Getting user id from logstash

[frh (Farah)]

Hi,

I've been trying to get this output in kibana by modifying my logstash, but to no avail. I'm not sure what went wrong.

Input: User 'xxxxxx' logged in with concurrent ALM
My logstash looks something like this: match => {"therest" => "^(?:User %{QUOTEDSTRING:test} logged in with concurrent ALM)$"}

"therest" is a custom field that values are taken from.
I've been modifying here and there but the field of "test" didn't come up in Kibana.

[frh (Farah)]

This topic can be closed. I was able to figure it out using below:

User \'%{DATA:userid}\' logged in with concurrent ALM