diff --git a/config/filter.d/apache-auth.conf b/config/filter.d/apache-auth.conf
index e22a49b7..d9a6fa5e 100644
--- a/config/filter.d/apache-auth.conf
+++ b/config/filter.d/apache-auth.conf
@@ -14,10 +14,8 @@ prefregex = ^%(_apache_error_client)s (?:AH\d+: )?<F-CONTENT>.+</F-CONTENT>$
 # auth_type = ((?:Digest|Basic): )?
 auth_type = ([A-Z]\w+: )?
 
-failregex = ^client denied by server configuration\b
-            ^user <F-USER>(?:\S*|.*?)</F-USER> auth(?:oriz|entic)ation failure\b
-            ^user <F-USER>(?:\S*|.*?)</F-USER> not found\b
-            ^client used wrong authentication scheme\b
+failregex = ^client (?:denied by server configuration|used wrong authentication scheme)\b
+            ^user <F-USER>(?:\S*|.*?)</F-USER> (?:auth(?:oriz|entic)ation failure|not found|denied by provider)\b
             ^Authorization of user <F-USER>(?:\S*|.*?)</F-USER> to access .*? failed\b
             ^%(auth_type)suser <F-USER>(?:\S*|.*?)</F-USER>: password mismatch\b
             ^%(auth_type)suser `<F-USER>(?:[^']*|.*?)</F-USER>' in realm `.+' (not found|denied by provider)\b