I have the following line which I recieve in Kibana successfully.
Connection ArchivUser: CIFS client [ArchivUser] from [192.168.0.15(IP:192.168.0.15)] accessed the shared folder [Archiv Filme].
So: "Connection" I want to add in a new field called: "Synology_Verb_Typ". "ArchivUser" is the Username and so this should be in a field called: Username or User.
I'm still new to the whole elasticsearch stack. So my question how can I now parse this log line? Can someone give an example only for the two fields, then it should be possible for me to get the whole line done.