In the documentation for the page_log the order of the fields is given as: "Printer-name user-id job-id ..." looking at the page_log I found it to be: "Printer-name job-id user-id ..."