diff --git a/security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py b/security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py
index 0f327b533..d9e7cbd34 100644
--- a/security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py
+++ b/security/q-feeds-connector/src/opnsense/scripts/qfeeds/lib/log.py
@@ -50,6 +50,11 @@ class PFLogCrawler:
             for table in self._table_names:
                 if line.find("<%s>" % table) > 0:
                     self._rule_ids.add(line.split()[-1].strip('"'))
+                    if 'label "' in line:
+                        quote_start = line.find('"', line.find('label "'))
+                        quote_end = line.find('"', quote_start + 1)
+                        if quote_end > quote_start:
+                            self._rule_ids.add(line[quote_start + 1:quote_end])
 
     @staticmethod
     def _parse_log_line(line):
@@ -73,4 +78,4 @@ class PFLogCrawler:
                     if (idx % 100000 == 0 and time.time() - start_time > max_time) or rows_processed >= max_results:
                         return result
 
-        return result
+        return result
\ No newline at end of file