title: Logstash Grok pattern for UserId
body: <p>I want create userId field with use of grok.
  in log sample you can see [userId: id of user in guid format].
  so what is the pattern need to add in grok for userId ? need some guidence for this.</p>
  <p>here is my log</p>
  <pre><code>2020-10-15 16:01:29.1350 [84680] ERROR FinanceAPI.Controllers.TransactionController 192.168.43.244 Invalid Ledgers [UserId:1dfae3d2-258d-42d4-802e-c39a751574e3]
  </code></pre>
  <p>here is the grok pattern</p>
  <pre><code>grok {
              match =&gt; { &quot;message&quot; =&gt; &quot;%{TIMESTAMP_ISO8601:timestamp} \[%{INT:processId}]\ %{LOGLEVEL:level} %{DATA:logger} %{IPV4:clientIp} %{GREEDYDATA:message} }
              overwrite =&gt; &quot;message&quot;
          }
  </code></pre>