From 554754421c29c86c76572e53d780cf48ebb5f1b0 Mon Sep 17 00:00:00 2001
From: Doug Burks <doug.burks@gmail.com>
Date: Tue, 10 Jan 2023 16:48:06 -0500
Subject: [PATCH] Avoid unecessary Suricata processes in Import Mode

---
 salt/suricata/map.jinja | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/salt/suricata/map.jinja b/salt/suricata/map.jinja
index 2ffd5ad08..550781436 100644
--- a/salt/suricata/map.jinja
+++ b/salt/suricata/map.jinja
@@ -4,12 +4,8 @@
 # don't start the docker container if it is an import node or disabled via pillar
 {% if grains.id.split('_')|last == 'import' or ENABLED is sameas false %}
   {% do SURICATAOPTIONS.update({'start': False}) %}
-{% else %}
-  {% do SURICATAOPTIONS.update({'start': True}) %}
-{% endif %}
-
-{% if ENABLED is sameas false %}
   {% do SURICATAOPTIONS.update({'status': 'absent'}) %}
 {% else %}
+  {% do SURICATAOPTIONS.update({'start': True}) %}
   {% do SURICATAOPTIONS.update({'status': 'running'}) %}
-{% endif %}
\ No newline at end of file
+{% endif %}