diff --git a/setup/so-variables b/setup/so-variables
index a24f70e3c..861506b09 100644
--- a/setup/so-variables
+++ b/setup/so-variables
@@ -81,10 +81,10 @@ export whiptail_title
 
 mkdir -p $local_salt_dir/pillar/minions
 
-for THEDIR in elasticsearch redis backup strelka sensoroni curator soctopus docker zeek suricata nginx filebeat logstash soc manager kratos idstools idh
+for THEDIR in elasticsearch firewall redis backup strelka sensoroni curator soctopus docker zeek suricata nginx filebeat logstash soc manager kratos idstools idh elastalert 
 do
     mkdir -p $local_salt_dir/pillar/$THEDIR
-    touch $local_salt_dir/pillar/$THEDIR adv.$THEDIR.sls
+    touch $local_salt_dir/pillar/$THEDIR/adv_$THEDIR.sls
 done
 
 global_pillar_file="$local_salt_dir/pillar/soc_global.sls"