_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24540    15124    ?    Ss    Jan08    0:02    23:25:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/0:1-events_freezable_pwr_efficient]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:0H-events_highpri]    <noArgs>
root    45    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u18:2-writeback]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:31    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u25:0]    <noArgs>
root    177    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/2:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/0:1H-kblockd]    <noArgs>
root    238    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ata_sff]    <noArgs>
root    250    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_0]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_1]    <noArgs>
root    255    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    262    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:29    [kworker/2:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:29    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:29    [hwrng]    <noArgs>
root    384    0.0    0.2    41984    20584    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    397    0.0    0.0    90112    7456    ?    Ssl    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37588    12152    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:27    [psimon]    <noArgs>
root    479    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:27    [kworker/1:4-events]    <noArgs>
root    566    0.0    0.0    8388    5332    ?    Ss    Jan08    0:01    23:25:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:25:26    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2076    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2140    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10540    2216    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    629    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:25:24    dhcpcd:    [DHCP6_proxy]_fe80::e6c:4518:4ff7:ad45
dhcpcd    648    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:25:22    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    741    0.0    0.0    309036    7108    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2756    ?    Ss    Jan08    0:00    23:25:21    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9064    5540    ?    Ss    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9964    ?    Ssl    Jan08    0:01    23:25:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3912    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:25:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336480    19076    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12504    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/ModemManager    <noArgs>
root    839    0.0    0.0    381364    7500    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    848    0.0    0.2    1905076    20480    ?    Ssl    Jan08    0:19    23:25:21    /laforge.bin    <noArgs>
xrdp    873    0.0    0.0    15652    2396    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.3    915128    107624    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2532    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.1    169620    8288    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22456    12988    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3856    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4684    ?    Ss    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101224    10828    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105600    ?    Ssl    Jan08    0:16    23:25:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    937    0.0    0.1    479356    16048    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/wireplumber    <noArgs>
rtkit    938    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:25:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.0    84704    5272    ?    Ssl    Jan08    0:00    23:25:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    940    0.0    0.1    98776    8216    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    962    0.0    0.0    381080    7368    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    972    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    978    0.0    0.0    312816    7924    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd    <noArgs>
lightdm    986    0.0    0.0    398408    7336    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5712    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7152    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    379824    148664    ?    Sl    Jan08    3:27    23:25:17    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    18052    ?    Ss    Jan08    0:04    23:25:17    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:24:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    833708    ?    Sl    Jan08    1:44    23:24:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    2727    0.0    0.0    0    0    ?    I    Jan08    0:04    23:19:23    [kworker/3:0-events]    <noArgs>
root    109503    0.0    0.0    0    0    ?    I    Jan08    0:00    12:09:07    [kworker/u19:0-flush-254:0]    <noArgs>
root    118091    0.0    0.0    0    0    ?    I    Jan08    0:00    11:14:27    [kworker/u18:0-flush-254:0]    <noArgs>
root    131265    0.0    0.0    0    0    ?    I    Jan08    0:00    09:51:25    [kworker/u20:0-writeback]    <noArgs>
root    145395    0.0    0.0    0    0    ?    I    01:07    0:00    08:24:08    [kworker/u17:1-events_unbound]    <noArgs>
root    164746    0.0    0.0    0    0    ?    I    03:09    0:00    06:22:27    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    174790    0.0    0.0    0    0    ?    I    04:12    0:00    05:19:43    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    187601    0.0    0.0    0    0    ?    I    05:35    0:00    03:56:59    [kworker/u17:0-events_unbound]    <noArgs>
root    193470    0.0    0.0    0    0    ?    I    06:09    0:00    03:22:38    [kworker/u17:3]    <noArgs>
root    213916    0.0    0.0    0    0    ?    I    08:19    0:00    01:12:44    [kworker/u19:1-ext4-rsv-conversion]    <noArgs>
root    217118    0.0    0.0    0    0    ?    I    08:38    0:00    53:55    [kworker/u19:2-flush-254:0]    <noArgs>
root    219504    0.0    0.0    0    0    ?    I    08:53    0:00    38:44    [kworker/u18:1]    <noArgs>
root    224356    0.0    0.0    0    0    ?    I    09:23    0:00    08:57    [kworker/3:2-ata_sff]    <noArgs>
root    224387    0.0    0.0    0    0    ?    I    09:23    0:00    08:40    [kworker/2:0-ata_sff]    <noArgs>
root    224523    0.0    0.0    0    0    ?    I    09:24    0:00    07:04    [kworker/1:0-ata_sff]    <noArgs>
root    224693    0.0    0.0    0    0    ?    I    09:26    0:00    05:17    [kworker/0:2-ata_sff]    <noArgs>
root    225076    0.0    0.0    0    0    ?    I    09:28    0:00    03:28    [kworker/2:1-ata_sff]    <noArgs>
root    225077    0.0    0.0    0    0    ?    I    09:28    0:00    03:26    [kworker/3:1-ata_sff]    <noArgs>
root    225229    0.0    0.0    0    0    ?    I    09:30    0:00    01:45    [kworker/1:1-ata_sff]    <noArgs>
root    225365    0.0    0.0    0    0    ?    I    09:31    0:00    00:12    [kworker/0:0-ata_sff]    <noArgs>
root    225505    0.0    0.0    2688    1828    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225506    0.0    0.0    2688    1824    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225527    0.0    0.0    9372    4160    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225528    0.0    0.0    5592    1976    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225529    0.0    0.0    9472    3988    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24716    15336    ?    Ss    Jan08    0:02    23:25:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [irq/9-acpi]    <noArgs>
root    64    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:31    [kworker/2:1-events]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/3:1-events_power_efficient]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/3:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:30    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u25:0]    <noArgs>
root    176    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/0:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:30    [kworker/0:2-events]    <noArgs>
root    252    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ata_sff]    <noArgs>
root    255    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_0]    <noArgs>
root    256    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    257    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_1]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    305    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:29    [jbd2/vda1-8]    <noArgs>
root    306    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:29    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20564    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12076    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:27    [psimon]    <noArgs>
root    552    0.0    0.0    8388    5412    ?    Ss    Jan08    0:01    23:25:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10536    4532    ?    S    Jan08    0:00    23:25:26    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10540    2252    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.201
dhcpcd    630    0.0    0.0    10540    2380    ?    S    Jan08    0:00    23:25:25    dhcpcd:    [DHCP6_proxy]_fe80::bb55:487b:96eb:6a67
dhcpcd    649    0.0    0.0    10540    2316    ?    S    Jan08    0:00    23:25:21    dhcpcd:    [BOOTP_proxy]_10.0.254.201
root    743    0.0    0.0    309036    7220    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/accounts-daemon    <noArgs>
root    745    0.0    0.0    6876    2712    ?    Ss    Jan08    0:00    23:25:21    /usr/sbin/cron    -f
messagebus    746    0.0    0.0    9208    6300    ?    Ss    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9960    ?    Ssl    Jan08    0:01    23:25:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/qemu-ga    <noArgs>
root    753    0.0    0.1    18360    8832    ?    Ss    Jan08    0:00    23:25:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    780    0.0    0.2    336464    18852    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/NetworkManager    --no-daemon
root    813    0.0    0.1    391060    12328    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/ModemManager    <noArgs>
root    841    0.0    0.0    381356    7836    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2304    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    852    0.0    0.2    1978808    20532    ?    Ssl    Jan08    0:19    23:25:21    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915132    107412    tty7    Ssl+    Jan08    0:02    23:25:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    882    0.0    0.0    8124    2528    tty1    Ss+    Jan08    0:00    23:25:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.0    169620    8100    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:19    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22628    13052    ?    Ss    Jan08    0:00    23:25:19    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3872    ?    S    Jan08    0:00    23:25:19    (sd-pam)    <noArgs>
lightdm    935    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    936    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    1.2    666648    105456    ?    Ssl    Jan08    0:15    23:25:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    939    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:25:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    940    0.0    0.1    479280    15932    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5184    ?    Ssl    Jan08    0:00    23:25:19    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    942    0.0    0.1    98776    8192    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    965    0.0    0.0    381080    7092    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    976    0.0    0.0    8208    4448    ?    S    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.1    312816    8144    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd    <noArgs>
lightdm    992    0.0    0.0    398408    7296    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5756    ?    S    Jan08    0:00    23:25:18    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:25:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1064    0.2    1.8    379824    148636    ?    Sl    Jan08    3:23    23:25:17    splunkd    -p_8089_start
root    1067    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:25:17    [splunkd    pid=1064]_splunkd_-p_8089_start_[process-runner]
root    1952    0.0    0.0    2688    1744    ?    S    Jan08    0:00    23:24:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1953    0.1    10.2    1414160    833748    ?    Sl    Jan08    1:44    23:24:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    121552    0.0    0.0    0    0    ?    I    Jan08    0:00    10:53:27    [kworker/u19:0-flush-254:0]    <noArgs>
root    126356    0.0    0.0    0    0    ?    I    Jan08    0:00    10:23:54    [kworker/u19:1-flush-254:0]    <noArgs>
root    131091    0.0    0.0    0    0    ?    I    Jan08    0:00    09:53:38    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    166961    0.0    0.0    0    0    ?    I    03:23    0:00    06:08:55    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    171580    0.0    0.0    0    0    ?    I    03:52    0:00    05:39:31    [kworker/u19:2-events_unbound]    <noArgs>
root    202458    0.0    0.0    0    0    ?    I    07:06    0:00    02:25:01    [kworker/u18:1-flush-254:0]    <noArgs>
root    209145    0.0    0.0    0    0    ?    I    07:49    0:00    01:42:47    [kworker/u18:0-flush-254:0]    <noArgs>
root    210235    0.0    0.0    0    0    ?    I    07:55    0:00    01:36:38    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    214826    0.0    0.0    0    0    ?    I    08:22    0:00    01:09:35    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    216485    0.0    0.0    0    0    ?    I    08:35    0:00    56:31    [kworker/u17:2-kvfree_rcu_reclaim]    <noArgs>
root    216501    0.0    0.0    0    0    ?    I    08:35    0:00    56:27    [kworker/u18:2-flush-254:0]    <noArgs>
root    219532    0.0    0.0    0    0    ?    I    08:52    0:00    39:35    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    224536    0.0    0.0    0    0    ?    I    09:23    0:00    08:30    [kworker/3:2-ata_sff]    <noArgs>
root    224552    0.0    0.0    0    0    ?    I    09:23    0:00    08:20    [kworker/0:0-ata_sff]    <noArgs>
root    224658    0.0    0.0    0    0    ?    I    09:24    0:00    07:01    [kworker/2:0-ata_sff]    <noArgs>
root    224708    0.0    0.0    0    0    ?    I    09:25    0:00    06:31    [kworker/1:2-ata_sff]    <noArgs>
root    225226    0.0    0.0    0    0    ?    I    09:28    0:00    03:13    [kworker/0:1-ata_sff]    <noArgs>
root    225227    0.0    0.0    0    0    ?    I    09:28    0:00    03:11    [kworker/3:0-ata_sff]    <noArgs>
root    225364    0.0    0.0    0    0    ?    I    09:30    0:00    01:43    [kworker/2:2-ata_sff]    <noArgs>
root    225425    0.0    0.0    0    0    ?    I    09:30    0:00    01:08    [kworker/1:0-ata_sff]    <noArgs>
root    225640    0.0    0.0    2688    1804    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225641    0.0    0.0    2688    1812    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225662    0.0    0.0    9372    4156    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225663    0.0    0.0    5592    1900    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225664    0.0    0.0    9472    4020    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24696    15308    ?    Ss    Jan08    0:02    23:25:31    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/0:1-mm_percpu_wq]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:31    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/2:0H-kblockd]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:31    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:31    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/1:1-events_freezable_pwr_efficient]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/3:1H-kblockd]    <noArgs>
root    85    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:30    [kworker/u16:1]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/u25:0]    <noArgs>
root    202    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/0:1H-kblockd]    <noArgs>
root    221    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/1:1H-kblockd]    <noArgs>
root    236    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ata_sff]    <noArgs>
root    250    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_0]    <noArgs>
root    251    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:29    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:29    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    328    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:29    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20712    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    414    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12272    ?    Ss    Jan08    0:00    23:25:28    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:27    [psimon]    <noArgs>
root    560    0.0    0.0    8388    5260    ?    Ss    Jan08    0:01    23:25:27    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10536    4528    ?    S    Jan08    0:00    23:25:26    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2508    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2076    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2140    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:26    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2216    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    628    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:25:24    dhcpcd:    [DHCP6_proxy]_fe80::dcdc:4cfe:23b0:c82e
dhcpcd    647    0.0    0.0    10540    2344    ?    S    Jan08    0:00    23:25:21    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    740    0.0    0.0    309036    7160    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2796    ?    Ss    Jan08    0:00    23:25:21    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9064    5572    ?    Ss    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    10040    ?    Ssl    Jan08    0:01    23:25:21    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3884    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18260    8812    ?    Ss    Jan08    0:00    23:25:21    /usr/lib/systemd/systemd-logind    <noArgs>
root    793    0.0    0.2    336448    18936    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12300    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/ModemManager    <noArgs>
root    837    0.0    0.0    381356    7588    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    841    0.0    0.0    16356    2192    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    851    0.0    0.2    1978808    20488    ?    Ssl    Jan08    0:18    23:25:21    /laforge.bin    <noArgs>
xrdp    875    0.0    0.0    15652    2436    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    878    0.0    0.0    8124    2672    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    879    0.0    1.2    915132    102752    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    901    0.0    0.0    169620    8132    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    908    0.0    0.1    22868    13032    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
lightdm    910    0.0    0.0    22712    3820    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    936    0.0    0.0    8348    4692    ?    Ss    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    937    0.0    0.1    101208    10724    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire    <noArgs>
lightdm    938    0.0    1.2    666648    105516    ?    Ssl    Jan08    0:15    23:25:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    940    0.0    0.1    479284    16028    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/wireplumber    <noArgs>
lightdm    941    0.0    0.0    84704    5068    ?    Ssl    Jan08    0:00    23:25:19    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    942    0.0    0.0    21492    3068    ?    SNsl    Jan08    0:00    23:25:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    943    0.0    0.1    98776    8140    ?    S<sl    Jan08    0:00    23:25:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7108    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    980    0.0    0.0    8208    4416    ?    S    Jan08    0:00    23:25:19    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7936    ?    Ssl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7404    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1028    0.0    0.0    14372    5744    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7032    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1061    0.2    1.8    379824    149020    ?    Sl    Jan08    3:23    23:25:18    splunkd    -p_8089_start
root    1064    0.0    0.2    135648    18028    ?    Ss    Jan08    0:04    23:25:18    [splunkd    pid=1061]_splunkd_-p_8089_start_[process-runner]
root    1896    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:24:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1897    0.1    10.2    1414160    835612    ?    Sl    Jan08    1:44    23:24:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    49718    0.0    0.0    0    0    ?    I    Jan08    0:03    18:24:36    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    103037    0.0    0.0    0    0    ?    I    Jan08    0:00    12:48:46    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    103253    0.0    0.0    0    0    ?    I    Jan08    0:00    12:46:25    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    137569    0.0    0.0    0    0    ?    I    00:21    0:00    09:10:35    [kworker/u17:2-flush-254:0]    <noArgs>
root    186260    0.0    0.0    0    0    ?    I    05:24    0:00    04:07:08    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    193687    0.0    0.0    0    0    ?    I    06:11    0:00    03:20:28    [kworker/u20:1-events_unbound]    <noArgs>
root    194873    0.0    0.0    0    0    ?    I    06:19    0:00    03:12:16    [kworker/u18:1-flush-254:0]    <noArgs>
root    195700    0.0    0.0    0    0    ?    I    06:23    0:00    03:08:56    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    200331    0.0    0.0    0    0    ?    I    06:52    0:00    02:39:34    [kworker/u18:2-flush-254:0]    <noArgs>
root    203836    0.0    0.0    0    0    ?    I    07:15    0:00    02:16:26    [kworker/u20:2-ext4-rsv-conversion]    <noArgs>
root    208541    0.0    0.0    0    0    ?    I    07:45    0:00    01:46:26    [kworker/u19:1-kvfree_rcu_reclaim]    <noArgs>
root    222019    0.0    0.0    0    0    ?    I    09:08    0:00    23:45    [kworker/u17:1-events_unbound]    <noArgs>
root    224410    0.0    0.0    0    0    ?    I    09:23    0:00    08:38    [kworker/3:0-ata_sff]    <noArgs>
root    224501    0.0    0.0    0    0    ?    I    09:24    0:00    07:32    [kworker/0:2-ata_sff]    <noArgs>
root    224532    0.0    0.0    0    0    ?    I    09:24    0:00    07:14    [kworker/1:2-ata_sff]    <noArgs>
root    224582    0.0    0.0    0    0    ?    I    09:25    0:00    06:45    [kworker/2:1-ata_sff]    <noArgs>
root    225115    0.0    0.0    0    0    ?    I    09:28    0:00    03:20    [kworker/3:1-ata_sff]    <noArgs>
root    225191    0.0    0.0    0    0    ?    I    09:29    0:00    02:21    [kworker/0:0-ata_sff]    <noArgs>
root    225268    0.0    0.0    0    0    ?    I    09:30    0:00    01:35    [kworker/2:0-ata_sff]    <noArgs>
root    225269    0.0    0.0    0    0    ?    I    09:30    0:00    01:33    [kworker/1:0-ata_sff]    <noArgs>
root    225502    0.0    0.0    2688    1760    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225503    0.0    0.0    2688    1828    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225524    0.0    0.0    9372    4184    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225525    0.0    0.0    5592    1908    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225526    0.0    0.0    9472    4032    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14940    ?    Ss    Jan08    0:02    23:25:35    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:35    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:35    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:35    [kworker/1:0-events_freezable_pwr_efficient]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [ksoftirqd/3]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:35    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:35    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:35    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:35    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:35    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:35    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [irq/9-acpi]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:35    [kworker/2:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:35    [kswapd0]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kthrotld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-acpi_thermal_pm]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-mld]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-ipv6_addrconf]    <noArgs>
root    87    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/3:1H-kblockd]    <noArgs>
root    88    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    93    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kstrp]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/u21:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/u22:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/u23:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/u24:0]    <noArgs>
root    103    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/u25:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/1:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/0:1H-kblockd]    <noArgs>
root    258    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-ata_sff]    <noArgs>
root    260    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [scsi_eh_0]    <noArgs>
root    261    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [scsi_eh_1]    <noArgs>
root    263    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    266    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:33    [kworker/2:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:33    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [hwrng]    <noArgs>
root    385    0.0    0.2    41984    20596    ?    Ss    Jan08    0:00    23:25:31    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    417    0.0    0.0    90112    7416    ?    Ssl    Jan08    0:00    23:25:31    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12136    ?    Ss    Jan08    0:00    23:25:31    /usr/lib/systemd/systemd-udevd    <noArgs>
root    431    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [psimon]    <noArgs>
root    563    0.0    0.0    8388    6648    ?    Ss    Jan08    0:01    23:25:30    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:25:30    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10532    2500    ?    S    Jan08    0:00    23:25:30    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:25:30    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:25:30    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    630    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [DHCP6_proxy]_fe80::5747:84d4:4045:47fb
dhcpcd    649    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:25:23    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    742    0.0    0.0    309036    7188    ?    Ssl    Jan08    0:00    23:25:23    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2760    ?    Ss    Jan08    0:00    23:25:23    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    9080    5584    ?    Ss    Jan08    0:00    23:25:23    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9832    ?    Ssl    Jan08    0:01    23:25:23    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:25:23    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18356    8816    ?    Ss    Jan08    0:00    23:25:23    /usr/lib/systemd/systemd-logind    <noArgs>
root    778    0.0    0.2    336480    19052    ?    Ssl    Jan08    0:00    23:25:23    /usr/sbin/NetworkManager    --no-daemon
root    812    0.0    0.1    391060    12308    ?    Ssl    Jan08    0:00    23:25:23    /usr/sbin/ModemManager    <noArgs>
root    827    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:22    [kworker/3:2H-kblockd]    <noArgs>
root    836    0.0    0.0    381488    7648    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:25:22    /usr/sbin/xrdp-sesman    <noArgs>
root    854    0.0    0.2    1904820    20484    ?    Ssl    Jan08    0:19    23:25:22    /laforge.bin    <noArgs>
xrdp    878    0.0    0.0    15652    2388    ?    S    Jan08    0:00    23:25:22    /usr/sbin/xrdp    <noArgs>
root    880    0.0    1.2    915128    104576    tty7    Ssl+    Jan08    0:02    23:25:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2532    tty1    Ss+    Jan08    0:00    23:25:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    904    0.0    0.1    169620    8240    ?    Sl    Jan08    0:00    23:25:21    lightdm    --session-child_17_20
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:21    [psimon]    <noArgs>
lightdm    911    0.0    0.1    22812    13304    ?    Ss    Jan08    0:00    23:25:21    /usr/lib/systemd/systemd    --user
lightdm    914    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:25:21    (sd-pam)    <noArgs>
lightdm    937    0.0    0.0    8344    4752    ?    Ss    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    938    0.0    0.1    101224    10592    ?    S<sl    Jan08    0:00    23:25:21    /usr/bin/pipewire    <noArgs>
lightdm    939    0.0    1.2    666648    105624    ?    Ssl    Jan08    0:16    23:25:21    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    941    0.0    0.0    21492    3064    ?    SNsl    Jan08    0:00    23:25:21    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    942    0.0    0.1    405544    15916    ?    S<sl    Jan08    0:00    23:25:21    /usr/bin/wireplumber    <noArgs>
lightdm    946    0.0    0.0    84704    5352    ?    Ssl    Jan08    0:00    23:25:21    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    947    0.0    0.1    98776    8340    ?    S<sl    Jan08    0:00    23:25:21    /usr/bin/pipewire-pulse    <noArgs>
lightdm    969    0.0    0.0    381080    7264    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    979    0.0    0.0    8208    4516    ?    S    Jan08    0:00    23:25:21    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.0    312816    8068    ?    Ssl    Jan08    0:00    23:25:21    /usr/libexec/gvfsd    <noArgs>
lightdm    996    0.0    0.0    398408    7452    ?    Sl    Jan08    0:00    23:25:21    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1031    0.0    0.0    14372    5748    ?    S    Jan08    0:00    23:25:20    lightdm    --session-child_13_20
lightdm    1033    0.0    0.0    168772    7236    ?    Sl    Jan08    0:00    23:25:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    377776    148980    ?    Sl    Jan08    3:25    23:25:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    17908    ?    Ss    Jan08    0:04    23:25:19    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1076    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:19    [kworker/0:3-events]    <noArgs>
root    1900    0.0    0.0    2688    1764    ?    S    Jan08    0:00    23:24:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1901    0.1    10.2    1414160    833204    ?    Sl    Jan08    1:39    23:24:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    50110    0.0    0.0    0    0    ?    I    Jan08    0:03    18:21:42    [kworker/3:1-events]    <noArgs>
root    97780    0.0    0.0    0    0    ?    I    Jan08    0:00    13:22:33    [kworker/u20:2-flush-254:0]    <noArgs>
root    115693    0.0    0.0    0    0    ?    I    Jan08    0:00    11:28:19    [kworker/u20:0-flush-254:0]    <noArgs>
root    119118    0.0    0.0    0    0    ?    I    Jan08    0:00    11:09:32    [kworker/u19:2-kvfree_rcu_reclaim]    <noArgs>
root    123151    0.0    0.0    0    0    ?    I    Jan08    0:00    10:41:17    [kworker/u17:1-kvfree_rcu_reclaim]    <noArgs>
root    143799    0.0    0.0    0    0    ?    I    00:58    0:00    08:33:17    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    176742    0.0    0.0    0    0    ?    I    04:24    0:00    05:07:32    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    178461    0.0    0.0    0    0    ?    I    04:36    0:00    04:55:09    [kworker/u18:0-ext4-rsv-conversion]    <noArgs>
root    183638    0.0    0.0    0    0    ?    I    05:06    0:00    04:24:46    [kworker/u19:0-writeback]    <noArgs>
root    188406    0.0    0.0    0    0    ?    I    05:37    0:00    03:54:33    [kworker/u19:1-flush-254:0]    <noArgs>
root    213477    0.0    0.0    0    0    ?    I    08:15    0:00    01:16:11    [kworker/u17:0]    <noArgs>
root    219574    0.0    0.0    0    0    ?    I    08:52    0:00    38:55    [kworker/u20:1]    <noArgs>
root    221182    0.0    0.0    0    0    ?    I    09:05    0:00    26:11    [kworker/u18:2]    <noArgs>
root    223781    0.0    0.0    0    0    ?    I    09:21    0:00    10:23    [kworker/3:2-ata_sff]    <noArgs>
root    224411    0.0    0.0    0    0    ?    I    09:22    0:00    09:18    [kworker/0:0-ata_sff]    <noArgs>
root    224457    0.0    0.0    0    0    ?    I    09:22    0:00    08:44    [kworker/1:2-ata_sff]    <noArgs>
root    224488    0.0    0.0    0    0    ?    I    09:23    0:00    08:26    [kworker/2:1-ata_sff]    <noArgs>
root    225011    0.0    0.0    0    0    ?    I    09:26    0:00    04:48    [kworker/3:0-ata_sff]    <noArgs>
root    225101    0.0    0.0    0    0    ?    I    09:27    0:00    04:06    [kworker/0:1-ata_sff]    <noArgs>
root    225162    0.0    0.0    0    0    ?    I    09:28    0:00    03:31    [kworker/1:1-ata_sff]    <noArgs>
root    225178    0.0    0.0    0    0    ?    I    09:28    0:00    03:15    [kworker/2:0-ata_sff]    <noArgs>
root    225589    0.0    0.0    2688    1752    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225590    0.0    0.0    2688    1820    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225611    0.0    0.0    9372    4156    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225612    0.0    0.0    5592    1936    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225613    0.0    0.0    9472    4088    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24664    14880    ?    Ss    Jan08    0:02    23:25:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/3:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:31    [kworker/u16:1]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/u25:0]    <noArgs>
root    172    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/0:1H-kblockd]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/1:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ata_sff]    <noArgs>
root    234    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_0]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    240    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_1]    <noArgs>
root    243    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    267    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:30    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    301    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:30    [jbd2/vda1-8]    <noArgs>
root    302    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [hwrng]    <noArgs>
root    333    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:29    [kworker/0:8-mm_percpu_wq]    <noArgs>
root    388    0.0    0.2    41984    20604    ?    Ss    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    419    0.0    0.0    90112    7412    ?    Ssl    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    422    0.0    0.1    37452    12128    ?    Ss    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    432    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:28    [psimon]    <noArgs>
root    564    0.0    0.0    8388    5616    ?    Ss    Jan08    0:01    23:25:28    /usr/sbin/haveged    --Foreground_--verbose=1
root    579    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:28    [kworker/1:3-events]    <noArgs>
dhcpcd    611    0.0    0.0    10528    4504    ?    S    Jan08    0:00    23:25:28    dhcpcd:    eth0_[ip4]_[ip6]
root    612    0.0    0.0    10532    2516    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    613    0.0    0.0    10516    2104    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    614    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-rpciod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-xprtiod]    <noArgs>
root    622    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    632    0.0    0.0    10532    2244    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.203
dhcpcd    633    0.0    0.0    10532    2372    ?    S    Jan08    0:00    23:25:26    dhcpcd:    [DHCP6_proxy]_fe80::a08f:e456:3ae9:eb31
dhcpcd    652    0.0    0.0    10532    2308    ?    S    Jan08    0:00    23:25:22    dhcpcd:    [BOOTP_proxy]_10.0.254.203
root    745    0.0    0.0    309036    7060    ?    Ssl    Jan08    0:00    23:25:22    /usr/libexec/accounts-daemon    <noArgs>
root    747    0.0    0.0    6876    2792    ?    Ss    Jan08    0:00    23:25:22    /usr/sbin/cron    -f
messagebus    748    0.0    0.0    9068    5484    ?    Ss    Jan08    0:00    23:25:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    749    0.0    0.1    382300    9732    ?    Ssl    Jan08    0:01    23:25:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    751    0.0    0.0    80876    3988    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/qemu-ga    <noArgs>
root    755    0.0    0.1    18260    8824    ?    Ss    Jan08    0:00    23:25:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336460    18780    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/NetworkManager    --no-daemon
root    815    0.0    0.1    391060    12388    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/ModemManager    <noArgs>
root    842    0.0    0.0    381356    7592    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    845    0.0    0.0    16356    2256    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1905076    20576    ?    Ssl    Jan08    0:20    23:25:21    /laforge.bin    <noArgs>
xrdp    881    0.0    0.0    15652    2456    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    884    0.0    1.2    915128    104328    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    886    0.0    0.0    8124    2640    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    907    0.0    0.1    169620    8300    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
lightdm    913    0.0    0.1    22808    13236    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
root    915    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    917    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    944    0.0    0.0    8348    4644    ?    Ss    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    945    0.0    0.1    101208    10812    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire    <noArgs>
lightdm    946    0.0    1.2    666648    105496    ?    Ssl    Jan08    0:17    23:25:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    948    0.0    0.1    479284    15992    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/wireplumber    <noArgs>
rtkit    949    0.0    0.0    21492    3148    ?    SNsl    Jan08    0:00    23:25:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    951    0.0    0.0    84704    5192    ?    Ssl    Jan08    0:00    23:25:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    956    0.0    0.1    98776    8296    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    979    0.0    0.0    381080    7112    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    988    0.0    0.0    8208    4524    ?    S    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    991    0.0    0.0    312816    7876    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1007    0.0    0.0    398408    7372    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1035    0.0    0.0    14372    5768    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1037    0.0    0.0    168772    7044    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1067    0.2    1.8    377776    146628    ?    Sl    Jan08    3:35    23:25:18    splunkd    -p_8089_start
root    1070    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:25:18    [splunkd    pid=1067]_splunkd_-p_8089_start_[process-runner]
root    1903    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:24:45    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1904    0.1    10.2    1414160    835256    ?    Sl    Jan08    1:50    23:24:45    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    140527    0.0    0.0    0    0    ?    I    00:37    0:00    08:54:35    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    142911    0.0    0.0    0    0    ?    I    00:52    0:00    08:39:34    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    154973    0.0    0.0    0    0    ?    I    02:07    0:00    07:24:22    [kworker/u17:1-flush-254:0]    <noArgs>
root    171678    0.0    0.0    0    0    ?    I    03:53    0:00    05:38:36    [kworker/u17:0-flush-254:0]    <noArgs>
root    181231    0.0    0.0    0    0    ?    I    04:52    0:00    04:38:54    [kworker/u18:1-flush-254:0]    <noArgs>
root    183623    0.0    0.0    0    0    ?    I    05:07    0:00    04:24:32    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    192393    0.0    0.0    0    0    ?    I    06:05    0:00    03:26:09    [kworker/u19:2-events_unbound]    <noArgs>
root    196315    0.0    0.0    0    0    ?    I    06:27    0:00    03:04:32    [kworker/u19:1-writeback]    <noArgs>
root    197921    0.0    0.0    0    0    ?    I    06:36    0:00    02:54:40    [kworker/u19:0-kvfree_rcu_reclaim]    <noArgs>
root    201122    0.0    0.0    0    0    ?    I    06:58    0:00    02:33:30    [kworker/u20:0-events_unbound]    <noArgs>
root    202878    0.0    0.0    0    0    ?    I    07:07    0:00    02:23:56    [kworker/u20:1-events_unbound]    <noArgs>
root    210060    0.0    0.0    0    0    ?    I    07:53    0:00    01:37:43    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    224225    0.0    0.0    0    0    ?    I    09:21    0:00    09:45    [kworker/2:1-ata_sff]    <noArgs>
root    224399    0.0    0.0    0    0    ?    I    09:23    0:00    08:39    [kworker/0:1-ata_sff]    <noArgs>
root    224460    0.0    0.0    0    0    ?    I    09:23    0:00    07:52    [kworker/3:0-ata_sff]    <noArgs>
root    224566    0.0    0.0    0    0    ?    I    09:24    0:00    06:46    [kworker/1:1-ata_sff]    <noArgs>
root    224983    0.0    0.0    0    0    ?    I    09:27    0:00    04:33    [kworker/2:0-ata_sff]    <noArgs>
root    225164    0.0    0.0    0    0    ?    I    09:29    0:00    02:38    [kworker/3:1-ata_sff]    <noArgs>
root    225165    0.0    0.0    0    0    ?    I    09:29    0:00    02:32    [kworker/0:0-ata_sff]    <noArgs>
root    225257    0.0    0.0    0    0    ?    I    09:30    0:00    01:35    [kworker/1:0-ata_sff]    <noArgs>
root    225517    0.0    0.0    2688    1748    ?    S    09:31    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225518    0.0    0.0    2688    1792    ?    S    09:31    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225539    0.0    0.0    9372    4112    ?    R    09:31    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225540    0.0    0.0    5592    1920    ?    S    09:31    0:00    00:00    tee    /dev/null
root    225541    0.0    0.0    9472    4008    ?    S    09:31    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}