diff --git a/files/filter.d/nextcloud.conf b/files/filter.d/nextcloud.conf
new file mode 100644
index 0000000..c0d8906
--- /dev/null
+++ b/files/filter.d/nextcloud.conf
@@ -0,0 +1,3 @@
+[Definition]
+failregex=^{.*Login failed: .* \(Remote IP: <HOST>\).*}$
+ignoreregex =
\ No newline at end of file