_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24708    14936    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:0H-events_highpri]    <noArgs>
root    45    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u18:2-flush-254:0]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/1:1-events]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:1H-kblockd]    <noArgs>
root    208    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41984    20740    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7460    ?    Ssl    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12148    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    560    0.0    0.0    8388    6640    ?    Ss    Jan08    0:01    23:40:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:29    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2068    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2132    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::2cac:4b48:470c:78bc
dhcpcd    628    0.0    0.0    10532    2208    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    647    0.0    0.0    10532    2336    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    740    0.0    0.0    309036    7100    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2784    ?    Ss    Jan08    0:00    23:40:21    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9212    5568    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9812    ?    Ssl    Jan08    0:01    23:40:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3900    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18480    8816    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336440    18984    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12336    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381356    7784    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.2    1978808    20856    ?    Ssl    Jan08    0:21    23:40:21    /laforge.bin    <noArgs>
root    853    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp-sesman    <noArgs>
root    876    0.0    1.2    915132    104424    tty7    Ssl+    Jan08    0:03    23:40:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
xrdp    880    0.0    0.0    15652    2352    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    0.0    8124    2636    tty1    Ss+    Jan08    0:00    23:40:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    901    0.0    0.1    169620    8308    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
lightdm    907    0.0    0.1    22880    13072    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4684    ?    Ss    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101224    10572    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire    <noArgs>
lightdm    936    0.0    1.2    666648    105716    ?    Ssl    Jan08    0:18    23:40:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    938    0.0    0.1    479280    16072    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5300    ?    Ssl    Jan08    0:00    23:40:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    940    0.0    0.1    98776    8304    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    941    0.0    0.0    21492    3064    ?    SNsl    Jan08    0:00    23:40:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    966    0.0    0.0    381080    7376    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    976    0.0    0.0    8208    4516    ?    S    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    981    0.0    0.0    312816    7904    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7284    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1029    0.0    0.0    14372    5764    ?    S    Jan08    0:00    23:40:19    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7064    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    381872    149428    ?    Sl    Jan08    3:45    23:40:18    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17900    ?    Ss    Jan08    0:04    23:40:18    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1897    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:39:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1898    0.1    10.2    1414160    833720    ?    Sl    Jan08    2:05    23:39:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    95175    0.0    0.0    0    0    ?    I    Jan08    0:00    13:53:56    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    150978    0.0    0.0    0    0    ?    I    01:40    0:00    08:03:31    [kworker/u19:2-flush-254:0]    <noArgs>
root    157454    0.0    0.0    0    0    ?    I    02:20    0:00    07:23:58    [kworker/u19:1-ext4-rsv-conversion]    <noArgs>
root    183764    0.0    0.0    0    0    ?    I    05:05    0:00    04:38:54    [kworker/u17:1-events_unbound]    <noArgs>
root    200452    0.0    0.0    0    0    ?    I    06:50    0:00    02:53:57    [kworker/u19:0]    <noArgs>
root    203306    0.0    0.0    0    0    ?    I    07:09    0:00    02:35:14    [kworker/u17:2-events_unbound]    <noArgs>
root    209054    0.0    0.0    0    0    ?    I    07:45    0:00    01:58:37    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    213978    0.0    0.0    0    0    ?    I    08:16    0:00    01:27:46    [kworker/u20:2-writeback]    <noArgs>
root    218865    0.0    0.0    0    0    ?    I    08:48    0:00    55:46    [kworker/u20:0-flush-254:0]    <noArgs>
root    220247    0.0    0.0    0    0    ?    I    08:55    0:00    48:44    [kworker/u20:1-events_unbound]    <noArgs>
root    224332    0.0    0.0    0    0    ?    I    09:19    0:00    24:35    [kworker/u18:0-flush-254:0]    <noArgs>
root    226449    0.0    0.0    0    0    ?    I    09:34    0:00    09:54    [kworker/2:0-ata_sff]    <noArgs>
root    226784    0.0    0.0    0    0    ?    I    09:35    0:00    08:39    [kworker/0:0-ata_sff]    <noArgs>
root    226875    0.0    0.0    0    0    ?    I    09:36    0:00    07:41    [kworker/3:1-ata_sff]    <noArgs>
root    226921    0.0    0.0    0    0    ?    I    09:37    0:00    07:04    [kworker/1:0-ata_sff]    <noArgs>
root    227440    0.0    0.0    0    0    ?    I    09:39    0:00    04:19    [kworker/2:2-ata_sff]    <noArgs>
root    227517    0.0    0.0    0    0    ?    I    09:40    0:00    03:25    [kworker/0:2-ata_sff]    <noArgs>
root    227608    0.0    0.0    0    0    ?    I    09:41    0:00    02:24    [kworker/3:0-ata_sff]    <noArgs>
root    227669    0.0    0.0    0    0    ?    I    09:42    0:00    01:44    [kworker/1:2-ata_sff]    <noArgs>
root    227944    0.0    0.0    2688    1756    ?    S    09:44    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227945    0.0    0.0    2688    1788    ?    S    09:44    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227966    0.0    0.0    9372    4196    ?    R    09:44    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227967    0.0    0.0    5592    1960    ?    S    09:44    0:00    00:00    tee    /dev/null
root    227968    0.0    0.0    9472    3912    ?    S    09:44    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24708    14864    ?    Ss    Jan08    0:02    23:40:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:35    [kworker/0:0-mm_percpu_wq]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:40:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:35    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:35    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:35    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:35    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:35    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/u25:0]    <noArgs>
root    199    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/3:1H-kblockd]    <noArgs>
root    201    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    259    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    260    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:33    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    381    0.0    0.2    41984    20700    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    395    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37588    12136    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [psimon]    <noArgs>
root    557    0.0    0.0    8388    6960    ?    Ss    Jan08    0:01    23:40:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    604    0.0    0.0    10536    4524    ?    S    Jan08    0:00    23:40:30    dhcpcd:    eth0_[ip4]_[ip6]
root    605    0.0    0.0    10540    2516    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    606    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-rpciod]    <noArgs>
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-xprtiod]    <noArgs>
root    615    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    626    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [DHCP6_proxy]_fe80::eca3:bd05:eb21:4956
dhcpcd    645    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    738    0.0    0.0    309036    7084    ?    Ssl    Jan08    0:00    23:40:23    /usr/libexec/accounts-daemon    <noArgs>
root    740    0.0    0.0    6876    2824    ?    Ss    Jan08    0:00    23:40:23    /usr/sbin/cron    -f
messagebus    741    0.0    0.0    9204    5484    ?    Ss    Jan08    0:00    23:40:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    743    0.0    0.1    382300    9796    ?    Ssl    Jan08    0:02    23:40:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    745    0.0    0.0    80876    4048    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18492    8836    ?    Ss    Jan08    0:00    23:40:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    771    0.0    0.2    336472    18856    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/NetworkManager    --no-daemon
root    797    0.0    0.1    391060    12384    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7676    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.2    1978808    20244    ?    Ssl    Jan08    0:21    23:40:23    /laforge.bin    <noArgs>
root    842    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:40:23    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    877    0.0    0.0    15652    2368    ?    S    Jan08    0:00    23:40:22    /usr/sbin/xrdp    <noArgs>
root    879    0.0    1.3    915132    105884    tty7    Ssl+    Jan08    0:03    23:40:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2668    tty1    Ss+    Jan08    0:00    23:40:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    900    0.0    0.1    169620    8228    ?    Sl    Jan08    0:00    23:40:22    lightdm    --session-child_17_20
root    905    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:21    [psimon]    <noArgs>
lightdm    908    0.0    0.1    22800    13216    ?    Ss    Jan08    0:00    23:40:21    /usr/lib/systemd/systemd    --user
lightdm    910    0.0    0.0    22712    3824    ?    S    Jan08    0:00    23:40:21    (sd-pam)    <noArgs>
root    931    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:21    [kworker/3:2H-kblockd]    <noArgs>
lightdm    933    0.0    0.0    8348    4656    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101240    10676    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105480    ?    Ssl    Jan08    0:18    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    938    0.0    0.1    479280    16032    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5236    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    940    0.0    0.1    98776    8316    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
rtkit    943    0.0    0.0    21492    3168    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    967    0.0    0.0    381080    7280    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4480    ?    S    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    981    0.0    0.0    312816    7876    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7408    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1029    0.0    0.0    14372    5792    ?    S    Jan08    0:00    23:40:21    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7112    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    148368    ?    Sl    Jan08    3:51    23:40:19    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    18056    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1897    0.0    0.0    2688    1740    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1898    0.1    10.2    1414160    835540    ?    Sl    Jan08    2:07    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    9307    0.0    0.0    0    0    ?    I    Jan08    0:00    22:52:37    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    12365    0.0    0.0    0    0    ?    I    Jan08    0:00    22:34:12    [kworker/u18:1-writeback]    <noArgs>
root    83184    0.0    0.0    0    0    ?    I    Jan08    0:00    15:09:29    [kworker/u18:2-events_unbound]    <noArgs>
root    131021    0.0    0.0    0    0    ?    I    Jan08    0:00    10:09:13    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    153419    0.0    0.0    0    0    ?    I    01:56    0:00    07:46:52    [kworker/u19:0-writeback]    <noArgs>
root    155693    0.0    0.0    0    0    ?    I    02:09    0:00    07:34:28    [kworker/u17:3-ext4-rsv-conversion]    <noArgs>
root    181299    0.0    0.0    0    0    ?    I    04:49    0:00    04:53:45    [kworker/3:2-events]    <noArgs>
root    198075    0.0    0.0    0    0    ?    I    06:35    0:00    03:08:32    [kworker/u20:2-flush-254:0]    <noArgs>
root    201206    0.0    0.0    0    0    ?    I    06:55    0:00    02:48:12    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    202059    0.0    0.0    0    0    ?    I    07:02    0:00    02:41:07    [kworker/u19:1-flush-254:0]    <noArgs>
root    205337    0.0    0.0    0    0    ?    I    07:20    0:00    02:23:37    [kworker/u20:1-events_unbound]    <noArgs>
root    220632    0.0    0.0    0    0    ?    I    08:58    0:00    45:07    [kworker/u17:0-flush-254:0]    <noArgs>
root    224408    0.0    0.0    0    0    ?    I    09:19    0:00    24:05    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    226874    0.0    0.0    0    0    ?    I    09:36    0:00    07:38    [kworker/2:1-ata_sff]    <noArgs>
root    226980    0.0    0.0    0    0    ?    I    09:37    0:00    06:30    [kworker/0:1-ata_sff]    <noArgs>
root    226981    0.0    0.0    0    0    ?    I    09:37    0:00    06:26    [kworker/1:1-ata_sff]    <noArgs>
root    227027    0.0    0.0    0    0    ?    I    09:37    0:00    06:00    [kworker/3:0-ata_sff]    <noArgs>
root    227637    0.0    0.0    0    0    ?    I    09:41    0:00    02:08    [kworker/2:0-ata_sff]    <noArgs>
root    227713    0.0    0.0    0    0    ?    I    09:42    0:00    01:21    [kworker/1:0-ata_sff]    <noArgs>
root    227714    0.0    0.0    0    0    ?    I    09:42    0:00    01:15    [kworker/0:2-ata_sff]    <noArgs>
root    227775    0.0    0.0    0    0    ?    I    09:43    0:00    00:41    [kworker/3:1-ata_sff]    <noArgs>
root    227945    0.0    0.0    2688    1752    ?    S    09:43    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227946    0.0    0.0    2688    1788    ?    S    09:43    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227967    0.0    0.0    9372    4244    ?    R    09:43    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227968    0.0    0.0    5592    1908    ?    S    09:43    0:00    00:00    tee    /dev/null
root    227969    0.0    0.0    9472    4112    ?    S    09:43    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24540    15272    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:0H-events_highpri]    <noArgs>
root    42    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:33    [kworker/1:1-events_freezable_pwr_efficient]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    174    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/3:1H-kblockd]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ata_sff]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_0]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-scsi_tmf_1]    <noArgs>
root    267    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/2:3-mm_percpu_wq]    <noArgs>
root    270    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/0:2-events]    <noArgs>
root    272    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:31    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [hwrng]    <noArgs>
root    383    0.0    0.2    41980    20556    ?    Ss    Jan08    0:00    23:40:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    416    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
root    563    0.0    0.0    8388    6820    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2524    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    630    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::ee7f:30b5:c9cc:89b4
dhcpcd    649    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:40:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    742    0.0    0.0    309036    7268    ?    Ssl    Jan08    0:00    23:40:22    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2856    ?    Ss    Jan08    0:00    23:40:22    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9068    5596    ?    Ss    Jan08    0:00    23:40:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9808    ?    Ssl    Jan08    0:01    23:40:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3880    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18480    8808    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    777    0.0    0.2    336360    18884    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12520    ?    Ssl    Jan08    0:00    23:40:22    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7608    ?    Ssl    Jan08    0:00    23:40:21    /usr/sbin/lightdm    <noArgs>
root    847    0.0    0.2    1904820    20144    ?    Ssl    Jan08    0:19    23:40:21    /laforge.bin    <noArgs>
root    854    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    877    0.0    0.0    15652    2392    ?    S    Jan08    0:00    23:40:21    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.2    915128    104188    tty7    Ssl+    Jan08    0:02    23:40:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2588    tty1    Ss+    Jan08    0:00    23:40:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169620    8240    ?    Sl    Jan08    0:00    23:40:20    lightdm    --session-child_17_20
lightdm    909    0.0    0.1    22636    13052    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd    --user
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:20    [psimon]    <noArgs>
lightdm    913    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:40:20    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101208    10740    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105516    ?    Ssl    Jan08    0:16    23:40:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    942    0.0    0.1    479276    16064    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/wireplumber    <noArgs>
lightdm    943    0.0    0.0    84704    5112    ?    Ssl    Jan08    0:00    23:40:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    944    0.0    0.1    98776    8304    ?    S<sl    Jan08    0:00    23:40:20    /usr/bin/pipewire-pulse    <noArgs>
rtkit    945    0.0    0.0    21492    3096    ?    SNsl    Jan08    0:00    23:40:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    970    0.0    0.0    381080    7312    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4476    ?    S    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    7920    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7460    ?    Sl    Jan08    0:00    23:40:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1036    0.0    0.0    14372    5680    ?    S    Jan08    0:00    23:40:19    lightdm    --session-child_13_20
lightdm    1038    0.0    0.0    168772    7088    ?    Sl    Jan08    0:00    23:40:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    379824    150916    ?    Sl    Jan08    3:24    23:40:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18024    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1804    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    833216    ?    Sl    Jan08    1:46    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    33817    0.0    0.0    0    0    ?    I    Jan08    0:00    20:18:26    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    166042    0.0    0.0    0    0    ?    I    03:15    0:00    06:28:11    [kworker/u20:2-flush-254:0]    <noArgs>
root    193293    0.0    0.0    0    0    ?    I    06:05    0:00    03:38:41    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    200704    0.0    0.0    0    0    ?    I    06:53    0:00    02:50:37    [kworker/u19:1-flush-254:0]    <noArgs>
root    201960    0.0    0.0    0    0    ?    I    07:02    0:00    02:41:37    [kworker/u19:2-events_unbound]    <noArgs>
root    203578    0.0    0.0    0    0    ?    I    07:09    0:00    02:34:10    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    209650    0.0    0.0    0    0    ?    I    07:48    0:00    01:54:56    [kworker/u18:0-flush-254:0]    <noArgs>
root    214066    0.0    0.0    0    0    ?    I    08:17    0:00    01:26:16    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    219408    0.0    0.0    0    0    ?    I    08:49    0:00    54:37    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    219548    0.0    0.0    0    0    ?    I    08:50    0:00    53:30    [kworker/u20:3-flush-254:0]    <noArgs>
root    226392    0.0    0.0    0    0    ?    I    09:33    0:00    09:54    [kworker/3:1-ata_sff]    <noArgs>
root    226437    0.0    0.0    0    0    ?    I    09:33    0:00    09:48    [kworker/1:0-ata_sff]    <noArgs>
root    226613    0.0    0.0    0    0    ?    I    09:34    0:00    09:36    [kworker/2:0-ata_sff]    <noArgs>
root    226695    0.0    0.0    0    0    ?    I    09:34    0:00    08:56    [kworker/u19:0]    <noArgs>
root    226790    0.0    0.0    0    0    ?    I    09:35    0:00    07:58    [kworker/0:0-ata_sff]    <noArgs>
root    227326    0.0    0.0    0    0    ?    I    09:39    0:00    04:28    [kworker/3:0-ata_sff]    <noArgs>
root    227370    0.0    0.0    0    0    ?    I    09:39    0:00    04:22    [kworker/1:2-ata_sff]    <noArgs>
root    227386    0.0    0.0    0    0    ?    I    09:39    0:00    04:14    [kworker/2:1-ata_sff]    <noArgs>
root    227538    0.0    0.0    0    0    ?    I    09:41    0:00    02:41    [kworker/0:1-ata_sff]    <noArgs>
root    227888    0.0    0.0    2688    1748    ?    S    09:43    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227889    0.0    0.0    2688    1820    ?    S    09:43    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227910    0.0    0.0    9372    4212    ?    R    09:43    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227911    0.0    0.0    5592    1944    ?    S    09:43    0:00    00:00    tee    /dev/null
root    227912    0.0    0.0    9472    4012    ?    S    09:43    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24508    15440    ?    Ss    Jan08    0:02    23:40:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:33    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:33    [kworker/1:1-events]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:03    23:40:32    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/2:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/1:1H-kblockd]    <noArgs>
root    207    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/0:1H-kblockd]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    265    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:31    [kworker/0:2-events]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:31    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:30    [hwrng]    <noArgs>
root    381    0.0    0.2    41980    20368    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    418    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:40:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    424    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:29    [psimon]    <noArgs>
dhcpcd    601    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:40:28    dhcpcd:    eth0_[ip4]_[ip6]
root    602    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    603    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    604    0.0    0.0    10516    2084    ?    S    Jan08    0:00    23:40:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    609    0.0    0.0    8388    6316    ?    Ss    Jan08    0:01    23:40:28    /usr/sbin/haveged    --Foreground_--verbose=1
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10532    2352    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::446f:e9f6:ac14:9e1c
dhcpcd    628    0.0    0.0    10532    2224    ?    S    Jan08    0:00    23:40:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    647    0.0    0.0    10532    2288    ?    S    Jan08    0:00    23:40:21    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    740    0.0    0.0    309036    7004    ?    Ssl    Jan08    0:00    23:40:20    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2692    ?    Ss    Jan08    0:00    23:40:20    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9072    5536    ?    Ss    Jan08    0:00    23:40:20    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9884    ?    Ssl    Jan08    0:01    23:40:20    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3996    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18480    8820    ?    Ss    Jan08    0:00    23:40:20    /usr/lib/systemd/systemd-logind    <noArgs>
root    773    0.0    0.2    336472    18788    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391060    12364    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7808    ?    Ssl    Jan08    0:00    23:40:20    /usr/sbin/lightdm    <noArgs>
root    837    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:20    [kworker/2:2H-kblockd]    <noArgs>
root    840    0.0    0.2    1904820    20704    ?    Ssl    Jan08    0:19    23:40:20    /laforge.bin    <noArgs>
root    844    0.0    0.0    16356    2188    ?    S    Jan08    0:00    23:40:20    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    870    0.0    0.0    15652    2436    ?    S    Jan08    0:00    23:40:20    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.3    915132    105888    tty7    Ssl+    Jan08    0:02    23:40:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2492    tty1    Ss+    Jan08    0:00    23:40:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    899    0.0    0.1    169620    8240    ?    Sl    Jan08    0:00    23:40:19    lightdm    --session-child_17_20
lightdm    905    0.0    0.1    22868    13080    ?    Ss    Jan08    0:00    23:40:19    /usr/lib/systemd/systemd    --user
root    907    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:19    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3844    ?    S    Jan08    0:00    23:40:19    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101160    10908    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.2    666648    105248    ?    Ssl    Jan08    0:16    23:40:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    937    0.0    0.1    479280    15992    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5116    ?    Ssl    Jan08    0:00    23:40:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    940    0.0    0.1    98776    8212    ?    S<sl    Jan08    0:00    23:40:19    /usr/bin/pipewire-pulse    <noArgs>
rtkit    941    0.0    0.0    21492    3152    ?    SNsl    Jan08    0:00    23:40:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    966    0.0    0.0    381080    7180    ?    Ssl    Jan08    0:00    23:40:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4512    ?    S    Jan08    0:00    23:40:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    981    0.0    0.0    312816    8040    ?    Ssl    Jan08    0:00    23:40:18    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7468    ?    Sl    Jan08    0:00    23:40:18    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1027    0.0    0.0    14372    5752    ?    S    Jan08    0:00    23:40:18    lightdm    --session-child_13_20
lightdm    1029    0.0    0.0    168772    7120    ?    Sl    Jan08    0:00    23:40:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    383920    153856    ?    Sl    Jan08    3:22    23:40:17    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    17916    ?    Ss    Jan08    0:04    23:40:17    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1895    0.0    0.0    2688    1740    ?    S    Jan08    0:00    23:39:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1896    0.1    10.2    1414160    833300    ?    Sl    Jan08    1:39    23:39:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    83324    0.0    0.0    0    0    ?    I    Jan08    0:00    15:08:07    [kworker/u20:1-events_unbound]    <noArgs>
root    160642    0.0    0.0    0    0    ?    I    02:41    0:00    07:02:18    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    161468    0.0    0.0    0    0    ?    I    02:48    0:00    06:55:36    [kworker/u19:0-events_unbound]    <noArgs>
root    163079    0.0    0.0    0    0    ?    I    02:57    0:00    06:46:08    [kworker/u19:2-writeback]    <noArgs>
root    164697    0.0    0.0    0    0    ?    I    03:05    0:00    06:38:06    [kworker/u18:1-events_unbound]    <noArgs>
root    169327    0.0    0.0    0    0    ?    I    03:34    0:00    06:08:56    [kworker/u18:2-flush-254:0]    <noArgs>
root    181269    0.0    0.0    0    0    ?    I    04:49    0:00    04:54:00    [kworker/u17:1-flush-254:0]    <noArgs>
root    202827    0.0    0.0    0    0    ?    I    07:04    0:00    02:39:36    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    208436    0.0    0.0    0    0    ?    I    07:40    0:00    02:02:51    [kworker/u19:1-writeback]    <noArgs>
root    220143    0.0    0.0    0    0    ?    I    08:53    0:00    49:41    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    222711    0.0    0.0    0    0    ?    I    09:09    0:00    34:27    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    226710    0.0    0.0    0    0    ?    I    09:34    0:00    09:15    [kworker/2:1-ata_sff]    <noArgs>
root    226856    0.0    0.0    0    0    ?    I    09:35    0:00    07:46    [kworker/3:0-ata_sff]    <noArgs>
root    226902    0.0    0.0    0    0    ?    I    09:36    0:00    07:20    [kworker/1:0-ata_sff]    <noArgs>
root    226963    0.0    0.0    0    0    ?    I    09:37    0:00    06:34    [kworker/0:0-ata_sff]    <noArgs>
root    227467    0.0    0.0    0    0    ?    I    09:39    0:00    03:56    [kworker/2:0-ata_sff]    <noArgs>
root    227589    0.0    0.0    0    0    ?    I    09:41    0:00    02:38    [kworker/3:2-ata_sff]    <noArgs>
root    227650    0.0    0.0    0    0    ?    I    09:41    0:00    01:53    [kworker/1:2-ata_sff]    <noArgs>
root    227711    0.0    0.0    0    0    ?    I    09:42    0:00    01:13    [kworker/0:1-ata_sff]    <noArgs>
root    227914    0.0    0.0    2688    1832    ?    S    09:43    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227915    0.0    0.0    2688    1744    ?    S    09:43    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227936    0.0    0.0    9372    4184    ?    R    09:43    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227937    0.0    0.0    5592    1912    ?    S    09:43    0:00    00:00    tee    /dev/null
root    227938    0.0    0.0    9472    4060    ?    S    09:43    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24700    15228    ?    Ss    Jan08    0:02    23:40:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:40:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [ksoftirqd/3]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:40:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:40:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/2:1-mm_percpu_wq]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:34    [kworker/3:1-events]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:34    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:34    [kswapd0]    <noArgs>
root    74    0.0    0.0    0    0    ?    I    Jan08    0:05    23:40:34    [kworker/1:1-events]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/1:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:40:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/u25:0]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/0:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/3:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:33    [scsi_eh_1]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    271    0.0    0.0    0    0    ?    I    Jan08    0:04    23:40:32    [kworker/0:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:40:32    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:32    [hwrng]    <noArgs>
root    384    0.0    0.2    41980    20404    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12084    ?    Ss    Jan08    0:00    23:40:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:31    [psimon]    <noArgs>
root    559    0.0    0.0    8388    7684    ?    Ss    Jan08    0:01    23:40:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:40:30    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2076    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2140    ?    S    Jan08    0:00    23:40:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:30    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    626    0.0    0.0    10540    2216    ?    S    Jan08    0:00    23:40:29    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    627    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:40:27    dhcpcd:    [DHCP6_proxy]_fe80::ea18:6dac:a302:c804
dhcpcd    646    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:40:23    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    739    0.0    0.0    309036    7040    ?    Ssl    Jan08    0:00    23:40:23    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2728    ?    Ss    Jan08    0:00    23:40:23    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9072    5496    ?    Ss    Jan08    0:00    23:40:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    744    0.0    0.1    382300    9772    ?    Ssl    Jan08    0:01    23:40:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    746    0.0    0.0    80876    3892    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/qemu-ga    <noArgs>
root    748    0.0    0.1    18260    8808    ?    Ss    Jan08    0:00    23:40:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    790    0.0    0.2    336464    19044    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/NetworkManager    --no-daemon
root    807    0.0    0.1    391060    12548    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/ModemManager    <noArgs>
root    835    0.0    0.0    381356    7788    ?    Ssl    Jan08    0:00    23:40:23    /usr/sbin/lightdm    <noArgs>
root    839    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:40:23    [kworker/3:2H]    <noArgs>
root    842    0.0    0.2    1904820    20540    ?    Ssl    Jan08    0:19    23:40:23    /laforge.bin    <noArgs>
root    849    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:40:23    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    872    0.0    0.0    15652    2400    ?    S    Jan08    0:00    23:40:23    /usr/sbin/xrdp    <noArgs>
root    877    0.0    1.2    915128    105740    tty7    Ssl+    Jan08    0:02    23:40:23    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    879    0.0    0.0    8124    2668    tty1    Ss+    Jan08    0:00    23:40:23    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    900    0.0    0.1    169620    8320    ?    Sl    Jan08    0:00    23:40:22    lightdm    --session-child_17_20
lightdm    907    0.0    0.1    22452    12964    ?    Ss    Jan08    0:00    23:40:22    /usr/lib/systemd/systemd    --user
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:40:22    [psimon]    <noArgs>
lightdm    911    0.0    0.0    22712    3832    ?    S    Jan08    0:00    23:40:22    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4700    ?    Ss    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10716    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire    <noArgs>
lightdm    934    0.0    1.2    666648    105452    ?    Ssl    Jan08    0:16    23:40:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3104    ?    SNsl    Jan08    0:00    23:40:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479280    16028    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/wireplumber    <noArgs>
lightdm    940    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:40:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.1    98776    8276    ?    S<sl    Jan08    0:00    23:40:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7192    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4428    ?    S    Jan08    0:00    23:40:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7976    ?    Ssl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7432    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:40:21    lightdm    --session-child_13_20
lightdm    1030    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:40:21    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    375728    147728    ?    Sl    Jan08    3:24    23:40:19    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    17908    ?    Ss    Jan08    0:04    23:40:19    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1832    ?    S    Jan08    0:00    23:39:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    835932    ?    Sl    Jan08    1:41    23:39:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    111225    0.0    0.0    0    0    ?    I    Jan08    0:00    12:10:43    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    122907    0.0    0.0    0    0    ?    I    Jan08    0:00    10:58:54    [kworker/u19:2-flush-254:0]    <noArgs>
root    136635    0.0    0.0    0    0    ?    I    00:09    0:00    09:34:07    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    139436    0.0    0.0    0    0    ?    I    00:28    0:00    09:15:03    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    174171    0.0    0.0    0    0    ?    I    04:04    0:00    05:38:55    [kworker/u19:1-flush-254:0]    <noArgs>
root    178892    0.0    0.0    0    0    ?    I    04:34    0:00    05:08:48    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    199533    0.0    0.0    0    0    ?    I    06:45    0:00    02:58:02    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    202827    0.0    0.0    0    0    ?    I    07:03    0:00    02:39:30    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    203646    0.0    0.0    0    0    ?    I    07:09    0:00    02:33:37    [kworker/u20:0-events_unbound]    <noArgs>
root    207517    0.0    0.0    0    0    ?    I    07:33    0:00    02:09:35    [kworker/u17:0-events_unbound]    <noArgs>
root    210818    0.0    0.0    0    0    ?    I    07:56    0:00    01:47:07    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    212463    0.0    0.0    0    0    ?    I    08:04    0:00    01:38:47    [kworker/u20:2]    <noArgs>
root    226622    0.0    0.0    0    0    ?    I    09:33    0:00    09:38    [kworker/2:2-ata_sff]    <noArgs>
root    226798    0.0    0.0    0    0    ?    I    09:35    0:00    08:07    [kworker/1:0-ata_sff]    <noArgs>
root    226979    0.0    0.0    0    0    ?    I    09:36    0:00    06:10    [kworker/0:0-ata_sff]    <noArgs>
root    227122    0.0    0.0    0    0    ?    I    09:38    0:00    05:08    [kworker/3:2-ata_sff]    <noArgs>
root    227363    0.0    0.0    0    0    ?    I    09:38    0:00    04:21    [kworker/2:0-ata_sff]    <noArgs>
root    227576    0.0    0.0    0    0    ?    I    09:40    0:00    02:26    [kworker/1:2-ata_sff]    <noArgs>
root    227712    0.0    0.0    0    0    ?    I    09:42    0:00    01:02    [kworker/0:1-ata_sff]    <noArgs>
root    227912    0.0    0.0    2688    1764    ?    S    09:43    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227913    0.0    0.0    2688    1856    ?    S    09:43    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    227934    0.0    0.0    9372    4188    ?    R    09:43    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    227935    0.0    0.0    5592    1908    ?    S    09:43    0:00    00:00    tee    /dev/null
root    227936    0.0    0.0    9472    3948    ?    S    09:43    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}