diff --git a/ghec-audit-log-utils.js b/ghec-audit-log-utils.js
index 03998b5..dfa45ea 100644
--- a/ghec-audit-log-utils.js
+++ b/ghec-audit-log-utils.js
@@ -17,13 +17,14 @@ function validateInput (program, config) {
 
   // Validate correctness
   const tokenRegex = /^[g(p|o|u|s|r)1_]{0,1}[A-Za-z0-9_]+$/
+  const cursorRegex = /^[a-zA-Z0-9]{3,5}_[a-zA-Z0-9]+$/
   const base64Regex = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/
   const orgRegex = /^[a-z\d]+(?:-?[a-z\d]+)*$/i
   const constraints = {
     cursor: {
       type: 'string',
       presence: false,
-      format: base64Regex
+      format: cursorRegex
     },
     pretty: {
       type: 'boolean',