diff --git a/config/enrichments/06_url.conf b/config/enrichments/06_url.conf
index c26ea9a5..14d0ba79 100644
--- a/config/enrichments/06_url.conf
+++ b/config/enrichments/06_url.conf
@@ -31,7 +31,7 @@ filter {
           lowercase => [ "[url][full]" ]
         }
         grok {
-          match => {"[url][full]" => "^((?<[tmp][url][scheme]>.*?)://)?((?<[tmp][user][name]>.*?):(?<[tmp][user][password]>.*?)@)?(?<[tmp][url][domain]>\w+((\.\w+){1,})|\d+\.\d+\.\d+\.\d+)(:(?<[tmp][url][port]>\d+))?(/|$)((?<[tmp][url][path]>.*?))?(\?(?<[tmp][url][query]>.*?))?(\#(?<[tmp][url][fragment]>.*?))?$" }
+          match => {"[url][full]" => "^((?<[tmp][url][scheme]>.*?)://)?((?<[tmp][user][name]>.*?):(?<[tmp][user][password]>.*?)@)?(?<[tmp][url][domain]>[\w\-\_\.]+)(:(?<[tmp][url][port]>\d+))?(/|$)((?<[tmp][url][path]>.*?))?(\?(?<[tmp][url][query]>.*?))?(\#(?<[tmp][url][fragment]>.*?))?$" }
           timeout_millis => 500
           tag_on_failure => "_groktimeout_url_en_1"
         }