diff --git a/setup/so-functions b/setup/so-functions
index c4e7d48e0..d9c9bc2b2 100755
--- a/setup/so-functions
+++ b/setup/so-functions
@@ -1075,7 +1075,7 @@ elasticsearch_pillar() {
         "        bool:"\
         "          max_clause_count: 3500"\
 		"  index_settings:"\ > $elasticsearch_pillar_file
-		for INDEX in aws azure barracuda beats bluecoat cef checkpoint cisco cyberark cylance elasticsearch endgame f5 firewall fortinet gcp google_workspace ids imperva infoblox juniper kibana logstash microsoft misp netflow netscout o365 okta osquery proofpoint radware redis snort snyk sonicwall sophos strelka syslog tomcat zeek zscaler
+		for INDEX in aws azure barracuda beats bluecoat cef checkpoint cisco cyberark cylance elasticsearch endgame f5 firewall fortinet gcp google_workspace imperva infoblox juniper kibana logstash microsoft misp netflow netscout o365 okta osquery proofpoint radware redis snort snyk sonicwall sophos strelka syslog tomcat zeek zscaler
 		do
 			printf '%s\n'\
 				"    so-$INDEX:"\