diff --git a/config/filter.d/bitwarden.conf b/config/filter.d/bitwarden.conf index 1c49fdc4..6a9e87e6 100644 --- a/config/filter.d/bitwarden.conf +++ b/config/filter.d/bitwarden.conf @@ -2,8 +2,5 @@ # Detecting failed login attempts # Logged in bwdata/logs/identity/Identity/log.txt -[Init] -datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S - [Definition] -failregex = ^.*Failed login attempt(, 2FA invalid)?\. $ +failregex = ^\s*\[\w+\]\s+Failed login attempt(?:, 2FA invalid)?\. $