Online PHP editor | output for idlRs

<?php $json = <<<_JSON { "result": { "_raw": "Jun 30 06:51:04 blablabla.com apache2: event_id=\"something\" event=\"something\" app=\"testapp\" serial_number=\"066f1cda\" revoke_reason=\"key compromise\" revoke_comment=\"xxxxxx\" delay_revoke=\"15\" url=\"/blablabla.php\" account_id=\"123456\" user_id=\"xxxxxxx\" staff_id=\"xxxx\" staff_name=\"todd\" ip_address=\"123.123.123.123\"", "splunk_server": "splunkin02.localhost.com" } } _JSON; $raw = json_decode($json)->result->_raw; $marker = 'apache2: '; $startAt = strpos($raw, $marker) + strlen($marker); preg_match_all('/(\w+)="(.*?)"/', $raw, $matches, PREG_PATTERN_ORDER, $startAt); $result = array_combine($matches[1], $matches[2]); print_r($result);