my ($user, $token, $login) = split(/\s(\d{11})\s/, $line, 2); (my $username = $user) =~ s/\s(\w+)$//; # untested construct print "$username, claiming to be $user logged on with token $token, at $login.\n";