32    [kworker/0:0-ata_sff]    <noArgs>
root    226787    0.0    0.0    0    0    ?    I    09:37    0:00    03:31    [kworker/3:2-ata_sff]    <noArgs>
root    226863    0.0    0.0    0    0    ?    I    09:38    0:00    02:45    [kworker/1:0-ata_sff]    <noArgs>
root    226939    0.0    0.0    0    0    ?    I    09:38    0:00    01:53    [kworker/2:0-ata_sff]    <noArgs>
root    227137    0.0    0.0    0    0    ?    I    09:40    0:00    00:20    [kworker/0:2-ata_sff]    <noArgs>
root    227277    0.0    0.0    2688    1712    ?    S    09:40    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227278    0.0    0.0    2688    1792    ?    S    09:40    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227299    0.0    0.0    9372    4196    ?    R    09:40    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227300    0.0    0.0    5592    1920    ?    S    09:40    0:00    00:00    tee    /dev/null
root    227301    0.0    0.0    9472    3916    ?    S    09:40    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    14888    ?    Ss    Jan08    0:02    23:35:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:03    23:35:34    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:33    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u25:0]    <noArgs>
root    133    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u20:1-flush-254:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/3:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:1H-kblockd]    <noArgs>
root    235    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [hwrng]    <noArgs>
root    382    0.0    0.2    41980    20452    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12080    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [psimon]    <noArgs>
root    553    0.0    0.0    8388    7704    ?    Ss    Jan08    0:01    23:35:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:35:29    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2504    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2248    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    627    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:35:27    dhcpcd:    [DHCP6_proxy]_fe80::7db5:d5b3:cd73:6d0
dhcpcd    646    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:35:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    739    0.0    0.0    309036    7116    ?    Ssl    Jan08    0:00    23:35:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:35:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9204    5588    ?    Ss    Jan08    0:00    23:35:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9920    ?    Ssl    Jan08    0:01    23:35:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3912    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    8816    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336480    19024    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391064    12472    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7652    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.2    1978552    20484    ?    Ssl    Jan08    0:18    23:35:22    /laforge.bin    <noArgs>
root    850    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    872    0.0    0.0    15652    2388    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp    <noArgs>
root    879    0.0    0.0    8124    2672    tty1    Ss+    Jan08    0:00    23:35:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    880    0.0    1.3    915128    106112    tty7    Ssl+    Jan08    0:02    23:35:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    900    0.0    0.0    169620    8120    ?    Sl    Jan08    0:00    23:35:20    lightdm    --session-child_17_20
lightdm    906    0.0    0.1    22880    13028    ?    Ss    Jan08    0:00    23:35:20    /usr/lib/systemd/systemd    --user
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:20    [psimon]    <noArgs>
lightdm    910    0.0    0.0    22712    3816    ?    S    Jan08    0:00    23:35:20    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4752    ?    Ss    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101208    10820    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire    <noArgs>
rtkit    936    0.0    0.0    21492    3116    ?    SNsl    Jan08    0:00    23:35:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    937    0.0    0.1    479284    16040    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/wireplumber    <noArgs>
lightdm    938    0.0    0.0    84704    5200    ?    Ssl    Jan08    0:00    23:35:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    939    0.0    0.0    98776    8052    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    943    0.0    1.2    666648    105268    ?    Ssl    Jan08    0:15    23:35:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    968    0.0    0.0    381080    7196    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    7816    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7452    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1027    0.0    0.0    14372    5812    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1029    0.0    0.0    168772    7028    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1060    0.2    1.8    379824    150056    ?    Sl    Jan08    3:11    23:35:18    splunkd    -p_8089_start
root    1063    0.0    0.2    135648    18028    ?    Ss    Jan08    0:03    23:35:18    [splunkd    pid=1060]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    10.1    1414160    829664    ?    Sl    Jan08    1:34    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    33053    0.0    0.0    0    0    ?    I    Jan08    0:00    20:19:33    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    69632    0.0    0.0    0    0    ?    I    Jan08    0:03    16:29:46    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    108912    0.0    0.0    0    0    ?    I    Jan08    0:00    12:20:26    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    124738    0.0    0.0    0    0    ?    I    Jan08    0:00    10:42:26    [kworker/u20:2-flush-254:0]    <noArgs>
root    125614    0.0    0.0    0    0    ?    I    Jan08    0:00    10:35:16    [kworker/u18:0-flush-254:0]    <noArgs>
root    127461    0.0    0.0    0    0    ?    I    Jan08    0:00    10:25:16    [kworker/u17:3-ext4-rsv-conversion]    <noArgs>
root    175172    0.0    0.0    0    0    ?    I    04:14    0:00    05:26:16    [kworker/u19:0-flush-254:0]    <noArgs>
root    198775    0.0    0.0    0    0    ?    I    06:41    0:00    02:59:18    [kworker/u19:1-flush-254:0]    <noArgs>
root    199618    0.0    0.0    0    0    ?    I    06:48    0:00    02:52:29    [kworker/u17:0-flush-254:0]    <noArgs>
root    201869    0.0    0.0    0    0    ?    I    07:02    0:00    02:38:17    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    215200    0.0    0.0    0    0    ?    I    08:25    0:00    01:15:17    [kworker/u17:1]    <noArgs>
root    224348    0.0    0.0    0    0    ?    I    09:21    0:00    19:35    [kworker/u18:1]    <noArgs>
root    225627    0.0    0.0    0    0    ?    I    09:30    0:00    09:57    [kworker/1:0-ata_sff]    <noArgs>
root    225731    0.0    0.0    0    0    ?    I    09:31    0:00    09:23    [kworker/2:0-ata_sff]    <noArgs>
root    225867    0.0    0.0    0    0    ?    I    09:32    0:00    07:56    [kworker/3:2-ata_sff]    <noArgs>
root    225898    0.0    0.0    0    0    ?    I    09:33    0:00    07:40    [kworker/0:1-ata_sff]    <noArgs>
root    226634    0.0    0.0    0    0    ?    I    09:36    0:00    04:42    [kworker/1:2-ata_sff]    <noArgs>
root    226743    0.0    0.0    0    0    ?    I    09:36    0:00    04:08    [kworker/2:1-ata_sff]    <noArgs>
root    226864    0.0    0.0    0    0    ?    I    09:38    0:00    02:46    [kworker/3:0-ata_sff]    <noArgs>
root    226880    0.0    0.0    0    0    ?    I    09:38    0:00    02:37    [kworker/0:2-ata_sff]    <noArgs>
root    227277    0.0    0.0    2688    1748    ?    S    09:40    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227278    0.0    0.0    2688    1812    ?    S    09:40    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227299    0.0    0.0    9372    4200    ?    R    09:40    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227300    0.0    0.0    5592    2008    ?    S    09:40    0:00    00:00    tee    /dev/null
root    227301    0.0    0.0    9472    4048    ?    S    09:40    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24700    14908    ?    Ss    Jan08    0:02    23:35:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:34    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:34    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:34    [kworker/3:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/u25:0]    <noArgs>
root    173    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/2:1H-kblockd]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/1:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/0:1H-kblockd]    <noArgs>
root    244    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:32    [kworker/1:2-events]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:32    [kworker/2:2-events]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:31    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20496    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    396    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:35:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [psimon]    <noArgs>
root    554    0.0    0.0    8388    5224    ?    Ss    Jan08    0:01    23:35:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10536    4524    ?    S    Jan08    0:00    23:35:29    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2504    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:35:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2248    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    627    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [DHCP6_proxy]_fe80::40b9:b017:7606:f729
dhcpcd    646    0.0    0.0    10540    2376    ?    S    Jan08    0:00    23:35:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    739    0.0    0.0    309036    7244    ?    Ssl    Jan08    0:00    23:35:22    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2752    ?    Ss    Jan08    0:00    23:35:22    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9072    5500    ?    Ss    Jan08    0:00    23:35:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    744    0.0    0.1    382300    9908    ?    Ssl    Jan08    0:01    23:35:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3936    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8812    ?    Ss    Jan08    0:00    23:35:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336476    19124    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    391060    12340    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381356    7760    ?    Ssl    Jan08    0:00    23:35:22    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    16356    2348    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1905076    20228    ?    Ssl    Jan08    0:19    23:35:22    /laforge.bin    <noArgs>
xrdp    877    0.0    0.0    15652    2372    ?    S    Jan08    0:00    23:35:22    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915132    107496    tty7    Ssl+    Jan08    0:02    23:35:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2520    tty1    Ss+    Jan08    0:00    23:35:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    900    0.0    0.1    169616    8200    ?    Sl    Jan08    0:00    23:35:21    lightdm    --session-child_17_20
lightdm    907    0.0    0.1    22880    13028    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:20    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3860    ?    S    Jan08    0:00    23:35:20    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101208    10752    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire    <noArgs>
lightdm    936    0.0    1.2    666648    105332    ?    Ssl    Jan08    0:16    23:35:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    940    0.0    0.0    21492    3168    ?    SNsl    Jan08    0:00    23:35:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    941    0.0    0.1    479284    15988    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/wireplumber    <noArgs>
lightdm    942    0.0    0.0    84704    5036    ?    Ssl    Jan08    0:00    23:35:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    943    0.0    0.1    98776    8264    ?    S<sl    Jan08    0:00    23:35:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    968    0.0    0.0    381080    7136    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4472    ?    S    Jan08    0:00    23:35:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.1    312816    8212    ?    Ssl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7320    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5784    ?    S    Jan08    0:00    23:35:20    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7128    ?    Sl    Jan08    0:00    23:35:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    377776    150712    ?    Sl    Jan08    3:30    23:35:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17932    ?    Ss    Jan08    0:04    23:35:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1950    0.0    0.0    2688    1792    ?    S    Jan08    0:00    23:34:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1951    0.1    10.2    1414160    833780    ?    Sl    Jan08    1:47    23:34:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    123801    0.0    0.0    0    0    ?    I    Jan08    0:00    10:49:37    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    126267    0.0    0.0    0    0    ?    I    Jan08    0:00    10:34:37    [kworker/u20:0-flush-254:0]    <noArgs>
root    169346    0.0    0.0    0    0    ?    I    03:36    0:00    06:03:58    [kworker/u19:1-ext4-rsv-conversion]    <noArgs>
root    179798    0.0    0.0    0    0    ?    I    04:43    0:00    04:57:16    [kworker/u18:0-flush-254:0]    <noArgs>
root    182038    0.0    0.0    0    0    ?    I    04:57    0:00    04:43:12    [kworker/u18:1-events_unbound]    <noArgs>
root    186154    0.0    0.0    0    0    ?    I    05:21    0:00    04:18:55    [kworker/u19:2-flush-254:0]    <noArgs>
root    204491    0.0    0.0    0    0    ?    I    07:18    0:00    02:22:16    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    205465    0.0    0.0    0    0    ?    I    07:22    0:00    02:17:56    [kworker/u18:3-kvfree_rcu_reclaim]    <noArgs>
root    208715    0.0    0.0    0    0    ?    I    07:45    0:00    01:55:43    [kworker/u17:2-flush-254:0]    <noArgs>
root    215759    0.0    0.0    0    0    ?    I    08:28    0:00    01:12:16    [kworker/u17:3-flush-254:0]    <noArgs>
root    218686    0.0    0.0    0    0    ?    I    08:47    0:00    53:40    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    220204    0.0    0.0    0    0    ?    I    08:55    0:00    44:48    [kworker/3:0-events_freezable_pwr_efficient]    <noArgs>
root    222109    0.0    0.0    0    0    ?    I    09:06    0:00    33:58    [kworker/u20:2]    <noArgs>
root    225967    0.0    0.0    0    0    ?    I    09:33    0:00    07:24    [kworker/3:1-ata_sff]    <noArgs>
root    225983    0.0    0.0    0    0    ?    I    09:33    0:00    07:12    [kworker/0:0-ata_sff]    <noArgs>
root    226014    0.0    0.0    0    0    ?    I    09:33    0:00    06:54    [kworker/2:1-ata_sff]    <noArgs>
root    226090    0.0    0.0    0    0    ?    I    09:34    0:00    06:09    [kworker/1:0-ata_sff]    <noArgs>
root    226979    0.0    0.0    0    0    ?    I    09:38    0:00    02:07    [kworker/3:2-ata_sff]    <noArgs>
root    226995    0.0    0.0    0    0    ?    I    09:38    0:00    01:53    [kworker/0:2-ata_sff]    <noArgs>
root    227029    0.0    0.0    0    0    ?    I    09:39    0:00    01:37    [kworker/2:0-ata_sff]    <noArgs>
root    227133    0.0    0.0    0    0    ?    I    09:39    0:00    00:55    [kworker/1:1-ata_sff]    <noArgs>
root    227334    0.0    0.0    2688    1748    ?    S    09:40    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227335    0.0    0.0    2688    1764    ?    S    09:40    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227356    0.0    0.0    9372    4216    ?    R    09:40    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227357    0.0    0.0    5592    1848    ?    S    09:40    0:00    00:00    tee    /dev/null
root    227358    0.0    0.0    9472    4052    ?    S    09:40    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    15152    ?    Ss    Jan08    0:02    23:35:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:35:33    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:35:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:33    [kworker/3:0H-events_highpri]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:35:32    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:32    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:35:32    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-devfreq_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:32    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:35:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/u25:0]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/0:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/3:1H-kblockd]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-ata_sff]    <noArgs>
root    258    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:31    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:03    23:35:31    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:35:30    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:30    [hwrng]    <noArgs>
root    381    0.0    0.2    41980    20580    ?    Ss    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    413    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37576    12116    ?    Ss    Jan08    0:00    23:35:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    427    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:29    [psimon]    <noArgs>
root    564    0.0    0.0    8388    7652    ?    Ss    Jan08    0:01    23:35:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:35:28    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:35:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:28    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:35:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    627    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:35:26    dhcpcd:    [DHCP6_proxy]_fe80::7e7:d348:2d3a:1121
dhcpcd    646    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:35:21    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    739    0.0    0.0    309036    7176    ?    Ssl    Jan08    0:00    23:35:21    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2732    ?    Ss    Jan08    0:00    23:35:21    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9068    5564    ?    Ss    Jan08    0:00    23:35:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9952    ?    Ssl    Jan08    0:01    23:35:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    4044    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18352    8764    ?    Ss    Jan08    0:00    23:35:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    792    0.0    0.2    336448    19116    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391064    12404    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/ModemManager    <noArgs>
root    834    0.0    0.0    381356    7760    ?    Ssl    Jan08    0:00    23:35:21    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:35:21    [kworker/2:2H-kblockd]    <noArgs>
root    840    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp-sesman    <noArgs>
root    847    0.0    0.2    1905076    20492    ?    Ssl    Jan08    0:19    23:35:21    /laforge.bin    <noArgs>
xrdp    871    0.0    0.0    15652    2404    ?    S    Jan08    0:00    23:35:21    /usr/sbin/xrdp    <noArgs>
root    876    0.0    1.3    915128    105868    tty7    Ssl+    Jan08    0:02    23:35:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2684    tty1    Ss+    Jan08    0:00    23:35:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.0    169620    8044    ?    Sl    Jan08    0:00    23:35:20    lightdm    --session-child_17_20
lightdm    905    0.0    0.1    22880    13076    ?    Ss    Jan08    0:00    23:35:20    /usr/lib/systemd/systemd    --user
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:35:20    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:35:19    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:35:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10708    ?    S<sl    Jan08    0:00    23:35:19    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.3    666648    105836    ?    Ssl    Jan08    0:16    23:35:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3168    ?    SNsl    Jan08    0:00    23:35:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479280    16016    ?    S<sl    Jan08    0:00    23:35:19    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5212    ?    Ssl    Jan08    0:00    23:35:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8192    ?    S<sl    Jan08    0:00    23:35:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7276    ?    Ssl    Jan08    0:00    23:35:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    975    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:35:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    982    0.0    0.0    312816    7896    ?    Ssl    Jan08    0:00    23:35:19    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7404    ?    Sl    Jan08    0:00    23:35:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1026    0.0    0.0    14372    5760    ?    S    Jan08    0:00    23:35:19    lightdm    --session-child_13_20
lightdm    1028    0.0    0.0    168772    7200    ?    Sl    Jan08    0:00    23:35:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    377776    150768    ?    Sl    Jan08    3:28    23:35:18    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17912    ?    Ss    Jan08    0:04    23:35:18    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1894    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:34:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1895    0.1    10.2    1414160    833708    ?    Sl    Jan08    1:46    23:34:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    36463    0.0    0.0    0    0    ?    I    Jan08    0:00    19:55:13    [kworker/u20:0-ext4-rsv-conversion]    <noArgs>
root    61735    0.0    0.0    0    0    ?    I    Jan08    0:00    17:19:35    [kworker/u20:1-ext4-rsv-conversion]    <noArgs>
root    102345    0.0    0.0    0    0    ?    I    Jan08    0:00    13:03:57    [kworker/u18:2-writeback]    <noArgs>
root    104620    0.0    0.0    0    0    ?    I    Jan08    0:02    12:49:36    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    118447    0.0    0.0    0    0    ?    I    Jan08    0:00    11:21:01    [kworker/u19:1-events_unbound]    <noArgs>
root    133395    0.0    0.0    0    0    ?    I    Jan08    0:00    09:49:34    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    157448    0.0    0.0    0    0    ?    I    02:21    0:00    07:19:00    [kworker/u17:2-flush-254:0]    <noArgs>
root    176505    0.0    0.0    0    0    ?    I    04:21    0:00    05:19:33    [kworker/u17:0-events_unbound]    <noArgs>
root    177264    0.0    0.0    0    0    ?    I    04:26    0:00    05:13:53    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    188740    0.0    0.0    0    0    ?    I    05:39    0:00    04:01:29    [kworker/u17:3]    <noArgs>
root    201339    0.0    0.0    0    0    ?    I    06:59    0:00    02:41:32    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    212478    0.0    0.0    0    0    ?    I    08:06    0:00    01:33:56    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    217470    0.0    0.0    0    0    ?    I    08:39    0:00    01:01:14    [kworker/u18:0]    <noArgs>
root    225399    0.0    0.0    0    0    ?    I    09:30    0:00    10:34    [kworker/1:0-ata_sff]    <noArgs>
root    225812    0.0    0.0    0    0    ?    I    09:32    0:00    08:27    [kworker/3:1-ata_sff]    <noArgs>
root    225948    0.0    0.0    0    0    ?    I    09:33    0:00    06:55    [kworker/0:0-ata_sff]    <noArgs>
root    226073    0.0    0.0    0    0    ?    I    09:35    0:00    05:34    [kworker/2:1-ata_sff]    <noArgs>
root    226356    0.0    0.0    0    0    ?    I    09:35    0:00    05:04    [kworker/1:2-ata_sff]    <noArgs>
root    226668    0.0    0.0    0    0    ?    I    09:36    0:00    04:34    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    226795    0.0    0.0    0    0    ?    I    09:37    0:00    03:25    [kworker/3:0-ata_sff]    <noArgs>
root    226964    0.0    0.0    0    0    ?    I    09:39    0:00    01:38    [kworker/0:2-ata_sff]    <noArgs>
root    227114    0.0    0.0    0    0    ?    I    09:40    0:00    00:22    [kworker/2:0-ata_sff]    <noArgs>
root    227269    0.0    0.0    2688    1768    ?    S    09:40    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227270    0.0    0.0    2688    1816    ?    S    09:40    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227291    0.0    0.0    9372    4204    ?    R    09:40    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227292    0.0    0.0    5592    1912    ?    S    09:40    0:00    00:00    tee    /dev/null
root    227293    0.0    0.0    9472    3952    ?    S    09:40    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}