From 4c89cb50bbc45911f9a57adfb3f9e180e4a0c251 Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Thu, 12 Dec 2019 23:12:08 -0500
Subject: [PATCH] Setup - update Helix Script

---
 salt/common/tools/sbin/so-helix-apikey | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/salt/common/tools/sbin/so-helix-apikey b/salt/common/tools/sbin/so-helix-apikey
index 58894f3ab..529ab93e4 100644
--- a/salt/common/tools/sbin/so-helix-apikey
+++ b/salt/common/tools/sbin/so-helix-apikey
@@ -16,8 +16,9 @@ if [ ! -f /opt/so/saltstack/pillar/fireeye/init.sls ]; then
 else
   echo "Enter your Helix API Key: "
   read APIKEY
-  sed -i 's/^    apikey.*/    apikey: $APIKEY/' /opt/so/saltstack/pillar/fireeye/init.sls
+  sed -i "s/^    api_key.*/    api_key: $APIKEY/g" /opt/so/saltstack/pillar/fireeye/init.sls
   docker stop so-logstash
   docker rm so-logstash
+  echo "Restarting Logstash for updated key"
   salt-call state.apply logstash queue=True
 fi