diff --git a/kubernetes/main/apps/observability/loki/app/rules/loki-alerting-rules.yaml b/kubernetes/main/apps/observability/loki/app/rules/loki-alerting-rules.yaml
index 80792dfeb7e63..8f4c971bf665b 100644
--- a/kubernetes/main/apps/observability/loki/app/rules/loki-alerting-rules.yaml
+++ b/kubernetes/main/apps/observability/loki/app/rules/loki-alerting-rules.yaml
@@ -95,7 +95,7 @@ groups:
     rules:
       - alert: CrossSeedDatabaseMalformed
         expr: |
-          sum by (container) (count_over_time({app="cross-seed"} |~ "(?i)database disk image is malformed"[1h])) > 0
+          sum by (app) (count_over_time({app="cross-seed"} |~ "(?i)database disk image is malformed"[1h])) > 0
         for: 2m
         labels:
           severity: critical