From 0de5c6f204186342d90b928fca5b1019b22b26cb Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Tue, 25 May 2021 16:52:02 -0400
Subject: [PATCH] fix sodefault modules

---
 salt/filebeat/map.jinja | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/filebeat/map.jinja b/salt/filebeat/map.jinja
index aaae60f31..6ae6e7cff 100644
--- a/salt/filebeat/map.jinja
+++ b/salt/filebeat/map.jinja
@@ -1,5 +1,6 @@
 {% import_yaml 'filebeat/thirdpartydefaults.yaml' as TPDEFAULTS %}
 {% set THIRDPARTY = salt['pillar.get']('filebeat:third_party_filebeat', default=TPDEFAULTS.third_party_filebeat, merge=True) %}
 
-{% import_yaml 'filebeat/securityoniondefaults.yaml' as SO %}
+{% import_yaml 'filebeat/securityoniondefaults.yaml' as SODEFAULTS %}
+{% set SO = SODEFAULTS.securityonion_filebeat %}
 {#% set SO = salt['pillar.get']('filebeat:third_party_filebeat', default=SODEFAULTS.third_party_filebeat, merge=True) %#}