diff --git a/_data/rules.yml b/_data/rules.yml
index 0e501be..a670106 100644
--- a/_data/rules.yml
+++ b/_data/rules.yml
@@ -129,7 +129,7 @@ services:
             severity: error
           - name: Cluster down
             description: Less than 3 nodes running in RabbitMQ cluster
-            query: 'rabbitmq_running < 3'
+            query: 'sum(rabbitmq_running) < 3'
             severity: error
           - name: Cluster partition
             description: Cluster partition