diff --git a/src/opnsense/service/templates/OPNsense/Syslog/local/portalauth.conf b/src/opnsense/service/templates/OPNsense/Syslog/local/portalauth.conf
index 4ebde909a..50d613f09 100644
--- a/src/opnsense/service/templates/OPNsense/Syslog/local/portalauth.conf
+++ b/src/opnsense/service/templates/OPNsense/Syslog/local/portalauth.conf
@@ -2,5 +2,5 @@
 # Local syslog-ng configuration filter definition [portalauth].
 ###################################################################
 filter f_local_portalauth {
-    facility(local4) or program("captiveportal");
+    program("captiveportal");
 };