diff --git a/config/filter.d/nginx-bad-request.conf b/config/filter.d/nginx-bad-request.conf
index ea26d56a..03721f86 100644
--- a/config/filter.d/nginx-bad-request.conf
+++ b/config/filter.d/nginx-bad-request.conf
@@ -4,7 +4,7 @@
 [Definition]
 
 # The request often doesn't contain a method, only some encoded garbage
-failregex = ^<HOST> \- \S+ \[\] \".+\" 400 .+$
+failregex = ^<HOST> \- \S+ \[\] \"[^\"]+\" 400
 
 datepattern = {^LN-BEG}%%ExY(?P<_sep>[-/.])%%m(?P=_sep)%%d[T ]%%H:%%M:%%S(?:[.,]%%f)?(?:\s*%%z)?
               ^[^\[]*\[({DATE})