diff --git a/salt/common/tools/sbin/soup b/salt/common/tools/sbin/soup
index e6540ab69..10d52fe59 100755
--- a/salt/common/tools/sbin/soup
+++ b/salt/common/tools/sbin/soup
@@ -179,7 +179,7 @@ rc2_to_rc3() {
   rm -rf /opt/so/saltstack/default/salt/idstools/localrules
 
   # Rename mdengine to MDENGINE
-  sed -i "s/  mdengine/ mdengine/g" /opt/so/saltstack/local/pillar/global.sls
+  sed -i "s/  zeekversion/  mdengine/g" /opt/so/saltstack/local/pillar/global.sls
   # Enable Strelka Rules
   sed -i "/  rules:/c\  rules: 1" /opt/so/saltstack/local/pillar/global.sls