diff --git a/terraform/crowdsec.tf b/terraform/crowdsec.tf
index b052b25..f84ab48 100644
--- a/terraform/crowdsec.tf
+++ b/terraform/crowdsec.tf
@@ -163,9 +163,10 @@ resource "helm_release" "crowdsec" {
         # Monitor NGINX Ingress Controller logs and SSH logs
         acquisition = [
           {
-            namespace = "ingress-nginx"
-            podName   = "ingress-nginx-controller-*"
-            program   = "nginx"
+            namespace              = "ingress-nginx"
+            podName                = "ingress-nginx-controller-*"
+            program                = "nginx"
+            poll_without_inotify   = true  # Container logs are symlinks, need polling
           }
         ]