diff --git a/filter-user.conf b/filter-user.conf
index b9aa27f..7066de4 100644
--- a/filter-user.conf
+++ b/filter-user.conf
@@ -3,7 +3,7 @@ filter {
     grok {
       match => ["message","new user: name=%{DATA:[user][name]}, UID=%{NUMBER:[user][id]}, GID=%{NUMBER:[group][id]}, home=%{DATA:[useradd][home]}, shell=%{DATA:[useradd][shell]}$"]
       id => "useradd"
-      tag_on_failure => ["_grokparsefaillure","useradd_grok_failed"]
+      tag_on_failure => ["_grokparsefailure","useradd_grok_failed"]
       add_field => {
           "[user][eventtype]" => "add_new_user"
         }