diff --git a/salt/common/init.sls b/salt/common/init.sls
index 51903a2b6..94a1b4869 100644
--- a/salt/common/init.sls
+++ b/salt/common/init.sls
@@ -113,7 +113,6 @@ commonpkgs:
       - python3-mysqldb
       - python3-packaging
       - python3-lxml
-      - python3-watchdog
       - git
       - vim
 
@@ -157,7 +156,6 @@ commonpkgs:
       - python36-mysql
       - python36-packaging
       - python36-lxml
-      - securityonion-python36-watchdog
       - yum-utils
       - device-mapper-persistent-data
       - lvm2
diff --git a/salt/strelka/init.sls b/salt/strelka/init.sls
index ff4727126..ec49787f7 100644
--- a/salt/strelka/init.sls
+++ b/salt/strelka/init.sls
@@ -24,6 +24,20 @@
 {% import_yaml 'strelka/defaults.yaml' as strelka_config with context %}
 {% set IGNORELIST = salt['pillar.get']('strelka:ignore', strelka_config.strelka.ignore, merge=True, merge_nested_lists=True) %}
 
+{% if grains['os'] != 'CentOS' %}     
+strelkapkgs:
+  pkg.installed:
+    - skip_suggestions: True
+    - pkgs:
+      - python3-watchdog
+{% else %}
+strelkapkgs:
+  pkg.installed:
+    - skip_suggestions: True
+    - pkgs:
+      - securityonion-python36-watchdog
+{% endif %}
+    
 # Strelka config
 strelkaconfdir:
   file.directory: