From 188b4424e4268a0650c00ec4a1e1b107c3b19bc9 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Thu, 17 Jun 2021 21:00:56 -0400
Subject: [PATCH] Fix wrong grep file

---
 salt/common/tools/sbin/so-elastic-auth | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/salt/common/tools/sbin/so-elastic-auth b/salt/common/tools/sbin/so-elastic-auth
index 663dbb9f6..6631badf2 100755
--- a/salt/common/tools/sbin/so-elastic-auth
+++ b/salt/common/tools/sbin/so-elastic-auth
@@ -45,7 +45,7 @@ if [[ "$authEnable" == "true" ]]; then
     if grep -q "argon" "$ES_USERS_FILE"; then
       echo ""
       echo "IMPORTANT: The following users will need to change their password, after logging into SOC, in order to access Kibana:"
-      grep argon "$ES_USERS" | cut -d ":" -f 1
+      grep argon "$ES_USERS_FILE" | cut -d ":" -f 1
     fi
   else
     echo "Auth is already enabled."