●
Connected — streaming live events
| Timestamp ▼ | User | Cmd | Args | Exit | Session |
|---|---|---|---|---|---|
| 2026-05-13 10:45:55 | jon | ps | /usr/bin/ps -ao ppid,args | 0 | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /usr/sbin/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /usr/local/bin/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /usr/local/sbin/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /home/jon/scripts/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /snap/mise/111/bin/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /home/jon/.local/share/mise/installs/opencode/1.14.41/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /home/jon/.local/share/mise/installs/gh/2.92.0/gh_2.92.0_linux_amd64/bin/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:45:55 | jon | ps | /home/jon/.local/share/mise/installs/bat/0.26.1/bat-v0.26.1-x86_64-unknown-linux-musl/ps -ao ppid,args | — | ox_v2njk1d… |
| 2026-05-13 10:44:55 | jon | ps | /usr/bin/ps -ao ppid,args | 0 | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /usr/sbin/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /usr/local/bin/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /usr/local/sbin/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /home/jon/scripts/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /snap/mise/111/bin/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /home/jon/.local/share/mise/installs/opencode/1.14.41/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /home/jon/.local/share/mise/installs/gh/2.92.0/gh_2.92.0_linux_amd64/bin/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:44:55 | jon | ps | /home/jon/.local/share/mise/installs/bat/0.26.1/bat-v0.26.1-x86_64-unknown-linux-musl/ps -ao ppid,args | — | ox_wdr0ha1… |
| 2026-05-13 10:43:55 | jon | ps | /usr/bin/ps -ao ppid,args | 0 | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /usr/sbin/ps -ao ppid,args | — | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /usr/local/bin/ps -ao ppid,args | — | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /usr/local/sbin/ps -ao ppid,args | — | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /home/jon/scripts/ps -ao ppid,args | — | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /snap/mise/111/bin/ps -ao ppid,args | — | ox_m6lhqe2… |
| 2026-05-13 10:43:55 | jon | ps | /home/jon/.local/share/mise/installs/opencode/1.14.41/ps -ao ppid,args | — | ox_m6lhqe2… |
Loading more…
Filter Syntax
Keywords
| Keyword | Description | Type | Example |
|---|---|---|---|
| pid: | Process ID | number | pid:1234 |
| ppid: | Parent process ID | number | ppid:1 |
| user: | Username or UID | text | user:root |
| comm: | Kernel task name (supports * and ? globs) | glob | comm:bash |
| cmd: | Command name from path (supports * and ? globs) | glob | cmd:git |
| exit: | Exit code | number | exit:0 |
| session: | Session ID (prefix match) | text | session:ox_abc |
| gid: | Group ID | number | gid:1000 |
| euid: | Effective user ID | number | euid:0 |
| tty: | TTY number (0 = no PTY) | number | tty:34816 |
| file: | Executable path (supports * and ? globs) | glob | file:/usr/bin/* |
Syntax
keyword:value — filter by exact match or pattern
!keyword:value — negate (exclude matches)
* ? — glob wildcards for cmd:, comm: and file:
a|b — OR alternatives for cmd:, comm: and file:
bare words — search across command, filename, and arguments
Examples
user:root comm:bash — bash commands run by root
!exit:0 — commands with non-zero exit
file:/usr/bin/* ppid:1 — /usr/bin commands spawned by init
!cmd:git|ps — exclude git and ps commands