From 220c534ad4003ad79b03ce9a8900611dd52e1c73 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Wed, 3 May 2023 09:32:03 -0400
Subject: [PATCH] Fix annotations and defaults for logstash

---
 salt/logstash/soc_logstash.yaml | 48 ++++++++++++++++-----------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/salt/logstash/soc_logstash.yaml b/salt/logstash/soc_logstash.yaml
index 0539a9243..e41ff000f 100644
--- a/salt/logstash/soc_logstash.yaml
+++ b/salt/logstash/soc_logstash.yaml
@@ -1,33 +1,33 @@
 logstash:
   assigned_pipelines:
-    standalone: &assigned_pipelines
-      description: List of defined pipelines to add to this role.
-      advanced: True
-      helpLink: logstash.html
-      multiline: True
-      forcedType: "[]string"
-    receiver: *assigned_pipelines
-    heavynode: *assigned_pipelines
-    searchnode: *assigned_pipelines
-    manager: *assigned_pipelines
-    managersearch: *assigned_pipelines
-    fleet: *assigned_pipelines
-  defined_pipelines:
     roles:
-      receiver: &defined_pipelines
-        description: List of pipeline configurations assign to this group.
+      standalone: &assigned_pipelines
+        description: List of defined pipelines to add to this role.
         advanced: True
         helpLink: logstash.html
         multiline: True
-        forcedType: "[]string" 
-      fleet: *defined_pipelines
-      manager: *defined_pipelines
-      search: *defined_pipelines
-      custom0: *defined_pipelines
-      custom1: *defined_pipelines
-      custom2: *defined_pipelines
-      custom3: *defined_pipelines
-      custom4: *defined_pipelines
+        forcedType: "[]string"
+      receiver: *assigned_pipelines
+      heavynode: *assigned_pipelines
+      searchnode: *assigned_pipelines
+      manager: *assigned_pipelines
+      managersearch: *assigned_pipelines
+      fleet: *assigned_pipelines
+  defined_pipelines:
+    receiver: &defined_pipelines
+      description: List of pipeline configurations assign to this group.
+      advanced: True
+      helpLink: logstash.html
+      multiline: True
+      forcedType: "[]string" 
+    fleet: *defined_pipelines
+    manager: *defined_pipelines
+    search: *defined_pipelines
+    custom0: *defined_pipelines
+    custom1: *defined_pipelines
+    custom2: *defined_pipelines
+    custom3: *defined_pipelines
+    custom4: *defined_pipelines
   settings:
     lsheap: 
       description: Heap size to use for logstash