diff --git a/dev/flux-kustomization.yaml b/dev/flux-kustomization.yaml
index 2338d0c..03c6e1e 100644
--- a/dev/flux-kustomization.yaml
+++ b/dev/flux-kustomization.yaml
@@ -24,7 +24,9 @@ spec:
       BACKEND_AUDIENCE: '["classic-models-api"]'
       BACKEND_SCOPES: '[]'
       API_RATE_LIMIT_MINUTE: "60"
-      AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/logs
+      # The URI path is the collector's routing key: Fluent Bit tags the
+      # record `workforce` and turns that into the Loki label domain=workforce.
+      AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/workforce
       REST_HOSTNAME: workforce-dev.sttlab.local
       TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker
     substituteFrom: