diff --git a/config/filter.d/bitwarden.conf b/config/filter.d/bitwarden.conf
index 6a9e87e6..29bd4be8 100644
--- a/config/filter.d/bitwarden.conf
+++ b/config/filter.d/bitwarden.conf
@@ -3,4 +3,4 @@
 # Logged in bwdata/logs/identity/Identity/log.txt
 
 [Definition]
-failregex = ^\s*\[\w+\]\s+Failed login attempt(?:, 2FA invalid)?\. <HOST>$
+failregex = ^\s*\[WRN\]\s+Failed login attempt(?:, 2FA invalid)?\. <HOST>$