diff --git a/rules/os/os_firewall_log_enable.yaml b/rules/os/os_firewall_log_enable.yaml
index 7d6732a9..46e763e6 100644
--- a/rules/os/os_firewall_log_enable.yaml
+++ b/rules/os/os_firewall_log_enable.yaml
@@ -7,7 +7,7 @@ discussion: |
 
   NOTE: The firewall data is logged to Apple's Unified Logging with the subsystem `com.apple.alf` and the data is marked as private. In order to enable private data, review the `com.apple.alf.private_data.mobileconfig` file in the project's `includes` folder. 
 check: |
-  /usr/bin/profiles -P -o stdout | /usr/bin/grep -c grep -Ec '(EnableLogging = 1|LoggingOption = detail)'
+  /usr/bin/profiles -P -o stdout | /usr/bin/grep -Ec '(EnableLogging = 1|LoggingOption = detail)'
 result:
   integer: 1
 fix: |