diff --git a/dist/rules/host-and-hardware/node-exporter.yml b/dist/rules/host-and-hardware/node-exporter.yml
index 333e530..3c14291 100644
--- a/dist/rules/host-and-hardware/node-exporter.yml
+++ b/dist/rules/host-and-hardware/node-exporter.yml
@@ -158,7 +158,7 @@ groups:
         description: "CPU iowait > 5%. A high iowait means that you are disk or network bound.\n  VALUE = {{ $value }}\n  LABELS = {{ $labels }}"
 
     - alert: HostUnusualDiskIO
-      expr: 'node_disk_io_time_seconds_total == 1'
+      expr: 'rate(node_disk_io_time_seconds_total[1m]) > 0.5'
       for: 5m
       labels:
         severity: warning