_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24680    14868    ?    Ss    Jan08    0:02    23:30:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:30:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [ksoftirqd/3]    <noArgs>
root    47    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kdevtmpfs]    <noArgs>
root    48    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-inet_frag_wq]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_rude_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:33    [rcu_tasks_trace_kthread]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kauditd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [khungtaskd]    <noArgs>
root    54    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [oom_reaper]    <noArgs>
root    56    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-writeback]    <noArgs>
root    58    0.0    0.0    0    0    ?    S    Jan08    0:02    23:30:33    [kcompactd0]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [ksmd]    <noArgs>
root    60    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:33    [khugepaged]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kblockd]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    63    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-kintegrityd]    <noArgs>
root    64    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:33    [kworker/1:1-events]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-edac-poller]    <noArgs>
root    69    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/R-devfreq_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:33    [kworker/1:1H-kblockd]    <noArgs>
root    73    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/u25:0]    <noArgs>
root    132    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u19:3-flush-254:0]    <noArgs>
root    175    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/2:1H-kblockd]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/3:1H-kblockd]    <noArgs>
root    219    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/0:1H-kblockd]    <noArgs>
root    237    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_0]    <noArgs>
root    249    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    251    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    269    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:31    [kworker/2:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:30    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [hwrng]    <noArgs>
root    383    0.0    0.2    41980    20516    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7476    ?    Ssl    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    420    0.0    0.1    37452    12096    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [psimon]    <noArgs>
root    562    0.0    0.0    8388    7712    ?    Ss    Jan08    0:01    23:30:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:30:28    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:30:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    628    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    629    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [DHCP6_proxy]_fe80::d870:a9e1:678:d338
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:30:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    6984    ?    Ssl    Jan08    0:00    23:30:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2644    ?    Ss    Jan08    0:00    23:30:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9068    5460    ?    Ss    Jan08    0:00    23:30:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    746    0.0    0.1    382300    9824    ?    Ssl    Jan08    0:01    23:30:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    748    0.0    0.0    80876    3880    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18480    8812    ?    Ss    Jan08    0:00    23:30:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    787    0.0    0.2    336476    18792    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12368    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/ModemManager    <noArgs>
root    830    0.0    0.0    381356    7764    ?    Ssl    Jan08    0:00    23:30:22    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    16356    2308    ?    S    Jan08    0:00    23:30:22    /usr/sbin/xrdp-sesman    <noArgs>
xrdp    860    0.0    0.0    15652    2500    ?    S    Jan08    0:00    23:30:22    /usr/sbin/xrdp    <noArgs>
root    863    0.0    0.2    1978552    20592    ?    Ssl    Jan08    0:18    23:30:22    /laforge.bin    <noArgs>
root    869    0.0    1.2    915132    104272    tty7    Ssl+    Jan08    0:02    23:30:22    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    875    0.0    0.0    8124    2600    tty1    Ss+    Jan08    0:00    23:30:22    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.0    169620    8128    ?    Sl    Jan08    0:00    23:30:21    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22452    12968    ?    Ss    Jan08    0:00    23:30:21    /usr/lib/systemd/systemd    --user
root    909    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:21    [psimon]    <noArgs>
lightdm    912    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:30:21    (sd-pam)    <noArgs>
root    930    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:20    [kworker/3:2H-kblockd]    <noArgs>
lightdm    938    0.0    0.0    8348    4696    ?    Ss    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    939    0.0    0.1    101240    10684    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire    <noArgs>
lightdm    940    0.0    1.2    666648    105372    ?    Ssl    Jan08    0:16    23:30:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    942    0.0    0.0    21492    3128    ?    SNsl    Jan08    0:00    23:30:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    946    0.0    0.1    479280    15968    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5228    ?    Ssl    Jan08    0:00    23:30:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    948    0.0    0.1    98776    8352    ?    S<sl    Jan08    0:00    23:30:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    974    0.0    0.0    381080    7292    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    982    0.0    0.0    8208    4420    ?    S    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    990    0.0    0.1    312816    8180    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd    <noArgs>
lightdm    997    0.0    0.0    398408    7412    ?    Sl    Jan08    0:00    23:30:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5780    ?    S    Jan08    0:00    23:30:20    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7096    ?    Sl    Jan08    0:00    23:30:20    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    375728    146996    ?    Sl    Jan08    3:32    23:30:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    17812    ?    Ss    Jan08    0:04    23:30:18    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1076    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:18    [kworker/0:3-events]    <noArgs>
root    1902    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:29:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1903    0.1    10.2    1414160    833636    ?    Sl    Jan08    2:01    23:29:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    128688    0.0    0.0    0    0    ?    I    Jan08    0:00    10:14:33    [kworker/u19:0-writeback]    <noArgs>
root    141502    0.0    0.0    0    0    ?    I    00:39    0:00    08:52:34    [kworker/u17:1-flush-254:0]    <noArgs>
root    154915    0.0    0.0    0    0    ?    I    02:02    0:00    07:29:46    [kworker/u18:0-flush-254:0]    <noArgs>
root    174072    0.0    0.0    0    0    ?    I    04:02    0:00    05:29:43    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    174241    0.0    0.0    0    0    ?    I    04:03    0:00    05:28:26    [kworker/u20:2-flush-254:0]    <noArgs>
root    178810    0.0    0.0    0    0    ?    I    04:32    0:00    04:59:36    [kworker/u18:2-kvfree_rcu_reclaim]    <noArgs>
root    198103    0.0    0.0    0    0    ?    I    06:33    0:00    02:58:36    [kworker/u19:1]    <noArgs>
root    202919    0.0    0.0    0    0    ?    I    07:03    0:00    02:28:57    [kworker/u17:2-ext4-rsv-conversion]    <noArgs>
root    208376    0.0    0.0    0    0    ?    I    07:39    0:00    01:53:07    [kworker/u20:1-flush-254:0]    <noArgs>
root    212470    0.0    0.0    0    0    ?    I    08:03    0:00    01:28:57    [kworker/u20:0-flush-254:0]    <noArgs>
root    219548    0.0    0.0    0    0    ?    I    08:48    0:00    43:54    [kworker/u17:0-ext4-rsv-conversion]    <noArgs>
root    224597    0.0    0.0    0    0    ?    I    09:20    0:00    11:59    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    224981    0.0    0.0    0    0    ?    I    09:22    0:00    09:51    [kworker/0:1-ata_sff]    <noArgs>
root    225056    0.0    0.0    0    0    ?    I    09:22    0:00    09:15    [kworker/2:0-ata_sff]    <noArgs>
root    225271    0.0    0.0    0    0    ?    I    09:25    0:00    06:52    [kworker/1:2-ata_sff]    <noArgs>
root    225287    0.0    0.0    0    0    ?    I    09:25    0:00    06:42    [kworker/3:2-ata_sff]    <noArgs>
root    225700    0.0    0.0    0    0    ?    I    09:27    0:00    04:41    [kworker/0:0-ata_sff]    <noArgs>
root    225746    0.0    0.0    0    0    ?    I    09:28    0:00    04:09    [kworker/2:1-ata_sff]    <noArgs>
root    225988    0.0    0.0    0    0    ?    I    09:30    0:00    01:32    [kworker/1:0-ata_sff]    <noArgs>
root    226004    0.0    0.0    0    0    ?    I    09:30    0:00    01:17    [kworker/3:0-ata_sff]    <noArgs>
root    226240    0.0    0.0    2688    1764    ?    S    09:32    0:00    00:09    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226241    0.0    0.0    2688    1852    ?    S    09:32    0:00    00:09    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226262    0.0    0.0    5624    2180    ?    S    09:32    0:00    00:09    iostat    -xky_60_1
root    226263    0.0    0.0    5592    1900    ?    S    09:32    0:00    00:09    tee    /dev/null
root    226264    0.0    0.0    9472    3944    ?    S    09:32    0:00    00:09    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226389    0.0    0.0    2688    1760    ?    S    09:32    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226390    0.0    0.0    2688    1860    ?    S    09:32    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226411    0.0    0.0    9372    4160    ?    R    09:32    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226412    0.0    0.0    5592    1908    ?    S    09:32    0:00    00:00    tee    /dev/null
root    226413    0.0    0.0    9472    3964    ?    S    09:32    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24728    14968    ?    Ss    Jan08    0:02    23:30:32    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:02    23:30:32    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:32    [kworker/1:0-mm_percpu_wq]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:32    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:30:32    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:32    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:32    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:32    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-mld]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ipv6_addrconf]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/0:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:31    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    90    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-kstrp]    <noArgs>
root    96    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/u21:0]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/u22:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/u23:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/u24:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/3:1H-kblockd]    <noArgs>
root    205    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/1:1H-kblockd]    <noArgs>
root    232    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:31    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    245    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-ata_sff]    <noArgs>
root    247    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_0]    <noArgs>
root    248    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:31    [scsi_eh_1]    <noArgs>
root    253    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    268    0.0    0.0    0    0    ?    I    Jan08    0:05    23:30:30    [kworker/0:2-mm_percpu_wq]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:30    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [hwrng]    <noArgs>
root    382    0.0    0.2    41984    20728    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    412    0.0    0.0    90112    7404    ?    Ssl    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    416    0.0    0.1    37452    12084    ?    Ss    Jan08    0:00    23:30:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    425    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:28    [psimon]    <noArgs>
root    554    0.0    0.0    8388    5296    ?    Ss    Jan08    0:01    23:30:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    605    0.0    0.0    10528    4520    ?    S    Jan08    0:00    23:30:27    dhcpcd:    eth0_[ip4]_[ip6]
root    606    0.0    0.0    10532    2512    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    607    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:30:27    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    610    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:27    [kworker/R-rpciod]    <noArgs>
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:27    [kworker/R-xprtiod]    <noArgs>
root    616    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:27    [kworker/R-cfg80211]    <noArgs>
dhcpcd    625    0.0    0.0    10532    2376    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [DHCP6_proxy]_fe80::6b7b:4717:faf8:abbb
dhcpcd    627    0.0    0.0    10532    2248    ?    S    Jan08    0:00    23:30:25    dhcpcd:    [BPF_ARP]_eth0_10.0.254.206
dhcpcd    646    0.0    0.0    10532    2312    ?    S    Jan08    0:00    23:30:21    dhcpcd:    [BOOTP_proxy]_10.0.254.206
root    739    0.0    0.0    309036    7240    ?    Ssl    Jan08    0:00    23:30:20    /usr/libexec/accounts-daemon    <noArgs>
root    741    0.0    0.0    6876    2740    ?    Ss    Jan08    0:00    23:30:20    /usr/sbin/cron    -f
messagebus    742    0.0    0.0    9204    5572    ?    Ss    Jan08    0:00    23:30:20    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9808    ?    Ssl    Jan08    0:01    23:30:20    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3920    ?    Ssl    Jan08    0:00    23:30:20    /usr/sbin/qemu-ga    <noArgs>
root    749    0.0    0.1    18352    8820    ?    Ss    Jan08    0:00    23:30:20    /usr/lib/systemd/systemd-logind    <noArgs>
root    772    0.0    0.2    336460    18956    ?    Ssl    Jan08    0:00    23:30:20    /usr/sbin/NetworkManager    --no-daemon
root    809    0.0    0.1    317328    12476    ?    Ssl    Jan08    0:00    23:30:20    /usr/sbin/ModemManager    <noArgs>
root    831    0.0    0.0    381356    7752    ?    Ssl    Jan08    0:00    23:30:20    /usr/sbin/lightdm    <noArgs>
root    839    0.0    0.0    16356    2260    ?    S    Jan08    0:00    23:30:20    /usr/sbin/xrdp-sesman    <noArgs>
root    847    0.0    0.2    1978552    20552    ?    Ssl    Jan08    0:19    23:30:20    /laforge.bin    <noArgs>
xrdp    873    0.0    0.0    15652    2452    ?    S    Jan08    0:00    23:30:20    /usr/sbin/xrdp    <noArgs>
root    876    0.0    0.0    8124    2520    tty1    Ss+    Jan08    0:00    23:30:20    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    877    0.0    1.3    915132    105840    tty7    Ssl+    Jan08    0:02    23:30:20    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    898    0.0    0.1    169620    8276    ?    Sl    Jan08    0:00    23:30:19    lightdm    --session-child_17_20
lightdm    904    0.0    0.1    22624    13044    ?    Ss    Jan08    0:00    23:30:19    /usr/lib/systemd/systemd    --user
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:19    [psimon]    <noArgs>
lightdm    909    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:30:19    (sd-pam)    <noArgs>
lightdm    932    0.0    0.0    8348    4712    ?    Ss    Jan08    0:00    23:30:19    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    933    0.0    0.1    101224    10700    ?    S<sl    Jan08    0:00    23:30:19    /usr/bin/pipewire    <noArgs>
lightdm    937    0.0    0.1    479272    15864    ?    S<sl    Jan08    0:00    23:30:19    /usr/bin/wireplumber    <noArgs>
lightdm    938    0.0    0.0    84704    5300    ?    Ssl    Jan08    0:00    23:30:19    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    939    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:30:19    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    940    0.0    0.1    98776    8148    ?    S<sl    Jan08    0:00    23:30:19    /usr/bin/pipewire-pulse    <noArgs>
lightdm    943    0.0    1.2    666648    105620    ?    Ssl    Jan08    0:17    23:30:19    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    972    0.0    0.0    381080    7088    ?    Ssl    Jan08    0:00    23:30:18    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    981    0.0    0.0    8208    4412    ?    S    Jan08    0:00    23:30:18    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    986    0.0    0.0    312816    7984    ?    Ssl    Jan08    0:00    23:30:18    /usr/libexec/gvfsd    <noArgs>
lightdm    993    0.0    0.0    398408    7312    ?    Sl    Jan08    0:00    23:30:18    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1029    0.0    0.0    14372    5736    ?    S    Jan08    0:00    23:30:18    lightdm    --session-child_13_20
lightdm    1031    0.0    0.0    168772    7196    ?    Sl    Jan08    0:00    23:30:18    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1059    0.2    1.8    377776    149380    ?    Sl    Jan08    3:45    23:30:17    splunkd    -p_8089_start
root    1062    0.0    0.2    135648    18044    ?    Ss    Jan08    0:04    23:30:17    [splunkd    pid=1059]_splunkd_-p_8089_start_[process-runner]
root    1897    0.0    0.0    2688    1760    ?    S    Jan08    0:00    23:29:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1898    0.1    10.2    1414160    833824    ?    Sl    Jan08    2:04    23:29:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    11822    0.0    0.0    0    0    ?    I    Jan08    0:00    22:26:33    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    49040    0.0    0.0    0    0    ?    I    Jan08    0:00    18:30:39    [kworker/u19:0-flush-254:0]    <noArgs>
root    129341    0.0    0.0    0    0    ?    I    Jan08    0:00    10:09:35    [kworker/u18:2-ext4-rsv-conversion]    <noArgs>
root    143687    0.0    0.0    0    0    ?    I    00:53    0:00    08:38:45    [kworker/u20:2-flush-254:0]    <noArgs>
root    166244    0.0    0.0    0    0    ?    I    03:16    0:01    06:15:58    [kworker/2:0-events]    <noArgs>
root    191481    0.0    0.0    0    0    ?    I    05:52    0:00    03:39:15    [kworker/u17:1-flush-254:0]    <noArgs>
root    206912    0.0    0.0    0    0    ?    I    07:30    0:00    02:01:45    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    207613    0.0    0.0    0    0    ?    I    07:32    0:00    01:59:31    [kworker/u20:0-kvfree_rcu_reclaim]    <noArgs>
root    218087    0.0    0.0    0    0    ?    I    08:39    0:00    52:40    [kworker/u18:3]    <noArgs>
root    220523    0.0    0.0    0    0    ?    I    08:55    0:00    36:40    [kworker/u17:0-kvfree_rcu_reclaim]    <noArgs>
root    225083    0.0    0.0    0    0    ?    I    09:22    0:00    09:45    [kworker/u19:2-ext4-rsv-conversion]    <noArgs>
root    225084    0.0    0.0    0    0    ?    I    09:22    0:00    09:42    [kworker/0:1-ata_sff]    <noArgs>
root    225295    0.0    0.0    0    0    ?    I    09:24    0:00    07:21    [kworker/2:1-ata_sff]    <noArgs>
root    225420    0.0    0.0    0    0    ?    I    09:26    0:00    06:02    [kworker/3:0-ata_sff]    <noArgs>
root    225511    0.0    0.0    0    0    ?    I    09:27    0:00    05:10    [kworker/1:1-ata_sff]    <noArgs>
root    225819    0.0    0.0    0    0    ?    I    09:28    0:00    04:01    [kworker/0:0-ata_sff]    <noArgs>
root    225985    0.0    0.0    0    0    ?    I    09:29    0:00    02:12    [kworker/2:2-ata_sff]    <noArgs>
root    226152    0.0    0.0    0    0    ?    I    09:31    0:00    00:27    [kworker/3:1-ata_sff]    <noArgs>
root    226313    0.0    0.0    2688    1824    ?    S    09:32    0:00    00:08    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226314    0.0    0.0    2688    1832    ?    S    09:32    0:00    00:08    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226335    0.0    0.0    5624    2212    ?    S    09:32    0:00    00:08    iostat    -xky_60_1
root    226336    0.0    0.0    5592    1888    ?    S    09:32    0:00    00:08    tee    /dev/null
root    226337    0.0    0.0    9472    4072    ?    S    09:32    0:00    00:08    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226462    0.0    0.0    2688    1748    ?    S    09:32    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226463    0.0    0.0    2688    1856    ?    S    09:32    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226484    0.0    0.0    9372    4220    ?    R    09:32    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226485    0.0    0.0    5592    1856    ?    S    09:32    0:00    00:00    tee    /dev/null
root    226486    0.0    0.0    9472    3996    ?    S    09:32    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}

_sourcetype: ps

source: ps

sourcetype: ps


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24704    15320    ?    Ss    Jan08    0:02    23:30:30    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-netns]    <noArgs>
root    9    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:30    [kworker/0:0-events]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:30    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:30:30    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [ksoftirqd/2]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [ksoftirqd/3]    <noArgs>
root    44    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:30    [kworker/u18:1-kvfree_rcu_reclaim]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:30    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:30    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:30    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:30:30    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:30    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:30:30    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/2:1H-kblockd]    <noArgs>
root    71    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:30    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:30    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:29    [kworker/2:2-mm_percpu_wq]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:30:29    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/u25:0]    <noArgs>
root    200    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/0:1H-kblockd]    <noArgs>
root    204    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/1:1H-kblockd]    <noArgs>
root    206    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/3:1H-kblockd]    <noArgs>
root    233    0.0    0.0    0    0    ?    I    Jan08    0:04    23:30:29    [kworker/1:2-mm_percpu_wq]    <noArgs>
root    247    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-ata_sff]    <noArgs>
root    252    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [scsi_eh_0]    <noArgs>
root    254    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-scsi_tmf_0]    <noArgs>
root    255    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:29    [scsi_eh_1]    <noArgs>
root    257    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:29    [kworker/R-scsi_tmf_1]    <noArgs>
root    302    0.0    0.0    0    0    ?    S    Jan08    0:01    23:30:28    [jbd2/vda1-8]    <noArgs>
root    303    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:28    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    327    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:28    [hwrng]    <noArgs>
root    380    0.0    0.2    41980    20516    ?    Ss    Jan08    0:00    23:30:27    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    413    0.0    0.0    90112    7472    ?    Ssl    Jan08    0:00    23:30:27    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    417    0.0    0.1    37588    12100    ?    Ss    Jan08    0:00    23:30:27    /usr/lib/systemd/systemd-udevd    <noArgs>
root    426    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:27    [psimon]    <noArgs>
root    562    0.0    0.0    8388    5480    ?    Ss    Jan08    0:01    23:30:26    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    606    0.0    0.0    10532    4528    ?    S    Jan08    0:00    23:30:26    dhcpcd:    eth0_[ip4]_[ip6]
root    607    0.0    0.0    10540    2512    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    608    0.0    0.0    10516    2116    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2120    ?    S    Jan08    0:00    23:30:26    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    611    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:26    [kworker/R-rpciod]    <noArgs>
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:26    [kworker/R-xprtiod]    <noArgs>
root    617    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:25    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10540    2256    ?    S    Jan08    0:00    23:30:25    dhcpcd:    [BPF_ARP]_eth0_10.0.254.205
dhcpcd    628    0.0    0.0    10540    2384    ?    S    Jan08    0:00    23:30:24    dhcpcd:    [DHCP6_proxy]_fe80::e8ae:ca32:1759:19db
dhcpcd    647    0.0    0.0    10540    2320    ?    S    Jan08    0:00    23:30:20    dhcpcd:    [BOOTP_proxy]_10.0.254.205
root    740    0.0    0.0    309036    6996    ?    Ssl    Jan08    0:00    23:30:19    /usr/libexec/accounts-daemon    <noArgs>
root    742    0.0    0.0    6876    2696    ?    Ss    Jan08    0:00    23:30:19    /usr/sbin/cron    -f
messagebus    743    0.0    0.0    9060    5536    ?    Ss    Jan08    0:00    23:30:19    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9788    ?    Ssl    Jan08    0:01    23:30:19    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3844    ?    Ssl    Jan08    0:00    23:30:19    /usr/sbin/qemu-ga    <noArgs>
root    750    0.0    0.1    18356    8824    ?    Ss    Jan08    0:00    23:30:19    /usr/lib/systemd/systemd-logind    <noArgs>
root    789    0.0    0.2    336480    18840    ?    Ssl    Jan08    0:00    23:30:19    /usr/sbin/NetworkManager    --no-daemon
root    810    0.0    0.1    391064    12260    ?    Ssl    Jan08    0:00    23:30:19    /usr/sbin/ModemManager    <noArgs>
root    838    0.0    0.0    381488    7744    ?    Ssl    Jan08    0:00    23:30:19    /usr/sbin/lightdm    <noArgs>
root    840    0.0    0.0    16356    2344    ?    S    Jan08    0:00    23:30:19    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1978808    20568    ?    Ssl    Jan08    0:18    23:30:19    /laforge.bin    <noArgs>
root    855    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:30:19    [kworker/3:2H-kblockd]    <noArgs>
xrdp    875    0.0    0.0    15652    2492    ?    S    Jan08    0:00    23:30:19    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    106124    tty7    Ssl+    Jan08    0:02    23:30:19    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    881    0.0    0.0    8124    2716    tty1    Ss+    Jan08    0:00    23:30:19    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    901    0.0    0.1    169620    8216    ?    Sl    Jan08    0:00    23:30:18    lightdm    --session-child_17_20
root    906    0.0    0.0    0    0    ?    S    Jan08    0:00    23:30:18    [psimon]    <noArgs>
lightdm    909    0.0    0.1    22872    13012    ?    Ss    Jan08    0:00    23:30:18    /usr/lib/systemd/systemd    --user
lightdm    911    0.0    0.0    22712    3840    ?    S    Jan08    0:00    23:30:18    (sd-pam)    <noArgs>
lightdm    933    0.0    0.0    8348    4564    ?    Ss    Jan08    0:00    23:30:18    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    934    0.0    0.1    101256    10768    ?    S<sl    Jan08    0:00    23:30:18    /usr/bin/pipewire    <noArgs>
lightdm    935    0.0    1.2    666648    105404    ?    Ssl    Jan08    0:15    23:30:18    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    938    0.0    0.1    479280    16008    ?    S<sl    Jan08    0:00    23:30:18    /usr/bin/wireplumber    <noArgs>
lightdm    939    0.0    0.0    84704    5224    ?    Ssl    Jan08    0:00    23:30:18    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.0    98776    8048    ?    S<sl    Jan08    0:00    23:30:18    /usr/bin/pipewire-pulse    <noArgs>
rtkit    942    0.0    0.0    21492    3132    ?    SNsl    Jan08    0:00    23:30:18    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    967    0.0    0.0    381080    7136    ?    Ssl    Jan08    0:00    23:30:18    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    977    0.0    0.0    8208    4528    ?    S    Jan08    0:00    23:30:18    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    985    0.0    0.1    312816    8152    ?    Ssl    Jan08    0:00    23:30:18    /usr/libexec/gvfsd    <noArgs>
lightdm    995    0.0    0.0    398408    7384    ?    Sl    Jan08    0:00    23:30:17    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1032    0.0    0.0    14372    5768    ?    S    Jan08    0:00    23:30:17    lightdm    --session-child_13_20
lightdm    1034    0.0    0.0    168772    7104    ?    Sl    Jan08    0:00    23:30:17    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1062    0.2    1.8    377776    150444    ?    Sl    Jan08    3:19    23:30:16    splunkd    -p_8089_start
root    1065    0.0    0.2    135648    18016    ?    Ss    Jan08    0:04    23:30:16    [splunkd    pid=1062]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1748    ?    S    Jan08    0:00    23:29:44    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    835776    ?    Sl    Jan08    1:42    23:29:44    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    54768    0.0    0.0    0    0    ?    I    Jan08    0:03    17:56:49    [kworker/3:2-mm_percpu_wq]    <noArgs>
root    142949    0.0    0.0    0    0    ?    I    00:47    0:00    08:44:24    [kworker/u19:1-flush-254:0]    <noArgs>
root    148715    0.0    0.0    0    0    ?    I    01:25    0:00    08:06:46    [kworker/u17:0-flush-254:0]    <noArgs>
root    152465    0.0    0.0    0    0    ?    I    01:47    0:00    07:44:29    [kworker/u17:1-flush-254:0]    <noArgs>
root    152713    0.0    0.0    0    0    ?    I    01:50    0:00    07:42:06    [kworker/u18:2-flush-254:0]    <noArgs>
root    170902    0.0    0.0    0    0    ?    I    03:45    0:00    05:47:06    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    178922    0.0    0.0    0    0    ?    I    04:33    0:00    04:58:52    [kworker/u17:2-events_unbound]    <noArgs>
root    194006    0.0    0.0    0    0    ?    I    06:08    0:00    03:23:44    [kworker/u20:2-events_unbound]    <noArgs>
root    196633    0.0    0.0    0    0    ?    I    06:25    0:00    03:06:40    [kworker/u18:0-events_unbound]    <noArgs>
root    222051    0.0    0.0    0    0    ?    I    09:03    0:00    28:55    [kworker/u20:0]    <noArgs>
root    223062    0.0    0.0    0    0    ?    I    09:11    0:00    20:44    [kworker/u19:2-events_unbound]    <noArgs>
root    224862    0.0    0.0    0    0    ?    I    09:22    0:00    10:03    [kworker/0:1-ata_sff]    <noArgs>
root    224981    0.0    0.0    0    0    ?    I    09:22    0:00    09:53    [kworker/1:0-ata_sff]    <noArgs>
root    225273    0.0    0.0    0    0    ?    I    09:25    0:00    07:07    [kworker/2:0-ata_sff]    <noArgs>
root    225274    0.0    0.0    0    0    ?    I    09:25    0:00    07:07    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    225335    0.0    0.0    0    0    ?    I    09:25    0:00    06:25    [kworker/3:0-ata_sff]    <noArgs>
root    225674    0.0    0.0    0    0    ?    I    09:27    0:00    04:48    [kworker/0:2-ata_sff]    <noArgs>
root    225719    0.0    0.0    0    0    ?    I    09:27    0:00    04:38    [kworker/1:1-ata_sff]    <noArgs>
root    225961    0.0    0.0    0    0    ?    I    09:30    0:00    01:55    [kworker/2:1-ata_sff]    <noArgs>
root    226007    0.0    0.0    0    0    ?    I    09:30    0:00    01:21    [kworker/3:1-ata_sff]    <noArgs>
root    226258    0.0    0.0    2688    1732    ?    S    09:32    0:00    00:07    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226259    0.0    0.0    2688    1836    ?    S    09:32    0:00    00:07    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/iostat.sh
root    226280    0.0    0.0    5624    2124    ?    S    09:32    0:00    00:07    iostat    -xky_60_1
root    226281    0.0    0.0    5592    1908    ?    S    09:32    0:00    00:07    tee    /dev/null
root    226282    0.0    0.0    9472    3944    ?    S    09:32    0:00    00:07    awk    /Device/_&&_/r\/s/_&&_/w\/s/_{f=1;}f
root    226392    0.0    0.0    2688    1764    ?    S    09:32    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226393    0.0    0.0    2688    1760    ?    S    09:32    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    226414    0.0    0.0    9372    4188    ?    R    09:32    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    226415    0.0    0.0    5592    1920    ?    S    09:32    0:00    00:00    tee    /dev/null
root    226416    0.0    0.0    9472    4028    ?    S    09:32    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24644    15304    ?    Ss    Jan08    0:02    23:25:34    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/0:0H-events_highpri]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:34    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/1]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/2]    <noArgs>
root    31    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:34    [kworker/2:0-events]    <noArgs>
root    32    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/2:0H-events_highpri]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/3:0H-kblockd]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:34    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:34    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:34    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:34    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [irq/9-acpi]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-tpm_dev_wq]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-edac-poller]    <noArgs>
root    68    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I    Jan08    0:05    23:25:34    [kworker/1:1-mm_percpu_wq]    <noArgs>
root    71    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:34    [kworker/1:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:34    [kswapd0]    <noArgs>
root    79    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kthrotld]    <noArgs>
root    81    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-acpi_thermal_pm]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-mld]    <noArgs>
root    84    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-ipv6_addrconf]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/2:1H-kblockd]    <noArgs>
root    86    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    91    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kstrp]    <noArgs>
root    97    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u21:0]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u22:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u23:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u24:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/u25:0]    <noArgs>
root    203    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/0:1H-kblockd]    <noArgs>
root    248    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:33    [kworker/0:2-events]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-scsi_tmf_1]    <noArgs>
root    303    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:32    [jbd2/vda1-8]    <noArgs>
root    304    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    329    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [hwrng]    <noArgs>
root    384    0.0    0.2    41984    20684    ?    Ss    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7408    ?    Ssl    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    421    0.0    0.1    37452    12144    ?    Ss    Jan08    0:00    23:25:30    /usr/lib/systemd/systemd-udevd    <noArgs>
root    429    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [psimon]    <noArgs>
root    563    0.0    0.0    8388    7732    ?    Ss    Jan08    0:01    23:25:29    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    607    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:25:29    dhcpcd:    eth0_[ip4]_[ip6]
root    608    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    609    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:25:29    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    612    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-rpciod]    <noArgs>
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-xprtiod]    <noArgs>
root    618    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:29    [kworker/R-cfg80211]    <noArgs>
dhcpcd    627    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [DHCP6_proxy]_fe80::bf05:4271:85f4:474a
dhcpcd    629    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.202
dhcpcd    648    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:25:22    dhcpcd:    [BOOTP_proxy]_10.0.254.202
root    741    0.0    0.0    309036    7232    ?    Ssl    Jan08    0:00    23:25:22    /usr/libexec/accounts-daemon    <noArgs>
root    743    0.0    0.0    6876    2716    ?    Ss    Jan08    0:00    23:25:22    /usr/sbin/cron    -f
messagebus    744    0.0    0.0    9204    5628    ?    Ss    Jan08    0:00    23:25:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    745    0.0    0.1    382300    9788    ?    Ssl    Jan08    0:01    23:25:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    747    0.0    0.0    80876    3972    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/qemu-ga    <noArgs>
root    751    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:25:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    774    0.0    0.2    336448    18992    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391064    12424    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/ModemManager    <noArgs>
root    818    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:22    [kworker/3:2H-kblockd]    <noArgs>
root    839    0.0    0.0    381364    7764    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    843    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    853    0.0    0.2    1978808    20808    ?    Ssl    Jan08    0:19    23:25:21    /laforge.bin    <noArgs>
xrdp    876    0.0    0.0    15652    2380    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    878    0.0    1.3    915128    105856    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    880    0.0    0.0    8124    2504    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    902    0.0    0.0    169620    8040    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
lightdm    908    0.0    0.1    22464    12912    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
root    910    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    913    0.0    0.0    22712    3848    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    934    0.0    0.0    8348    4688    ?    Ss    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    935    0.0    0.1    101256    10760    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire    <noArgs>
lightdm    936    0.0    1.2    666648    105364    ?    Ssl    Jan08    0:16    23:25:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
rtkit    938    0.0    0.0    21492    3144    ?    SNsl    Jan08    0:00    23:25:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    939    0.0    0.1    479288    16116    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/wireplumber    <noArgs>
lightdm    940    0.0    0.0    84704    5128    ?    Ssl    Jan08    0:00    23:25:20    /usr/bin/pipewire    -c_filter-chain.conf
lightdm    941    0.0    0.1    98776    8320    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    966    0.0    0.0    381080    7356    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    976    0.0    0.0    8208    4480    ?    S    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_13_--address=unix:path=/run/user/123/at-spi/bus
lightdm    983    0.0    0.1    312816    8176    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd    <noArgs>
lightdm    994    0.0    0.0    398408    7440    ?    Sl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1030    0.0    0.0    14372    5756    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1032    0.0    0.0    168772    7044    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    379824    150552    ?    Sl    Jan08    3:24    23:25:18    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18040    ?    Ss    Jan08    0:04    23:25:18    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1899    0.0    0.0    2688    1808    ?    S    Jan08    0:00    23:24:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1900    0.1    10.2    1414160    831052    ?    Sl    Jan08    1:44    23:24:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    96837    0.0    0.0    0    0    ?    I    Jan08    0:00    13:25:22    [kworker/u20:1-kvfree_rcu_reclaim]    <noArgs>
root    176491    0.0    0.0    0    0    ?    I    04:22    0:00    05:09:36    [kworker/3:1-mm_percpu_wq]    <noArgs>
root    182866    0.0    0.0    0    0    ?    I    05:05    0:00    04:26:31    [kworker/u17:4-kvfree_rcu_reclaim]    <noArgs>
root    183749    0.0    0.0    0    0    ?    I    05:07    0:00    04:24:07    [kworker/u19:2-flush-254:0]    <noArgs>
root    187413    0.0    0.0    0    0    ?    I    05:32    0:00    03:59:46    [kworker/u19:0-ext4-rsv-conversion]    <noArgs>
root    190842    0.0    0.0    0    0    ?    I    05:53    0:00    03:38:57    [kworker/u19:1-flush-254:0]    <noArgs>
root    195746    0.0    0.0    0    0    ?    I    06:23    0:00    03:08:56    [kworker/u18:1-events_unbound]    <noArgs>
root    199034    0.0    0.0    0    0    ?    I    06:45    0:00    02:46:30    [kworker/u17:1-ext4-rsv-conversion]    <noArgs>
root    210315    0.0    0.0    0    0    ?    I    07:56    0:00    01:35:36    [kworker/u18:0-kvfree_rcu_reclaim]    <noArgs>
root    214859    0.0    0.0    0    0    ?    I    08:23    0:00    01:08:53    [kworker/u18:2]    <noArgs>
root    220538    0.0    0.0    0    0    ?    I    09:01    0:00    30:32    [kworker/u20:2-kvfree_rcu_reclaim]    <noArgs>
root    223385    0.0    0.0    0    0    ?    I    09:17    0:00    14:29    [kworker/u20:0-flush-254:0]    <noArgs>
root    224334    0.0    0.0    0    0    ?    I    09:22    0:00    09:36    [kworker/1:2-ata_sff]    <noArgs>
root    224427    0.0    0.0    0    0    ?    I    09:23    0:00    09:01    [kworker/3:2-ata_sff]    <noArgs>
root    224563    0.0    0.0    0    0    ?    I    09:24    0:00    07:24    [kworker/2:2-ata_sff]    <noArgs>
root    224748    0.0    0.0    0    0    ?    I    09:26    0:00    05:28    [kworker/0:1-ata_sff]    <noArgs>
root    225071    0.0    0.0    0    0    ?    I    09:27    0:00    04:21    [kworker/1:0-ata_sff]    <noArgs>
root    225117    0.0    0.0    0    0    ?    I    09:28    0:00    03:49    [kworker/3:0-ata_sff]    <noArgs>
root    225268    0.0    0.0    0    0    ?    I    09:30    0:00    02:02    [kworker/2:1-ata_sff]    <noArgs>
root    225450    0.0    0.0    0    0    ?    I    09:31    0:00    00:11    [kworker/0:0-ata_sff]    <noArgs>
root    225575    0.0    0.0    2688    1748    ?    S    09:32    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225576    0.0    0.0    2688    1820    ?    S    09:32    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225597    0.0    0.0    9372    4180    ?    R    09:32    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225598    0.0    0.0    5592    1920    ?    S    09:32    0:00    00:00    tee    /dev/null
root    225599    0.0    0.0    9472    3988    ?    S    09:32    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}


_raw:
USER    PID    %CPU    %MEM    VSZ    RSS    TTY    STAT    START    TIME    ELAPSED    COMMAND    ARGS
root    1    0.0    0.1    24688    15112    ?    Ss    Jan08    0:02    23:25:33    /sbin/init    splash
root    2    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [kthreadd]    <noArgs>
root    3    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [pool_workqueue_release]    <noArgs>
root    4    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-rcu_gp]    <noArgs>
root    5    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-sync_wq]    <noArgs>
root    6    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kvfree_rcu_reclaim]    <noArgs>
root    7    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-slub_flushwq]    <noArgs>
root    8    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-netns]    <noArgs>
root    10    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/0:0H-events_highpri]    <noArgs>
root    11    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:33    [kworker/0:1-events]    <noArgs>
root    12    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [kworker/u16:0-ipv6_addrconf]    <noArgs>
root    13    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-mm_percpu_wq]    <noArgs>
root    14    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [ksoftirqd/0]    <noArgs>
root    15    0.0    0.0    0    0    ?    I    Jan08    0:01    23:25:33    [rcu_preempt]    <noArgs>
root    16    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [rcu_exp_par_gp_kthread_worker/0]    <noArgs>
root    17    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [rcu_exp_gp_kthread_worker]    <noArgs>
root    18    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [migration/0]    <noArgs>
root    19    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [idle_inject/0]    <noArgs>
root    20    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [cpuhp/0]    <noArgs>
root    21    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [cpuhp/1]    <noArgs>
root    22    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [idle_inject/1]    <noArgs>
root    23    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [migration/1]    <noArgs>
root    24    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [ksoftirqd/1]    <noArgs>
root    25    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:33    [kworker/1:0-mm_percpu_wq]    <noArgs>
root    26    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/1:0H-events_highpri]    <noArgs>
root    27    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [cpuhp/2]    <noArgs>
root    28    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [idle_inject/2]    <noArgs>
root    29    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [migration/2]    <noArgs>
root    30    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [ksoftirqd/2]    <noArgs>
root    33    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [cpuhp/3]    <noArgs>
root    34    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [idle_inject/3]    <noArgs>
root    35    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [migration/3]    <noArgs>
root    36    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [ksoftirqd/3]    <noArgs>
root    38    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/3:0H-events_highpri]    <noArgs>
root    46    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [kdevtmpfs]    <noArgs>
root    47    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-inet_frag_wq]    <noArgs>
root    48    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [rcu_tasks_kthread]    <noArgs>
root    49    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [rcu_tasks_rude_kthread]    <noArgs>
root    50    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:33    [rcu_tasks_trace_kthread]    <noArgs>
root    51    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [kauditd]    <noArgs>
root    52    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [khungtaskd]    <noArgs>
root    53    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [oom_reaper]    <noArgs>
root    55    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-writeback]    <noArgs>
root    57    0.0    0.0    0    0    ?    S    Jan08    0:02    23:25:33    [kcompactd0]    <noArgs>
root    58    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:33    [ksmd]    <noArgs>
root    59    0.0    0.0    0    0    ?    SN    Jan08    0:00    23:25:33    [khugepaged]    <noArgs>
root    60    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kblockd]    <noArgs>
root    61    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-blkcg_punt_bio]    <noArgs>
root    62    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-kintegrityd]    <noArgs>
root    63    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [irq/9-acpi]    <noArgs>
root    65    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-tpm_dev_wq]    <noArgs>
root    66    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-edac-poller]    <noArgs>
root    67    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/R-devfreq_wq]    <noArgs>
root    70    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:33    [kworker/2:1H-kblockd]    <noArgs>
root    72    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:33    [kswapd0]    <noArgs>
root    80    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kthrotld]    <noArgs>
root    82    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-acpi_thermal_pm]    <noArgs>
root    83    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-mld]    <noArgs>
root    85    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-ipv6_addrconf]    <noArgs>
root    86    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/1:1H-kblockd]    <noArgs>
root    87    0.0    0.0    0    0    ?    I    Jan08    0:00    23:25:32    [kworker/u16:1-ipv6_addrconf]    <noArgs>
root    92    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-kstrp]    <noArgs>
root    98    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/u21:0]    <noArgs>
root    99    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/u22:0]    <noArgs>
root    100    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/u23:0]    <noArgs>
root    101    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/u24:0]    <noArgs>
root    102    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/u25:0]    <noArgs>
root    221    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/3:1H-kblockd]    <noArgs>
root    234    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/0:1H-kblockd]    <noArgs>
root    259    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:32    [kworker/R-ata_sff]    <noArgs>
root    261    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_0]    <noArgs>
root    262    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_0]    <noArgs>
root    263    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:31    [scsi_eh_1]    <noArgs>
root    264    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-scsi_tmf_1]    <noArgs>
root    270    0.0    0.0    0    0    ?    I    Jan08    0:04    23:25:31    [kworker/3:2-events]    <noArgs>
root    304    0.0    0.0    0    0    ?    S    Jan08    0:01    23:25:31    [jbd2/vda1-8]    <noArgs>
root    305    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:31    [kworker/R-ext4-rsv-conversion]    <noArgs>
root    330    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:30    [hwrng]    <noArgs>
root    385    0.0    0.2    41980    20340    ?    Ss    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-journald    <noArgs>
systemd-timesync    415    0.0    0.0    90112    7472    ?    Ssl    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-timesyncd    <noArgs>
root    419    0.0    0.1    37452    12100    ?    Ss    Jan08    0:00    23:25:29    /usr/lib/systemd/systemd-udevd    <noArgs>
root    428    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:29    [psimon]    <noArgs>
root    559    0.0    0.0    8388    6716    ?    Ss    Jan08    0:01    23:25:28    /usr/sbin/haveged    --Foreground_--verbose=1
dhcpcd    608    0.0    0.0    10532    4524    ?    S    Jan08    0:00    23:25:28    dhcpcd:    eth0_[ip4]_[ip6]
root    609    0.0    0.0    10536    2504    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [privileged_proxy]_eth0_[ip4]_[ip6]
dhcpcd    610    0.0    0.0    10516    2108    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [network_proxy]_eth0_[ip4]_[ip6]
dhcpcd    611    0.0    0.0    10516    2112    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [control_proxy]_eth0_[ip4]_[ip6]
root    613    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:28    [kworker/R-rpciod]    <noArgs>
root    614    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:28    [kworker/R-xprtiod]    <noArgs>
root    619    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:28    [kworker/R-cfg80211]    <noArgs>
dhcpcd    629    0.0    0.0    10536    2248    ?    S    Jan08    0:00    23:25:28    dhcpcd:    [BPF_ARP]_eth0_10.0.254.204
dhcpcd    630    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:25:27    dhcpcd:    [DHCP6_proxy]_fe80::c2e5:7713:80ac:9cc3
dhcpcd    649    0.0    0.0    10536    2376    ?    S    Jan08    0:00    23:25:22    dhcpcd:    [BOOTP_proxy]_10.0.254.204
root    742    0.0    0.0    309036    7192    ?    Ssl    Jan08    0:00    23:25:22    /usr/libexec/accounts-daemon    <noArgs>
root    744    0.0    0.0    6876    2724    ?    Ss    Jan08    0:00    23:25:22    /usr/sbin/cron    -f
messagebus    745    0.0    0.0    9068    5456    ?    Ss    Jan08    0:00    23:25:22    /usr/bin/dbus-daemon    --system_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
polkitd    747    0.0    0.1    382300    9908    ?    Ssl    Jan08    0:01    23:25:22    /usr/lib/polkit-1/polkitd    --no-debug_--log-level=notice
root    749    0.0    0.0    80876    3888    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/qemu-ga    <noArgs>
root    752    0.0    0.1    18260    8816    ?    Ss    Jan08    0:00    23:25:22    /usr/lib/systemd/systemd-logind    <noArgs>
root    775    0.0    0.2    336464    19076    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/NetworkManager    --no-daemon
root    811    0.0    0.1    391060    12360    ?    Ssl    Jan08    0:00    23:25:22    /usr/sbin/ModemManager    <noArgs>
root    831    0.0    0.0    381356    7616    ?    Ssl    Jan08    0:00    23:25:21    /usr/sbin/lightdm    <noArgs>
root    842    0.0    0.0    0    0    ?    I<    Jan08    0:00    23:25:21    [kworker/2:2H-kblockd]    <noArgs>
root    847    0.0    0.0    16356    2244    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp-sesman    <noArgs>
root    849    0.0    0.2    1905076    20472    ?    Ssl    Jan08    0:19    23:25:21    /laforge.bin    <noArgs>
xrdp    875    0.0    0.0    15652    2344    ?    S    Jan08    0:00    23:25:21    /usr/sbin/xrdp    <noArgs>
root    881    0.0    1.3    915128    105868    tty7    Ssl+    Jan08    0:02    23:25:21    /usr/lib/xorg/Xorg    :0_-seat_seat0_-auth_/var/run/lightdm/root/:0_-nolisten_tcp_vt7_-novtswitch
root    885    0.0    0.0    8124    2496    tty1    Ss+    Jan08    0:00    23:25:21    /usr/sbin/agetty    --noreset_--noclear_--issue-file=/etc/issue:/etc/issue.d:/run/issue.d:/usr/lib/issue.d_-_linux
root    903    0.0    0.1    169620    8316    ?    Sl    Jan08    0:00    23:25:20    lightdm    --session-child_17_20
root    908    0.0    0.0    0    0    ?    S    Jan08    0:00    23:25:20    [psimon]    <noArgs>
lightdm    910    0.0    0.1    22628    13052    ?    Ss    Jan08    0:00    23:25:20    /usr/lib/systemd/systemd    --user
lightdm    912    0.0    0.0    22712    3852    ?    S    Jan08    0:00    23:25:20    (sd-pam)    <noArgs>
lightdm    940    0.0    0.0    8348    4664    ?    Ss    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --session_--address=systemd:_--nofork_--nopidfile_--systemd-activation_--syslog-only
lightdm    941    0.0    0.1    101208    10784    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire    <noArgs>
lightdm    944    0.0    1.2    666648    105260    ?    Ssl    Jan08    0:16    23:25:20    /usr/sbin/lightdm-gtk-greeter    <noArgs>
lightdm    946    0.0    0.1    479280    15984    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/wireplumber    <noArgs>
lightdm    947    0.0    0.0    84704    5232    ?    Ssl    Jan08    0:00    23:25:20    /usr/bin/pipewire    -c_filter-chain.conf
rtkit    948    0.0    0.0    21492    3128    ?    SNsl    Jan08    0:00    23:25:20    /usr/libexec/rtkit-daemon    <noArgs>
lightdm    949    0.0    0.1    98776    8292    ?    S<sl    Jan08    0:00    23:25:20    /usr/bin/pipewire-pulse    <noArgs>
lightdm    975    0.0    0.0    381080    7196    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/at-spi-bus-launcher    <noArgs>
lightdm    983    0.0    0.0    8208    4444    ?    S    Jan08    0:00    23:25:20    /usr/bin/dbus-daemon    --config-file=/usr/share/defaults/at-spi2/accessibility.conf_--nofork_--print-address_12_--address=unix:path=/run/user/123/at-spi/bus
lightdm    988    0.0    0.0    312816    8096    ?    Ssl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd    <noArgs>
lightdm    1003    0.0    0.0    398408    7368    ?    Sl    Jan08    0:00    23:25:20    /usr/libexec/gvfsd-fuse    /run/user/123/gvfs_-f
root    1034    0.0    0.0    14372    5792    ?    S    Jan08    0:00    23:25:19    lightdm    --session-child_13_20
lightdm    1036    0.0    0.0    168772    7204    ?    Sl    Jan08    0:00    23:25:19    /usr/libexec/at-spi2-registryd    --use-gnome-session
root    1063    0.2    1.8    381872    149520    ?    Sl    Jan08    3:25    23:25:19    splunkd    -p_8089_start
root    1066    0.0    0.2    135648    18036    ?    Ss    Jan08    0:04    23:25:19    [splunkd    pid=1063]_splunkd_-p_8089_start_[process-runner]
root    1901    0.0    0.0    2688    1828    ?    S    Jan08    0:00    23:24:46    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd
root    1902    0.1    10.2    1414160    835516    ?    Sl    Jan08    1:48    23:24:46    /opt/splunkforwarder/etc/apps/Splunk_TA_stream/linux_x86_64/bin/streamfwd    <noArgs>
root    21105    0.0    0.0    0    0    ?    I    Jan08    0:04    21:24:28    [kworker/2:0-events]    <noArgs>
root    50745    0.0    0.0    0    0    ?    I    Jan08    0:00    18:16:38    [kworker/u20:2-events_unbound]    <noArgs>
root    72015    0.0    0.0    0    0    ?    I    Jan08    0:00    16:03:46    [kworker/u17:3-flush-254:0]    <noArgs>
root    116803    0.0    0.0    0    0    ?    I    Jan08    0:00    11:23:57    [kworker/u19:2-events_unbound]    <noArgs>
root    155313    0.0    0.0    0    0    ?    I    02:10    0:00    07:21:16    [kworker/u17:1-flush-254:0]    <noArgs>
root    157632    0.0    0.0    0    0    ?    I    02:25    0:00    07:06:29    [kworker/u17:0-flush-254:0]    <noArgs>
root    176526    0.0    0.0    0    0    ?    I    04:22    0:00    05:09:05    [kworker/u18:0-flush-254:0]    <noArgs>
root    188578    0.0    0.0    0    0    ?    I    05:39    0:00    03:52:48    [kworker/u20:0-events_unbound]    <noArgs>
root    194852    0.0    0.0    0    0    ?    I    06:20    0:00    03:11:57    [kworker/u20:3-ext4-rsv-conversion]    <noArgs>
root    217076    0.0    0.0    0    0    ?    I    08:37    0:00    54:33    [kworker/u19:1-events_unbound]    <noArgs>
root    219745    0.0    0.0    0    0    ?    I    08:55    0:00    36:33    [kworker/u18:1-flush-254:0]    <noArgs>
root    220432    0.0    0.0    0    0    ?    I    09:00    0:00    31:24    [kworker/u19:3-kvfree_rcu_reclaim]    <noArgs>
root    223704    0.0    0.0    0    0    ?    I    09:21    0:00    10:38    [kworker/2:2-ata_sff]    <noArgs>
root    224080    0.0    0.0    0    0    ?    I    09:22    0:00    09:55    [kworker/0:0-ata_sff]    <noArgs>
root    224426    0.0    0.0    0    0    ?    I    09:23    0:00    08:29    [kworker/1:2-ata_sff]    <noArgs>
root    224813    0.0    0.0    0    0    ?    I    09:26    0:00    05:05    [kworker/3:1-ata_sff]    <noArgs>
root    224950    0.0    0.0    0    0    ?    I    09:27    0:00    04:49    [kworker/2:1-ata_sff]    <noArgs>
root    225010    0.0    0.0    0    0    ?    I    09:27    0:00    04:23    [kworker/0:2-ata_sff]    <noArgs>
root    225116    0.0    0.0    0    0    ?    I    09:28    0:00    03:16    [kworker/u18:2-flush-254:0]    <noArgs>
root    225132    0.0    0.0    0    0    ?    I    09:28    0:00    03:08    [kworker/1:1-ata_sff]    <noArgs>
root    225528    0.0    0.0    2688    1712    ?    S    09:32    0:00    00:00    /bin/sh    -c_/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225529    0.0    0.0    2688    1840    ?    S    09:32    0:00    00:00    /bin/sh    /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/ps.sh
root    225550    0.0    0.0    9372    4196    ?    R    09:32    0:00    00:00    ps    -wweo_user:32,pid,%cpu,%mem,vsz,rss,tname,stat,start_time,bsdtime,etime,command
root    225551    0.0    0.0    5592    1904    ?    S    09:32    0:00    00:00    tee    /dev/null
root    225552    0.0    0.0    9472    3964    ?    S    09:32    0:00    00:00    awk    BEGIN_{OFS_=_"_";}_#_specify_output_field_separator_{_if_(NR_==_1)_#_Add_extra_header/field_ARGS_in_first_(header)_row_{_command_column_=_NF;_$(NF+1)_=_"ARGS";_}_else_{_#_If_arguments_exist,_then_append_all_with_underscore_delimeter,_else_specify_<noArgs>_if_($(command_column+1)_!=_"")_{_args_=_$(command_column+1);_for_(i=command_column+2;_i<=NF;_i++)_{_args_=_args_"_"_$i;_$i_=_"";_}_$(command_column+1)_=_args;_}_else_{_$(command_column+1)_=_"<noArgs>";_}_#_Remove_trailing_white_spaces_if_any_sub(/[_\t]+$/,"",$0);_}_print;_}