diff --git a/conf.d/10-pf.conf b/conf.d/10-pf.conf
index 408827d11c5ad6e22e8512aea941a76ff8cc5be2..85064c1367bc56d9b9a99e6cb9780c5b4c92a33a 100644
--- a/conf.d/10-pf.conf
+++ b/conf.d/10-pf.conf
@@ -7,7 +7,7 @@ filter {
     }
     grok {
         patterns_dir => ["/etc/logstash/conf.d/patterns"]
-  match => [ "message", "%{OPNSENSE}"]
+        match => [ "message", "%{OPNSENSE}"]
     }
     mutate {
       replace => [ "message", "%{msg}" ]