方法：
cpu脚本
ps -eo user,pid,pcpu,pmem,args --sort=-pcpu | head -n5
[root@logstash ~]# ps -eo user,pid,pcpu,pmem,args --sort=-pcpu | head -n5
USER PID %CPU %MEM COMMAND
root 1173 0.3 1.8 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
root 1 0.0 0.1 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root 2 0.0 0.0 [kthreadd]
root 4 0.0 0.0 [kworker/0:0H]
[root@logstash ~]#memory脚本
ps -eo user,pid,pcpu,pmem,args --sort=-pmem | head -n5
[root@logstash ~]# ps -eo user,pid,pcpu,pmem,args --sort=-pmem | head -n5
USER PID %CPU %MEM COMMAND
root 1173 0.3 1.8 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
root 1010 0.0 0.9 /usr/bin/containerd
root 1006 0.0 0.4 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
polkitd 724 0.0 0.2 /usr/lib/polkit-1/polkitd --no-debug
[root@logstash ~]#
