Make sure we are searching all clusters when running rules

salt/elastalert/files/rules/so/suricata_thehive.yaml

@@ -9,7 +9,7 @@ es_host: {{es}}
 es_port: 9200
 name: Suricata-Alert
 type: frequency
-index: "so-ids-*"
+index: "*:so-ids-*"
 num_events: 1
 timeframe:
     minutes: 10

salt/elastalert/files/rules/so/wazuh_thehive.yaml

@@ -9,7 +9,7 @@ es_host: {{es}}
 es_port: 9200
 name: Wazuh-Alert
 type: frequency
-index: "so-ossec-*"
+index: "*:so-ossec-*"
 num_events: 1
 timeframe:
     minutes: 10