,Security,641,Sat Apr 05 15:42:56 2008,592,Security,User,User,Success Audit,CODENAME,,A new process has been created: <\0x09>New Process ID:<\0x09>3296 <\0x09>Image File Name:<\0x09>C:\Program Files\Internet Explorer\IEXPLORE.EXE <\0x09>Creator Process ID:<\0x09>252 <\0x09>User Name:<\0x09>User <\0x09>Domain:<\0x09><\0x09>CODENAME <\0x09>Logon ID:<\0x09><\0x09>(0x0 0x14A8A) <\0x0A>
ตัดเเล้วโชว์เป็น
Security,Sat Apr 05 15:42:56 2008,Security,User,User,Success Audit,CODENAME,,A new process has been created,New Process ID:Image File Name: C:\Program Files\Internet Explorer\IEXPLORE.EXE Creator Process ID: User Name: User Domain: CODENAME Logon ID
$data[0] = ,Security,641,Sat Apr 05 15:42:56 2008,592,Security,User,User,Success Audit,CODENAME,,A new process has been created:
$data[1] = New Process ID
$data[2] = 3296
$data[3] =Image File Name: