Online PHP editor | output for idlRs

@ 2020-07-01T06:16:11Z

<?php

$json = <<<_JSON
{
    "result": {
        "_raw": "Jun 30 06:51:04 blablabla.com apache2: event_id=\"something\" event=\"something\" app=\"testapp\" serial_number=\"066f1cda\" revoke_reason=\"key compromise\" revoke_comment=\"xxxxxx\" delay_revoke=\"15\" url=\"/blablabla.php\" account_id=\"123456\" user_id=\"xxxxxxx\" staff_id=\"xxxx\" staff_name=\"todd\" ip_address=\"123.123.123.123\"",
        "splunk_server": "splunkin02.localhost.com"
    }
}
_JSON;

$raw = json_decode($json)->result->_raw;

$marker = 'apache2: ';
$startAt = strpos($raw, $marker) + strlen($marker);

preg_match_all('/(\w+)="(.*?)"/', $raw, $matches, PREG_PATTERN_ORDER, $startAt);

$result = array_combine($matches[1], $matches[2]);

print_r($result);

Output for 7.2.0 - 7.2.34, 7.3.0 - 7.3.33, 7.4.0 - 7.4.33, 8.0.0 - 8.0.30, 8.1.0 - 8.1.33, 8.2.0 - 8.2.29, 8.3.0 - 8.3.28, 8.4.1 - 8.4.14, 8.5.0: Array ( [event_id] => something [event] => something [app] => testapp [serial_number] => 066f1cda [revoke_reason] => key compromise [revoke_comment] => xxxxxx [delay_revoke] => 15 [url] => /blablabla.php [account_id] => 123456 [user_id] => xxxxxxx [staff_id] => xxxx [staff_name] => todd [ip_address] => 123.123.123.123 )
Output for 8.4.15: /bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libm.so.6: version `GLIBC_2.35' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.34' not found (required by /bin/php-8.4.15) /bin/php-8.4.15: /usr/lib/libc.so.6: version `GLIBC_2.38' not found (required by /bin/php-8.4.15)
Process exited with code 1.

preferences:dark modelive previewkey bindings