Searching for Syslog Message Pattern

I have all the devices sending the commands logged on to any device to NCM and it sends me an Email notification for every command entered. However, when I log in to ASDM, I get 35 Emails, and I am trying to stop them. Example of message is : User 'Kelly' executed the 'enable' command.

Now User Kelly only uses ASDM, so I would like to set a rule in Syslog Viewer to Discard all the messages which Contains the words "User 'Kelly'" so I dont get 35 emails everytime she logs in, but the issue is NCM message pattern doesn't searches for anything when I put in user 'Kelly' and gives and error for incorrect syntax.

Any thoughts on how to Fix this issue ?

Thanks