diff --git a/config/patterns/mysql b/config/patterns/mysql
index ab33fd8b5..141a0c04c 100644
--- a/config/patterns/mysql
+++ b/config/patterns/mysql
@@ -1 +1 @@
-MYSQL_AUTH_FAIL %{TIMESTAMP_ISO8601:time} %{NUMBER} \[Note\] Access denied for user '%{DATA:user}'@'%{IP:source_ip}' \(using password: YES\)
+MYSQL_AUTH_FAIL %{TIMESTAMP_ISO8601:time} %{NUMBER} \[Note\] Access denied for user '%{DATA:user}'@'%{IP:source_ip}' \(using password: %{WORD:using_password}\)