diff --git a/backend/src/main/resources/config/liquibase/changelog/20260831001_update_login_failed_menu_event_code.xml b/backend/src/main/resources/config/liquibase/changelog/20260831001_update_login_failed_menu_event_code.xml
new file mode 100644
index 000000000..10073f379
--- /dev/null
+++ b/backend/src/main/resources/config/liquibase/changelog/20260831001_update_login_failed_menu_event_code.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<databaseChangeLog
+    xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.5.xsd">
+
+    <changeSet id="20260831001" author="ALEX">
+        <comment>Update Log Explorer 'Login Failed' menu URL to filter by log.eventCode instead of logx.wineventlog.event_id</comment>
+
+        <update tableName="utm_menu">
+            <column name="url" value="discover/log-analyzer?patternId=8&amp;indexPattern=log-wineventlog-*&amp;log.eventCode=IS-&gt;4625"/>
+            <where>id = 205 AND name = 'Login Failed' AND url = 'discover/log-analyzer?patternId=8&amp;indexPattern=log-wineventlog-*&amp;logx.wineventlog.event_id=IS-&gt;4625'
+            </where>
+        </update>
+
+        <rollback>
+            <update tableName="utm_menu">
+                <column name="url" value="discover/log-analyzer?patternId=8&amp;indexPattern=log-wineventlog-*&amp;logx.wineventlog.event_id=IS-&gt;4625"/>
+                <where>id = 205 AND name = 'Login Failed'</where>
+            </update>
+        </rollback>
+    </changeSet>
+
+</databaseChangeLog>
diff --git a/backend/src/main/resources/config/liquibase/master.xml b/backend/src/main/resources/config/liquibase/master.xml
index fac5aa1b9..506b2b9f4 100644
--- a/backend/src/main/resources/config/liquibase/master.xml
+++ b/backend/src/main/resources/config/liquibase/master.xml
@@ -602,5 +602,7 @@
   <include file="/config/liquibase/changelog/20260615001_fix_response_action_template_syntax.xml" relativeToChangelogFile="false"/>
 
   <include file="/config/liquibase/changelog/20260623001_migrate_compliance_report_config_to_control_config.xml" relativeToChangelogFile="false"/>
-
+    
+  <include file="/config/liquibase/changelog/20260831001_update_login_failed_menu_event_code.xml" relativeToChangelogFile="false"/>
+    
 </databaseChangeLog>