From 3fa6c72620c675281ad0dda8adee11782433d870 Mon Sep 17 00:00:00 2001
From: weslambert <wlambertts@gmail.com>
Date: Tue, 30 Jul 2024 15:45:55 -0400
Subject: [PATCH] Fix name change

---
 .../integrations/endpoints-initial/windows-defender.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/elasticfleet/files/integrations/endpoints-initial/windows-defender.json b/salt/elasticfleet/files/integrations/endpoints-initial/windows-defender.json
index 94bf4e3aa..ab7e0783f 100644
--- a/salt/elasticfleet/files/integrations/endpoints-initial/windows-defender.json
+++ b/salt/elasticfleet/files/integrations/endpoints-initial/windows-defender.json
@@ -11,11 +11,11 @@
     "winlogs-winlog": {
       "enabled": true,
       "streams": {
-        "winlog.winlog": {
+        "winlog.winlogs": {
           "enabled": true,
           "vars": {
             "channel": "Microsoft-Windows-Windows Defender/Operational",
-            "data_stream.dataset": "winlog.winlogs",
+            "data_stream.dataset": "winlog.winlog",
             "preserve_original_event": false,
             "providers": [],
             "ignore_older": "72h",