push @{$control_hash{$user}},
    "$ent_date\t$message\t$firewall\t$service";