Extracting specific information from an HTTP POST and logging it.

You can try this:

set user [ URI::query ?[HTTP::payload] user ]

URI::query search the query string in a URI (starting with ?), then search the parameter user and return the value.

As standard POST content format is the same as a query string, add a ? before payload to use URI::query command...