diff --git a/config/filter.d/bitwarden.conf b/config/filter.d/bitwarden.conf
index 4cebcedf9..1c49fdc42 100644
--- a/config/filter.d/bitwarden.conf
+++ b/config/filter.d/bitwarden.conf
@@ -6,4 +6,4 @@
 datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S
 
 [Definition]
-failregex = ^.*Failed login attempt(, 2FA invalid)\. <HOST>$
+failregex = ^.*Failed login attempt(, 2FA invalid)?\. <HOST>$