diff --git a/config/filter.d/murmur.conf b/config/filter.d/murmur.conf
index efdaf8b5..208c97c0 100644
--- a/config/filter.d/murmur.conf
+++ b/config/filter.d/murmur.conf
@@ -15,17 +15,14 @@ _usernameregex = [^>]+
 __prefix_journal = (?:\S+\s+%(_daemon)s\[\d+\]:(?:\s+\<W\>[\d\-]+ [\d:]+.\d+)?)
 
 __prefix_line = %(__prefix_journal)s?
+																										 
+maxlines = 2																																							  
 
-_prefix = %(__prefix_line)s\s+\d+ => <\d+:%(_usernameregex)s\(-1\)> Rejected connection from <HOST>:\d+:
+failregex = ^\s*\d+ => <.*> Rejected connection from <HOST>:\d+: Invalid server password$
+            ^\s*\d+ => <.*> Rejected connection from <HOST>:\d+: Wrong certificate or password for existing user$
+            ^\s*\d+ => <.*> New connection: <HOST>:\d+\s+^\s*\d+ => <.*> Connection closed: Error during SSL handshake: error:.*:wrong version number \[\d+\]$ignoreregex =
 
-prefregex = ^%(_prefix)s <F-CONTENT>.+</F-CONTENT>$
-
-failregex = ^Invalid server password$
-            ^Wrong certificate or password for existing user$
-
-ignoreregex =
-
-datepattern = ^<W>{DATE}
+datepattern = ^<\w>%%Y-%%m-%%d %%H:%%M:%%S\.%%f
 
 journalmatch = _SYSTEMD_UNIT=murmurd.service + _COMM=murmurd