USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    20:56   0:00 [kthreadd]
root          3  0.1  0.0      0     0 ?        S    20:56   0:00  \_ [ksoftirqd/0]
root          5  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kworker/0:0H]
root          7  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [rcu_bh]
root          9  0.2  0.0      0     0 ?        S    20:56   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [migration/1]
root         14  0.1  0.0      0     0 ?        S    20:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/0:1]
root         35  0.3  0.0      0     0 ?        S    20:56   0:01  \_ [kswapd0]
root         36  0.0  0.0      0     0 ?        SN   20:56   0:00  \_ [ksmd]
root         37  0.0  0.0      0     0 ?        SN   20:56   0:00  \_ [khugepaged]
root         38  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [crypto]
root         46  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kthrotld]
root         47  0.1  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/u256:1]
root         48  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kmpath_rdacd]
root         49  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kaluad]
root         50  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/0:2]
root         53  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [ipv6_addrconf]
root         66  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [deferwq]
root         97  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kauditd]
root       2707  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [nfit]
root       2910  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [mpt_poll_0]
root       2911  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [mpt/0]
root       2955  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [ata_sff]
root       2976  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [scsi_eh_0]
root       2986  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [scsi_tmf_0]
root       3014  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/u256:2]
root       3017  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [scsi_eh_1]
root       3019  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [scsi_tmf_1]
root       3023  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [scsi_eh_2]
root       3027  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [scsi_tmf_2]
root       3031  0.1  0.0      0     0 ?        S    20:56   0:01  \_ [kworker/u256:3]
root       3032  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [ttm_swap]
root       3051  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [irq/16-vmwgfx]
root       4259  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kdmflush]
root       4262  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root       4277  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kdmflush]
root       4278  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root       4296  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root       4298  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfsalloc]
root       4308  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs_mru_cache]
root       4309  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-buf/dm-0]
root       4312  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-data/dm-0]
root       4315  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-conv/dm-0]
root       4316  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-cil/dm-0]
root       4317  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-reclaim/dm-]
root       4318  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-log/dm-0]
root       4319  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-eofblocks/d]
root       4320  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [xfsaild/dm-0]
root       4321  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kworker/1:1H]
root       4373  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/1:2]
root       5056  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kworker/0:1H]
root       7491  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-buf/sda1]
root       7492  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-data/sda1]
root       7513  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-conv/sda1]
root       7522  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-cil/sda1]
root       7524  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-reclaim/sda]
root       7526  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-log/sda1]
root       7534  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-eofblocks/s]
root       7541  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [xfsaild/sda1]
root       8692  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [kdmflush]
root       8693  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [bioset]
root       8703  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-buf/dm-2]
root       8704  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-data/dm-2]
root       8705  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-conv/dm-2]
root       8706  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-cil/dm-2]
root       8707  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-reclaim/dm-]
root       8708  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-log/dm-2]
root       8709  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xfs-eofblocks/d]
root       8710  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [xfsaild/dm-2]
root       8723  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/1:3]
root       8730  0.0  0.0      0     0 ?        S    20:56   0:00  \_ [kworker/1:4]
root       8736  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [rpciod]
root       8737  0.0  0.0      0     0 ?        S<   20:56   0:00  \_ [xprtiod]
root       9597  0.0  0.0      0     0 ?        S    20:57   0:00  \_ [kworker/0:3]
root      12712  0.5  0.0      0     0 ?        S<   20:57   0:03  \_ [loop0]
root      12717  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [loop1]
root      12719  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [kdmflush]
root      12740  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [dm_bufio_cache]
root      12749  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [bioset]
root      12750  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [kcopyd]
root      12751  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [bioset]
root      12752  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [dm-thin]
root      12753  0.0  0.0      0     0 ?        S<   20:57   0:00  \_ [bioset]
root      15809  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [kdmflush]
root      15814  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [bioset]
root      15817  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-buf/dm-4]
root      15818  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-data/dm-4]
root      15819  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-conv/dm-4]
root      15820  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-cil/dm-4]
root      15821  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-reclaim/dm-]
root      15822  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-log/dm-4]
root      15823  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-eofblocks/d]
root      15824  0.0  0.0      0     0 ?        S    20:58   0:00  \_ [xfsaild/dm-4]
root      16294  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [kdmflush]
root      16301  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [bioset]
root      16314  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-buf/dm-5]
root      16321  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-data/dm-5]
root      16326  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-conv/dm-5]
root      16329  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-cil/dm-5]
root      16334  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-reclaim/dm-]
root      16335  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-log/dm-5]
root      16336  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-eofblocks/d]
root      16337  0.0  0.0      0     0 ?        S    20:58   0:00  \_ [xfsaild/dm-5]
root      16461  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [kdmflush]
root      16466  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [bioset]
root      16473  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-buf/dm-6]
root      16474  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-data/dm-6]
root      16475  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-conv/dm-6]
root      16476  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-cil/dm-6]
root      16477  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-reclaim/dm-]
root      16478  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-log/dm-6]
root      16479  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-eofblocks/d]
root      16480  0.0  0.0      0     0 ?        S    20:58   0:00  \_ [xfsaild/dm-6]
root      23558  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [kdmflush]
root      23564  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [bioset]
root      23582  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-buf/dm-8]
root      23583  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-data/dm-8]
root      23584  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-conv/dm-8]
root      23585  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-cil/dm-8]
root      23586  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-reclaim/dm-]
root      23587  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-log/dm-8]
root      23588  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-eofblocks/d]
root      23589  0.0  0.0      0     0 ?        S    20:58   0:00  \_ [xfsaild/dm-8]
root      53130  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [kdmflush]
root      53135  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [bioset]
root      53157  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-buf/dm-7]
root      53162  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-data/dm-7]
root      53165  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-conv/dm-7]
root      53166  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-cil/dm-7]
root      53167  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-reclaim/dm-]
root      53168  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-log/dm-7]
root      53169  0.0  0.0      0     0 ?        S<   20:58   0:00  \_ [xfs-eofblocks/d]
root      53170  0.0  0.0      0     0 ?        S    20:58   0:00  \_ [xfsaild/dm-7]
root      58705  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [kdmflush]
root      58710  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [bioset]
root      58713  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-buf/dm-10]
root      58714  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-data/dm-10]
root      58715  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-conv/dm-10]
root      58717  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-cil/dm-10]
root      58719  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-reclaim/dm-]
root      58720  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-log/dm-10]
root      58721  0.0  0.0      0     0 ?        S<   21:01   0:00  \_ [xfs-eofblocks/d]
root      58722  0.0  0.0      0     0 ?        S    21:01   0:00  \_ [xfsaild/dm-10]
root      61847  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [kdmflush]
root      61850  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [bioset]
root      61854  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-buf/dm-11]
root      61855  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-data/dm-11]
root      61856  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-conv/dm-11]
root      61857  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-cil/dm-11]
root      61858  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-reclaim/dm-]
root      61859  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-log/dm-11]
root      61860  0.0  0.0      0     0 ?        S<   21:02   0:00  \_ [xfs-eofblocks/d]
root      61861  0.0  0.0      0     0 ?        S    21:02   0:00  \_ [xfsaild/dm-11]
root      61997  0.0  0.0      0     0 ?        S    21:02   0:00  \_ [kworker/0:0]
root      72293  0.0  0.0      0     0 ?        S    21:05   0:00  \_ [kworker/1:0]
root          1  0.5  0.0  52272  4472 ?        Ss   20:56   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root       4403  0.1  0.0  39520  5552 ?        Ss   20:56   0:00 /usr/lib/systemd/systemd-journald
root       4418  0.0  0.0 198556  1384 ?        Ss   20:56   0:00 /usr/sbin/lvmetad -f
root       4431  0.4  0.0  44540  1964 ?        Ss   20:56   0:02 /usr/lib/systemd/systemd-udevd
root       8742  0.0  0.0  62044  1076 ?        S<sl 20:56   0:00 /sbin/auditd
rpc        8817  0.0  0.0  73648  1228 ?        Ss   20:56   0:00 /sbin/rpcbind -w
root       8867  0.0  0.0 228012  5608 ?        Ss   20:56   0:00 /usr/sbin/abrtd -d -s
root       8889  0.0  0.0  21676  1296 ?        Ss   20:56   0:00 /usr/sbin/irqbalance --foreground
root       8890  0.0  0.0  99564  6068 ?        Ss   20:56   0:00 /usr/bin/VGAuthService -s
root       8891  0.1  0.1 300720  6348 ?        Ssl  20:56   0:00 /usr/bin/vmtoolsd
root       8892  0.0  0.0 225720  4820 ?        Ss   20:56   0:00 /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption list_add corruption do_IRQ: stack overflow: ear stack overflow (cur: eneral protection fault nable to handle kernel ouble fault: RTNL: assertion failed eek! page_mapcount(page) went negative! adness at NETDEV WATCHDOG ysctl table check failed : nobody cared IRQ handler type mismatch Kernel panic - not syncing: Machine Check Exception: Machine check events logged divide error: bounds: coprocessor segment overrun: invalid TSS: segment not present: invalid opcode: alignment check: stack segment: fpu exception: simd exception: iret exception: /var/log/messages -- /usr/bin/abrt-dump-oops -xtD
dbus       8893  0.0  0.0  60320  2468 ?        Ss   20:56   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root       8948  0.0  0.0 201616  1472 ?        Ssl  20:56   0:00 /usr/sbin/gssproxy -D
root       8987  0.0  0.0  26376  1756 ?        Ss   20:56   0:00 /usr/lib/systemd/systemd-logind
chrony     9035  0.0  0.0  22520  1176 ?        S    20:56   0:00 /usr/sbin/chronyd
root       9104  0.1  0.1 111668  6512 ?        Ss   20:56   0:00 /usr/sbin/syslog-ng -F -p /var/run/syslogd.pid
root       9119  0.0  0.0 140192  4592 ?        S    20:56   0:00  \_ /usr/bin/perl /opt/qradar/bin/diskmaintd_launcher.pl
root       9120  0.0  0.0 140320  4852 ?        S    20:56   0:00  \_ /usr/bin/perl /opt/qradar/bin/restart_prog_if_OOM.pl
root       9121  0.0  0.0 140192  4784 ?        S    20:56   0:00  \_ /usr/bin/perl /opt/qradar/bin/notification_log_classifier.pl
root       9122  0.0  0.0 130380  3076 ?        S    20:56   0:00  \_ /usr/bin/perl /opt/qradar/bin/audit_log_classifier.pl
zookeep+   9520  0.6  0.6 2216128 42944 ?       Ssl  20:57   0:03 java -Dzookeeper.log.dir=. -Dzookeeper.root.logger=INFO,CONSOLE -cp /opt/mesosphere/zookeeper/bin/../build/classes:/opt/mesosphere/zookeeper/bin/../build/lib/*.jar:/opt/mesosphere/zookeeper/bin/../lib/slf4j-log4j12-1.6.1.jar:/opt/mesosphere/zookeeper/bin/../lib/slf4j-api-1.6.1.jar:/opt/mesosphere/zookeeper/bin/../lib/netty-3.10.5.Final.jar:/opt/mesosphere/zookeeper/bin/../lib/log4j-1.2.16.jar:/opt/mesosphere/zookeeper/bin/../lib/jline-0.9.94.jar:/opt/mesosphere/zookeeper/bin/../zookeeper-3.4.10.jar:/opt/mesosphere/zookeeper/bin/../src/java/lib/*.jar:/etc/zookeeper/conf: -Dcom.ibm.tools.attach.enable=no -Dzookeeper.DigestAuthenticationProvider.superDigest=super:iojOuZ1U9/NSsQclUDyKC5cSHK8= -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.local.only=false org.apache.zookeeper.server.quorum.QuorumPeerMain /etc/zookeeper/conf/zoo.cfg
nobody     9551  0.0  0.0  55968  1920 ?        Ss   20:57   0:00 /usr/sbin/dnsmasq -k
root       9552  0.0  0.0 115300  1632 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/dnsmasq-config-monitor.sh
root      74503  0.0  0.0 107952   356 ?        S    21:06   0:00  \_ sleep 30
root       9561  0.0  0.0 112756  4068 ?        Ss   20:57   0:00 /usr/sbin/sshd -D
root      13694  0.0  0.1 157488  6160 ?        Ss   20:57   0:00  \_ sshd: root@pts/0
root      13742  0.0  0.0 115440  2092 pts/0    Ss   20:57   0:00  |   \_ -bash
root      75303  0.0  0.0 115440   780 pts/0    S    21:06   0:00  |       \_ -bash
root      75305  0.0  0.0 107952   672 pts/0    S    21:06   0:00  |       |   \_ tee -a /root/.bash_history
root      75306  0.0  0.0 107956   704 pts/0    S    21:06   0:00  |       |   \_ logger -p local4.info -t 127.0.0.1 root@192.168.21.101 60475 22 | [Backend] [Command] [CommandExecuted] 
root      75864  0.0  0.0 158060  2480 pts/0    R+   21:06   0:00  |       \_ ps auxf
root      13731  0.0  0.0 157152  5808 ?        Ss   20:57   0:00  \_ sshd: root@notty
root      13734  0.0  0.0  72092  2696 ?        Ss   20:57   0:00  |   \_ /usr/libexec/openssh/sftp-server
root      54722  0.0  0.1 157488  6264 ?        Ss   20:59   0:00  \_ sshd: root@pts/1
root      54763  0.0  0.0 115440  2072 pts/1    Ss+  20:59   0:00  |   \_ -bash
root      72281  0.0  0.0 115440   760 pts/1    S+   21:05   0:00  |       \_ -bash
root      72283  0.0  0.0 107952   668 pts/1    S+   21:05   0:00  |           \_ tee -a /root/.bash_history
root      72284  0.0  0.0 107956   704 pts/1    S+   21:05   0:00  |           \_ logger -p local4.info -t 127.0.0.1 root@192.168.21.101 60483 22 | [Backend] [Command] [CommandExecuted] 
root      54750  0.0  0.0 157152  5812 ?        Ss   20:59   0:00  \_ sshd: root@notty
root      54753  0.0  0.0  72092  2696 ?        Ss   20:59   0:00      \_ /usr/libexec/openssh/sftp-server
consul     9579  0.4  0.2  33396 15320 ?        Ssl  20:57   0:02 /usr/bin/consul agent -config-dir=/etc/consul -config-dir=/var/s4/consul -data-dir=/var/lib/consul
postgres   9591  0.1  0.8 536004 52760 ?        Ss   20:57   0:00 /usr/pgsql-9.6/bin/postmaster -D /store/postgres/data
postgres  12445  0.0  0.0 536004  1764 ?        Ss   20:57   0:00  \_ postgres: checkpointer process   
postgres  12446  0.0  0.0 536004  5356 ?        Ss   20:57   0:00  \_ postgres: writer process   
postgres  12447  0.0  0.5 536004 34700 ?        Ss   20:57   0:00  \_ postgres: wal writer process   
postgres  12448  0.0  0.0 536552  2968 ?        Ss   20:57   0:00  \_ postgres: autovacuum launcher process   
postgres  12449  0.1  0.0 220520  2580 ?        Ss   20:57   0:01  \_ postgres: stats collector process   
postgres  54158  0.0  0.1 538376 10676 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52316) idle
postgres  54160  0.0  0.1 538220 10760 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52318) idle
postgres  54163  0.0  0.1 538404  9040 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52320) idle
postgres  54172  0.0  0.1 538604 11124 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52324) idle
postgres  54173  0.0  0.1 538496 11320 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52326) idle
postgres  54240  0.0  0.1 537624  7268 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52344) idle
postgres  54241  0.0  0.1 537624  7268 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52346) idle
postgres  54242  0.0  0.1 537624  7268 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52348) idle
postgres  54246  0.0  0.1 537624  7268 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52350) idle
postgres  54247  0.0  0.1 537756  7224 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52352) idle
postgres  54249  0.0  0.1 537756  7224 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52354) idle
postgres  54250  0.0  0.1 537756  7224 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52356) idle
postgres  54251  0.0  0.1 537756  7224 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52358) idle
postgres  54252  0.0  0.1 537756  7228 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52360) idle
postgres  54254  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52362) idle
postgres  54255  0.0  0.1 538396  9096 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52366) idle
postgres  54256  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52370) idle
postgres  54257  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52372) idle
postgres  54258  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52374) idle
postgres  54259  0.0  0.1 537800  8284 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52376) idle
postgres  55262  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52450) idle
postgres  55263  0.0  0.3 543852 19692 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52452) idle
postgres  55264  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52454) idle
postgres  55265  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52456) idle
postgres  55266  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52458) idle
postgres  55267  0.0  0.1 537628  7284 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52460) idle
postgres  55268  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52462) idle
postgres  55269  0.0  0.1 537628  7280 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52464) idle
postgres  55270  0.0  0.1 537628  7284 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52466) idle
postgres  55271  0.0  0.1 537628  7284 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52468) idle
postgres  55272  0.0  0.1 537628  7288 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52470) idle
postgres  55273  0.0  0.1 537628  7284 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52472) idle
postgres  55274  0.0  0.2 543056 17408 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52474) idle
postgres  55275  0.0  0.1 538200  9860 ?        Ss   20:59   0:00  \_ postgres: qradar qradar 127.0.0.1(52476) idle
postgres  55277  1.6  4.4 544300 276932 ?       Ss   20:59   0:06  \_ postgres: qradar qradar 127.0.0.1(52478) idle
postgres  57665  0.0  0.1 537628  7268 ?        Ss   21:00   0:00  \_ postgres: qradar qradar 127.0.0.1(52716) idle
postgres  57666  0.0  0.1 537628  7272 ?        Ss   21:00   0:00  \_ postgres: qradar qradar 127.0.0.1(52718) idle
postgres  57667  0.0  0.1 537628  7272 ?        Ss   21:00   0:00  \_ postgres: qradar qradar 127.0.0.1(52720) idle
postgres  57668  0.0  0.1 537628  7268 ?        Ss   21:00   0:00  \_ postgres: qradar qradar 127.0.0.1(52722) idle
postgres  57669  0.0  0.1 537772  8624 ?        Ss   21:00   0:00  \_ postgres: qradar qradar 127.0.0.1(52724) idle
postgres  57873  0.0  0.0 537064  4272 ?        Ss   21:01   0:00  \_ postgres: qradar qradar 127.0.0.1(52742) idle
postgres  64047  2.2  4.3 542628 269556 ?       Ss   21:03   0:04  \_ postgres: qradar qradar 127.0.0.1(53424) idle
postgres  64048  0.2  0.3 539680 22420 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53426) idle
postgres  64049  0.1  0.2 538600 13216 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53428) idle
postgres  64050  0.0  0.1 538424 11540 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53430) idle
postgres  64051  0.0  0.2 539160 14008 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53432) idle
postgres  64250  0.0  0.0 537064  4484 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53448) idle
postgres  64251  0.0  0.1 537492  8688 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53450) idle
postgres  64252  0.0  0.0 537064  4512 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53452) idle
postgres  64260  0.0  0.1 537936  7572 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53454) idle
postgres  64261  0.0  0.1 537888  9012 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53456) idle
postgres  64665  0.0  0.0 537064  4512 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53482) idle
postgres  64666  0.0  0.0 537064  4512 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53484) idle
postgres  64667  0.0  0.0 537064  4516 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53486) idle
postgres  64668  0.0  0.0 537064  4512 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53488) idle
postgres  64673  0.0  0.1 537272  7336 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53490) idle
postgres  66855  0.8  3.6 539948 223136 ?       Ss   21:03   0:01  \_ postgres: qradar qradar 127.0.0.1(53720) idle
postgres  66856  0.0  0.1 537300  8756 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53722) idle
postgres  66857  0.0  0.1 538468 11592 ?        Ss   21:03   0:00  \_ postgres: qradar qradar 127.0.0.1(53724) idle
root       9634  0.0  0.0 126288  1608 ?        Ss   20:57   0:00 /usr/sbin/crond -n
root       9637  0.0  0.0 115708   652 ?        Ss   20:57   0:00 /usr/bin/rhsmcertd
root       9645  0.0  0.0 115436  1724 ?        S    20:57   0:00 /bin/bash --login /opt/qradar/perf/systemStabMon -interval 23
root       9795  0.0  0.0 115304  1520 ?        S    20:57   0:00  \_ /bin/bash /opt/qradar/perf/runningAvgDStat.sh 20 /var/log/systemStabMon /tmp/runningAvgDStat.tmp
root      75161  0.2  0.1 145752  6540 ?        S    21:06   0:00  |   \_ /usr/bin/python /usr/bin/dstat -cdglmsynp --output /tmp/runningAvgDStat.tmp 20 1
root       9798  0.0  0.0 115304  1504 ?        S    20:57   0:00  \_ /bin/bash /opt/qradar/perf/runningArielStat.sh 10 /var/log/systemStabMon
root      75484  0.0  0.0 107952   360 ?        S    21:06   0:00  |   \_ sleep 10s
root      75627  0.0  0.0 115436   720 ?        S    21:06   0:00  \_ /bin/bash --login /opt/qradar/perf/systemStabMon -interval 23
root      75635  0.0  0.0 107996   840 ?        S    21:06   0:00  |   \_ iostat -xm 20 2
root      75636  0.0  0.0 112712   960 ?        S    21:06   0:00  |   \_ grep sda 
root      75640  0.0  0.0 107988   680 ?        S    21:06   0:00  |   \_ tail -n 1
root      75641  0.0  0.0 116936   932 ?        S    21:06   0:00  |   \_ sed s/[[:space:]]\+/,/g
root      75628  0.0  0.0 115436   720 ?        S    21:06   0:00  \_ /bin/bash --login /opt/qradar/perf/systemStabMon -interval 23
root      75632  0.0  0.0 107996   836 ?        S    21:06   0:00  |   \_ iostat -xm 20 2
root      75633  0.0  0.0 112708   960 ?        S    21:06   0:00  |   \_ grep sr0 
root      75637  0.0  0.0 107988   684 ?        S    21:06   0:00  |   \_ tail -n 1
root      75638  0.0  0.0 116936   936 ?        S    21:06   0:00  |   \_ sed s/[[:space:]]\+/,/g
root      75858  0.0  0.0 107952   356 ?        S    21:06   0:00  \_ sleep 1
root       9673  0.0  0.0 110092   860 tty1     Ss+  20:57   0:00 /sbin/agetty --noclear tty1 linux
root      10922  0.3  0.7 1170436 45072 ?       Ssl  20:57   0:02 /usr/bin/dockerd --dns 192.168.21.218 --log-driver=journald --storage-driver=devicemapper --exec-opt native.cgroupdriver=cgroupfs -g /store/docker -H unix:///var/run/docker.sock --ip=0.0.0.0 --bip=169.254.2.1/24 --fixed-cidr=169.254.2.1/24 --ipv6=true --fixed-cidr-v6=2001:db8:1::/64 --iptables=true --icc=false --ip-masq=true
root      12661  0.0  0.1 283388  8796 ?        Ssl  20:57   0:00  \_ docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-dir /var/run/docker/libcontainerd/containerd --shim docker-containerd-shim --runtime docker-runc
root      15858  0.0  0.0 142444  1980 ?        Sl   20:58   0:00  |   \_ docker-containerd-shim b3529775373cba3f2ddf48e2e3d0675722efef2ea436880de35d91b7ed7ac96c /var/run/docker/libcontainerd/b3529775373cba3f2ddf48e2e3d0675722efef2ea436880de35d91b7ed7ac96c docker-runc
root      15876  0.0  0.0   1544   108 ?        Ss   20:58   0:00  |   |   \_ /bin/sh ./secret_env_unwrap.sh node index.js server
root      15975  0.2  0.4 589252 26516 ?        Sl   20:58   0:01  |   |       \_ node index.js server
root      16392  0.0  0.0 214864  3956 ?        Sl   20:58   0:00  |   \_ docker-containerd-shim c42d3f6ce62d2c196203ea068b2f6b6ef475074997657b4a5ad33f8f9e78f13a /var/run/docker/libcontainerd/c42d3f6ce62d2c196203ea068b2f6b6ef475074997657b4a5ad33f8f9e78f13a docker-runc
root      16421  0.0  0.0   6156   956 ?        Ss   20:58   0:00  |   |   \_ /bin/bash /scripts/launch.sh
root      16494  0.0  0.1  15828  8876 ?        Sl   20:58   0:00  |   |       \_ consul-template -log-level warn -config /consul-template/config.d
root      16591  0.0  0.0  23420  2296 ?        Ss   20:58   0:00  |   |       \_ nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
100       53556  0.0  0.0  23980  2812 ?        S    20:58   0:00  |   |           \_ nginx: worker process
root      16575  0.0  0.0 280656  3944 ?        Sl   20:58   0:00  |   \_ docker-containerd-shim 0dd50093d149b0745f231699a65bf70cd19a27e48426341d65d435066b33ae1b /var/run/docker/libcontainerd/0dd50093d149b0745f231699a65bf70cd19a27e48426341d65d435066b33ae1b docker-runc
root      16628  0.0  0.0   6156   928 ?        Ss   20:58   0:00  |   |   \_ /bin/bash /scripts/launch.sh
root      16904  0.0  0.1  17940 11592 ?        Sl   20:58   0:00  |   |       \_ consul-template -log-level warn -config /consul-template/config.d
root      17055  0.0  0.0  23208  2012 ?        Ss   20:58   0:00  |   |       \_ nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf
100       62414  0.0  0.0  23648  2316 ?        S    21:02   0:00  |   |           \_ nginx: worker process
root      23610  0.0  0.0 289908  3952 ?        Sl   20:58   0:00  |   \_ docker-containerd-shim a334b4ad2c663e24a13f7cd6cbc9a165c8e00a766e93657b0abd9d8ce7eacb2f /var/run/docker/libcontainerd/a334b4ad2c663e24a13f7cd6cbc9a165c8e00a766e93657b0abd9d8ce7eacb2f docker-runc
root      23674  0.0  0.1  18560 10564 ?        Ssl  20:58   0:00  |   |   \_ /bin/mesos-consul --zk=zk://zookeeper.service.consul/mesos --consul-ssl --consul-ssl-verify=false --mesos-ip-order=mesos,docker,host --refresh=7s --healthcheck --healthcheck-ip=0.0.0.0
root      53209  0.0  0.0 206924  3940 ?        Sl   20:58   0:00  |   \_ docker-containerd-shim d2f145f69f062e5e0762f698e07cfa4cbd98f27aeb45ce34638697db2dcd7f68 /var/run/docker/libcontainerd/d2f145f69f062e5e0762f698e07cfa4cbd98f27aeb45ce34638697db2dcd7f68 docker-runc
root      53256  0.0  0.0   1548   492 ?        Ss   20:58   0:00  |   |   \_ sh secret_env_unwrap.sh /start_container.sh
root      53442  0.0  0.0   1528   460 ?        S    20:58   0:00  |   |       \_ /bin/sh /start_container.sh
root      53459  5.5  2.4 1682700 150420 ?      Sl   20:58   0:24  |   |       |   \_ java -Xgcpolicy:gencon -Xgcthreads4 -Xms50m -Xmx100m -Dcom.ibm.tools.attach.enable=no -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/store/heap -Xdump:system:file=/store/heap/core.%Y%m%d.%H%M%S.%pid.%seq.dmp -Xdump:heap:file=/store/heap/heapdump.%Y%m%d.%H%M%S.%pid.%seq.phd -Xdump:java:file=/store/heap/javacore.%Y%m%d.%H%M%S.%pid.%seq.txt -Xdump:snap:file=/store/heap/Snap.%Y%m%d.%H%M%S.%pid.%seq.trc -Xdump:jit:file=/store/heap/jitdump.%Y%m%d.%H%M%S.%pid.%seq.dmp -jar jetty-runner.jar --port 9090 /opt/web/qradar-oidc-overlay-0.0.16.war --out /opt/web/logs/jetty_yyyy_mm_dd.log --log /opt/web/logs/access_yyyy_mm_dd.log
root      74657  0.0  0.0   1512   256 ?        S    21:06   0:00  |   |       |   \_ sleep 20
70        53465  0.0  0.2 170200 13500 ?        S    20:58   0:00  |   |       \_ /usr/bin/postgres -D /store/db
70        53476  0.0  0.0 170200  1080 ?        Ss   20:58   0:00  |   |           \_ postgres: checkpointer process  
70        53477  0.0  0.0 170200  1872 ?        Ss   20:58   0:00  |   |           \_ postgres: writer process   
70        53478  0.0  0.0 170200   848 ?        Ss   20:58   0:00  |   |           \_ postgres: wal writer process  
70        53479  0.0  0.0 170492  1596 ?        Ss   20:58   0:00  |   |           \_ postgres: autovacuum launcher process  
70        53480  0.0  0.0  25200  1036 ?        Ss   20:58   0:00  |   |           \_ postgres: stats collector process  
70        59527  0.0  0.0 171232  4984 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52908) idle
70        59530  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52910) idle
70        59531  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52912) idle
70        59532  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52914) idle
70        59533  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52916) idle
70        59534  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52918) idle
70        59535  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52920) idle
70        59536  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52922) idle
70        59537  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52924) idle
70        59538  0.0  0.0 170956  3140 ?        Ss   21:01   0:00  |   |           \_ postgres: qradar oic 127.0.0.1(52926) idle
root      58747  0.0  0.0 272460  3900 ?        Sl   21:01   0:00  |   \_ docker-containerd-shim 7ecd43c9f035fd4fa4d756cdeb042c1910c6d5d3f0a4826f96154bf52d079f19 /var/run/docker/libcontainerd/7ecd43c9f035fd4fa4d756cdeb042c1910c6d5d3f0a4826f96154bf52d079f19 docker-runc
root      58766  0.0  0.0   1528   392 ?        Ss   21:01   0:00  |   |   \_ sh /qregistry/boot-qregistry.sh
root      58787  0.0  0.0  75444  1656 ?        Ss   21:01   0:00  |   |       \_ httpd -D foreground
100       58795  0.0  0.0  75480  1388 ?        S    21:01   0:00  |   |       |   \_ httpd -D foreground
100       58796  0.0  0.0  75480  1388 ?        S    21:01   0:00  |   |       |   \_ httpd -D foreground
100       58797  0.0  0.0  75480  1388 ?        S    21:01   0:00  |   |       |   \_ httpd -D foreground
100       58798  0.0  0.0  75480  1388 ?        S    21:01   0:00  |   |       |   \_ httpd -D foreground
100       58799  0.0  0.0  75480  1388 ?        S    21:01   0:00  |   |       |   \_ httpd -D foreground
root      58788  0.0  0.0   1520   424 ?        S    21:01   0:00  |   |       \_ sh /qregistry/apache-watcher.sh
root      75862  0.0  0.0   1512   252 ?        S    21:06   0:00  |   |       |   \_ sleep 10s
root      58794  0.0  0.2  23408 13796 ?        Sl   21:01   0:00  |   |       \_ docker-registry serve /qregistry/store/config/registry_config.yml
root      61893  0.0  0.0 272460  1860 ?        Sl   21:02   0:00  |   \_ docker-containerd-shim 3b72efec40b66149b0435acc41ca365d7a8ad7a12fee2729c281b2696806a268 /var/run/docker/libcontainerd/3b72efec40b66149b0435acc41ca365d7a8ad7a12fee2729c281b2696806a268 docker-runc
root      61911  0.0  0.0  14744  1332 ?        Ss   21:02   0:00  |       \_ sh /secret_env_unwrap.sh /start_container.sh
root      62027  0.0  0.0  14644  1368 ?        S    21:02   0:00  |           \_ /bin/bash /start_container.sh
root      63205  0.1  0.2 114868 18148 ?        S    21:02   0:00  |           |   \_ /usr/bin/python /usr/bin/supervisord -c /etc/supervisord.conf
root      63411  0.0  0.0  14640  1372 ?        S    21:02   0:00  |           |       \_ /bin/bash /start_flask.sh
root      63417  0.1  0.5 171132 33540 ?        S    21:02   0:00  |           |           \_ python /run.py
root      63418  0.0  0.0   7380   604 ?        S    21:02   0:00  |           |           \_ tee -a /store/log/startup.log
root      63204  0.0  0.0  14644   700 ?        S    21:02   0:00  |           \_ /bin/bash /src_deps/init/poll.sh
root      63242  0.0  0.0   7380   544 ?        S    21:02   0:00  |               \_ sleep 6h
root      15850  0.0  0.0  50836  1796 ?        Sl   20:58   0:00  \_ /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 31339 -container-ip 169.254.5.2 -container-port 8081
root      16508  0.0  0.0 186740  4136 ?        Sl   20:58   0:00  \_ /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 1443 -container-ip 169.254.4.2 -container-port 1443
root      53204  0.0  0.0  34444  1604 ?        Sl   20:58   0:00  \_ /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 9356 -container-ip 169.254.5.3 -container-port 9090
root      58743  0.0  0.0  34444  1608 ?        Sl   21:01   0:00  \_ /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 5444 -container-ip 169.254.2.2 -container-port 5444
root      61889  0.0  0.0  34444  1600 ?        Sl   21:02   0:00  \_ /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 25108 -container-ip 169.254.3.3 -container-port 5000
root      11581  0.0  0.0 107940   300 ?        Ss   20:57   0:00 rhnsd
root      11744  0.0  0.0  91628  2016 ?        Ss   20:57   0:00 /usr/libexec/postfix/master -w
postfix   11809  0.0  0.0  91732  4004 ?        S    20:57   0:00  \_ pickup -l -t unix -u
postfix   11810  0.0  0.0  91800  4020 ?        S    20:57   0:00  \_ qmgr -l -t unix -u
root      11884  0.5  0.0  82432  1836 ?        Sl   20:57   0:03 /usr/sbin/ocmanager/elxhbamgrd
postgres  12592  0.1  0.8 526488 50408 ?        Ss   20:57   0:00 /usr/pgsql-9.6/bin/postmaster -D /store/postgres-qvm/data
postgres  12606  0.0  0.0 526488  1772 ?        Ss   20:57   0:00  \_ postgres: checkpointer process   
postgres  12608  0.0  0.0 526488  3856 ?        Ss   20:57   0:00  \_ postgres: writer process   
postgres  12609  0.0  0.0 526488  1772 ?        Ss   20:57   0:00  \_ postgres: wal writer process   
postgres  12610  0.0  0.0 527024  2920 ?        Ss   20:57   0:00  \_ postgres: autovacuum launcher process   
postgres  12611  0.0  0.0 219808  2148 ?        Ss   20:57   0:00  \_ postgres: stats collector process   
postgres  57250  0.0  0.0 527516  4568 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33938) idle
postgres  57251  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33940) idle
postgres  57252  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33942) idle
postgres  57253  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33944) idle
postgres  57254  0.0  0.0 527508  4504 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33946) idle
postgres  57255  0.0  0.0 527508  4504 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33948) idle
postgres  57257  0.0  0.0 527508  4504 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33950) idle
postgres  57258  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33952) idle
postgres  57259  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33954) idle
postgres  57260  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33956) idle
postgres  57261  0.0  0.0 527508  4504 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33958) idle
postgres  57262  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33960) idle
postgres  57263  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33962) idle
postgres  57264  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33964) idle
postgres  57265  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33966) idle
postgres  57266  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33968) idle
postgres  57267  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33970) idle
postgres  57268  0.0  0.0 527508  4504 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33972) idle
postgres  57269  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33974) idle
postgres  57270  0.0  0.0 527508  4520 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33976) idle
postgres  57271  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33978) idle
postgres  57272  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33980) idle
postgres  57273  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33982) idle
postgres  57274  0.0  0.0 527508  4524 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33984) idle
postgres  57275  0.0  0.0 527508  4520 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33986) idle
postgres  57276  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33988) idle
postgres  57277  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33990) idle
postgres  57278  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33992) idle
postgres  57279  0.0  0.0 527508  4524 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33994) idle
postgres  57280  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33996) idle
postgres  57281  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(33998) idle
postgres  57282  0.0  0.0 527508  4520 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34000) idle
postgres  57283  0.0  0.0 527508  4520 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34002) idle
postgres  57284  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34004) idle
postgres  57285  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34006) idle
postgres  57286  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34008) idle
postgres  57287  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34010) idle
postgres  57288  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34012) idle
postgres  57290  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34014) idle
postgres  57291  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34016) idle
postgres  57292  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34018) idle
postgres  57293  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34020) idle
postgres  57294  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34022) idle
postgres  57295  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34024) idle
postgres  57296  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34026) idle
postgres  57297  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34028) idle
postgres  57298  0.0  0.0 527508  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34030) idle
postgres  57299  0.0  0.0 527508  4512 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34032) idle
postgres  57300  0.0  0.0 527508  4516 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34034) idle
postgres  57301  0.0  0.0 527512  4508 ?        Ss   21:00   0:00  \_ postgres: fusionvm fusionvm 127.0.0.1(34036) idle
vault     12683  0.1  0.7  45268 44932 ?        SLsl 20:57   0:00 /usr/bin/vault server -config=/etc/vault -config=/var/s4/vault-secret.hcl
mesosma+  14171  0.0  0.0 113180  1284 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/vault-wrapper-mesos-master.sh
mesosma+  14354  0.3  0.9 1355796 60364 ?       Sl   20:57   0:01  \_ /usr/sbin/mesos-master
consult+  14177  0.0  0.0 113176  1400 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/vault-wrapper-consul-template.sh
consult+  14241  0.0  0.0  14068  6080 ?        Sl   20:57   0:00  \_ /usr/bin/consul-template -config /etc/consul-template/config.d
root      14181  0.0  0.0 115304  1372 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/vault-wrapper-mesos-agent.sh
root      14355  0.6  0.9 1036192 57816 ?       Sl   20:57   0:03  \_ /usr/sbin/mesos-slave
root      15742  0.4  0.7 875944 48536 ?        Ssl  20:58   0:01      \_ mesos-docker-executor --container=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.fb47f640-a8a6-43e2-8ac2-b37012315949 --docker=docker --docker_socket=/var/run/docker.sock --help=false --initialize_driver_logging=true --launcher_dir=/usr/libexec/mesos --logbufsecs=0 --logging_level=INFO --mapped_directory=/mnt/mesos/sandbox --quiet=false --sandbox_directory=/var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/service-launcher.9cf27872-112c-11e9-bbf8-0242631407a0/runs/fb47f640-a8a6-43e2-8ac2-b37012315949 --stop_timeout=0ns
root      15753  0.0  0.1 209008 10408 ?        Sl   20:58   0:00      |   \_ docker -H unix:///var/run/docker.sock run --cpu-shares 102 --memory 134217728 -e MARATHON_APP_VERSION=2019-01-05T20:58:05.721Z -e SERVICE_LAUNCHER_TX_ID=3ef1b25f-76e7-42a8-aa5d-b1863a8bb742 -e HOST=QRadar-CE.node.consul -e MARATHON_APP_RESOURCE_CPUS=0.1 -e MARATHON_APP_LABEL_CHECK_INTERVAL=10s -e SERVICE_LAUNCHER_SECRETS=SERVICE_LAUNCHER_VAULT_TOKEN SERVICE_LAUNCHER_AUTH_SERVICES_KEY -e MARATHON_APP_LABEL_CHECK_SCRIPT=curl -s -k https://{host}:{port}/ping -e MARATHON_APP_RESOURCE_GPUS=0 -e MARATHON_APP_DOCKER_IMAGE=docker-registry.service.consul:15443/qbert/service-launcher:0.1.9 -e PORT_SERVICELAUNCHER=31339 -e MESOS_TASK_ID=service-launcher.9cf27872-112c-11e9-bbf8-0242631407a0 -e PORT_8081=31339 -e PORT=31339 -e MARATHON_APP_RESOURCE_MEM=128.0 -e SERVICE_LAUNCHER_STARTED_BY=TRUE -e PORTS=31339 -e SERVICE_LAUNCHER_CERTIFICATE=-----BEGIN CERTIFICATE----- MIIExzCCA6+gAwIBAgIJAOiyD+ULtocxMA0GCSqGSIb3DQEBCwUAMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTAeFw0xOTAxMDUyMDI2MjFaFw0yOTAxMDIyMDI2MjFaMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfdGbBmsPvv 5dgQK2NF8+3+ds3lWzTTQGEadJLn7yMMXCOkhZ/UdG/g5H+8A2OqBxCOCe+GB/9J u7vTjYpkd6XZvkDxKq6EVwyAF4OHwemHm/l934erXDKxkBaNmgvy5PkBabZ4UU9P NIA/egdxYVMTMs7W93VOC8as9ZJEMz6tFjAwp796LCWUzllgCAznHP1aASkkHs1l wRj86gekHR4l1v8pvtm9mjKXx0Gf51IaeMXdgAnNnoAX9WOeM2di7Js8e1a+Vl74 jq4kbqx4XWu5Z/ogSHwaqSHxNwiqradPgmLn3dFFUa/8eDpbS+9ZYIxvLGEukh4S p+RZw4bFMoUCAwEAAaOCAQYwggECMB0GA1UdDgQWBBS6nSbG6sAas4a3KI9mkzwy bzyfoDCB0gYDVR0jBIHKMIHHgBS6nSbG6sAas4a3KI9mkzwybzyfoKGBo6SBoDCB nTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxEDAOBgNVBAcT B1dhbHRoYW0xETAPBgNVBAoTCElCTSBDb3JwMRUwEwYDVQQLEwxJQk0gU2VjdXJp dHkxFzAVBgNVBAMTDnNlY3VyaXR5LXNldHVwMSEwHwYJKoZIhvcNAQkBFhJxMXNh bGVzQHVzLmlibS5jb22CCQDosg/lC7aHMTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 DQEBCwUAA4IBAQAhElL/O0v+r8pEwFK9q0IIkBAGywn/1EjOVSV5XEWxhvCNV44e EiOM93A5bjKoYW81OmLvCgfOnfDBP6XGZyaUpEvBdxV8oo0cfhd4mUqaHFqXbGul Fq2opP/gNwW+rP43tGivgZRKXLwNNqGStmZRJJM/eUSrziKUjUWMtShwr/byYJv8 KOy/1/Auz4Hs/dkpUOPzNpOxXiyjwV8P/ebuG5KfBxOSrMaDwbEOKkbvtkHB1HOd Z4Nykm+Lcs5DFz9uTZJi5LP4RPnrgwMeV8gnCV84GVAcunD6YObg0l0rv6oq65/S sgG0rerx0oMKmR6JD5S4vGh5sGQ2Liw9leeQ -----END CERTIFICATE-----  -e MARATHON_APP_RESOURCE_DISK=0.0 -e MARATHON_APP_LABELS=CHECK_SCRIPT CHECK_INTERVAL -e MARATHON_APP_ID=/service-launcher -e PORT0=31339 -e SERVICE_LAUNCHER_AUTH_SERVICES_KEY=e814e350-50cd-6e2e-3780-a6414b89ed6e -e SERVICE_LAUNCHER_VAULT_TOKEN=21668b20-3d40-f460-976b-7d3b665d23a0 -e MARATHON_PLUGIN_VAULT_STATUS=SUCCESS : all secrets wrapped successfully -e MESOS_SANDBOX=/mnt/mesos/sandbox -e MESOS_CONTAINER_NAME=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.fb47f640-a8a6-43e2-8ac2-b37012315949 -v /etc/tls/host:/etc/tls/host:ro -v /etc/pki/CA/ca.cert:/etc/pki/CA/ca.cert:ro -v /var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/service-launcher.9cf27872-112c-11e9-bbf8-0242631407a0/runs/fb47f640-a8a6-43e2-8ac2-b37012315949:/mnt/mesos/sandbox --net bridge --net=dockerInfra --env=SERVICE_LAUNCHER_TRUSTED_CERTIFICATE=["@/etc/pki/CA/ca.cert"] --env=SERVICE_LAUNCHER_MARATHON_ADDR=http://marathon.service.consul:18090 --env=SERVICE_LAUNCHER_VAULT_ADDR=https://vault.service.consul:8200 --env=SERVICE_LAUNCHER_VAULT_CA=["@/etc/pki/CA/ca.cert"] --env=SERVICE_LAUNCHER_SERVER_CERT=@/etc/tls/host/host.cert --env=SERVICE_LAUNCHER_SERVER_KEY=@/etc/tls/host/host.key --env=SERVICE_LAUNCHER_IP=0.0.0.0 --env=SERVICE_LAUNCHER_PORT=8081 --env=LOG_LEVEL=INFO -p 31339:8081/tcp --name mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.fb47f640-a8a6-43e2-8ac2-b37012315949 docker-registry.service.consul:15443/qbert/service-launcher:0.1.9 server
root      23017  0.3  0.8 875940 50920 ?        Ssl  20:58   0:01      \_ mesos-docker-executor --container=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.827eec5e-4166-4003-a608-0ff99223ae45 --docker=docker --docker_socket=/var/run/docker.sock --help=false --initialize_driver_logging=true --launcher_dir=/usr/libexec/mesos --logbufsecs=0 --logging_level=INFO --mapped_directory=/mnt/mesos/sandbox --quiet=false --sandbox_directory=/var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/mesos-consul.a30a8775-112c-11e9-bbf8-0242631407a0/runs/827eec5e-4166-4003-a608-0ff99223ae45 --stop_timeout=0ns
root      23121  0.0  0.1  86004  9984 ?        Sl   20:58   0:00      |   \_ docker -H unix:///var/run/docker.sock run --cpu-shares 102 --memory 134217728 -e MARATHON_APP_VERSION=2019-01-05T20:36:54.100Z -e SERVICE_LAUNCHER_TX_ID=5fcefcb6-fdfe-40f7-b682-b6883aa744ec -e HOST=QRadar-CE.node.consul -e MARATHON_APP_RESOURCE_CPUS=0.1 -e MARATHON_APP_RESOURCE_GPUS=0 -e MARATHON_APP_DOCKER_IMAGE=docker-registry.service.consul:15443/qbert/mesos-consul:0.4.3 -e PORT_10000=25888 -e MESOS_TASK_ID=mesos-consul.a30a8775-112c-11e9-bbf8-0242631407a0 -e PORT=25888 -e MARATHON_APP_RESOURCE_MEM=128.0 -e SERVICE_LAUNCHER_STARTED_BY=TRUE -e PORTS=25888 -e MARATHON_APP_LABEL_TRAEFIK_ENABLE=false -e SERVICE_LAUNCHER_CERTIFICATE=-----BEGIN CERTIFICATE----- MIIExzCCA6+gAwIBAgIJAOiyD+ULtocxMA0GCSqGSIb3DQEBCwUAMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTAeFw0xOTAxMDUyMDI2MjFaFw0yOTAxMDIyMDI2MjFaMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfdGbBmsPvv 5dgQK2NF8+3+ds3lWzTTQGEadJLn7yMMXCOkhZ/UdG/g5H+8A2OqBxCOCe+GB/9J u7vTjYpkd6XZvkDxKq6EVwyAF4OHwemHm/l934erXDKxkBaNmgvy5PkBabZ4UU9P NIA/egdxYVMTMs7W93VOC8as9ZJEMz6tFjAwp796LCWUzllgCAznHP1aASkkHs1l wRj86gekHR4l1v8pvtm9mjKXx0Gf51IaeMXdgAnNnoAX9WOeM2di7Js8e1a+Vl74 jq4kbqx4XWu5Z/ogSHwaqSHxNwiqradPgmLn3dFFUa/8eDpbS+9ZYIxvLGEukh4S p+RZw4bFMoUCAwEAAaOCAQYwggECMB0GA1UdDgQWBBS6nSbG6sAas4a3KI9mkzwy bzyfoDCB0gYDVR0jBIHKMIHHgBS6nSbG6sAas4a3KI9mkzwybzyfoKGBo6SBoDCB nTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxEDAOBgNVBAcT B1dhbHRoYW0xETAPBgNVBAoTCElCTSBDb3JwMRUwEwYDVQQLEwxJQk0gU2VjdXJp dHkxFzAVBgNVBAMTDnNlY3VyaXR5LXNldHVwMSEwHwYJKoZIhvcNAQkBFhJxMXNh bGVzQHVzLmlibS5jb22CCQDosg/lC7aHMTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 DQEBCwUAA4IBAQAhElL/O0v+r8pEwFK9q0IIkBAGywn/1EjOVSV5XEWxhvCNV44e EiOM93A5bjKoYW81OmLvCgfOnfDBP6XGZyaUpEvBdxV8oo0cfhd4mUqaHFqXbGul Fq2opP/gNwW+rP43tGivgZRKXLwNNqGStmZRJJM/eUSrziKUjUWMtShwr/byYJv8 KOy/1/Auz4Hs/dkpUOPzNpOxXiyjwV8P/ebuG5KfBxOSrMaDwbEOKkbvtkHB1HOd Z4Nykm+Lcs5DFz9uTZJi5LP4RPnrgwMeV8gnCV84GVAcunD6YObg0l0rv6oq65/S sgG0rerx0oMKmR6JD5S4vGh5sGQ2Liw9leeQ -----END CERTIFICATE-----  -e MARATHON_APP_RESOURCE_DISK=0.0 -e MARATHON_APP_LABELS=TRAEFIK_ENABLE -e MARATHON_APP_ID=/mesos-consul -e PORT0=25888 -e MARATHON_PLUGIN_VAULT_STATUS=SUCCESS : no secrets to wrap -e MESOS_SANDBOX=/mnt/mesos/sandbox -e MESOS_CONTAINER_NAME=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.827eec5e-4166-4003-a608-0ff99223ae45 -v /var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/mesos-consul.a30a8775-112c-11e9-bbf8-0242631407a0/runs/827eec5e-4166-4003-a608-0ff99223ae45:/mnt/mesos/sandbox --net host --cap-drop=SYS_PTRACE --name mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.827eec5e-4166-4003-a608-0ff99223ae45 docker-registry.service.consul:15443/qbert/mesos-consul:0.4.3 --zk=zk://zookeeper.service.consul/mesos --consul-ssl --consul-ssl-verify=false --mesos-ip-order=mesos,docker,host --refresh=7s --healthcheck --healthcheck-ip=0.0.0.0
root      53066  0.3  0.8 875940 51052 ?        Ssl  20:58   0:01      \_ mesos-docker-executor --container=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.abc1acfb-baa9-4e9d-816f-3ae681ef8a48 --docker=docker --docker_socket=/var/run/docker.sock --help=false --initialize_driver_logging=true --launcher_dir=/usr/libexec/mesos --logbufsecs=0 --logging_level=INFO --mapped_directory=/mnt/mesos/sandbox --quiet=false --sandbox_directory=/var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/qoauth.b72f8ac6-112c-11e9-bbf8-0242631407a0/runs/abc1acfb-baa9-4e9d-816f-3ae681ef8a48 --stop_timeout=0ns
root      53076  0.0  0.1 135148  9740 ?        Sl   20:58   0:00      |   \_ docker -H unix:///var/run/docker.sock run --cpu-shares 102 --memory 524288000 -e MARATHON_APP_VERSION=2019-01-05T20:36:56.089Z -e SERVICE_LAUNCHER_TX_ID=6d33e6ce-df12-44a2-82a4-7405196dd218 -e HOST=QRadar-CE.node.consul -e MARATHON_APP_RESOURCE_CPUS=0.1 -e SERVICE_LAUNCHER_SECRETS=OAUTH_CRYPTO_KEY OAUTH_ADMIN_TOKEN -e MARATHON_APP_RESOURCE_GPUS=0 -e MARATHON_APP_DOCKER_IMAGE=docker-registry.service.consul:15443/oauth/qoauth:0.0.16 -e PORT_OAUTH=9356 -e MESOS_TASK_ID=qoauth.b72f8ac6-112c-11e9-bbf8-0242631407a0 -e PORT=9356 -e MARATHON_APP_RESOURCE_MEM=500.0 -e SERVICE_LAUNCHER_STARTED_BY=TRUE -e PORTS=9356 -e SERVICE_LAUNCHER_CERTIFICATE=-----BEGIN CERTIFICATE----- MIIExzCCA6+gAwIBAgIJAOiyD+ULtocxMA0GCSqGSIb3DQEBCwUAMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTAeFw0xOTAxMDUyMDI2MjFaFw0yOTAxMDIyMDI2MjFaMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfdGbBmsPvv 5dgQK2NF8+3+ds3lWzTTQGEadJLn7yMMXCOkhZ/UdG/g5H+8A2OqBxCOCe+GB/9J u7vTjYpkd6XZvkDxKq6EVwyAF4OHwemHm/l934erXDKxkBaNmgvy5PkBabZ4UU9P NIA/egdxYVMTMs7W93VOC8as9ZJEMz6tFjAwp796LCWUzllgCAznHP1aASkkHs1l wRj86gekHR4l1v8pvtm9mjKXx0Gf51IaeMXdgAnNnoAX9WOeM2di7Js8e1a+Vl74 jq4kbqx4XWu5Z/ogSHwaqSHxNwiqradPgmLn3dFFUa/8eDpbS+9ZYIxvLGEukh4S p+RZw4bFMoUCAwEAAaOCAQYwggECMB0GA1UdDgQWBBS6nSbG6sAas4a3KI9mkzwy bzyfoDCB0gYDVR0jBIHKMIHHgBS6nSbG6sAas4a3KI9mkzwybzyfoKGBo6SBoDCB nTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxEDAOBgNVBAcT B1dhbHRoYW0xETAPBgNVBAoTCElCTSBDb3JwMRUwEwYDVQQLEwxJQk0gU2VjdXJp dHkxFzAVBgNVBAMTDnNlY3VyaXR5LXNldHVwMSEwHwYJKoZIhvcNAQkBFhJxMXNh bGVzQHVzLmlibS5jb22CCQDosg/lC7aHMTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 DQEBCwUAA4IBAQAhElL/O0v+r8pEwFK9q0IIkBAGywn/1EjOVSV5XEWxhvCNV44e EiOM93A5bjKoYW81OmLvCgfOnfDBP6XGZyaUpEvBdxV8oo0cfhd4mUqaHFqXbGul Fq2opP/gNwW+rP43tGivgZRKXLwNNqGStmZRJJM/eUSrziKUjUWMtShwr/byYJv8 KOy/1/Auz4Hs/dkpUOPzNpOxXiyjwV8P/ebuG5KfBxOSrMaDwbEOKkbvtkHB1HOd Z4Nykm+Lcs5DFz9uTZJi5LP4RPnrgwMeV8gnCV84GVAcunD6YObg0l0rv6oq65/S sgG0rerx0oMKmR6JD5S4vGh5sGQ2Liw9leeQ -----END CERTIFICATE-----  -e MARATHON_APP_RESOURCE_DISK=0.0 -e MARATHON_APP_LABELS= -e PORT_9090=9356 -e MARATHON_APP_ID=/qoauth -e PORT0=9356 -e OAUTH_ADMIN_TOKEN=f84d5967-cbca-8087-dbd1-2d8c927b5591 -e OAUTH_CRYPTO_KEY=cb712574-c1a3-3138-fe8b-ba7edc14a9cb -e MARATHON_PLUGIN_VAULT_STATUS=SUCCESS : all secrets wrapped successfully -e MESOS_SANDBOX=/mnt/mesos/sandbox -e MESOS_CONTAINER_NAME=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.abc1acfb-baa9-4e9d-816f-3ae681ef8a48 -v /store/docker/volumes/qoauth/web/logs:/opt/web/logs:rw -v /store/docker/volumes/qoauth/db:/store/db:rw -v /store/docker/volumes/qoauth/logs:/store/logs:rw -v /store/docker/volumes/qoauth/heap:/store/heap:rw -v /var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/qoauth.b72f8ac6-112c-11e9-bbf8-0242631407a0/runs/abc1acfb-baa9-4e9d-816f-3ae681ef8a48:/mnt/mesos/sandbox --net bridge --net=dockerInfra -p 9356:9090/tcp --name mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.abc1acfb-baa9-4e9d-816f-3ae681ef8a48 docker-registry.service.consul:15443/oauth/qoauth:0.0.16
root      61776  0.4  0.8 876600 50884 ?        Ssl  21:02   0:00      \_ mesos-docker-executor --container=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.7a87657b-5550-474a-94b0-2e2799473d99 --docker=docker --docker_socket=/var/run/docker.sock --help=false --initialize_driver_logging=true --launcher_dir=/usr/libexec/mesos --logbufsecs=0 --logging_level=INFO --mapped_directory=/mnt/mesos/sandbox --quiet=false --sandbox_directory=/var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/qapp-1001.3a3198f8-112d-11e9-bbf8-0242631407a0/runs/7a87657b-5550-474a-94b0-2e2799473d99 --stop_timeout=0ns
root      61788  0.0  0.1 144880 10240 ?        Sl   21:02   0:00          \_ docker -H unix:///var/run/docker.sock run --cpu-shares 102 --memory 209715200 -e PORT_5000=25108 -e MARATHON_APP_VERSION=2019-01-05T21:02:35.477Z -e SERVICE_LAUNCHER_TX_ID=f861b540-c439-46f7-b803-d8c9021dcf88 -e HOST=QRadar-CE.node.consul -e MARATHON_APP_RESOURCE_CPUS=0.1 -e SERVICE_LAUNCHER_SECRETS=APP_UUID -e MARATHON_APP_RESOURCE_GPUS=0 -e MARATHON_APP_DOCKER_IMAGE=qregistry.service.consul:5444/qapp/1001:1.1.1-20190105204037 -e PORT_FLASK=25108 -e MESOS_TASK_ID=qapp-1001.3a3198f8-112d-11e9-bbf8-0242631407a0 -e PORT=25108 -e MARATHON_APP_RESOURCE_MEM=200.0 -e SERVICE_LAUNCHER_STARTED_BY=TRUE -e PORTS=25108 -e SERVICE_LAUNCHER_CERTIFICATE=-----BEGIN CERTIFICATE----- MIIExzCCA6+gAwIBAgIJAOiyD+ULtocxMA0GCSqGSIb3DQEBCwUAMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTAeFw0xOTAxMDUyMDI2MjFaFw0yOTAxMDIyMDI2MjFaMIGdMQswCQYD VQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czEQMA4GA1UEBxMHV2FsdGhh bTERMA8GA1UEChMISUJNIENvcnAxFTATBgNVBAsTDElCTSBTZWN1cml0eTEXMBUG A1UEAxMOc2VjdXJpdHktc2V0dXAxITAfBgkqhkiG9w0BCQEWEnExc2FsZXNAdXMu aWJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJfdGbBmsPvv 5dgQK2NF8+3+ds3lWzTTQGEadJLn7yMMXCOkhZ/UdG/g5H+8A2OqBxCOCe+GB/9J u7vTjYpkd6XZvkDxKq6EVwyAF4OHwemHm/l934erXDKxkBaNmgvy5PkBabZ4UU9P NIA/egdxYVMTMs7W93VOC8as9ZJEMz6tFjAwp796LCWUzllgCAznHP1aASkkHs1l wRj86gekHR4l1v8pvtm9mjKXx0Gf51IaeMXdgAnNnoAX9WOeM2di7Js8e1a+Vl74 jq4kbqx4XWu5Z/ogSHwaqSHxNwiqradPgmLn3dFFUa/8eDpbS+9ZYIxvLGEukh4S p+RZw4bFMoUCAwEAAaOCAQYwggECMB0GA1UdDgQWBBS6nSbG6sAas4a3KI9mkzwy bzyfoDCB0gYDVR0jBIHKMIHHgBS6nSbG6sAas4a3KI9mkzwybzyfoKGBo6SBoDCB nTELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMxEDAOBgNVBAcT B1dhbHRoYW0xETAPBgNVBAoTCElCTSBDb3JwMRUwEwYDVQQLEwxJQk0gU2VjdXJp dHkxFzAVBgNVBAMTDnNlY3VyaXR5LXNldHVwMSEwHwYJKoZIhvcNAQkBFhJxMXNh bGVzQHVzLmlibS5jb22CCQDosg/lC7aHMTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3 DQEBCwUAA4IBAQAhElL/O0v+r8pEwFK9q0IIkBAGywn/1EjOVSV5XEWxhvCNV44e EiOM93A5bjKoYW81OmLvCgfOnfDBP6XGZyaUpEvBdxV8oo0cfhd4mUqaHFqXbGul Fq2opP/gNwW+rP43tGivgZRKXLwNNqGStmZRJJM/eUSrziKUjUWMtShwr/byYJv8 KOy/1/Auz4Hs/dkpUOPzNpOxXiyjwV8P/ebuG5KfBxOSrMaDwbEOKkbvtkHB1HOd Z4Nykm+Lcs5DFz9uTZJi5LP4RPnrgwMeV8gnCV84GVAcunD6YObg0l0rv6oq65/S sgG0rerx0oMKmR6JD5S4vGh5sGQ2Liw9leeQ -----END CERTIFICATE-----  -e MARATHON_APP_RESOURCE_DISK=0.0 -e MARATHON_APP_LABELS= -e MARATHON_APP_ID=/qapp-1001 -e PORT0=25108 -e APP_UUID=b59f841a-1496-79ee-539a-de0f109cd518 -e MARATHON_PLUGIN_VAULT_STATUS=SUCCESS : all secrets wrapped successfully -e MESOS_SANDBOX=/mnt/mesos/sandbox -e MESOS_CONTAINER_NAME=mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.7a87657b-5550-474a-94b0-2e2799473d99 -v /store/docker/volumes//qapp-1001:/store:rw -v /var/lib/mesos/slaves/4bacb101-70c0-4496-92d9-e63389e4320c-S0/frameworks/aef5e27d-238c-428c-a0b4-e802fa59323b-0000/executors/qapp-1001.3a3198f8-112d-11e9-bbf8-0242631407a0/runs/7a87657b-5550-474a-94b0-2e2799473d99:/mnt/mesos/sandbox --net bridge --net=dockerApps --env=QRADAR_CONSOLE_IP=192.168.21.218 --env=QRADAR_CONSOLE_HOSTNAME=QRadar-CE --env=TZ=UTC --env=QRADAR_APPLICATION_BASE_URL=https://192.168.21.218 --env=QRADAR_BUILD_VERSION=7_3_1_20180723171558 --env=LANG=en_US.UTF-8 --env=QRADAR_VERSION=7.3.1 -p 25108:5000/tcp --name mesos-4bacb101-70c0-4496-92d9-e63389e4320c-S0.7a87657b-5550-474a-94b0-2e2799473d99 qregistry.service.consul:5444/qapp/1001:1.1.1-20190105204037
marathon  15073  0.0  0.0 113180  1380 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/vault-wrapper-marathon.sh
marathon  15136  5.0  3.2 2520996 201460 ?      Sl   20:57   0:25  \_ java -Djava.library.path=/usr/local/lib:/usr/lib:/usr/lib64 -Djava.util.logging.SimpleFormatter.format=%2$s%5$s%6$s%n -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.port=18091 -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.access.file=/tmp/jmxremote.access -Dcom.sun.management.jmxremote.password.file=/tmp/jmxremote.password -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.local.only=false -Dcom.ibm.tools.attach.enable=no -Djavax.net.ssl.trustStore=/home/marathon/.keystore -Djava.rmi.server.hostname=192.168.21.218 -cp /tmp/marathon-1.jar mesosphere.marathon.Main
marathon  15212  0.0  0.0 107956   612 ?        S    20:57   0:00      \_ logger -p user.info -t marathon[15136]
marathon  15213  0.0  0.0 107956   612 ?        S    20:57   0:00      \_ logger -p user.notice -t marathon[15136]
root      15074  0.0  0.0 115300  1568 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/mesos-consul-healthcheck.sh
root      74124  0.0  0.0 107952   352 ?        S    21:05   0:00  \_ sleep 60
root      15077  0.0  0.0 115304  1592 ?        Ss   20:57   0:00 /bin/bash /usr/local/bin/marathon-restart-monitor.sh
root      75198  0.0  0.0 107952   356 ?        S    21:06   0:00  \_ sleep 30
root      16010  0.0  0.0 115300  1552 ?        Ss   20:58   0:00 /bin/sh /opt/openmq/mq/bin/imqbrokerd -bgnd -autorestart -javahome /usr/java/j2sdk -vmargs -Dcom.ibm.tools.attach.enable=no -vmargs -Xms384m -vmargs -Xmx384m -vmargs -Xss128k -vmargs -Xgcpolicy:gencon -vmargs -Xcompressedrefs -vmargs -Xgcthreads2
root      16257  0.8  1.2 2075204 75616 ?       Sl   20:58   0:04  \_ /usr/java/j2sdk/bin/java -cp /opt/openmq/mq/bin/../lib/imqbroker.jar:/opt/openmq/mq/bin/../lib/imqutil.jar:/opt/openmq/mq/bin/../lib/jsse.jar:/opt/openmq/mq/bin/../lib/jnet.jar:/opt/openmq/mq/bin/../lib/jcert.jar:/usr/lib/audit/Audit.jar:/opt/sun/mfwk/share/lib/jdmkrt.jar:/opt/sun/mfwk/share/lib/mfwk_instrum_tk.jar:/opt/openmq/mq/bin/../lib/ext:/opt/openmq/mq/bin/../lib/ext -Xms192m -Xmx192m -Xss192k -Xgcthreads2 -Xcompressedrefs -Xgcpolicy:gencon -Xss128k -Xmx384m -Xms384m -Dcom.ibm.tools.attach.enable=no -XX:MaxGCPauseMillis=5000 -Dimq.home=/opt/openmq/mq/bin/.. -Dimq.varhome=/opt/openmq/mq/bin/../var -Dimq.etchome=/opt/openmq/mq/bin/../etc -Dimq.libhome=/opt/openmq/mq/bin/../lib com.sun.messaging.jmq.jmsserver.Broker -bgnd -javahome /usr/java/j2sdk
nginxco+  16014  0.0  0.0 113180  1476 ?        Ss   20:58   0:00 /bin/bash /usr/local/bin/vault-wrapper-nginx.sh docker-registry.service.consul:15443/qbert/nginx-consul:2.4
nginxco+  16064  0.0  0.1 134888 11796 ?        Sl   20:58   0:00  \_ /usr/bin/docker run --rm --name=nginx-consul --net=host -v /etc/tls/host/:/etc/pki/tls/private/:ro -v /etc/tls/host/:/etc/pki/tls/certs/:ro -v /etc/nginx/templates:/etc/nginx/templates:ro --env-file=/etc/default/nginx-consul.env --env-file=/tmp/nginx-consul-secret-token --cap-drop SYS_PTRACE docker-registry.service.consul:15443/qbert/nginx-consul:2.4
framewo+  16026  0.0  0.0 113180  1484 ?        Ss   20:58   0:00 /bin/bash /usr/local/bin/vault-wrapper-framework-apps.sh
framewo+  16119  0.0  0.1 135144  9740 ?        Sl   20:58   0:00  \_ /usr/bin/docker run --rm --name=nginx-framework_apps_proxy --net=appProxy -v /etc/tls/framework_apps_proxy/:/etc/pki/tls/private/:ro -v /etc/tls/framework_apps_proxy/:/etc/pki/tls/certs/:ro -v /etc/pki/ca-trust/source/anchors/:/usr/local/share/ca-certificates/:ro -v /etc/nginx-framework_apps_proxy/templates/framework_apps_proxy.nginx:/etc/nginx/templates/framework_apps_proxy.nginx:ro --env-file=/etc/default/nginx-framework_apps_proxy.env --env-file=/tmp/framework-apps-consul-secret-token -p 1443:1443 --cap-drop SYS_PTRACE docker-registry.service.consul:15443/qbert/nginx-consul:2.4
root      24509  0.0  0.0 197220  1476 ?        Ssl  20:58   0:00 /usr/sbin/pcscd --foreground --auto-exit
nobody    52340 33.8 15.4 3080608 949968 ?      Ssl  20:58   2:33 /bin/java -Dcatalina.base=/opt/tomcat -Dcatalina.home=/opt/tomcat -Djava.security.auth.login.config=/opt/tomcat/conf/jaas.config -Djavax.servlet.request.encoding=UTF-8 -Djava.util.logging.config.file=/opt/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Djava.endorsed.dirs=/opt/tomcat/endorsed -Xcompressedrefs -classpath /opt/tomcat/bin/bootstrap.jar:/opt/tomcat/bin/tomcat-juli.jar:/opt/tomcat/bin/commons-daemon.jar -Xss1024k -Xgcpolicy:gencon -Xgcthreads4 -Xmx1202m -Xms1202m -Xss1024k -Dapplication.name=tomcat -Dapp_id=tomcat -Djava.library.path=/opt/qradar/lib -Dapplication.baseURL=file:///opt/qradar/conf/ -DdsmPluginsDir=/opt/qradar/jars/plugins -Djava.io.tmpdir=/store/tmp -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Dcom.ibm.tools.attach.enable=no -Dmks.base.ghost=/var/run/mks-ghost/ghost.QtqYw2alrf4Mi6P3 -Xdump:none -Xdump:nofailover -Xdump:tool:events=user,request=prepwalk+exclusive+compact,exec=/opt/qradar/bin/captureSysDump.sh %pid /store/jheap/tomcat.tomcat.system.dmp,opts=ASYNC,range=1..0,priority=400 -Xdump:console:events=user,range=1..0,priority=999 -Xdump:system:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/tomcat.tomcat/tomcat.tomcat.system.dmp,range=1..1,priority=999,request=exclusive+prepwalk+compact -Xdump:java:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/tomcat.tomcat/tomcat.tomcat.javacore.dmp,range=1..1,priority=400,request=exclusive+prepwalk+compact -Dcom.q1labs.frameworks.jmx.port=7779 org.apache.catalina.startup.Bootstrap start
root      52549 12.7  4.5 1980604 278240 ?      Ssl  20:58   0:57 /bin/java -Dapplication.name=hostcontext -Dapp_id=hostcontext -Djava.library.path=/opt/qradar/lib -Dapplication.baseURL=file:///opt/qradar/conf/ -DdsmPluginsDir=/opt/qradar/jars/plugins -Djava.io.tmpdir=/store/tmp -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Dcom.ibm.tools.attach.enable=no -classpath .:/opt/qradar/jars/acme-1.0.jar:/opt/qradar/jars/activation-1.0.2.jar:/opt/qradar/jars/antlr-2.7.5.jar:/opt/qradar/jars/antlr-runtime-4.5.3.jar:/opt/qradar/jars/aopalliance-1.0.jar:/opt/qradar/jars/apacheds-protocol-dhcp-1.5.4.jar:/opt/qradar/jars/args4j-2.0.8.jar:/opt/qradar/jars/asm-3.2.jar:/opt/qradar/jars/aspectjrt-1.1.1.jar:/opt/qradar/jars/avalon-framework-api-4.3.1.jar:/opt/qradar/jars/avalon-framework-impl-4.3.1.jar:/opt/qradar/jars/axis-1.2.jar:/opt/qradar/jars/batik-all-1.9.1.jar:/opt/qradar/jars/batik-anim-1.9.1.jar:/opt/qradar/jars/batik-awt-util-1.9.1.jar:/opt/qradar/jars/batik-bridge-1.9.1.jar:/opt/qradar/jars/batik-codec-1.9.1.jar:/opt/qradar/jars/batik-constants-1.9.1.jar:/opt/qradar/jars/batik-css-1.9.1.jar:/opt/qradar/jars/batik-dom-1.9.1.jar:/opt/qradar/jars/batik-ext-1.9.1.jar:/opt/qradar/jars/batik-extension-1.9.1.jar:/opt/qradar/jars/batik-gui-util-1.9.1.jar:/opt/qradar/jars/batik-gvt-1.9.1.jar:/opt/qradar/jars/batik-i18n-1.9.1.jar:/opt/qradar/jars/batik-parser-1.9.1.jar:/opt/qradar/jars/batik-rasterizer-1.9.1.jar:/opt/qradar/jars/batik-rasterizer-ext-1.9.1.jar:/opt/qradar/jars/batik-script-1.9.1.jar:/opt/qradar/jars/batik-slideshow-1.9.1.jar:/opt/qradar/jars/batik-squiggle-1.9.1.jar:/opt/qradar/jars/batik-svgbrowser-1.9.1.jar:/opt/qradar/jars/batik-svg-dom-1.9.1.jar:/opt/qradar/jars/batik-svggen-1.9.1.jar:/opt/qradar/jars/batik-svgpp-1.9.1.jar:/opt/qradar/jars/batik-svgrasterizer-1.9.1.jar:/opt/qradar/jars/batik-swing-1.9.1.jar:/opt/qradar/jars/batik-transcoder-1.9.1.jar:/opt/qradar/jars/batik-ttf2svg-1.9.1.jar:/opt/qradar/jars/batik-util-1.9.1.jar:/opt/qradar/jars/batik-xml-1.9.1.jar:/opt/qradar/jars/btf-1.2.jar:/opt/qradar/jars/c3p0-0.9.1.2.jar:/opt/qradar/jars/cglib-nodep-2.2.2.jar:/opt/qradar/jars/chart-4.1.jar:/opt/qradar/jars/chart-ext-4.1.jar:/opt/qradar/jars/chart-server-4.1.jar:/opt/qradar/jars/commons-beanutils-1.9.3.jar:/opt/qradar/jars/commons-cli-1.0.jar:/opt/qradar/jars/commons-codec-1.9.jar:/opt/qradar/jars/commons-collections-3.2.2.jar:/opt/qradar/jars/commons-daemon-1.0.jar:/opt/qradar/jars/commons-dbcp-1.2.2.jar:/opt/qradar/jars/commons-dbutils-1.1.jar:/opt/qradar/jars/commons-digester-1.3.jar:/opt/qradar/jars/commons-discovery-0.2.jar:/opt/qradar/jars/commons-email-1.2.jar:/opt/qradar/jars/commons-exec-1.1.jar:/opt/qradar/jars/commons-fileupload-1.3.3.jar:/opt/qradar/jars/commons-httpclient-3.1.jar:/opt/qradar/jars/commons-io-2.2.jar:/opt/qradar/jars/commons-json4j-1.0.jar:/opt/qradar/jars/commons-jxpath-1.2.jar:/opt/qradar/jars/commons-lang-2.6.jar:/opt/qradar/jars/commons-lang3-3.3.2.jar:/opt/qradar/jars/commons-logging-1.2.jar:/opt/qradar/jars/commons-math-1.1.jar:/opt/qradar/jars/commons-net-3.3.jar:/opt/qradar/jars/commons-pool-1.6.jar:/opt/qradar/jars/commons-validator-1.5.1.jar:/opt/qradar/jars/concurrent-1.3.2.jar:/opt/qradar/jars/db2jcc.jar:/opt/qradar/jars/dnsjava-1.6.6.jar:/opt/qradar/jars/dom4j-1.3.jar:/opt/qradar/jars/email-1.6.1.jar:/opt/qradar/jars/fontbox-2.0.4.jar:/opt/qradar/jars/fop-2.2.jar:/opt/qradar/jars/fscontext-1.2.jar:/opt/qradar/jars/geoip2-2.8.0-rc1.jar:/opt/qradar/jars/geronimo-jms_1.1_spec-1.1.1.jar:/opt/qradar/jars/geronimo-jpa_2.0_spec-1.1.jar:/opt/qradar/jars/geronimo-jta_1.1_spec-1.1.1.jar:/opt/qradar/jars/gson-2.2.4.jar:/opt/qradar/jars/guava-14.0.1.jar:/opt/qradar/jars/guice-2.0.jar:/opt/qradar/jars/guice-assistedinject-2.0.jar:/opt/qradar/jars/guice-jmx-2.0.jar:/opt/qradar/jars/guice-jndi-2.0.jar:/opt/qradar/jars/guice-multibindings-2.0.jar:/opt/qradar/jars/guice-servlet-2.0.jar:/opt/qradar/jars/guice-spring-2.0.jar:/opt/qradar/jars/guice-struts2-plugin-2.0.jar:/opt/qradar/jars/guice-throwingproviders-2.0.jar:/opt/qradar/jars/hamcrest-all-1.3RC0.jar:/opt/qradar/jars/httpclient-4.5.2.jar:/opt/qradar/jars/httpcore-4.4.4.jar:/opt/qradar/jars/ibm-si-mks.jar:/opt/qradar/jars/icu4j-58_2.jar:/opt/qradar/jars/icu4j-charset-58_2.jar:/opt/qradar/jars/icu4j-localespi-58_2.jar:/opt/qradar/jars/ifxjdbc.jar:/opt/qradar/jars/ifxjdbcx.jar:/opt/qradar/jars/ifxlang.jar:/opt/qradar/jars/ifxlsupp.jar:/opt/qradar/jars/ifxsqlj.jar:/opt/qradar/jars/ifxtools.jar:/opt/qradar/jars/imqadmin.jar:/opt/qradar/jars/imq.jar:/opt/qradar/jars/imqservlet.jar:/opt/qradar/jars/imqxm.jar:/opt/qradar/jars/jaaslounge-0.3.0.jar:/opt/qradar/jars/jackson-annotations-2.9.0.jar:/opt/qradar/jars/jackson-core-2.9.0.jar:/opt/qradar/jars/jackson-coreutils-1.6.jar:/opt/qradar/jars/jackson-databind-2.9.0.jar:/opt/qradar/jars/jakarta-oro-2.0.6.jar:/opt/qradar/jars/jasper.jar:/opt/qradar/jars/JavaFastPFOR-0.1.3.jar:/opt/qradar/jars/javassist-3.18.1.jar:/opt/qradar/jars/jaxb-api-1.0.jar:/opt/qradar/jars/jaxb-impl-1.0.2.jar:/opt/qradar/jars/jaxb-libs-1.0.2.jar:/opt/qradar/jars/jaxm-api.jar:/opt/qradar/jars/jaxp-ri-1.4.1.jar:/opt/qradar/jars/jax-qname-1.1.jar:/opt/qradar/jars/jaxrpc-api-1.1.jar:/opt/qradar/jars/jaxrpc-impl-1.1.2.jar:/opt/qradar/jars/jaxrpc-spi-1.1.2.jar:/opt/qradar/jars/jcifs-1.3.15q-v2.jar:/opt/qradar/jars/jcifs-krb5-1.3.12.jar:/opt/qradar/jars/jcs-1.0-dev.jar:/opt/qradar/jars/jdom-1.0.jar:/opt/qradar/jars/jettison-1.2.jar:/opt/qradar/jars/jgraph-5.13.jar:/opt/qradar/jars/jgraphaddons-5.13.jar:/opt/qradar/jars/jhall-2.0_03.jar:/opt/qradar/jars/jide-common-2.5.0.jar:/opt/qradar/jars/jide-components-2.5.0.jar:/opt/qradar/jars/jide-dialogs-2.5.0.jar:/opt/qradar/jars/jide-grids-2.5.0.jar:/opt/qradar/jars/j-interop-2.08A.jar:/opt/qradar/jars/j-interopdeps-2.01.jar:/opt/qradar/jars/jline-0.9.91.jar:/opt/qradar/jars/jms.jar:/opt/qradar/jars/jmxsh-R4.jar:/opt/qradar/jars/joda-time-2.1.jar:/opt/qradar/jars/jsch-0.1.54.jar:/opt/qradar/jars/json-schema-core-1.2.5.jar:/opt/qradar/jars/json-schema-validator-2.2.6.jar:/opt/qradar/jars/jsp-api.jar:/opt/qradar/jars/jstl-1.1.2.jar:/opt/qradar/jars/jta-1.1.jar:/opt/qradar/jars/jtds-1.3.3i.jar:/opt/qradar/jars/jython-2.7.0.jar:/opt/qradar/jars/libphonenumber-6.1.jar:/opt/qradar/jars/libthrift-0.8.0.jar:/opt/qradar/jars/log4j-1.2.8.jar:/opt/qradar/jars/lucene-analyzers-common-5.4.1.jar:/opt/qradar/jars/lucene-backward-codecs-5.4.1.jar:/opt/qradar/jars/lucene-core-5.4.1.jar:/opt/qradar/jars/lucene-memory-5.4.1.jar:/opt/qradar/jars/lucene-queryparser-5.4.1.jar:/opt/qradar/jars/lz4-1.3.0.jar:/opt/qradar/jars/mail-1.3.2.jar:/opt/qradar/jars/mailapi-1.3.2.jar:/opt/qradar/jars/maxmind-db-1.2.1.jar:/opt/qradar/jars/msg-simple-1.1.jar:/opt/qradar/jars/namespace-1.0.1.jar:/opt/qradar/jars/nekohtml-1.9.10.jar:/opt/qradar/jars/ojdbc6.jar:/opt/qradar/jars/opencsv-1.8.jar:/opt/qradar/jars/openid4java-0.9.8.jar:/opt/qradar/jars/openjpa-2.2.2.jar:/opt/qradar/jars/optional-1.5.3.jar:/opt/qradar/jars/orai18n-10.2.0.jar:/opt/qradar/jars/orai18n.jar:/opt/qradar/jars/org.apache.oltu.oauth2.client-1.0.1.jar:/opt/qradar/jars/oscache-2.4.1.jar:/opt/qradar/jars/osgi-3.10.1.jar:/opt/qradar/jars/poi-3.16.jar:/opt/qradar/jars/postgresql-42.0.0.jar:/opt/qradar/jars/proxool-0.8.3.jar:/opt/qradar/jars/q1labs_ale_remote_management.jar:/opt/qradar/jars/q1labs_ariel.jar:/opt/qradar/jars/q1labs_assetprofile.jar:/opt/qradar/jars/q1labs_configservices_common.jar:/opt/qradar/jars/q1labs_configservices_proper.jar:/opt/qradar/jars/q1labs_console.jar:/opt/qradar/jars/q1labs_core.jar:/opt/qradar/jars/q1labs_core_vis_snmp.jar:/opt/qradar/jars/q1labs_cve.jar:/opt/qradar/jars/q1labs_dal.jar:/opt/qradar/jars/q1labs_data_ingestion.jar:/opt/qradar/jars/q1labs_eula.jar:/opt/qradar/jars/q1labs_forensics.jar:/opt/qradar/jars/q1labs_frameworks.jar:/opt/qradar/jars/q1labs_hc.jar:/opt/qradar/jars/q1labs_hostcontext.jar:/opt/qradar/jars/q1labs_jstl.jar:/opt/qradar/jars/q1labs_masterdaemon.jar:/opt/qradar/jars/q1labs_oemmerger.jar:/opt/qradar/jars/q1labs_qinfo.jar:/opt/qradar/jars/q1labs_qradarapi_common.jar:/opt/qradar/jars/q1labs_qradarapi_v100.jar:/opt/qradar/jars/q1labs_qradarapi_v101.jar:/opt/qradar/jars/q1labs_qrmreporting.jar:/opt/qradar/jars/q1labs_qvmadaptor.jar:/opt/qradar/jars/q1labs_qvmappscan.jar:/opt/qradar/jars/q1labs_qvmassetupdates.jar:/opt/qradar/jars/q1labs_qvmiemclient.jar:/opt/qradar/jars/q1labs_qvmvaultservice.jar:/opt/qradar/jars/q1labs_qvmworkflow.jar:/opt/qradar/jars/q1labs_reporting.jar:/opt/qradar/jars/q1labs_restapi_qradar_plugins.jar:/opt/qradar/jars/q1labs_sem_device_extensions.jar:/opt/qradar/jars/q1labs_sem_device_statistics.jar:/opt/qradar/jars/q1labs_sem_dsm.jar:/opt/qradar/jars/q1labs_sem.jar:/opt/qradar/jars/q1labs_semsources.jar:/opt/qradar/jars/q1labs_semsources_protocol_arielrestapi.jar:/opt/qradar/jars/q1labs_semsources_protocol_arielrestapi_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_base.jar:/opt/qradar/jars/q1labs_semsources_protocol_common.jar:/opt/qradar/jars/q1labs_semsources_protocol_hptandem.jar:/opt/qradar/jars/q1labs_semsources_protocol_ibmsimjdbc.jar:/opt/qradar/jars/q1labs_semsources_protocol_ibmsimjdbc_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_JDBC.jar:/opt/qradar/jars/q1labs_semsources_protocol_JdbcSophos.jar:/opt/qradar/jars/q1labs_semsources_protocol_JdbcSophos_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_JDBC_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_LEA.jar:/opt/qradar/jars/q1labs_semsources_protocol_LEA_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_logfileprotocol.jar:/opt/qradar/jars/q1labs_semsources_protocol_logfileprotocol_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_SiteProtector_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_syslogredirect.jar:/opt/qradar/jars/q1labs_semsources_protocol_syslogredirect_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_tcpsyslog.jar:/opt/qradar/jars/q1labs_simulator_api.jar:/opt/qradar/jars/q1labs_simulator.jar:/opt/qradar/jars/q1labs_srmconsole_api.jar:/opt/qradar/jars/q1labs_srmconsole_util.jar:/opt/qradar/jars/q1labs_uiframeworks.jar:/opt/qradar/jars/q1labs_utils_qidmap_importer.jar:/opt/qradar/jars/q1labs_vis.jar:/opt/qradar/jars/q1labs_vis_osvdb.jar:/opt/qradar/jars/q1labs_vis_qvdb_importer.jar:/opt/qradar/jars/quartz-all-2.0.2.jar:/opt/qradar/jars/radclient3-3.34f.jar:/opt/qradar/jars/relaxngDatatype-1.0.2.jar:/opt/qradar/jars/restapi_annotations.jar:/opt/qradar/jars/restapi_framework.jar:/opt/qradar/jars/rhino-1.7.7.jar:/opt/qradar/jars/rome-1.0.jar:/opt/qradar/jars/saaj-api-1.2.jar:/opt/qradar/jars/sca.jar:/opt/qradar/jars/security_model.jar:/opt/qradar/jars/serializer-2.7.2.jar:/opt/qradar/jars/serp-1.15.1.jar:/opt/qradar/jars/servlet-api.jar:/opt/qradar/jars/servlets-cgi-6.0.35.jar:/opt/qradar/jars/si-ha-2.1.16.jar:/opt/qradar/jars/slf4j-api-1.7.6.jar:/opt/qradar/jars/slf4j-log4j12-1.6.1.jar:/opt/qradar/jars/slf4j-simple-1.7.6.jar:/opt/qradar/jars/smtp-1.3.2.jar:/opt/qradar/jars/snappy-java-1.1.1.6.jar:/opt/qradar/jars/snmp4j-2.3.1.jar:/opt/qradar/jars/spring-aop-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-aspects-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-beans-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-context-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-context-support-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-core-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-expression-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-jdbc-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-tx-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-web-3.2.18.RELEASE.jar:/opt/qradar/jars/sqlitejdbc-0.5.4.jar:/opt/qradar/jars/standard-1.1.2.jar:/opt/qradar/jars/struts-1.1.jar:/opt/qradar/jars/struts-legacy-1.1.jar:/opt/qradar/jars/swt-3.125.jar:/opt/qradar/jars/swt-win32-native-3.125.jar:/opt/qradar/jars/tacclient-1.12.jar:/opt/qradar/jars/tar-2.3.jar:/opt/qradar/jars/tar.jar:/opt/qradar/jars/tomcat-coyote.jar:/opt/qradar/jars/trove-2.0.3.jar:/opt/qradar/jars/trove-3.0.3.jar:/opt/qradar/jars/uri-template-0.9.jar:/opt/qradar/jars/velocity-1.7.jar:/opt/qradar/jars/vt-ldap-3.3.6.jar:/opt/qradar/jars/wsdl4j-1.6.2.jar:/opt/qradar/jars/xalan-2.7.2.jar:/opt/qradar/jars/xbean-asm5-shaded-3.17.jar:/opt/qradar/jars/xercesImpl-2.11.0.jar:/opt/qradar/jars/xml-apis-1.4.01.jar:/opt/qradar/jars/xml-apis-ext-1.4.01.jar:/opt/qradar/jars/xmlgraphics-commons-2.2.jar:/opt/qradar/jars/xsdlib-1.0.2.jar:/opt/qradar/jars/xstream-1.4.9.jar -Dcom.q1labs.frameworks.jmx.port=7778 -Xcompressedrefs -Xgcpolicy:gencon -Xgcthreads4 -Xmx256m -Xms256m -Xdump:none -Xdump:nofailover -Xdump:tool:events=user,request=prepwalk+exclusive+compact,exec=/opt/qradar/bin/captureSysDump.sh %pid /store/jheap/hostcontext.hostcontext.system.dmp,opts=ASYNC,range=1..0,priority=400 -Xdump:console:events=user,range=1..0,priority=999 -Xdump:system:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/hostcontext.hostcontext/hostcontext.hostcontext.system.dmp,range=1..1,priority=999,request=exclusive+prepwalk+compact -Xdump:java:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/hostcontext.hostcontext/hostcontext.hostcontext.javacore.dmp,range=1..1,priority=400,request=exclusive+prepwalk+compact com.q1labs.hostcontext.HostContext start
root      58861  0.0  0.0 115592  1912 ?        S    21:01   0:00  \_ /bin/bash /opt/qradar/bin/installExtensions.sh
root      75715  0.0  0.0 107976   380 ?        S    21:06   0:00      \_ sleep 10
root      52603  0.0  0.2 425684 16248 ?        Ss   20:58   0:00 /usr/sbin/httpd -DFOREGROUND
root      52618  0.0  0.0  26124  1848 ?        S    20:58   0:00  \_ /usr/bin/perl /opt/qradar/bin/proxyurl.sh
nobody    59431  0.0  0.1 430388 10524 ?        S    21:01   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    59543  0.0  0.1 428172 10200 ?        S    21:01   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    61504  0.0  0.1 430388 10512 ?        S    21:02   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    61512  0.0  0.1 428172 10216 ?        S    21:02   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    70706  0.0  0.1 428172 10200 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73551  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73552  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73553  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73580  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73581  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73582  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73583  0.0  0.1 428172 10200 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73584  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73585  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73586  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73587  0.0  0.1 430388 10512 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73676  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73677  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73678  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73679  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73685  0.0  0.1 428172  9960 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
nobody    73686  0.0  0.1 428172  9956 ?        S    21:05   0:00  \_ /usr/sbin/httpd -DFOREGROUND
root      61054 19.3  8.2 3287212 505280 ?      S<sl 21:02   0:44 /bin/java -Dapplication.name=ecs-ec-ingress -Dapp_id=ecs-ec-ingress -Djava.library.path=/opt/qradar/lib -Dapplication.baseURL=file:///opt/ibm/si/services/ecs-ec-ingress/current/frameworks_conf/ -DdsmPluginsDir=/opt/qradar/jars/plugins -Djava.io.tmpdir=/store/tmp -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Dcom.ibm.tools.attach.enable=no -XX:MaxDirectMemorySize=1024M -Xcompressedrefs -Xgcpolicy:gencon -XXgc:stdSplitFreeListSplitAmount=1 -Xloaminimum0.05 -Xgc:scvNoAdaptiveTenure,scvTenureAge=2 -Dsun.rmi.dgc.server.gcInterval=9223372036854775807 -Xgc:classUnloadingKickoffThreshold=3000 -Xgcthreads8 -Xmx1400m -Xms1400m -Xdump:none -Xdump:nofailover -Xdump:tool:events=user,request=prepwalk+exclusive+compact,exec=/opt/qradar/bin/captureSysDump.sh %pid /store/jheap/ecs-ec-ingress.ecs-ec-ingress.system.dmp,opts=ASYNC,range=1..0,priority=400 -Xdump:console:events=user,range=1..0,priority=999 -Xdump:system:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/ecs-ec-ingress.ecs-ec-ingress/ecs-ec-ingress.ecs-ec-ingress.system.dmp,range=1..1,priority=999,request=exclusive+prepwalk+compact -Xdump:java:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/ecs-ec-ingress.ecs-ec-ingress/ecs-ec-ingress.ecs-ec-ingress.javacore.dmp,range=1..1,priority=400,request=exclusive+prepwalk+compact -Dcom.q1labs.frameworks.jmx.port=7787 -cp /opt/ibm/si/services/ecs-ec-ingress/current/bin/*:/opt/ibm/si/services/ecs-ec-ingress/eventgnosis/lib/q1labs/* com.ibm.si.service.ecingress.ServiceRunner /opt/ibm/si/services/ecs-ec-ingress/current/ /opt/ibm/si/services/ecs-ec-ingress/current/eventgnosis ecs-ec-ingress.ecs 220 noconsole
root      61189 50.9 19.6 6211340 1210552 ?     Ssl  21:02   1:56 /bin/java -classpath .:/opt/qradar/jars/acme-1.0.jar:/opt/qradar/jars/activation-1.0.2.jar:/opt/qradar/jars/antlr-2.7.5.jar:/opt/qradar/jars/antlr-runtime-4.5.3.jar:/opt/qradar/jars/aopalliance-1.0.jar:/opt/qradar/jars/apacheds-protocol-dhcp-1.5.4.jar:/opt/qradar/jars/args4j-2.0.8.jar:/opt/qradar/jars/asm-3.2.jar:/opt/qradar/jars/aspectjrt-1.1.1.jar:/opt/qradar/jars/avalon-framework-api-4.3.1.jar:/opt/qradar/jars/avalon-framework-impl-4.3.1.jar:/opt/qradar/jars/axis-1.2.jar:/opt/qradar/jars/batik-all-1.9.1.jar:/opt/qradar/jars/batik-anim-1.9.1.jar:/opt/qradar/jars/batik-awt-util-1.9.1.jar:/opt/qradar/jars/batik-bridge-1.9.1.jar:/opt/qradar/jars/batik-codec-1.9.1.jar:/opt/qradar/jars/batik-constants-1.9.1.jar:/opt/qradar/jars/batik-css-1.9.1.jar:/opt/qradar/jars/batik-dom-1.9.1.jar:/opt/qradar/jars/batik-ext-1.9.1.jar:/opt/qradar/jars/batik-extension-1.9.1.jar:/opt/qradar/jars/batik-gui-util-1.9.1.jar:/opt/qradar/jars/batik-gvt-1.9.1.jar:/opt/qradar/jars/batik-i18n-1.9.1.jar:/opt/qradar/jars/batik-parser-1.9.1.jar:/opt/qradar/jars/batik-rasterizer-1.9.1.jar:/opt/qradar/jars/batik-rasterizer-ext-1.9.1.jar:/opt/qradar/jars/batik-script-1.9.1.jar:/opt/qradar/jars/batik-slideshow-1.9.1.jar:/opt/qradar/jars/batik-squiggle-1.9.1.jar:/opt/qradar/jars/batik-svgbrowser-1.9.1.jar:/opt/qradar/jars/batik-svg-dom-1.9.1.jar:/opt/qradar/jars/batik-svggen-1.9.1.jar:/opt/qradar/jars/batik-svgpp-1.9.1.jar:/opt/qradar/jars/batik-svgrasterizer-1.9.1.jar:/opt/qradar/jars/batik-swing-1.9.1.jar:/opt/qradar/jars/batik-transcoder-1.9.1.jar:/opt/qradar/jars/batik-ttf2svg-1.9.1.jar:/opt/qradar/jars/batik-util-1.9.1.jar:/opt/qradar/jars/batik-xml-1.9.1.jar:/opt/qradar/jars/btf-1.2.jar:/opt/qradar/jars/c3p0-0.9.1.2.jar:/opt/qradar/jars/cglib-nodep-2.2.2.jar:/opt/qradar/jars/chart-4.1.jar:/opt/qradar/jars/chart-ext-4.1.jar:/opt/qradar/jars/chart-server-4.1.jar:/opt/qradar/jars/commons-beanutils-1.9.3.jar:/opt/qradar/jars/commons-cli-1.0.jar:/opt/qradar/jars/commons-codec-1.9.jar:/opt/qradar/jars/commons-collections-3.2.2.jar:/opt/qradar/jars/commons-daemon-1.0.jar:/opt/qradar/jars/commons-dbcp-1.2.2.jar:/opt/qradar/jars/commons-dbutils-1.1.jar:/opt/qradar/jars/commons-digester-1.3.jar:/opt/qradar/jars/commons-discovery-0.2.jar:/opt/qradar/jars/commons-email-1.2.jar:/opt/qradar/jars/commons-exec-1.1.jar:/opt/qradar/jars/commons-fileupload-1.3.3.jar:/opt/qradar/jars/commons-httpclient-3.1.jar:/opt/qradar/jars/commons-io-2.2.jar:/opt/qradar/jars/commons-json4j-1.0.jar:/opt/qradar/jars/commons-jxpath-1.2.jar:/opt/qradar/jars/commons-lang-2.6.jar:/opt/qradar/jars/commons-lang3-3.3.2.jar:/opt/qradar/jars/commons-logging-1.2.jar:/opt/qradar/jars/commons-math-1.1.jar:/opt/qradar/jars/commons-net-3.3.jar:/opt/qradar/jars/commons-pool-1.6.jar:/opt/qradar/jars/commons-validator-1.5.1.jar:/opt/qradar/jars/concurrent-1.3.2.jar:/opt/qradar/jars/db2jcc.jar:/opt/qradar/jars/dnsjava-1.6.6.jar:/opt/qradar/jars/dom4j-1.3.jar:/opt/qradar/jars/email-1.6.1.jar:/opt/qradar/jars/fontbox-2.0.4.jar:/opt/qradar/jars/fop-2.2.jar:/opt/qradar/jars/fscontext-1.2.jar:/opt/qradar/jars/geoip2-2.8.0-rc1.jar:/opt/qradar/jars/geronimo-jms_1.1_spec-1.1.1.jar:/opt/qradar/jars/geronimo-jpa_2.0_spec-1.1.jar:/opt/qradar/jars/geronimo-jta_1.1_spec-1.1.1.jar:/opt/qradar/jars/gson-2.2.4.jar:/opt/qradar/jars/guava-14.0.1.jar:/opt/qradar/jars/guice-2.0.jar:/opt/qradar/jars/guice-assistedinject-2.0.jar:/opt/qradar/jars/guice-jmx-2.0.jar:/opt/qradar/jars/guice-jndi-2.0.jar:/opt/qradar/jars/guice-multibindings-2.0.jar:/opt/qradar/jars/guice-servlet-2.0.jar:/opt/qradar/jars/guice-spring-2.0.jar:/opt/qradar/jars/guice-struts2-plugin-2.0.jar:/opt/qradar/jars/guice-throwingproviders-2.0.jar:/opt/qradar/jars/hamcrest-all-1.3RC0.jar:/opt/qradar/jars/httpclient-4.5.2.jar:/opt/qradar/jars/httpcore-4.4.4.jar:/opt/qradar/jars/ibm-si-mks.jar:/opt/qradar/jars/icu4j-58_2.jar:/opt/qradar/jars/icu4j-charset-58_2.jar:/opt/qradar/jars/icu4j-localespi-58_2.jar:/opt/qradar/jars/ifxjdbc.jar:/opt/qradar/jars/ifxjdbcx.jar:/opt/qradar/jars/ifxlang.jar:/opt/qradar/jars/ifxlsupp.jar:/opt/qradar/jars/ifxsqlj.jar:/opt/qradar/jars/ifxtools.jar:/opt/qradar/jars/imqadmin.jar:/opt/qradar/jars/imq.jar:/opt/qradar/jars/imqservlet.jar:/opt/qradar/jars/imqxm.jar:/opt/qradar/jars/jaaslounge-0.3.0.jar:/opt/qradar/jars/jackson-annotations-2.9.0.jar:/opt/qradar/jars/jackson-core-2.9.0.jar:/opt/qradar/jars/jackson-coreutils-1.6.jar:/opt/qradar/jars/jackson-databind-2.9.0.jar:/opt/qradar/jars/jakarta-oro-2.0.6.jar:/opt/qradar/jars/jasper.jar:/opt/qradar/jars/JavaFastPFOR-0.1.3.jar:/opt/qradar/jars/javassist-3.18.1.jar:/opt/qradar/jars/jaxb-api-1.0.jar:/opt/qradar/jars/jaxb-impl-1.0.2.jar:/opt/qradar/jars/jaxb-libs-1.0.2.jar:/opt/qradar/jars/jaxm-api.jar:/opt/qradar/jars/jaxp-ri-1.4.1.jar:/opt/qradar/jars/jax-qname-1.1.jar:/opt/qradar/jars/jaxrpc-api-1.1.jar:/opt/qradar/jars/jaxrpc-impl-1.1.2.jar:/opt/qradar/jars/jaxrpc-spi-1.1.2.jar:/opt/qradar/jars/jcifs-1.3.15q-v2.jar:/opt/qradar/jars/jcifs-krb5-1.3.12.jar:/opt/qradar/jars/jcs-1.0-dev.jar:/opt/qradar/jars/jdom-1.0.jar:/opt/qradar/jars/jettison-1.2.jar:/opt/qradar/jars/jgraph-5.13.jar:/opt/qradar/jars/jgraphaddons-5.13.jar:/opt/qradar/jars/jhall-2.0_03.jar:/opt/qradar/jars/jide-common-2.5.0.jar:/opt/qradar/jars/jide-components-2.5.0.jar:/opt/qradar/jars/jide-dialogs-2.5.0.jar:/opt/qradar/jars/jide-grids-2.5.0.jar:/opt/qradar/jars/j-interop-2.08A.jar:/opt/qradar/jars/j-interopdeps-2.01.jar:/opt/qradar/jars/jline-0.9.91.jar:/opt/qradar/jars/jms.jar:/opt/qradar/jars/jmxsh-R4.jar:/opt/qradar/jars/joda-time-2.1.jar:/opt/qradar/jars/jsch-0.1.54.jar:/opt/qradar/jars/json-schema-core-1.2.5.jar:/opt/qradar/jars/json-schema-validator-2.2.6.jar:/opt/qradar/jars/jsp-api.jar:/opt/qradar/jars/jstl-1.1.2.jar:/opt/qradar/jars/jta-1.1.jar:/opt/qradar/jars/jtds-1.3.3i.jar:/opt/qradar/jars/jython-2.7.0.jar:/opt/qradar/jars/libphonenumber-6.1.jar:/opt/qradar/jars/libthrift-0.8.0.jar:/opt/qradar/jars/log4j-1.2.8.jar:/opt/qradar/jars/lucene-analyzers-common-5.4.1.jar:/opt/qradar/jars/lucene-backward-codecs-5.4.1.jar:/opt/qradar/jars/lucene-core-5.4.1.jar:/opt/qradar/jars/lucene-memory-5.4.1.jar:/opt/qradar/jars/lucene-queryparser-5.4.1.jar:/opt/qradar/jars/lz4-1.3.0.jar:/opt/qradar/jars/mail-1.3.2.jar:/opt/qradar/jars/mailapi-1.3.2.jar:/opt/qradar/jars/maxmind-db-1.2.1.jar:/opt/qradar/jars/msg-simple-1.1.jar:/opt/qradar/jars/namespace-1.0.1.jar:/opt/qradar/jars/nekohtml-1.9.10.jar:/opt/qradar/jars/ojdbc6.jar:/opt/qradar/jars/opencsv-1.8.jar:/opt/qradar/jars/openid4java-0.9.8.jar:/opt/qradar/jars/openjpa-2.2.2.jar:/opt/qradar/jars/optional-1.5.3.jar:/opt/qradar/jars/orai18n-10.2.0.jar:/opt/qradar/jars/orai18n.jar:/opt/qradar/jars/org.apache.oltu.oauth2.client-1.0.1.jar:/opt/qradar/jars/oscache-2.4.1.jar:/opt/qradar/jars/osgi-3.10.1.jar:/opt/qradar/jars/poi-3.16.jar:/opt/qradar/jars/postgresql-42.0.0.jar:/opt/qradar/jars/proxool-0.8.3.jar:/opt/qradar/jars/q1labs_ale_remote_management.jar:/opt/qradar/jars/q1labs_ariel.jar:/opt/qradar/jars/q1labs_assetprofile.jar:/opt/qradar/jars/q1labs_configservices_common.jar:/opt/qradar/jars/q1labs_configservices_proper.jar:/opt/qradar/jars/q1labs_console.jar:/opt/qradar/jars/q1labs_core.jar:/opt/qradar/jars/q1labs_core_vis_snmp.jar:/opt/qradar/jars/q1labs_cve.jar:/opt/qradar/jars/q1labs_dal.jar:/opt/qradar/jars/q1labs_data_ingestion.jar:/opt/qradar/jars/q1labs_eula.jar:/opt/qradar/jars/q1labs_forensics.jar:/opt/qradar/jars/q1labs_frameworks.jar:/opt/qradar/jars/q1labs_hc.jar:/opt/qradar/jars/q1labs_hostcontext.jar:/opt/qradar/jars/q1labs_jstl.jar:/opt/qradar/jars/q1labs_masterdaemon.jar:/opt/qradar/jars/q1labs_oemmerger.jar:/opt/qradar/jars/q1labs_qinfo.jar:/opt/qradar/jars/q1labs_qradarapi_common.jar:/opt/qradar/jars/q1labs_qradarapi_v100.jar:/opt/qradar/jars/q1labs_qradarapi_v101.jar:/opt/qradar/jars/q1labs_qrmreporting.jar:/opt/qradar/jars/q1labs_qvmadaptor.jar:/opt/qradar/jars/q1labs_qvmappscan.jar:/opt/qradar/jars/q1labs_qvmassetupdates.jar:/opt/qradar/jars/q1labs_qvmiemclient.jar:/opt/qradar/jars/q1labs_qvmvaultservice.jar:/opt/qradar/jars/q1labs_qvmworkflow.jar:/opt/qradar/jars/q1labs_reporting.jar:/opt/qradar/jars/q1labs_restapi_qradar_plugins.jar:/opt/qradar/jars/q1labs_sem_device_extensions.jar:/opt/qradar/jars/q1labs_sem_device_statistics.jar:/opt/qradar/jars/q1labs_sem_dsm.jar:/opt/qradar/jars/q1labs_sem.jar:/opt/qradar/jars/q1labs_semsources.jar:/opt/qradar/jars/q1labs_semsources_protocol_arielrestapi.jar:/opt/qradar/jars/q1labs_semsources_protocol_arielrestapi_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_base.jar:/opt/qradar/jars/q1labs_semsources_protocol_common.jar:/opt/qradar/jars/q1labs_semsources_protocol_hptandem.jar:/opt/qradar/jars/q1labs_semsources_protocol_ibmsimjdbc.jar:/opt/qradar/jars/q1labs_semsources_protocol_ibmsimjdbc_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_JDBC.jar:/opt/qradar/jars/q1labs_semsources_protocol_JdbcSophos.jar:/opt/qradar/jars/q1labs_semsources_protocol_JdbcSophos_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_JDBC_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_LEA.jar:/opt/qradar/jars/q1labs_semsources_protocol_LEA_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_logfileprotocol.jar:/opt/qradar/jars/q1labs_semsources_protocol_logfileprotocol_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_SiteProtector_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_syslogredirect.jar:/opt/qradar/jars/q1labs_semsources_protocol_syslogredirect_ui.jar:/opt/qradar/jars/q1labs_semsources_protocol_tcpsyslog.jar:/opt/qradar/jars/q1labs_simulator_api.jar:/opt/qradar/jars/q1labs_simulator.jar:/opt/qradar/jars/q1labs_srmconsole_api.jar:/opt/qradar/jars/q1labs_srmconsole_util.jar:/opt/qradar/jars/q1labs_uiframeworks.jar:/opt/qradar/jars/q1labs_utils_qidmap_importer.jar:/opt/qradar/jars/q1labs_vis.jar:/opt/qradar/jars/q1labs_vis_osvdb.jar:/opt/qradar/jars/q1labs_vis_qvdb_importer.jar:/opt/qradar/jars/quartz-all-2.0.2.jar:/opt/qradar/jars/radclient3-3.34f.jar:/opt/qradar/jars/relaxngDatatype-1.0.2.jar:/opt/qradar/jars/restapi_annotations.jar:/opt/qradar/jars/restapi_framework.jar:/opt/qradar/jars/rhino-1.7.7.jar:/opt/qradar/jars/rome-1.0.jar:/opt/qradar/jars/saaj-api-1.2.jar:/opt/qradar/jars/sca.jar:/opt/qradar/jars/security_model.jar:/opt/qradar/jars/serializer-2.7.2.jar:/opt/qradar/jars/serp-1.15.1.jar:/opt/qradar/jars/servlet-api.jar:/opt/qradar/jars/servlets-cgi-6.0.35.jar:/opt/qradar/jars/si-ha-2.1.16.jar:/opt/qradar/jars/slf4j-api-1.7.6.jar:/opt/qradar/jars/slf4j-log4j12-1.6.1.jar:/opt/qradar/jars/slf4j-simple-1.7.6.jar:/opt/qradar/jars/smtp-1.3.2.jar:/opt/qradar/jars/snappy-java-1.1.1.6.jar:/opt/qradar/jars/snmp4j-2.3.1.jar:/opt/qradar/jars/spring-aop-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-aspects-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-beans-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-context-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-context-support-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-core-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-expression-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-jdbc-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-tx-3.2.18.RELEASE.jar:/opt/qradar/jars/spring-web-3.2.18.RELEASE.jar:/opt/qradar/jars/sqlitejdbc-0.5.4.jar:/opt/qradar/jars/standard-1.1.2.jar:/opt/qradar/jars/struts-1.1.jar:/opt/qradar/jars/struts-legacy-1.1.jar:/opt/qradar/jars/swt-3.125.jar:/opt/qradar/jars/swt-win32-native-3.125.jar:/opt/qradar/jars/tacclient-1.12.jar:/opt/qradar/jars/tar-2.3.jar:/opt/qradar/jars/tar.jar:/opt/qradar/jars/tomcat-coyote.jar:/opt/qradar/jars/trove-2.0.3.jar:/opt/qradar/jars/trove-3.0.3.jar:/opt/qradar/jars/uri-template-0.9.jar:/opt/qradar/jars/velocity-1.7.jar:/opt/qradar/jars/vt-ldap-3.3.6.jar:/opt/qradar/jars/wsdl4j-1.6.2.jar:/opt/qradar/jars/xalan-2.7.2.jar:/opt/qradar/jars/xbean-asm5-shaded-3.17.jar:/opt/qradar/jars/xercesImpl-2.11.0.jar:/opt/qradar/jars/xml-apis-1.4.01.jar:/opt/qradar/jars/xml-apis-ext-1.4.01.jar:/opt/qradar/jars/xmlgraphics-commons-2.2.jar:/opt/qradar/jars/xsdlib-1.0.2.jar:/opt/qradar/jars/xstream-1.4.9.jar -Xcompressedrefs -Xgcpolicy:gencon -XXgc:stdSplitFreeListSplitAmount=1 -Xloaminimum0.05 -Xgc:scvNoAdaptiveTenure,scvTenureAge=2 -XX:MaxDirectMemorySize=612M -Xgcthreads2 -Xmx3005m -Xms3005m -Dapplication.name=masterdaemon -Dapp_id=masterdaemon -Djava.library.path=/opt/qradar/lib -Dapplication.baseURL=file:///opt/qradar/conf/ -DdsmPluginsDir=/opt/qradar/jars/plugins -Djava.io.tmpdir=/store/tmp -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Dcom.ibm.tools.attach.enable=no -Xdump:none -Xdump:nofailover -Xdump:tool:events=user,request=prepwalk+exclusive+compact,exec=/opt/qradar/bin/captureSysDump.sh %pid /store/jheap/masterdaemon.masterdaemon.system.dmp,opts=ASYNC,range=1..0,priority=400 -Xdump:console:events=user,range=1..0,priority=999 -Xdump:system:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/masterdaemon.masterdaemon/masterdaemon.masterdaemon.system.dmp,range=1..1,priority=999,request=exclusive+prepwalk+compact -Xdump:java:events=throw+systhrow,filter=java/lang/OutOfMemoryError,file=/store/jheap/masterdaemon.masterdaemon/masterdaemon.masterdaemon.javacore.dmp,range=1..1,priority=400,request=exclusive+prepwalk+compact -Dsun.rmi.dgc.client.gcInterval=9223372036854775807 -Xnocompactexplicitgc -Dcom.q1labs.frameworks.jmx.port=7700 -server com.ibm.masterdaemon.MasterDaemon /usr/eventgnosis/ecs
root      61756  0.0  0.2 633592 15576 ?        Ssl  21:02   0:00 /opt/qradar/bin/qflow -p -r60 -c /opt/qradar/conf/nva.qflow.qflow0.conf -ndefault_Netflow -t3 -w55
root      62454  0.0  0.0 115312  1264 ?        Ss   21:02   0:00 /bin/sh /opt/qradar/systemd/bin/scaserver_start.sh
root      62457  0.0  0.0 115312   444 ?        S    21:02   0:00  \_ /bin/sh /opt/qradar/systemd/bin/scaserver_start.sh
root      62458  0.0  0.0 115316  1332 ?        S    21:02   0:00      \_ /bin/bash ./startserver.sh
root      62477  0.9  6.2 760808 382048 ?       Sl   21:02   0:01          \_ ./ScaThriftServer
root      75764  0.0  0.0 108060   876 ?        S    21:06   0:00 sar -S -d -p -r -u -q -I SUM -n DEV -n EDEV 5 1
root      75768  0.0  0.0 113236  1000 ?        S    21:06   0:00  \_ sadc 5 2 -z -S 768
root      75765  0.0  0.0 112736   988 ?        S    21:06   0:00 grep -v drbd
root      75766  0.0  0.0 108020   884 ?        S    21:06   0:00 iostat -dmx -y -N 5 1