diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf
index 573487667005f5b568982291c1b6009b1a101b41..ea16d102ec473fac54103b2c5944f8788eeecf2f 100644
--- a/conf.d/10-pf.conf
+++ b/conf.d/10-pf.conf
@@ -2,8 +2,12 @@
 filter {
   if "pf" in [tags] {
     grok {
-      match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}",
-                 "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ]
+      # OPNsense - Enable/Disable the line below based on firewall platform
+      match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ]
+      # OPNsense
+      # pfSense - Enable/Disable the line below based on firewall platform
+      match => [ "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" ]
+      # pfSense
       add_field => [ "received_at", "%{@timestamp}" ]
       add_field => [ "received_from", "%{host}" ]
     }