($KEY, $DATE, $TIMESTAMP, $SEV, $LOG_NUM, $RPT, $IP_ADDR, $H1, $H2, $USER, $H3, $H4, $H5, $H6, $H7, $H8, $H9, $H10, $H11, $H12, $H13, $DURATION) = split(/ /, $VAR2);

##</code><code>##

[2] private.enterprises.3076.2.1.4.4.15.22 (OctetString): 65479332 04/07/2004 04:15:21.980 SEV=4 AUTH/22 RPT=8622

User silk01 connected 

##</code><code>##

[2] private.enterprises.3076.2.1.4.4.15.22 (OctetString): 1064993 04/12/2004 01:02:31.890 SEV=4 AUTH/22 RPT=362

User [schk01] Group [cisco3015] connected, Session Type: IPSec