From 9b6d29212d169c951ed9776be496cd69eadc9d9d Mon Sep 17 00:00:00 2001
From: Josh Patterson <josh.patterson@securityonionsolutions.com>
Date: Mon, 16 Mar 2026 12:46:25 -0400
Subject: [PATCH] forcedType bool

---
 salt/suricata/soc_suricata.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/suricata/soc_suricata.yaml b/salt/suricata/soc_suricata.yaml
index 76031cfd2..16518f6b2 100644
--- a/salt/suricata/soc_suricata.yaml
+++ b/salt/suricata/soc_suricata.yaml
@@ -24,6 +24,7 @@ suricata:
   pcap:
     enabled:
       description: Enables or disables the Suricata packet recording process.
+      forcedType: bool
       helpLink: suricata.html
     filesize: 
       description: Maximum file size for individual PCAP files written by Suricata. Increasing this number could improve write performance at the expense of pcap retrieval time.