#!/usr/local/bin/perl
use strict; 

my $filter = q{user ([^\s]+) has ([^\n\r]+)$};

my $log_string = "user bob has logged on";
      

$log_string =~  s/$filter/user $1 has accessed the system and is $2/; 

print qq{LINE: [$log_string]\n};