From 51b9af7ac408012f2c97ff7e0c13665529b09f63 Mon Sep 17 00:00:00 2001
From: Josh Brower <josh@defensivedepth.com>
Date: Wed, 25 Mar 2020 09:24:45 -0400
Subject: [PATCH] Suricata - enable community id

---
 salt/suricata/files/suricata.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/suricata/files/suricata.yaml b/salt/suricata/files/suricata.yaml
index 05412fa6c..5a0121b63 100644
--- a/salt/suricata/files/suricata.yaml
+++ b/salt/suricata/files/suricata.yaml
@@ -101,6 +101,8 @@ outputs:
       filetype: regular #regular|syslog|unix_dgram|unix_stream|redis
       filename: eve.json
       rotate-interval: day
+      community-id: true
+      community-id-seed: 0
       #prefix: "@cee: " # prefix to prepend to each log entry
       # the following are valid when type: syslog above
       #identity: "suricata"