diff --git a/terraform/modules/google-cloud/ops/main.tf b/terraform/modules/google-cloud/ops/main.tf
index 1fdd7fb1e..05d9de403 100644
--- a/terraform/modules/google-cloud/ops/main.tf
+++ b/terraform/modules/google-cloud/ops/main.tf
@@ -317,8 +317,8 @@ resource "google_monitoring_alert_policy" "genservers_crash_policy" {
       filter = <<-EOT
       resource.type="gce_instance"
       (severity>=ERROR OR "Kernel pid terminated" OR "Crash dump is being written")
-      -"invalid ssh key entry - expired key"
       -protoPayload.@type="type.googleapis.com/google.cloud.audit.AuditLog"
+      -logName="projects/firezone-prod/logs/GCEGuestAgent"
       EOT
     }
   }