diff --git a/_data/rules.yml b/_data/rules.yml
index cfe41f8..d4e34c3 100644
--- a/_data/rules.yml
+++ b/_data/rules.yml
@@ -207,7 +207,7 @@ groups:
                 for: 2m
               - name: Host high CPU load
                 description: CPU load is > 80%
-                query: '(avg by (instance) (rate(node_cpu_seconds_total{mode!="idle"}[2m]))) > .80'
+                query: '100 - (avg by (instance) (rate(node_cpu_seconds_total{mode="idle"}[5m]))) > .80'
                 severity: warning
                 for: 10m
               - name: Host CPU is underutilized