From 2bc88e77507ea09ec317ce4e7d9b53040ac006df Mon Sep 17 00:00:00 2001
From: William Wernert <william.wernert@securityonionsolutions.com>
Date: Tue, 3 Aug 2021 15:29:37 -0400
Subject: [PATCH] Remove learn from allowed states for helixsensor

---
 salt/allowed_states.map.jinja | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/salt/allowed_states.map.jinja b/salt/allowed_states.map.jinja
index f5f77d8f3..a51ea434b 100644
--- a/salt/allowed_states.map.jinja
+++ b/salt/allowed_states.map.jinja
@@ -76,8 +76,7 @@
           'logstash',
           'schedule',
           'tcpreplay',
-          'docker_clean',
-          'learn'
+          'docker_clean'
           ],
       'so-fleet': [
           'ca',