From 0351ef4ff59c01eebf0b50575a0101b56a444d1c Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Thu, 15 Sep 2022 10:48:08 -0400
Subject: [PATCH] Fix Suricata analyzers list

---
 salt/suricata/defaults.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/salt/suricata/defaults.yaml b/salt/suricata/defaults.yaml
index 0ae541ffd..cf7db31af 100644
--- a/salt/suricata/defaults.yaml
+++ b/salt/suricata/defaults.yaml
@@ -245,6 +245,14 @@ suricata:
           enabled: "yes"
         sip:
           enabled: "yes"
+        rfb:
+          enabled: 'yes'
+          detection-ports:
+            dp: 5900, 5901, 5902, 5903, 5904, 5905, 5906, 5907, 5908, 5909
+        mqtt:
+          enabled: 'no'
+        http2:
+          enabled: 'no'
     asn1-max-frames: 256
     run-as:
       user: suricata