next unless my ($date,$time, $device, $err) = /(\w+ \d+) ([\d:]+)\s(\S+).+\[[^\]]+\]([^\(]+)/; #### DEVICE --> esw110tf222 ============== DATE --> Oct 17 TIME --> 10:35:35 ERROR --> system-alert-000008:IP Spoofing! From 255.255.255.255 to 0.0.0.0, proto 1 The above error occurred 2 times