From 3904c193338279e6e54fb4c1ebd5b6b45db0069e Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Mon, 9 Dec 2019 10:04:14 -0500
Subject: [PATCH] Change Variables to UperCase

---
 salt/logstash/files/dynamic/9997_output_helix.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/logstash/files/dynamic/9997_output_helix.conf b/salt/logstash/files/dynamic/9997_output_helix.conf
index a6aefbf53..495c4ea9e 100644
--- a/salt/logstash/files/dynamic/9997_output_helix.conf
+++ b/salt/logstash/files/dynamic/9997_output_helix.conf
@@ -1,4 +1,4 @@
-{% set helix_api_key = salt['pillar.get']('fireeye:helix:api_key', '') %}
+{% set HELIX_API_KEY = salt['pillar.get']('fireeye:helix:api_key', '') %}
 
 filter {
   if "fe_clone" in [type] {
@@ -100,7 +100,7 @@ output {
       url => "https://helix-integrations.cloud.aws.apps.fireeye.com/api/upload?source=test&format=json"
       http_method => post
       http_compression => true
-      headers => ["Authorization", "{{ helix_api_key }}"]
+      headers => ["Authorization", "{{ HELIX_API_KEY }}"]
       format => json_batch
     }
   }