our @field = qw(day_name month day current_time  year  transfer_time
       remote_host     file_size filename   transfer_type   special_action_flag    
       direction access_mode username   service_name    authentication_method  
       authenticated_user_id completion_status);
    my %field;
    @field{@field} = split /\s+/, $line;