if (($mday1 eq $mday)&($mon eq $mon1)&($year eq $year1)) {
                Win32::EventLog::GetMessageText($hashRef);
                print "Entry $x: $mday $mon $year $hashRef->{Message}\n";
                $Message = $hashRef->{Message};
                $Message1 = $Message;
                if ($Message1 =~ /owned by /g) {
                     print "xx", pos $Message1, " \n";
                }
                if ($Message =~ / (?=owned by )/g) {
                     print "xy", pos $Message, " \n";
                }
            }