diff --git a/config/filter.d/webmin-auth.conf b/config/filter.d/webmin-auth.conf
index fc0b7760..b1df45dc 100644
--- a/config/filter.d/webmin-auth.conf
+++ b/config/filter.d/webmin-auth.conf
@@ -18,8 +18,8 @@
 #          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
 # Values:  TEXT
 #
-failregex = webmin.* Non-existent login as .+ from <HOST>.*$
-            webmin.* Invalid login as .+ from <HOST>.*$
+failregex = webmin.* Non-existent login as .+ from <HOST>\s*$
+            webmin.* Invalid login as .+ from <HOST>\s*$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.