my (@ipnums) = $whole_event_string =~ /^(\d+)\.(\d+)\.(\d+)\.(\d+)/; #### my ($srcip, $user, $timestamp, $request, $result) = $whole_event_string =~ /^(\d+\.\d+\.\d+\.\d+)\s+\S+\s+(\S+)\s+[[](.*?)[]]\s+\"(.*?)\"\s+(\d+)/;